last executing test programs: 2m59.580206373s ago: executing program 32 (id=3763): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x96, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500600601fe8000000000000000000000000000aafe8000000000050000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800200"], 0x0) 2m53.460561351s ago: executing program 5 (id=3882): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb0000000000000000000000000000e9d8000100c40a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}, 0x1, 0x6c00}, 0x4000) 2m53.450478132s ago: executing program 5 (id=3883): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0xbf7ffffb) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c00fc72000000000000000000000000000000000088000000000000000004"], &(0x7f0000000040)=0x2c) 2m52.905896954s ago: executing program 5 (id=3899): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) pause() r1 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) cachestat(r1, &(0x7f00000002c0)={0x400, 0x2400000000000000}, 0xfffffffffffffffc, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) timer_create(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) pwritev(r3, &(0x7f0000000280)=[{&(0x7f0000000180)='B', 0x1}], 0x1, 0x4, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) timer_create(0x3, &(0x7f0000000000)={0x0, 0x23, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) 2m51.43648792s ago: executing program 5 (id=3929): r0 = socket$kcm(0xa, 0x2, 0x73) syz_emit_ethernet(0x36, &(0x7f0000000780)={@local, @link_local, @void, {@ipv4={0x6000, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x81, 0x6, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x44}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300ea000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000280)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0xfffffffffffffffc, 0x8, 0x6, 0x807e9, 0x2000000000, 0xe, 0x3, 0x100000000003, 0x7ffd}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c0000000c0a010103000000000000000a0000060900020073797a31000000000900010073797a3100000000300003800c00008008000340000000021c0000800c00018006000100d10300000c000440000000002d"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$sock_attach_bpf(r0, 0x29, 0x1d, 0x0, 0xfcd8) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x6, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22, &(0x7f0000000040), 0x0, 0x62c, &(0x7f00000000c0)="$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") 2m50.937053859s ago: executing program 5 (id=3944): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r1, @ANYBLOB="0000000048000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r1], 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048880) 2m50.491795165s ago: executing program 5 (id=3954): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@updpolicy={0x188, 0x19, 0x1, 0x70bd25, 0x1, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0x100, 0x9, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x3, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x3d}, {{@in6=@rand_addr=' \x01\x00', 0x2000, 0x6c}, 0x2, @in6=@dev, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x3501}]}, @mark={0xc, 0x15, {0x35075b, 0xb}}]}, 0x188}, 0x1, 0x0, 0x0, 0x81}, 0x4000) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000001c0)={0x1}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x6}}, 0x20) 2m50.457537547s ago: executing program 33 (id=3954): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@updpolicy={0x188, 0x19, 0x1, 0x70bd25, 0x1, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0x100, 0x9, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x3, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x3d}, {{@in6=@rand_addr=' \x01\x00', 0x2000, 0x6c}, 0x2, @in6=@dev, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x3501}]}, @mark={0xc, 0x15, {0x35075b, 0xb}}]}, 0x188}, 0x1, 0x0, 0x0, 0x81}, 0x4000) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000001c0)={0x1}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x6}}, 0x20) 2m42.346403582s ago: executing program 4 (id=4090): r0 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004b0000400000000000059078ac1414000a01010044140503ffffffff000000000a010102000000008303000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0100009078000025d179bfc336f2f17effa48d36533a2128817f54e227725e1c870a175c9a7a64f6d7a8ace2553c246d34448872aa825acd846319bce4f034ec661c7ea0603bd2ad7bb369c9ec3b59d794e8abbec8219b1139cbb48f71c08a8b88f3899b3a75aca60df390ce95b123f880c0a472c470f568dd72b783ed7a35c66d66e7fed6c056cb6bd17945b51eb31665e2a1532a4f9f21709d769b43"], 0x0) r3 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x1a, 0x0, 0x4) mmap(&(0x7f0000188000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xd6dac000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74f280, 0x0) close(r9) r10 = socket$unix(0x1, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0x18, 0xb}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x4, 0xffffffff, 0x7}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004060}, 0x400c044) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2m41.531566789s ago: executing program 4 (id=4106): perf_event_open(&(0x7f0000001300)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x8}, 0x100010, 0x32, 0x43a1bd76, 0x7, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000200000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000001b0000000032000000ac141435000000000000000000000080ff000000000000000000000000000000030000000000000000100000000000000000000000000000000000000000000000000000000000000900000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000002abd700028bd7000000000004c001400636d616328616573290000000000000000000000000000692a9b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018"], 0x1a0}}, 0x0) 2m41.378740118s ago: executing program 4 (id=4108): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4616, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0xb, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 2m41.098074655s ago: executing program 4 (id=4111): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f0000000280), 0x81, 0x7ca, &(0x7f0000002480)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8880, 0x91) getdents64(r0, 0x0, 0xfffffffffffffff4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x1, {}, 0x8, 0xfffffffffffffffc, 0x6}}}, 0x118) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x1800480, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2m40.508786739s ago: executing program 4 (id=4125): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x96, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500602f01fe8000000000000000000000000700aafe8000000000000000000000000000aa"], 0x0) 2m39.964768361s ago: executing program 4 (id=4130): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0x4) copy_file_range(r3, &(0x7f0000000080), r2, 0x0, 0xfffffffffffffff8, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000080), 0x2000011a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r6, 0xf01, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1021}, 0x4000000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x20004004) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}, 0x1, 0xffffa888}, 0x20000880) 2m39.954114121s ago: executing program 34 (id=4130): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0x4) copy_file_range(r3, &(0x7f0000000080), r2, 0x0, 0xfffffffffffffff8, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000080), 0x2000011a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r6, 0xf01, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1021}, 0x4000000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x20004004) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}, 0x1, 0xffffa888}, 0x20000880) 1m29.995710844s ago: executing program 1 (id=5482): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d0000000fbdbdf25010000001800018014160200766574683100000000000000000000001c0002800c00018008000100030000000c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 1m29.800411646s ago: executing program 1 (id=5486): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000400)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a0000000000000000000000c379338edb451b45db05a3cd26fc1adc385ab59a5db2945e6cd30c39224414a6362954408effc0a4a5e1392f12e158a16bbde75ee3786e40f5c42431431a33a8d25b387285e7887502e32f36eff265e6cb28ebf2b9e4fabe60b63401fc25c825e967a0a1e309bdd30b2aef6b070a705e2f8d464d32059c53928845e80d0c130d", 0xaa}], 0x1) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xc, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) r7 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000000000)) r8 = syz_open_procfs$namespace(r7, &(0x7f00000001c0)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r8, 0xb701, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x10}, 0x2}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) getsockopt$sock_buf(r9, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES32=r10, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r1, &(0x7f00000000c0)='\x00', 0x1, 0x80, &(0x7f0000000400)={0x11, 0xf7, r10, 0x1, 0x2, 0x6, @multicast}, 0x14) r11 = signalfd4(r0, &(0x7f0000000000)={[0x100000001]}, 0x8, 0x80000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x803, '\x00', r10, r11, 0x5, 0x1, 0x3}, 0x50) 1m29.666078204s ago: executing program 1 (id=5490): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x96, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500602f01fe8000000000000000000000000000aafe8000000003000000000000000000aa"], 0x0) 1m29.507841263s ago: executing program 1 (id=5494): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x6143, 0x7b) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) fcntl$lock(r0, 0x24, &(0x7f0000000180)={0x2, 0x4, 0x0, 0x6, r4}) fallocate(r3, 0x3, 0x4100, 0x8000c62) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno\b', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 1m29.084718008s ago: executing program 1 (id=5500): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x40}, 0x100b28, 0xa, 0x0, 0x7, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec0000001000010800000000000000e0ffffffff", @ANYRES32=r3, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 1m28.198864479s ago: executing program 1 (id=5515): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac141421000000000a0000000000000020010000000000000000000000000000010000000000000001a8020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) 1m28.073340977s ago: executing program 35 (id=5515): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac141421000000000a0000000000000020010000000000000000000000000000010000000000000001a8020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) 44.148430037s ago: executing program 0 (id=6420): perf_event_open(&(0x7f0000001300)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x8}, 0x100010, 0x32, 0x43a1bd76, 0x7, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000200000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}}, 0x0) 44.060429872s ago: executing program 0 (id=6421): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000ffffffbf0085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) 43.937374149s ago: executing program 0 (id=6422): set_mempolicy(0x0, &(0x7f0000000040)=0x10000ff9, 0x5) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x4a) sendmsg(0xffffffffffffffff, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 43.814017486s ago: executing program 0 (id=6425): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000016000000001c0002800c00018008000100030000000c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 43.604298569s ago: executing program 0 (id=6427): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0xfffffbfe, 0x0, 0x0, 0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000e80)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x260, 0x2f8, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6tnl0\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x220, 0x260, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc59, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x29, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x7, 0x1}}, @common=@unspec=@physdev={{0x68}, {'vlan1\x00', {0xff}, 'ip6gre0\x00', {}, 0x17}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x7, 0xd0, {0x9}}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x33, 0x2f, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x50, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x4000000000002d9, 0x10022, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) syz_mount_image$ext4(&(0x7f0000000640)='ext2\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000700)={[{@i_version}, {@jqfmt_vfsv1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0xa00000}}, {@noinit_itable}]}, 0x1, 0x643, &(0x7f0000002480)="$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") r5 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={r0}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100880, &(0x7f00000001c0)={[{@inode32}, {@nr_blocks}, {@noswap}], [{@dont_appraise}, {@subj_user={'subj_user', 0x3d, '^'}}]}) 43.546560262s ago: executing program 0 (id=6432): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000ffffffc00085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) 42.615168876s ago: executing program 8 (id=6442): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000400)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a0000000000004000000000c379338edb451b45db05a3cd26fc1adc385ab59a5db2945e6cd30c39224414a6362954408effc0a4a5e1392f12e158a16bbde75ee3786e40f5c42431431a33a8d25b387285e7887502e32f36eff265e6cb28ebf2b9e4fabe60b63401fc25c825e967a0a1e309bdd30b2aef6b070a705e2f8d464d32059c53928845e80d0c130d", 0xaa}], 0x1) 42.519956962s ago: executing program 8 (id=6447): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r0 = io_uring_setup(0x1b7b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x1, 0x32, 0x43a1bd76, 0x7, 0x20000000003, 0x1, 0x2, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x33, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x100, 0x5, 0x8, 0xb, 0x7fff}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079"], 0x0, 0x2, 0x0, 0x0, 0x68dbfdf302feee03, 0xa, '\x00', 0x0, @fallback=0xa}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001800)=ANY=[@ANYBLOB="020200090f0000002cbd7040fedbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e20ac1414bb000000000000000002001300"], 0x78}, 0x1, 0x7}, 0x8000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000080000000040000000200000000000000", @ANYRESHEX=r1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001c3344cfa616635200"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001080)={r5, &(0x7f0000001000), 0x0}, 0x20) open_tree(0xffffffffffffffff, 0x0, 0x900) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0xb, 0x0, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x111, 0x4b4, 0x1a8, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6, 0x0, 0x0, 0x40}, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x4413, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x80000000}}, {@auto_da_alloc}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fowner_lt}, {@measure}], 0x2c}, 0x0, 0x45a, &(0x7f0000000480)="$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") (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000007000000ff7f0000077fb9f14a"], 0x50) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async, rerun: 32) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (rerun: 32) msgsnd(0x0, &(0x7f0000002040)=ANY=[], 0xfd1, 0x0) 42.431443267s ago: executing program 8 (id=6451): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 42.39270201s ago: executing program 8 (id=6453): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f0000000040)=0x80000000) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newnexthop={0x6c, 0x68, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x2}, [@NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x6}}}}, @NHA_OIF={0x8, 0x5, r5}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x8}, {0x2, 0x5}]}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x1c, 0x2, [{0x1, 0x7f}, {0x2, 0x61}, {0x2, 0xff}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x845}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="31040000000000f032001600000018000180140002006e657464657673696d3000000000000005000200010000000500020003000000050003"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x1c, r8, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa014}, 0x4100) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r9 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x4, 0x4}, {0xe, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004090}, 0x4008c01) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000000)={0xfffffffd, 0x1, 0xffffffffffffffb5, 0x6, 0x1, 0x1}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x8}, 0x100010, 0x32, 0x43a1bd76, 0x7, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r11, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) mremap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000007000/0x4000)=nil) syz_clone(0x100000, &(0x7f0000000000)="2a7c965d3817896b98cedd80750fc4f41a22800034693f239e19db4795891b692821750b1db31645dd0858d603f1090f2f943bc460c9a4a7f151ea82", 0x3c, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000007400100039042abd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c31006002000128008000100736974001400028006000d00ffff000008000200ac1e0101"], 0x40}}, 0x4008040) 42.03695801s ago: executing program 8 (id=6455): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, 0x0, &(0x7f0000000880)=r0}, 0x20) 41.452561025s ago: executing program 8 (id=6462): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x1}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000120000000000040000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xe}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffffff, r1, 0x0, 0x0, 0x100) 41.451961364s ago: executing program 36 (id=6462): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x1}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000120000000000040000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xe}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffffff, r1, 0x0, 0x0, 0x100) 28.478718074s ago: executing program 37 (id=6432): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000ffffffc00085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) 3.306825876s ago: executing program 6 (id=7093): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa893b2268a1e6543) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0xd, &(0x7f0000000040)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}, 0x94) 3.298574927s ago: executing program 6 (id=7094): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x1, @perf_config_ext={0x2, 0x3}, 0x0, 0xa88, 0x8409, 0x5, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2.503757713s ago: executing program 6 (id=7105): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000680)=0x8, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setresuid(0xee00, 0xee00, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd2c, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}]}}}]}, 0x40}}, 0x8000) faccessat(0xffffffffffffffff, 0x0, 0x5) r4 = io_uring_setup(0x7, &(0x7f0000000100)={0x0, 0xc8a1, 0x1, 0x8, 0x68, 0x0, r2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x202219, 0x7721, 0x16, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000027bd7000ffdbdf256700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900010900007e00"/20], 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x48000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@init_itable_val}, {@jqfmt_vfsold}, {@journal_checksum}, {@user_xattr}, {@delalloc}, {@quota}]}, 0x3, 0x441, &(0x7f0000000440)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000200), &(0x7f0000000240)=r7}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='./file0\x00') 2.275326806s ago: executing program 6 (id=7108): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x5, 0xb1130, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x101280, 0x26f, 0xc, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x404, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000140)="03ba", 0x2}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r4, 0x9, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0xfd}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010104}, {@private=0x4}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$msr(r3, &(0x7f0000000740)=""/4096, 0x1000) 2.094734867s ago: executing program 9 (id=7113): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000019ffffff0000000000000004180100002020732500000000002020207b0af8ff0000000abfa100000000000007010000f6ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0xfe4, &(0x7f0000001e00)=""/4068, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 2.062639899s ago: executing program 9 (id=7114): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$eJzs2j+LXFUcBuDfXRMSN2xmxH8kIB60UJtLZmqLLJKAOKBoRoiC5Ma9o8NcZ5a5w8KImK209SNYi6WdIClttvETWNhts2UK8Uoya5INY7GIO2Kep5kXzrzccziXwynu/uvffDYa1PmgmMValsXa5diNO1m0Yy3+shuvvXL95xfeu/7BW5u93pV3U7q6ea3TTSmdf/GnD7/4/qXbs3Pv/3D+xzOx1/5o/6D7295zexf2/7j26bBOwzqNJ7NUpJuTyay4WZVpa1iP8pTeqcqiLtNwXJfTI+ODarK9PU/FeGtjfXta1nUqxvM0KudpNkmz6TwVnxTDccrzPG2sB/9E/7s7TRMHzekb0TTNk9/Gudux8Wu0InsqZU9fzp69kT2/m104aJrWqqfKv8L+P94eOtTPRlRf7/R3+ovfxfjmIIZRRRmXohW/x93X5NAiX32zd+VSuqcdX1W3Dvu3dvpPHO13ohXt5f3Oop+O9s/EesTpiMN+N1rxzPJ+d2n/bLz68kPPz6MVv3wck6hiK+52H/S/7KT0xtu9R/oX7/0PAOD/Jk/3Lb2/5fnfjS/6x7gfPnK/OhUXT6127UTU889HRVWVU0EQhPth1ScTJ+HBpq96JgAAAAAAAAAAABzHSXxOuOo1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/21/BgAA//9DWtUg") r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x75) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x2010, r0, 0x100000000) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x3d) preadv2(r1, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 1.938498046s ago: executing program 9 (id=7117): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000400)={0x8, 0x80, 0x7, 0xb3, 0x13, '\f\x00'}) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 1.828991183s ago: executing program 9 (id=7118): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') chown(&(0x7f0000001840)='./file1\x00', 0x0, 0x0) socket$tipc(0x1e, 0x4, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmmsg$inet6(r2, &(0x7f00000015c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x40d08, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000008c0)='p', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @empty, 0x30}, 0x1c, &(0x7f0000001700)=[{&(0x7f00000001c0)="ab", 0x1}], 0x1}}], 0x2, 0x20044040) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000280)={0x2, 0x0, 0x78d, 0x1, r4}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xff, 0x7ffc0001}]}) io_setup(0x400000b, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000440)={[{@noblock_validity}, {@errors_continue}, {@sysvgroups}, {@data_journal}, {}, {@noinit_itable}, {@norecovery}]}, 0x2, 0x5cc, &(0x7f0000000b80)="$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") acct(0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) sendto$inet(r3, &(0x7f0000000240)="2399c665a3d0ce9b5dbf5ff1cb39fcba10aab04a918393bac0f0c4c84d7eb5b8e950bfc19ad3f3aecba7f2dea7c89c0d40abfa6b4c3860", 0x37, 0x40, &(0x7f0000000300)={0x2, 0x4e20, @remote}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000000000000, 0x5, 0xfffffffffffffffa}, {0x3, 0x3, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x2}, 0x1c) acct(&(0x7f0000000040)='./file0\x00') 1.656491173s ago: executing program 7 (id=7120): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0xe, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec000000100001080000000000000000000081ff", @ANYRES32=r3, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 1.656279163s ago: executing program 7 (id=7121): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r0, r0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 1.484551183s ago: executing program 6 (id=7122): ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x3}) r0 = syz_io_uring_setup(0x647e, &(0x7f0000000440)={0x0, 0x80000000, 0x10100, 0x3, 0xffffffbd}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000008001060034002b8008000100", @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="7b5584d4", @ANYRES32, @ANYBLOB="08001b"], 0x5c}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x400c78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}, {0x0, 0xb80b}], 0x2, 0x0, 0x0, 0x60000000}, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="fdff000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@jqfmt_vfsold}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r7, 0x6, 0x5, 0x0, &(0x7f0000000280)) socket$kcm(0x10, 0x2, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f0000000240)=r9}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001c40)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$TCFLSH(0xffffffffffffffff, 0x5608, 0x1) 942.662434ms ago: executing program 3 (id=7125): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000004802000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) 910.562896ms ago: executing program 3 (id=7126): r0 = open(&(0x7f0000003ec0)='./file0\x00', 0x305041, 0x14) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000003f40), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004000)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003f80)={0x40, r1, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xb7}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044040}, 0xc0084) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x5c7000, 0x91) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000000080)=@l2={0x1f, 0x0, @any, 0x0, 0x2}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)="1e2c9e1859aec6f734306ec80a30e3ea3bfa6daa98e5a2a6cc5375f2776994e3bd6cdef11299f78e1f6bc259d6ffaa00c883", 0x32}, {&(0x7f00000001c0)="2d26178f5cf4898e77881166ed2210e909386af3983d201df5e025e9cfc37397c55c68d1859a040570198085d8be2f248f4d6531f3a0bf228b57fb426c193d88a984fc8b6801d95df7e130a700f19ad1ca1ffe3681666ca5c7d4ace46a60e9e4a1d4b85a8d0928a4f1ef402c35ca43b7b35bdc22f8eea866dd03d487dee34becda01c6b36aef854b4f172b069171a164cc88c92d3fe13282ed", 0x99}, {&(0x7f0000000280)='Q', 0x1}, {&(0x7f00000002c0)="496666655ae4c7526b140be374dc95e44b5278d93ca25d3bca91b5523045841c68a0ba20453a61fa1202f339a8c3df0ac2843d2cf5b040dbec4a21abbb0a00917444dca6293a975a037432377b7cec3db86c2a35", 0x54}, {&(0x7f0000000340)="1a8a3c6922d15b21699d063e7f96016ec70795146bca0a2c8a918da4955f958659fcbf28931ca9c1ebb540fe00f8", 0x2e}, {&(0x7f0000000640)="8765a8b9b95e62e74259a0659c95aa7133eecd87f777241f961e6d1b46dd6a702b4449288c0424fd7510ef588eb19bc376722cf710294caf7baab38bb0570a64ce7a86191d209b0349f61a43aaff4f788fa984c0aba0ad214941b326e0eb28ac84c83639359dd36d70de6a941a2fe1b62a46414d742f5ffcbd4329cb627a394c11c7226f7af2f3b1f07d786a163c11ca92089310931b58e40ded09262167feda7521c6b630ade6c4", 0xa8}], 0x6, &(0x7f0000000700)=[{0x40, 0x66fde5f26867db03, 0x1cd2, "686800b3d545f321e290931e836f41515b1ed9bfbe3feb7410c6d7ebe619aa4e81b82c39368b630f9300f915"}, {0x108, 0x119, 0x80000001, "3056b00e70fce576c6337d1569f335403b2fde5532350370b2ac742e6fc1d5678b72a1a22763f64789e825f3db8e0c130617ab3965e889bd17253ed8de9fb36a1a2b0dcdc9ca9e51238ca04c4d183f134b87d8191a211355e7e59d4cc9d074ff45f36356dc91b8605fb1c89fddae05c0920f2f5d7edbc43c6faf73a6c69f0db3047f0aa35272257cf26d69d395f48cd9975bed423e0e012a1cbc79aa31ce200120beab8dd064d79585a9d705743ee002bad235c8dbd6d20b40e90f0114cacddcde4aa9a4997c99c0c667c7eedf77f2eb3293564f4a253e86b43195409507c8e13dd092e54489c48ab8c28334a385915788"}, {0xa8, 0x10d, 0x5, "68dc94c72ea04853295ac7cdce5d2d6fa31f31824ef3248f59d24f07a8fa035f72c5aace218a5cdb995f32c677b48f539d69061bd8dbbea91d1f13a0aeb3b41ed25809a997506f3a7d95865226c355a4d4da4d66baff2e97d7d8f6552fdfc82200e1d3713cd2731bf5c3db0dc895e6e69617ff79fc65edad1cb43f78fabaff176434871f39ae609626d4a2fa5b5bdccab983"}, {0x80, 0x10d, 0x4, "9b8de1c6f88431b7024bc353fe6b8bbe7cd4cf472a013c33ee7ba7d7c9ae6c67208ba0ec8205c4b76fac3e92e06988f81c4df310efec3c7651a41583de416cea0a9f30fbe21dc12e1d3173e0cb7faa21fbc9ddfcf7bacf53d9a860400dd7373bb408302c9a71b45024601c2c3d6821"}], 0x270}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)="d0da6f3c5066ff83d7408b6ee2e11d614abb4cea9eb1fd13338c7b6f11fbb735b8b8cbb1b21d7b5f08a18422958e4e12dc547a2c9fb3aa8f36c9622267e0ee555ebb183c9849857d2dfb42c475213a755c173e9711b03d07d4bd6c1c625ddd8cf31613ac6bb0c84e2ac64bbf750a155557ec67056f0690d580ab8602e3e0f3f2f3419b26505a9afb0e5d5f118099b5a959379b2964051a726246c992272e2d1310c444028a24dd6d1f7ee1a662721b10fb763c", 0xb3}, {&(0x7f0000000ac0)="fdb45a66cdc6d2533fca300a84497fdb9c10bb2dc567cbc19ad78ffaf07bd1aeb8d65067e9dc78080491d6a99ac6791fb61fd980d43eb743882ec6dad0749854ee1171aecdc05de036a1d952b70bf695e407143a2da0f4f3ac347d9db64d86f90b9800700152d6aad0fdd93da67e7df400483971122fa0a63b4d3c809a09814503bfe8cd2b3ce519c3f1976eac03474900720b34c0031cf949cbe925eab985eb73df44fbc9a0f2e5c459a6de6532bba1091057db666620c2cfa336c2389d0946492880f13d004fc9a77e5c72c542c31924afe9215a3ab701b24bfb9cd9eb96", 0xdf}, {&(0x7f0000000440)="8260842367246d90f6bff19b58fbddf268b775a95b4a2e0fe782001676a619a1482d47778c480832107473a16590fc", 0x2f}, {&(0x7f0000000bc0)="6187c6e9b87452504333aa160170b3b6892044967a1e099e32e8c87a45604ebf0276bd3e0188c28dace58acc1e21aa98fda90dff6d896af9c94c1b6f1d9c7dd8cf58614a623c6590c2634a88764d900c577b9405e39970f4ef5a630ad84d05ea7aa083d28cedbe085ad8f25ebf80f25b6ddc0d9d9ef61c905a426ac252daf72381346d11b334a6e8930c1f738768946b3fa4ad3cad19a659613a20846f4a20d06aac810f470e14f3c804e4b9b53c9cd34b7762d8f7875c0273eabb85a552ca0513d38f9ddb84d2d79e64f66da95a794b43c21a", 0xd3}], 0x4, &(0x7f0000000cc0)=[{0xd8, 0x10b, 0x8, "25f944a199c9a73557034c9503b1b0d5d4d80639d62225fa2f6cc73ef4436794edbc81a19e5f1f7779e2a8f6657d5d7ad64467badbacb6ed76948e44120fcd13c70abaf93fd455a5c897eee3eca8a617522aa4eb52124c068f370a68393ea08b3e5f1b29106900a671ac2b192378034b9ea1aca1159246e9da413ee699327b5674223c2edd7293606fc1091be129b5eec7f3a88764639759ced4f8a87d9900c799252095cb64d0ed05f29759d4c389c4e4df14a3b38d875ef389a2047b9ba2c10c34985970"}, {0xd0, 0x1c, 0x1, "7146f9e401eeaeaf03eb1e9d253407f60cf530be448e1ff642f9ed528f73f37fdbe6aef6e0b48e394e5fbc63714036f2cd5f5ca8fb4c01f46517df08fb40a80d6713a455a55a8d173cf49ad5dc0ce55d9839b211677534a5953c86291ffbd2e4ba3dfbcca54e9eb8b48d461a05d7488fd80d1f6673947051362f2f2789359347412092cbd655601cc0ad75d3fa39944d1d05de2309826be702cba7235c21dd7348d73d27cb164b65d2658a651567e38a1c845840564ce80577b8"}, {0x60, 0x115, 0x3, "7c2fe9b8648431aa0f27f0443f58a016ca2732fd70a6258e1f365d9a392061b4f6529c591d452a76df181d49c23d1219520ca8f93ca0397bf2e020a7b70af30d79225a35c1a512e33fcb29a79364a4"}, {0xd8, 0x118, 0x80, "613976b882993bb1a12aaf0aa187365b868bfa5a355e7420cddefc9b697c1799982deee4cbf21b1c6ba0e72626170f3471114bcc5a91422dd88f9ecd925d380e594854be5863327a487925d961adf2d27149b1aba4271e9ae27ace339d2b0deb22000d28276c9e59954b7ad0c8f1316aeb4a8db5967d872a34f4c7e64bf61f34c4b9e444d266711758a4846c46827b995755f0cda2a5299021aa3a1f6611cb54591eaac96a4f2460b00f31b2f88ba28cd95d371c28f723463be2096f84bc5c2d807c49c0"}], 0x2e0}}, {{&(0x7f0000000fc0)=@pppoe={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth0_to_hsr\x00'}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000001040)="3f092601f88b0123ac4bce621c1c78cf17ee86418f68c126d4362e1021296a2d7746d724f77b8b0c215365bae241aca65520642fc953d0cf8c46230096803f53bd2e0e944e102effd6d001362d0276560b95347441816119013bad3c3facf738334763caa5b80b30cd4840f230c4ad3cf2c6652f1a4e781303e78328bc41677769d5a071ad57f8a78c59b557e8423632a4dd62ffb9815cb523746e92bfac2a83cb099a3ed2feefe25bf10a9f66298e9cc358db7dcdfd6cf5ac489b17ac942aad8c415460549551bd73f144e145aff054253d595b2c673e113cfec07696df3e593c2e1fe9cdf9", 0xe6}, {&(0x7f0000001140)="7d573f07e958dc6abe51a94b865a6cca5cbf52b53c04ae2c57d59226a7838c059b785e6fa0852ffca6ecb11e7ce3417af934d3dad5d52f1bfe004c8ac8a411a2031fe675a55a143c9e371b63501ba1d64985622b89663bc58b7efe68eab585c5dee27c1ddbabb632d64c58568c234751e379fb72cd3cf248ecb5db2c4b746f932495e3fde5bfdb78ff700b5d0a5cc495c1915c7f414d69d0358bc7689106fbad3e9825526c4c08ff9f3027fda8b22e06007a8335e5dea0afbc77fa2da76528a73e90da33a6d3519adb3e0c501dcb49749e1ee32e04f620fafc6635c621bcc459dec3e490d16e8c5a7e14c5aa0541f6e4918b26", 0xf3}, {&(0x7f0000001240)="8d8032297c5b398f657eda5855c211b0074b6d980a345baf867f7aa78c33ced0a3d38af3156230cb2cd33b7317f63aa94b31a7f02de8177426312f2b9a09aabfec40c8fb46d0c9464d909e59e4e20c88cdbbbd8adaaac1e4cc08c54a5bc97e15dfd099cbb798ad11f5f640fcf7c0b6599c32e4694d45cd2439b2bf7b1d77e6c1eabf59d844e357afcf921f469617eb9c53e1cf2d4443ed7148a5c135b60c6712362150236886e8167e18fa7c749d2be7a28a3464551a39619341d03e2ea691bf0a370e337f372ba788ff0736a785ac3bea35e330b87b8ec16763557ad0872adf0798fe", 0xe3}], 0x3, &(0x7f0000001340)=[{0x58, 0x116, 0x3, "e9e75f2b81833f35bfacdd068025f849d761fbf0c11da2adcd509ae974699346876be232e3fdb8eeb3d9ed6d1802ec947c11e6ac6b09243d0b778a190db5c26b93"}, {0x80, 0x115, 0x9, "5220ac21e7368c850845c23ad4e7187511704af9fee4299a2327ae0eda824c5015efc42065c4fcdaa758d49ac4d84960045144215b809d2242173ef219db51b593b233c46486f307778ff4c8592ad52b1eebbefd16be91ac0af6c1c69829c8c7f2206bec1bb851e11bb80de7fe14"}, {0x70, 0x1, 0x7, "6c87b8a28aecc79e5da7fd0467ad2e0833cd40d0be2671234d5c0a5147f1e083668a0b5a72f96b7802a975c29e84d7eabe5c03f0fd548bf83978b546065706080a03ee2120e35a23110f91f545111e722694138a3ae2fe4402"}], 0x148}}, {{&(0x7f00000014c0)=@phonet={0x23, 0x40, 0x9, 0xf}, 0x80, &(0x7f0000002600)=[{&(0x7f0000001540)="8a63e096f16ac7a0bed63e2f584ff2fc89d46eb2a9966d4812ace3659062e3cee2d0937f573852e3f21aae42b4a04bb24a0330b879a39c6d842d877e1753167e613d74595da5a6d7007527b13294e5dbb384214452f0ec382015c52e0a9038", 0x5f}, {&(0x7f0000000980)="1fec17c4cd89ecdd10", 0x9}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="1aaa8e1967dd13db81acb6099a58c6c73f76453b9aa0284734b71434b9296ce3965e6ab125", 0x25}], 0x4}}, {{&(0x7f0000002640)=@nl=@kern={0x10, 0x0, 0x0, 0x80000000}, 0x80, &(0x7f0000003940)=[{&(0x7f00000026c0)="fc3c131edc14a755470ecee4b630ee340a11f4661ffbf06a74d73fc000604a87de64c2f5d033ac4788b8ced7ae23a800f151ec32", 0x34}, {&(0x7f0000002700)="e6d8fea8c48b8fcd5c3194a34257ddd416725c7cb9f7ad2753b659d5e93ba6b58d412e3ec7", 0x25}, {&(0x7f0000002740)="46b0f2ed3ff6206c835c0ab910e9f07556c238b4d8346c18fade964302a98470344af8330b944ce40c18297d6f0e925f1d608a76faed7deaa523a2867e299349140658f43d3a5d98cb1dc149e303fef3b9b8697a6c", 0x55}, {&(0x7f00000027c0)="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", 0x1000}, {&(0x7f00000037c0)="9578179cf4a1140d0824cfae6d79655b90af623e982311f6c582431b0638355cc0963252122da50c7065973f3fc210442537088d0b9a58f34010a0ce9de6b59753175e91c8f1bdcbbf16ca301969f2d25cac0082ef399e5f9764684156e8eeeb055217da1e5d0b99554c496c2dc48ed3d72292aeebbf4df640069f54de54a2a1e07aeadd658c204cb846ebba24eecbc338a4015ce2930bb1134b2bb719576d1a1e924908cddeb75c99b7f85eef1d3b8427c16f4b33f88ae489482c1ede7f747022cd6f8e2861032a3de6d71c9cbb9e374642cda440d9e10b94e9", 0xda}, {&(0x7f00000038c0)="4ba1b4f047e490d96589d521875554fbbb4bade2099bfaa3aaea0ca301505c21cb5b02ca59f018fe9e4f9ddc9202091d38b87f8320906933aba23d0c2398e060eca810206f2e7b7ef188d4cc3e3b27da2fab37c7", 0x54}], 0x6}}, {{&(0x7f00000039c0)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @remote}, 0x1, 0x3, 0x3}}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003a40)="2a08e8c0eb2826e8d886b8f38b08d854be1ef756b7fcfe7dffd804b6bd0ee73f40e9ba8ae4a4a4b1110427b49bf1115b2bc486d3e7ba0956ae2ecd728e9ada045438652b61b9dcbfcef08f3d01ab373b36f08cbed057c0045b110308784e7078ed997c6dad687effd76ab6d1e9a498c4266ce34ff57450a8317385b5edba1b4f12068fc772735f8fa8af9239729437e71f5a92e26a209166e89b96df418ddbea795186e52dad3db34b356ff42c37c9214979f4b09023f144e1183d64b468c1f41e8a8f8288b7bba82cba9275c5449e53", 0xd0}], 0x1, &(0x7f0000003b80)=[{0xc0, 0x1, 0x6, "e92a1cd79126204b05454d6ed083e00ea270728ba9914287c65bb9d26fac4c0717c4d0ca50899016ae47cf32aed4bd3023ed54536d24eef92184e77f0ad8cb20301549b9565d3618c74023b5086510501502284fe1b85870993cf8c96f95f0a658bdd071f5f5a03cda8d6502afb0bcac2dfa7168bc7abc1450a4e211e6caae9b0c448c887f5cba825e2a9827eebfefc7c544b17e8ced5bc14f0a5e79c2471b5d0af0500a1126073dc038"}, {0xf0, 0x110, 0xffff39ec, "8e7d22f1b85f1829f1d09e18b881ffa5a4b92758e7c9d8cc716432a56f6564a11e6080bbc49856306106082196906c2f5a3887afbc7e3d957456de5a78e4cd296babf0104b6bda4f19bfda607f4124f9cdc4e1793b779195f5cd1d28ed48eba70810a75fe9817e5e3f4d058db3af7a4045deda63d8e0f8a955d1f46230e97dbfbe683e612a53afb9f8ba928f95ff1ea4584bb9c276025be445fb6791e57b25908b45d076faf4720de4704cd91090d895f4940921d598a76efe3dab94923e8c7b5cd9fb27bcc2b43bfd247a507d66e43a387c68c9d955b6746003aa7fd513b6"}], 0x1b0}}], 0x6, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) 828.789021ms ago: executing program 3 (id=7127): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) (async) r3 = eventfd2(0x0, 0x800) (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x7}}, './file2\x00'}) getsockopt$inet6_buf(r5, 0x29, 0x1c, &(0x7f00000005c0)=""/179, &(0x7f0000000680)=0xb3) (async) close(r3) (async) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r8, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x8040, 0x0) r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r11, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000a0}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r12, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x44000480) (async) r13 = getpid() r14 = syz_pidfd_open(r13, 0x0) r15 = fcntl$dupfd(r14, 0x406, r14) statx(r15, 0x0, 0x1000, 0x20, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffceea, 0x0, 0x0, 0x0, 0x4669}, @call={0x85, 0x0, 0x0, 0x74}]}, &(0x7f0000000040)='GPL\x00', 0x10000, 0x0, 0x0, 0x41100, 0x48, '\x00', r2, 0x1b, r4, 0x8, &(0x7f0000000080)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x4, 0x0, 0xbc, 0x3ff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000280)=[r6, r7, r8, r9, r10, r15], &(0x7f00000002c0)=[{0x0, 0x5, 0x3, 0xc}, {0x4, 0x1, 0x6, 0x4}, {0x4, 0x4, 0x8, 0x1}], 0x10, 0x7f}, 0x94) 785.569764ms ago: executing program 2 (id=7130): r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffff", 0x56}], 0x1) 760.565785ms ago: executing program 2 (id=7131): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) pause() mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) syz_open_dev$hidraw(0x0, 0x0, 0x81) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x3, 0x0, &(0x7f0000000040)) 716.753028ms ago: executing program 7 (id=7132): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000207b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 716.200608ms ago: executing program 3 (id=7133): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x40}, 0x100b28, 0xa, 0x0, 0x7, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec00000010000108000000000000000000c30000", @ANYRES32=r3, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 692.666179ms ago: executing program 7 (id=7134): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000002dc0)=""/4088, 0xff8}], 0x1, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) write$cgroup_pid(r2, &(0x7f0000002700), 0x12) 660.480381ms ago: executing program 7 (id=7135): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd79, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000000000000aa11150d000000000000001800000000000000000000000000000095e5aecc65b57f354e8302c0caff713929f8d78fdf8ddc0138"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) recvfrom$packet(0xffffffffffffffff, &(0x7f00000000c0)=""/5, 0x5, 0x40000000, &(0x7f00000001c0)={0x11, 0x1a, r3, 0x1, 0x40}, 0x14) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x7) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x1c, 0xfff3}, {}, {0xffe0, 0xc}}, [@filter_kind_options=@f_route={{0xa}, {0x30, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xe5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x240488d0) bind$inet(r5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r9, &(0x7f00000000c0)=[{0x84, 0x74, 0x0, 0x0, @time={0xe, 0x425}, {0xfd}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick=0x8, {0xfd}, {0x3}, @note={0x81}}, {0x6, 0x7, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xce, 0x2}, @connect={{0xf, 0x3}, {0x6, 0xb}}}, {0xf7, 0xf1, 0x0, 0x1, @tick, {0x70, 0x3c}, {0x1}, @quote={{0x5, 0x6}, 0x6}}], 0x70) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r10, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000190001090000000020000000021800000002fd0100000000080016800c00010003080108020000000600150004000000d072192e768969a37ebc789a27e0415010a63767e3c0b8a204a59955443d1c7d525dfb14ac26dc00efd76ff4ed8f55ea36daa9a5e188c09f915fd248e49c3f1ec08961cfa3c2145fb2b1b1a7bb07e17659140171005adce57a0a5d85084d3f68d5ed1b98e8baeb9b05dd011d00000000839fa983fa40ac9d5a204fd226f750a19440ff951eb415616e5e0c5b3bde4b4c7c7342564af096d2a92b209c4ec59ec377026c64a92081aa671ac806db33214f96d7bfa2af91dde6a653845bfb3c745962f6af899f3534935f67070777ad7168ff36f9717aa8cb893f3bc38291d8d1022f8d5810fd730746a27092e9f958b5dcd047304c109646e28ef062ca3df7c54bba43c289ec384c6559964e7229f1e2f535465e0da350f2ee6cd75eb49d36c5413ecfbdac800a29a107af3f1cfd5c631433126bb57cc9153f14448b05d0322e19ce6fd7b4c290afb7f61bc8fbc908bbbdbfe6ef63869313ea580e9287be5a10d061b622956a4527a03ce68cbc7f2b86a64614cce10ff9e88e94e691970fde5639095a3e04f3d3e0b30bddd3a852bc9c82e287e38a06d1646aedd645f9295bb56af576a1"], 0x44}}, 0x1) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 584.590335ms ago: executing program 3 (id=7136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000001380)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x8014) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x5, 0x94, 0xff, 0x0, 0x7, @local}, 0x10) accept(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000102f50000000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000030c000280040001"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 567.860856ms ago: executing program 6 (id=7137): socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setxattr$incfs_id(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0, 0x0, 0x2) socket(0x1d, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff000000000000010600000000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 413.828875ms ago: executing program 9 (id=7138): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0x70bd25, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x24008080}, 0x4040) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0xf, 0x2) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x4000000, 0x9, 0x1, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x51, 0x0, 0x0, 0x0, 0x6e5, 0x8}, 0x0, 0xffffffffffffffff, r2, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x14, 0x17, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xff, 0x208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xf, 0x8000000000000001}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 176.507469ms ago: executing program 2 (id=7139): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000003000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) 100.710284ms ago: executing program 2 (id=7140): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180081601"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 86.178485ms ago: executing program 9 (id=7141): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = gettid() socket$netlink(0x10, 0x3, 0xa) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 68.925705ms ago: executing program 2 (id=7142): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x3404c045}, 0x10) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x4, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3b}}, @ip_tos_u8={{0x11, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000002e80)={@loopback}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20004815}, 0x40448c0) 2.36082ms ago: executing program 2 (id=7143): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x547700) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x28, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_TTL={0x5}}]}, 0x28}}, 0x0) write$sndseq(r0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r2, 0x9, 0x0) r3 = socket(0x1000000000000010, 0x80802, 0x0) r4 = timerfd_create(0x0, 0x0) r5 = syz_io_uring_setup(0x58f7, &(0x7f0000000880)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000540)) timerfd_settime(r4, 0x3, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) io_uring_enter(r5, 0x1f82, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000000)="240000005a0001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) 0s ago: executing program 7 (id=7144): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000019ffffff0000000000000004180100002020732500000000002020207b0af8ff0000000dbfa100000000000007010000f6ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0xfe4, &(0x7f0000001e00)=""/4068, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) kernel console output (not intermixed with test programs): T22298] loop7: detected capacity change from 0 to 2048 [ 331.676682][T22298] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.748366][T15637] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.835319][T22328] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 331.835319][T22328] program syz.6.6246 not setting count and/or reply_len properly [ 331.924943][T22333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6248'. [ 331.937260][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 331.950420][T22334] can: request_module (can-proto-0) failed. [ 332.095765][T22334] wireguard0: entered promiscuous mode [ 332.102417][T22334] wireguard0: entered allmulticast mode [ 332.182838][T22349] lo speed is unknown, defaulting to 1000 [ 332.363599][T22366] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 332.363599][T22366] program syz.2.6260 not setting count and/or reply_len properly [ 332.529930][T22377] loop2: detected capacity change from 0 to 128 [ 332.541937][T22377] vfat: Unknown parameter '0x0000000000000003' [ 332.619268][T22374] xt_hashlimit: size too large, truncated to 1048576 [ 332.987948][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 333.132407][T22396] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6270'. [ 333.406294][T22406] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 333.406294][T22406] program syz.7.6273 not setting count and/or reply_len properly [ 333.412060][T22407] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6275'. [ 333.445044][T22409] can: request_module (can-proto-0) failed. [ 333.666807][T22409] wireguard0: entered promiscuous mode [ 333.673271][T22409] wireguard0: entered allmulticast mode [ 333.940483][T22446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6290'. [ 333.994496][T22457] xt_hashlimit: size too large, truncated to 1048576 [ 334.003935][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 334.018441][ T3396] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 334.028074][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 334.298039][T22482] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 334.378187][T22488] netlink: 'syz.0.6305': attribute type 1 has an invalid length. [ 334.385965][T22488] netlink: 'syz.0.6305': attribute type 2 has an invalid length. [ 334.574488][T22506] xt_hashlimit: size too large, truncated to 1048576 [ 334.576026][T22512] netlink: 204 bytes leftover after parsing attributes in process `syz.6.6313'. [ 335.057336][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 335.150426][T22520] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6317'. [ 335.162674][T22520] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 335.173282][T22520] bridge1: entered promiscuous mode [ 335.178606][T22520] bridge1: entered allmulticast mode [ 335.420385][T22528] xt_hashlimit: size too large, truncated to 1048576 [ 335.512326][T22538] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 335.512326][T22538] program syz.2.6324 not setting count and/or reply_len properly [ 335.597938][T22524] tipc: Started in network mode [ 335.602853][T22524] tipc: Node identity 7664d54e10cd, cluster identity 4711 [ 335.610153][T22524] tipc: Enabled bearer , priority 0 [ 335.627455][T22524] syzkaller0: entered promiscuous mode [ 335.633014][T22524] syzkaller0: entered allmulticast mode [ 335.645112][T22544] loop2: detected capacity change from 0 to 2048 [ 335.654822][T22547] loop8: detected capacity change from 0 to 512 [ 335.664342][T22547] EXT4-fs warning (device loop8): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 335.680861][T22524] tipc: Resetting bearer [ 335.701098][T22544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.714357][T22523] tipc: Resetting bearer [ 335.724658][T22523] tipc: Disabling bearer [ 335.772673][T20854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.821536][T22562] xt_hashlimit: size too large, truncated to 1048576 [ 335.881516][T22565] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6334'. [ 335.963034][T22576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6339'. [ 336.014084][T22583] xt_hashlimit: size too large, truncated to 1048576 [ 336.067062][T22589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=22589 comm=syz.8.6344 [ 336.084753][T22589] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6344'. [ 336.093898][T22589] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6344'. [ 336.103238][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 336.107238][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 336.109377][ T29] audit: type=1326 audit(1769992312.706:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22587 comm="syz.8.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c803aeb9 code=0x7ffc0000 [ 336.140040][ T29] audit: type=1326 audit(1769992312.706:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22587 comm="syz.8.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c803aeb9 code=0x7ffc0000 [ 336.163596][ T29] audit: type=1326 audit(1769992312.706:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22587 comm="syz.8.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c803aeb9 code=0x7ffc0000 [ 336.187244][ T29] audit: type=1326 audit(1769992312.706:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22587 comm="syz.8.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c803aeb9 code=0x7ffc0000 [ 336.210894][ T29] audit: type=1326 audit(1769992312.706:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22587 comm="syz.8.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c803aeb9 code=0x7ffc0000 [ 336.234609][ T29] audit: type=1326 audit(1769992312.706:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22587 comm="syz.8.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f37c803aeb9 code=0x7ffc0000 [ 336.258772][ T29] audit: type=1326 audit(1769992312.706:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22587 comm="syz.8.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c803aeb9 code=0x7ffc0000 [ 336.282578][ T29] audit: type=1326 audit(1769992312.706:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22587 comm="syz.8.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c803aeb9 code=0x7ffc0000 [ 336.306384][ T29] audit: type=1326 audit(1769992312.706:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22587 comm="syz.8.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c803aeb9 code=0x7ffc0000 [ 336.330127][ T29] audit: type=1326 audit(1769992312.706:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22587 comm="syz.8.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f37c803aeb9 code=0x7ffc0000 [ 336.344685][T22601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6346'. [ 336.380995][T22567] loop7: detected capacity change from 0 to 4096 [ 336.387899][T22567] EXT4-fs: Ignoring removed bh option [ 336.407951][T22567] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.426581][T22567] EXT4-fs error (device loop7): ext4_empty_dir:3094: inode #12: block 80: comm syz.7.6335: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 336.446940][T22567] EXT4-fs (loop7): Remounting filesystem read-only [ 336.453535][T22567] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #12: comm syz.7.6335: directory missing '..' [ 336.529180][T15637] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.531903][T22610] xt_hashlimit: size too large, truncated to 1048576 [ 336.789014][T22635] FAULT_INJECTION: forcing a failure. [ 336.789014][T22635] name failslab, interval 1, probability 0, space 0, times 0 [ 336.793466][T22637] loop7: detected capacity change from 0 to 512 [ 336.801903][T22635] CPU: 1 UID: 0 PID: 22635 Comm: syz.8.6360 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 336.801966][T22635] Tainted: [W]=WARN [ 336.801974][T22635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.801988][T22635] Call Trace: [ 336.801995][T22635] [ 336.802003][T22635] __dump_stack+0x1d/0x30 [ 336.802032][T22635] dump_stack_lvl+0x95/0xd0 [ 336.802096][T22635] dump_stack+0x15/0x1b [ 336.802117][T22635] should_fail_ex+0x263/0x280 [ 336.802149][T22635] should_failslab+0x8c/0xb0 [ 336.802180][T22635] __kvmalloc_node_noprof+0x148/0x680 [ 336.802213][T22635] ? seq_read_iter+0x143/0x940 [ 336.802246][T22635] seq_read_iter+0x143/0x940 [ 336.802275][T22635] ? avc_policy_seqno+0x15/0x30 [ 336.802372][T22635] ? selinux_file_permission+0x1f2/0x690 [ 336.802504][T22635] proc_reg_read_iter+0x110/0x180 [ 336.802537][T22635] vfs_read+0x6c0/0x7f0 [ 336.802556][T22635] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 336.802592][T22635] ksys_read+0xdc/0x1a0 [ 336.802640][T22635] __x64_sys_read+0x40/0x50 [ 336.802661][T22635] x64_sys_call+0x2889/0x3000 [ 336.802687][T22635] do_syscall_64+0xc0/0x2a0 [ 336.802760][T22635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.802785][T22635] RIP: 0033:0x7f37c803aeb9 [ 336.802803][T22635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.802823][T22635] RSP: 002b:00007f37c6a97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 336.802900][T22635] RAX: ffffffffffffffda RBX: 00007f37c82b5fa0 RCX: 00007f37c803aeb9 [ 336.802984][T22635] RDX: 0000000000001000 RSI: 0000200000000740 RDI: 0000000000000003 [ 336.802998][T22635] RBP: 00007f37c6a97090 R08: 0000000000000000 R09: 0000000000000000 [ 336.803063][T22635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.803077][T22635] R13: 00007f37c82b6038 R14: 00007f37c82b5fa0 R15: 00007ffd546a7708 [ 336.803098][T22635] [ 336.938630][T22642] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 336.938630][T22642] program syz.8.6365 not setting count and/or reply_len properly [ 337.007041][T22637] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 337.044415][T22637] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.6361: invalid indirect mapped block 4294967295 (level 0) [ 337.065746][T22637] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.6361: invalid indirect mapped block 4294967295 (level 1) [ 337.088291][T22637] EXT4-fs (loop7): 1 orphan inode deleted [ 337.094061][T22637] EXT4-fs (loop7): 1 truncate cleaned up [ 337.120967][T22637] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.147244][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 337.186374][T22664] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6371'. [ 337.226863][T22637] lo speed is unknown, defaulting to 1000 [ 337.237799][T22666] xt_hashlimit: size too large, truncated to 1048576 [ 337.282803][T22671] xt_hashlimit: size too large, truncated to 1048576 [ 337.368057][T15637] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.487055][T22692] netlink: 204 bytes leftover after parsing attributes in process `syz.7.6378'. [ 337.566198][T22702] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 337.566198][T22702] program syz.0.6383 not setting count and/or reply_len properly [ 337.604759][T22705] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6384'. [ 337.613870][T22705] netlink: 'syz.0.6384': attribute type 2 has an invalid length. [ 337.622954][T22705] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6384'. [ 337.716638][T22711] loop7: detected capacity change from 0 to 2048 [ 337.756851][T22711] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.784158][T15637] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.874473][T22733] loop7: detected capacity change from 0 to 512 [ 337.884181][T22733] EXT4-fs: inline encryption not supported [ 337.898162][T22733] EXT4-fs: dax option not supported [ 338.119981][T22741] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 338.119981][T22741] program syz.7.6396 not setting count and/or reply_len properly [ 338.177255][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 338.429940][T22752] netlink: 'syz.2.6400': attribute type 1 has an invalid length. [ 338.478778][T22754] can: request_module (can-proto-0) failed. [ 338.664665][T22754] wireguard0: entered promiscuous mode [ 338.671185][T22754] wireguard0: entered allmulticast mode [ 338.872454][T22785] xt_hashlimit: size too large, truncated to 1048576 [ 339.076158][T22800] loop8: detected capacity change from 0 to 2048 [ 339.141850][T14652] Alternate GPT is invalid, using primary GPT. [ 339.148210][T14652] loop8: p1 p2 p3 [ 339.151939][T14652] loop8: partition table partially beyond EOD, truncated [ 339.217295][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 339.311331][T22800] Alternate GPT is invalid, using primary GPT. [ 339.317809][T22800] loop8: p1 p2 p3 [ 339.321620][T22800] loop8: partition table partially beyond EOD, truncated [ 339.433707][ T3001] Alternate GPT is invalid, using primary GPT. [ 339.440129][ T3001] loop8: p1 p2 p3 [ 339.443920][ T3001] loop8: partition table partially beyond EOD, truncated [ 339.566963][T12268] udevd[12268]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 339.567074][T12301] udevd[12301]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 339.578384][T14652] udevd[14652]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 339.633164][T12268] udevd[12268]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 339.633241][T12301] udevd[12301]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 339.654835][T14652] udevd[14652]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 339.899927][T22844] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 339.899927][T22844] program syz.2.6435 not setting count and/or reply_len properly [ 340.039807][T22856] loop2: detected capacity change from 0 to 2048 [ 340.044271][T22850] lo speed is unknown, defaulting to 1000 [ 340.115258][T22856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.257310][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 340.262815][T22818] syz.7.6424 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 340.275313][T22818] CPU: 1 UID: 0 PID: 22818 Comm: syz.7.6424 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 340.275349][T22818] Tainted: [W]=WARN [ 340.275357][T22818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 340.275371][T22818] Call Trace: [ 340.275378][T22818] [ 340.275386][T22818] __dump_stack+0x1d/0x30 [ 340.275446][T22818] dump_stack_lvl+0x95/0xd0 [ 340.275470][T22818] dump_stack+0x15/0x1b [ 340.275491][T22818] dump_header+0x80/0x240 [ 340.275512][T22818] oom_kill_process+0x295/0x350 [ 340.275592][T22818] out_of_memory+0x97d/0xb80 [ 340.275617][T22818] try_charge_memcg+0x62e/0xa10 [ 340.275649][T22818] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 340.275766][T22818] __read_swap_cache_async+0x17b/0x2d0 [ 340.275875][T22818] swap_cluster_readahead+0x362/0x3c0 [ 340.275914][T22818] swapin_readahead+0xde/0x840 [ 340.275973][T22818] ? __rcu_read_unlock+0x33/0x70 [ 340.276010][T22818] ? __rcu_read_unlock+0x4e/0x70 [ 340.276045][T22818] ? swap_cache_get_folio+0x26f/0x280 [ 340.276081][T22818] do_swap_page+0x59b/0x2a50 [ 340.276150][T22818] ? __rcu_read_lock+0x36/0x50 [ 340.276177][T22818] ? __pfx_default_wake_function+0x10/0x10 [ 340.276233][T22818] handle_mm_fault+0xb40/0x3030 [ 340.276302][T22818] ? vma_start_read+0x1c7/0x2c0 [ 340.276339][T22818] do_user_addr_fault+0x62f/0x1050 [ 340.276367][T22818] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 340.276434][T22818] ? irqentry_exit+0x3c/0x510 [ 340.276465][T22818] exc_page_fault+0x62/0xa0 [ 340.276493][T22818] asm_exc_page_fault+0x26/0x30 [ 340.276519][T22818] RIP: 0033:0x7f3df371ba47 [ 340.276538][T22818] Code: 29 c7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 fd c6 02 00 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 e8 93 19 00 00 0f 1f 00 48 83 ec 10 48 63 d2 48 63 ff 45 31 c9 [ 340.276630][T22818] RSP: 002b:00007ffe043a3d58 EFLAGS: 00010202 [ 340.276654][T22818] RAX: 0000000000000000 RBX: 00007f3df3995fa0 RCX: 0000555593135808 [ 340.276671][T22818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 340.276686][T22818] RBP: 00007f3df3997da0 R08: 0000000000000000 R09: 0000000000000000 [ 340.276711][T22818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000053160 [ 340.276726][T22818] R13: 00007f3df399609c R14: 0000000000052f65 R15: 00007f3df3996090 [ 340.276762][T22818] [ 340.276772][T22818] memory: usage 307200kB, limit 307200kB, failcnt 1141 [ 340.508912][T22818] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 340.516849][T22818] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 340.524172][T22818] Memory cgroup stats for /syz7: [ 340.524373][T22818] cache 0 [ 340.532275][T22818] rss 0 [ 340.535112][T22818] shmem 0 [ 340.538184][T22818] mapped_file 0 [ 340.541648][T22818] dirty 0 [ 340.544620][T22818] writeback 0 [ 340.547939][T22818] workingset_refault_anon 281 [ 340.552633][T22818] workingset_refault_file 0 [ 340.557154][T22818] swap 196608 [ 340.560524][T22818] swapcached 4096 [ 340.564165][T22818] pgpgin 140894 [ 340.567671][T22818] pgpgout 140892 [ 340.571237][T22818] pgfault 153523 [ 340.574797][T22818] pgmajfault 160 [ 340.578930][T22818] inactive_anon 0 [ 340.582582][T22818] active_anon 4096 [ 340.586314][T22818] inactive_file 0 [ 340.590039][T22818] active_file 4096 [ 340.593773][T22818] unevictable 0 [ 340.597288][T22818] hierarchical_memory_limit 314572800 [ 340.602668][T22818] hierarchical_memsw_limit 9223372036854771712 [ 340.608864][T22818] total_cache 0 [ 340.612404][T22818] total_rss 0 [ 340.615690][T22818] total_shmem 0 [ 340.619217][T22818] total_mapped_file 0 [ 340.623245][T22818] total_dirty 0 [ 340.626737][T22818] total_writeback 0 [ 340.630585][T22818] total_workingset_refault_anon 281 [ 340.635790][T22818] total_workingset_refault_file 0 [ 340.640909][T22818] total_swap 196608 [ 340.644776][T22818] total_swapcached 4096 [ 340.649058][T22818] total_pgpgin 140894 [ 340.653066][T22818] total_pgpgout 140892 [ 340.657137][T22818] total_pgfault 153523 [ 340.661354][T22818] total_pgmajfault 160 [ 340.665424][T22818] total_inactive_anon 0 [ 340.667902][T20854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.669729][T22818] total_active_anon 4096 [ 340.683031][T22818] total_inactive_file 0 [ 340.687268][T22818] total_active_file 4096 [ 340.691525][T22818] total_unevictable 0 [ 340.695514][T22818] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.6424,pid=22818,uid=0 [ 340.710351][T22818] Memory cgroup out of memory: Killed process 22818 (syz.7.6424) total-vm:94132kB, anon-rss:1204kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 340.749056][T22865] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 340.749056][T22865] program syz.8.6442 not setting count and/or reply_len properly [ 340.941178][T22880] loop7: detected capacity change from 0 to 2048 [ 340.984115][T22896] netlink: 'syz.8.6453': attribute type 21 has an invalid length. [ 340.992238][T22896] __nla_validate_parse: 68 callbacks suppressed [ 340.992257][T22896] netlink: 128 bytes leftover after parsing attributes in process `syz.8.6453'. [ 341.018043][T22894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.031103][T22896] netlink: 'syz.8.6453': attribute type 4 has an invalid length. [ 341.038909][T22896] netlink: 3 bytes leftover after parsing attributes in process `syz.8.6453'. [ 341.043756][T14652] loop7: p2 p3 p7 [ 341.051748][T22894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.085441][T22896] loop8: detected capacity change from 0 to 512 [ 341.100256][T22896] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.121272][T22896] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.144126][T22880] loop7: p2 p3 p7 [ 341.151233][T22896] EXT4-fs warning (device loop8): verify_group_input:137: Cannot add at group 640 (only 1 groups) [ 341.297245][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 341.333066][T12268] udevd[12268]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 341.345241][T12301] udevd[12301]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 341.368075][T14652] udevd[14652]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 341.375657][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 341.375724][ T29] audit: type=1400 audit(1769992318.016:4436): avc: denied { unlink } for pid=19896 comm="syz-executor" name="core" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 341.392374][T12268] udevd[12268]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 341.449210][T22907] loop7: detected capacity change from 0 to 128 [ 341.468649][T22907] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 341.488368][T22907] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 341.530222][T22903] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.559474][T22914] loop7: detected capacity change from 0 to 128 [ 341.628012][T22916] can: request_module (can-proto-0) failed. [ 341.746859][T22916] wireguard0: entered promiscuous mode [ 341.753689][T22916] wireguard0: entered allmulticast mode [ 341.793600][T22922] loop2: detected capacity change from 0 to 512 [ 341.821268][T22922] msdos: Bad value for 'fmask' [ 341.874047][T10323] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.953243][T10323] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.995125][T22933] xt_hashlimit: size too large, truncated to 1048576 [ 342.028320][T10323] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.109352][T10323] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.132902][T22939] syz.7.6466 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 342.279162][T10323] bridge_slave_1: left allmulticast mode [ 342.284913][T10323] bridge_slave_1: left promiscuous mode [ 342.290818][T10323] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.339853][T10323] bridge_slave_0: left allmulticast mode [ 342.345576][T10323] bridge_slave_0: left promiscuous mode [ 342.351265][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 342.358479][T10323] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.525839][T22956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6472'. [ 342.654230][T10323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.670579][T22968] random: crng reseeded on system resumption [ 342.681188][T10323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.692610][ T29] audit: type=1400 audit(1769992319.336:4437): avc: denied { ioctl } for pid=22967 comm="syz.7.6474" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 342.720346][T22968] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6474'. [ 342.728301][T22969] netlink: 'syz.6.6472': attribute type 1 has an invalid length. [ 342.738823][T10323] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 342.750663][T10323] bond0 (unregistering): Released all slaves [ 342.779458][T22956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6472'. [ 342.816975][T22930] lo speed is unknown, defaulting to 1000 [ 342.906316][T10323] hsr_slave_0: left promiscuous mode [ 342.946320][T10323] hsr_slave_1: left promiscuous mode [ 342.955392][ T29] audit: type=1326 audit(1769992319.596:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22990 comm="syz.7.6478" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3df371aeb9 code=0x0 [ 342.979314][T10323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.986729][T10323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.996239][T10323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.003696][T10323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.016744][T10323] veth1_macvtap: left promiscuous mode [ 343.022320][T10323] veth0_macvtap: left promiscuous mode [ 343.028217][T10323] veth1_vlan: left promiscuous mode [ 343.033591][T10323] veth0_vlan: left promiscuous mode [ 343.171349][T10323] team0 (unregistering): Port device team_slave_1 removed [ 343.192046][T10323] team0 (unregistering): Port device team_slave_0 removed [ 343.280514][T22996] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6479'. [ 343.289854][T22996] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6479'. [ 343.377509][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 343.401071][ T29] audit: type=1400 audit(1769992320.016:4439): avc: denied { read write } for pid=23019 comm="syz.6.6488" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 343.418197][T22930] chnl_net:caif_netlink_parms(): no params data found [ 343.424604][ T29] audit: type=1400 audit(1769992320.016:4440): avc: denied { open } for pid=23019 comm="syz.6.6488" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 343.454647][ T29] audit: type=1400 audit(1769992320.016:4441): avc: denied { ioctl } for pid=23019 comm="syz.6.6488" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 343.508829][ T29] audit: type=1400 audit(1769992320.156:4442): avc: denied { ioctl } for pid=23017 comm="syz.7.6487" path="socket:[71128]" dev="sockfs" ino=71128 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 343.560436][T22930] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.567666][T22930] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.575142][T22930] bridge_slave_0: entered allmulticast mode [ 343.583177][T22930] bridge_slave_0: entered promiscuous mode [ 343.589662][ T29] audit: type=1400 audit(1769992320.216:4443): avc: denied { sys_admin } for pid=23019 comm="syz.6.6488" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 343.590175][T22930] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.617961][T22930] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.625501][T22930] bridge_slave_1: entered allmulticast mode [ 343.641937][T22930] bridge_slave_1: entered promiscuous mode [ 343.660202][T23033] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6488'. [ 343.696397][T22930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.708501][T23020] lo speed is unknown, defaulting to 1000 [ 343.710452][T22930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.726260][T10323] IPVS: stop unused estimator thread 0... [ 343.763805][T22930] team0: Port device team_slave_0 added [ 343.791950][T22930] team0: Port device team_slave_1 added [ 343.843789][T22930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.850906][T22930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.876953][T22930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.887839][T23056] loop2: detected capacity change from 0 to 512 [ 343.894569][T23056] EXT4-fs: Ignoring removed oldalloc option [ 343.925814][T23056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.931906][T22930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.938674][T23056] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 343.945339][T22930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.981571][T22930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.026039][T23061] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6494: bg 0: block 217: padding at end of block bitmap is not set [ 344.047245][T23059] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 344.067425][T23059] EXT4-fs (loop2): Remounting filesystem read-only [ 344.079575][T23056] netlink: 'syz.2.6494': attribute type 8 has an invalid length. [ 344.099301][T22930] hsr_slave_0: entered promiscuous mode [ 344.114167][T22930] hsr_slave_1: entered promiscuous mode [ 344.125935][T22930] debugfs: 'hsr0' already exists in 'hsr' [ 344.131740][T22930] Cannot create hsr debugfs directory [ 344.208012][T20854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.226813][T23074] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 344.226813][T23074] program syz.7.6495 not setting count and/or reply_len properly [ 344.247358][T10323] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 344.289943][T10323] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 344.427294][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 344.522977][T22930] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 344.571223][T22930] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 344.590672][T22930] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 344.637310][T22930] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 344.777101][T23126] loop2: detected capacity change from 0 to 512 [ 344.801177][T22930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.828710][T23126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.843685][T23124] lo speed is unknown, defaulting to 1000 [ 344.851165][T22930] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.863999][T23126] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.877373][T10333] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.884450][T10333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.938871][T10333] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.946046][T10333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.135354][T22930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.234492][T23126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6510'. [ 345.310025][T20854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.320776][T23174] loop7: detected capacity change from 0 to 512 [ 345.358483][T23174] EXT4-fs (loop7): too many log groups per flexible block group [ 345.369176][T23182] sg_write: data in/out 196864/124 bytes for SCSI command 0x40-- guessing data in; [ 345.369176][T23182] program syz.2.6520 not setting count and/or reply_len properly [ 345.390039][T23171] lo speed is unknown, defaulting to 1000 [ 345.407808][T23174] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 345.457693][T23174] EXT4-fs (loop7): mount failed [ 345.467306][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 345.551577][T22930] veth0_vlan: entered promiscuous mode [ 345.618138][T22930] veth1_vlan: entered promiscuous mode [ 345.677053][T22930] veth0_macvtap: entered promiscuous mode [ 345.706810][T22930] veth1_macvtap: entered promiscuous mode [ 345.726599][T22930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.761379][T22930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.773538][T11116] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.792750][T11116] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.847654][T10319] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.856811][T10319] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.947534][T23218] netlink: 'syz.7.6534': attribute type 11 has an invalid length. [ 345.955390][T23218] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6534'. [ 346.005168][T23224] netlink: 204 bytes leftover after parsing attributes in process `syz.7.6536'. [ 346.123393][T23233] dummy0: entered promiscuous mode [ 346.129667][T23233] bond0: entered promiscuous mode [ 346.134863][T23233] bond_slave_0: entered promiscuous mode [ 346.140818][T23233] bond_slave_1: entered promiscuous mode [ 346.183840][T23233] hsr1: entered allmulticast mode [ 346.197559][T23233] dummy0: entered allmulticast mode [ 346.202891][T23233] bond0: entered allmulticast mode [ 346.208139][T23233] bond_slave_0: entered allmulticast mode [ 346.213915][T23233] bond_slave_1: entered allmulticast mode [ 346.428096][T23248] netlink: 166 bytes leftover after parsing attributes in process `syz.9.6543'. [ 346.450767][T23248] netdevsim netdevsim9: Direct firmware load for ./file0 failed with error -2 [ 346.473364][T23250] loop7: detected capacity change from 0 to 512 [ 346.480700][T23251] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 346.497244][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 346.518112][T23250] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 346.591443][T23250] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6545: bg 0: block 255: padding at end of block bitmap is not set [ 346.637055][T23226] loop2: detected capacity change from 0 to 512 [ 346.638659][T23250] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 346.653646][T23250] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.6545: invalid indirect mapped block 1 (level 1) [ 346.713079][T23226] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 346.713369][T23263] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6548'. [ 346.731149][T23250] EXT4-fs (loop7): 1 truncate cleaned up [ 346.746011][T23250] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.759677][T23265] netlink: 204 bytes leftover after parsing attributes in process `syz.6.6550'. [ 346.769203][T23226] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 346.787681][T23226] EXT4-fs (loop2): orphan cleanup on readonly fs [ 346.796338][T23226] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 346.839569][T23226] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 346.857036][T15637] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.857590][T23226] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #13: comm syz.2.6537: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 346.902685][T23226] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.6537: couldn't read orphan inode 13 (err -117) [ 346.938690][T23226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.995628][T23277] xt_hashlimit: size too large, truncated to 1048576 [ 347.172913][T20854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.309014][T23299] loop2: detected capacity change from 0 to 1024 [ 347.327498][T23299] EXT4-fs: Ignoring removed nobh option [ 347.382730][T23299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.397809][ T29] audit: type=1326 audit(1769992324.046:4444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23298 comm="syz.2.6562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb344faeb9 code=0x7ffc0000 [ 347.461493][T23299] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.6562: Allocating blocks 385-513 which overlap fs metadata [ 347.539521][T23310] EXT4-fs (loop2): pa ffff888107e2c8c0: logic 16, phys. 129, len 24 [ 347.547260][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 347.547608][T23310] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 347.594663][ T29] audit: type=1326 audit(1769992324.076:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23298 comm="syz.2.6562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb344faeb9 code=0x7ffc0000 [ 347.618221][ T29] audit: type=1326 audit(1769992324.076:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23298 comm="syz.2.6562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7feb344faeb9 code=0x7ffc0000 [ 347.641742][ T29] audit: type=1326 audit(1769992324.076:4447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23298 comm="syz.2.6562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb344faeb9 code=0x7ffc0000 [ 347.665795][ T29] audit: type=1326 audit(1769992324.076:4448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23298 comm="syz.2.6562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb344faeb9 code=0x7ffc0000 [ 347.689552][ T29] audit: type=1326 audit(1769992324.076:4449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23298 comm="syz.2.6562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7feb344faeb9 code=0x7ffc0000 [ 347.713402][ T29] audit: type=1326 audit(1769992324.076:4450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23298 comm="syz.2.6562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb344faeb9 code=0x7ffc0000 [ 347.737082][ T29] audit: type=1326 audit(1769992324.076:4451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23298 comm="syz.2.6562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb344faeb9 code=0x7ffc0000 [ 347.760799][ T29] audit: type=1326 audit(1769992324.076:4452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23298 comm="syz.2.6562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7feb344faeb9 code=0x7ffc0000 [ 347.784713][ T29] audit: type=1326 audit(1769992324.076:4453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23298 comm="syz.2.6562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb344faeb9 code=0x7ffc0000 [ 347.878431][T20854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.113057][T23324] loop7: detected capacity change from 0 to 2048 [ 348.145776][T23324] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.159568][T23329] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6571'. [ 348.177634][T23324] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.217315][T23331] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6570: bg 0: block 345: padding at end of block bitmap is not set [ 348.238263][T23324] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6570'. [ 348.340135][T15637] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.422773][T23345] xt_hashlimit: size too large, truncated to 1048576 [ 348.577270][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 349.190877][T23373] tipc: Started in network mode [ 349.195931][T23373] tipc: Node identity ae55138cc865, cluster identity 4711 [ 349.203133][T23373] tipc: Enabled bearer , priority 0 [ 349.309550][T23358] syzkaller0: entered promiscuous mode [ 349.315082][T23358] syzkaller0: entered allmulticast mode [ 349.325091][T23358] tipc: Resetting bearer [ 349.331753][T23356] tipc: Resetting bearer [ 349.339735][T23356] tipc: Disabling bearer [ 349.430488][T23381] can: request_module (can-proto-0) failed. [ 349.542870][T23381] wireguard0: entered promiscuous mode [ 349.549391][T23381] wireguard0: entered allmulticast mode [ 349.617946][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 349.819951][T23408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6598'. [ 349.889953][T23410] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 349.889953][T23410] program syz.2.6599 not setting count and/or reply_len properly [ 349.956387][T23414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6602'. [ 349.971758][T23416] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 349.971758][T23416] program syz.7.6601 not setting count and/or reply_len properly [ 350.073545][T23419] loop2: detected capacity change from 0 to 2048 [ 350.138047][T14652] loop2: p1 < > p3 [ 350.168098][T14652] loop2: p3 size 134217728 extends beyond EOD, truncated [ 350.195344][T23419] loop2: p1 < > p3 [ 350.201363][T23419] loop2: p3 size 134217728 extends beyond EOD, truncated [ 350.238060][T23419] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6603'. [ 350.261332][T23419] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6603'. [ 350.368265][T23433] loop9: detected capacity change from 0 to 128 [ 350.489206][T14652] udevd[14652]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 350.489446][T12301] udevd[12301]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 350.667250][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 350.699311][T23450] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 350.699311][T23450] program syz.2.6617 not setting count and/or reply_len properly [ 351.132140][T23480] __nla_validate_parse: 3 callbacks suppressed [ 351.132159][T23480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6627'. [ 351.280510][T23489] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6632'. [ 351.295319][T23491] netlink: 204 bytes leftover after parsing attributes in process `syz.9.6631'. [ 351.359281][T23496] netlink: 182 bytes leftover after parsing attributes in process `syz.9.6633'. [ 351.427080][T23508] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6640'. [ 351.698915][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 351.939821][T23553] can: request_module (can-proto-0) failed. [ 352.084812][T23553] wireguard0: entered promiscuous mode [ 352.092863][T23553] wireguard0: entered allmulticast mode [ 352.173359][T23569] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6661'. [ 352.195251][T23569] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6661'. [ 352.293778][T23575] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 352.305640][T23575] bond3 (unregistering): Released all slaves [ 352.378670][T23581] xt_hashlimit: size too large, truncated to 1048576 [ 352.421358][T23583] loop2: detected capacity change from 0 to 512 [ 352.489864][T23583] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 352.510922][T23583] EXT4-fs (loop2): 1 truncate cleaned up [ 352.526848][T23583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.564624][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 352.564642][ T29] audit: type=1400 audit(1769992329.206:4479): avc: denied { ioctl } for pid=23582 comm="syz.2.6666" path="/158/bus/blkio.bfq.io_service_bytes_recursive" dev="loop2" ino=18 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 352.617735][T20854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.693581][T23599] xt_hashlimit: size too large, truncated to 1048576 [ 352.695729][T23595] lo speed is unknown, defaulting to 1000 [ 352.737297][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 352.785187][T23602] loop2: detected capacity change from 0 to 2048 [ 352.859179][T23607] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6671'. [ 352.859175][T23602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.880460][ T29] audit: type=1400 audit(1769992329.516:4480): avc: denied { name_bind } for pid=23594 comm="syz.2.6668" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 352.883129][T23595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6668'. [ 352.958729][T20854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.134925][T23617] netlink: 204 bytes leftover after parsing attributes in process `syz.2.6676'. [ 353.777243][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 353.796963][T23630] geneve2: left promiscuous mode [ 353.847880][ T12] bond1: (slave ip6gretap1): link status up again after 0 ms [ 353.855408][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 353.927295][T23636] netlink: 'syz.6.6684': attribute type 4 has an invalid length. [ 353.957367][T23636] netlink: 'syz.6.6684': attribute type 4 has an invalid length. [ 354.179134][T23637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.217037][T23637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.337660][T11343] lo speed is unknown, defaulting to 1000 [ 354.345073][T11360] lo speed is unknown, defaulting to 1000 [ 354.350965][ T12] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.359431][ T12] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.453347][ T12] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.462036][ T12] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.471086][ T12] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.479670][ T12] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.490277][ T12] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.498692][ T12] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.672383][T23655] loop9: detected capacity change from 0 to 512 [ 354.736599][T23655] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.817246][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 354.900781][T22930] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.108911][ T3441] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.180099][ T3441] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.246919][T23697] bond1: up delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 355.258185][ T3441] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.283085][T23697] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 355.295161][T23697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.345941][T23670] lo speed is unknown, defaulting to 1000 [ 355.362689][ T3441] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.487624][ T3441] bridge_slave_1: left allmulticast mode [ 355.493407][ T3441] bridge_slave_1: left promiscuous mode [ 355.499142][ T3441] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.561788][ T3441] bridge_slave_0: left allmulticast mode [ 355.567561][ T3441] bridge_slave_0: left promiscuous mode [ 355.573213][ T3441] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.788834][ T3441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.810794][ T3441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.820386][ T3441] bond0 (unregistering): Released all slaves [ 355.857274][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 355.872519][ T3441] tipc: Left network mode [ 355.947834][ T3441] hsr_slave_0: left promiscuous mode [ 355.987285][ T3441] hsr_slave_1: left promiscuous mode [ 356.012681][ T3441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.020237][ T3441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.073629][ T3441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.081147][ T3441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.117261][ T3441] veth1_macvtap: left promiscuous mode [ 356.117293][ T3441] veth0_macvtap: left promiscuous mode [ 356.117411][ T3441] veth1_vlan: left promiscuous mode [ 356.117442][ T3441] veth0_vlan: left promiscuous mode [ 356.198797][T23759] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 356.246885][ T3441] team0 (unregistering): Port device team_slave_1 removed [ 356.257377][ T3441] team0 (unregistering): Port device team_slave_0 removed [ 356.316368][T23670] chnl_net:caif_netlink_parms(): no params data found [ 356.421775][T23670] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.429058][T23670] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.505402][T23670] bridge_slave_0: entered allmulticast mode [ 356.542978][T23670] bridge_slave_0: entered promiscuous mode [ 356.550890][T23670] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.557995][T23670] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.583141][T23767] syz.7.6717 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 356.590840][T23670] bridge_slave_1: entered allmulticast mode [ 356.594253][T23767] CPU: 1 UID: 0 PID: 23767 Comm: syz.7.6717 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 356.594297][T23767] Tainted: [W]=WARN [ 356.594305][T23767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 356.594319][T23767] Call Trace: [ 356.594327][T23767] [ 356.594406][T23767] __dump_stack+0x1d/0x30 [ 356.594431][T23767] dump_stack_lvl+0x95/0xd0 [ 356.594454][T23767] dump_stack+0x15/0x1b [ 356.594476][T23767] dump_header+0x80/0x240 [ 356.594511][T23767] oom_kill_process+0x295/0x350 [ 356.594538][T23767] out_of_memory+0x97d/0xb80 [ 356.594565][T23767] try_charge_memcg+0x62e/0xa10 [ 356.594594][T23767] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 356.594697][T23767] __read_swap_cache_async+0x17b/0x2d0 [ 356.594733][T23767] swap_cluster_readahead+0x262/0x3c0 [ 356.594770][T23767] swapin_readahead+0xde/0x840 [ 356.594897][T23767] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 356.594970][T23767] ? lruvec_stat_mod_folio+0xd2/0x110 [ 356.594996][T23767] ? __rcu_read_unlock+0x4e/0x70 [ 356.595027][T23767] ? swap_cache_get_folio+0x26f/0x280 [ 356.595167][T23767] do_swap_page+0x59b/0x2a50 [ 356.595203][T23767] ? __rcu_read_lock+0x36/0x50 [ 356.595255][T23767] ? __pfx_default_wake_function+0x10/0x10 [ 356.595289][T23767] handle_mm_fault+0xb40/0x3030 [ 356.595323][T23767] ? vma_start_read+0x1c7/0x2c0 [ 356.595424][T23767] do_user_addr_fault+0x62f/0x1050 [ 356.595519][T23767] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 356.595563][T23767] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 356.595597][T23767] ? irqentry_exit+0x3c/0x510 [ 356.595624][T23767] exc_page_fault+0x62/0xa0 [ 356.595650][T23767] asm_exc_page_fault+0x26/0x30 [ 356.595702][T23767] RIP: 0033:0x7f3df35e8910 [ 356.595721][T23767] Code: c4 4c 0f 42 e0 83 3d ba f4 3a 00 00 0f 8e d9 fd ff ff e8 b3 88 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d 7e cd ed 00 e8 03 00 00 48 8d 1d 7f d6 3a 00 e8 ca 30 13 00 [ 356.595742][T23767] RSP: 002b:00007ffe043a3d60 EFLAGS: 00010202 [ 356.595806][T23767] RAX: 00000000000570d7 RBX: 00007f3df3997da0 RCX: 0000000000056ea0 [ 356.595822][T23767] RDX: 0000000000000237 RSI: 00007ffe043a3d40 RDI: 0000000000000001 [ 356.595837][T23767] RBP: 00007f3df3997da0 R08: 0000000021d2d306 R09: 7fffffffffffffff [ 356.595927][T23767] R10: 3fffffffffffffff R11: 0000000000000246 R12: 000000000005734a [ 356.595983][T23767] R13: 00007f3df399609c R14: 00000000000570de R15: 00007f3df3996090 [ 356.596074][T23767] [ 356.596082][T23767] memory: usage 307200kB, limit 307200kB, failcnt 1347 [ 356.635239][T23670] bridge_slave_1: entered promiscuous mode [ 356.636365][T23767] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 356.636386][T23767] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 356.636400][T23767] Memory cgroup stats for /syz7: [ 356.657469][T23767] cache 0 [ 356.761094][T23670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.764744][T23767] rss 12288 [ 356.764757][T23767] shmem 0 [ 356.764766][T23767] mapped_file 0 [ 356.764774][T23767] dirty 0 [ 356.764793][T23767] writeback 8192 [ 356.784230][T23796] xt_hashlimit: size too large, truncated to 1048576 [ 356.789208][T23767] workingset_refault_anon 339 [ 356.797889][T23797] __nla_validate_parse: 89 callbacks suppressed [ 356.797905][T23797] netlink: 166 bytes leftover after parsing attributes in process `syz.9.6724'. [ 356.803184][T23767] workingset_refault_file 0 [ 356.815258][T23670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.819366][T23767] swap 176128 [ 356.819378][T23767] swapcached 24576 [ 356.819418][T23767] pgpgin 159648 [ 356.819428][T23767] pgpgout 159641 [ 356.819438][T23767] pgfault 180013 [ 356.819446][T23767] pgmajfault 205 [ 356.819455][T23767] inactive_anon 4096 [ 356.819465][T23767] active_anon 8192 [ 356.819483][T23767] inactive_file 0 [ 356.819501][T23767] active_file 4096 [ 356.819510][T23767] unevictable 0 [ 356.819520][T23767] hierarchical_memory_limit 314572800 [ 356.819531][T23767] hierarchical_memsw_limit 9223372036854771712 [ 356.819542][T23767] total_cache 0 [ 356.897301][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 356.900804][T23767] total_rss 12288 [ 356.959620][T23670] team0: Port device team_slave_0 added [ 356.962615][T23767] total_shmem 0 [ 356.996069][T23670] team0: Port device team_slave_1 added [ 356.996277][T23767] total_mapped_file 0 [ 357.025682][T23767] total_dirty 0 [ 357.026657][T23805] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 357.026657][T23805] program syz.2.6725 not setting count and/or reply_len properly [ 357.029267][T23767] total_writeback 8192 [ 357.029280][T23767] total_workingset_refault_anon 339 [ 357.029290][T23767] total_workingset_refault_file 0 [ 357.029301][T23767] total_swap 176128 [ 357.064545][T23767] total_swapcached 24576 [ 357.068869][T23767] total_pgpgin 159648 [ 357.072929][T23767] total_pgpgout 159641 [ 357.077066][T23767] total_pgfault 180013 [ 357.081208][T23767] total_pgmajfault 205 [ 357.085288][T23767] total_inactive_anon 4096 [ 357.089760][T23767] total_active_anon 8192 [ 357.094027][T23767] total_inactive_file 0 [ 357.098247][T23767] total_active_file 4096 [ 357.102497][T23767] total_unevictable 0 [ 357.106500][T23767] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.6717,pid=23767,uid=0 [ 357.121498][T23767] Memory cgroup out of memory: Killed process 23767 (syz.7.6717) total-vm:94132kB, anon-rss:1204kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 357.203467][T23670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.210526][T23670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.236579][T23670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.274913][T23818] loop9: detected capacity change from 0 to 1024 [ 357.282415][T23820] loop7: detected capacity change from 0 to 128 [ 357.295136][T23818] EXT4-fs: Ignoring removed orlov option [ 357.300949][T23818] EXT4-fs: inline encryption not supported [ 357.312986][T23818] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 357.327616][T23818] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 357.341645][T23670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.348666][T23670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.375386][T23670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.390152][T23818] EXT4-fs (loop9): invalid journal inode [ 357.396927][T23820] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.421201][T23824] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6730'. [ 357.436936][T23818] EXT4-fs (loop9): can't get journal size [ 357.440620][T23825] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6730'. [ 357.459414][T23822] bio_check_eod: 15 callbacks suppressed [ 357.459434][T23822] syz.7.6728: attempt to access beyond end of device [ 357.459434][T23822] loop7: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 357.488756][T23818] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 357.530449][T23670] hsr_slave_0: entered promiscuous mode [ 357.549517][T23822] syz.7.6728: attempt to access beyond end of device [ 357.549517][T23822] loop7: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 357.563715][T23670] hsr_slave_1: entered promiscuous mode [ 357.579613][T23670] debugfs: 'hsr0' already exists in 'hsr' [ 357.585397][T23670] Cannot create hsr debugfs directory [ 357.601861][T23820] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.630599][T23822] syz.7.6728: attempt to access beyond end of device [ 357.630599][T23822] loop7: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 357.644389][T23822] buffer_io_error: 14 callbacks suppressed [ 357.644410][T23822] Buffer I/O error on dev loop7, logical block 84, lost async page write [ 357.661298][T22930] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.671263][T23822] syz.7.6728: attempt to access beyond end of device [ 357.671263][T23822] loop7: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 357.710445][T23822] syz.7.6728: attempt to access beyond end of device [ 357.710445][T23822] loop7: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 357.724206][T23822] Buffer I/O error on dev loop7, logical block 96, lost async page write [ 357.740403][T23820] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.751934][T23822] syz.7.6728: attempt to access beyond end of device [ 357.751934][T23822] loop7: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 357.783260][T23859] netlink: 166 bytes leftover after parsing attributes in process `syz.9.6736'. [ 357.793962][T23822] syz.7.6728: attempt to access beyond end of device [ 357.793962][T23822] loop7: rw=8390657, sector=200, nr_sectors = 2 limit=128 [ 357.807821][T23822] Buffer I/O error on dev loop7, logical block 100, lost async page write [ 357.820429][T23820] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.840391][T23822] syz.7.6728: attempt to access beyond end of device [ 357.840391][T23822] loop7: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 357.854920][T23822] syz.7.6728: attempt to access beyond end of device [ 357.854920][T23822] loop7: rw=8390657, sector=224, nr_sectors = 2 limit=128 [ 357.868811][T23822] Buffer I/O error on dev loop7, logical block 112, lost async page write [ 357.921780][T23822] syz.7.6728: attempt to access beyond end of device [ 357.921780][T23822] loop7: rw=2049, sector=226, nr_sectors = 8 limit=128 [ 357.923513][ T12] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.943505][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 357.965551][ T12] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.973907][ T12] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.018691][ T12] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.037032][T23822] Buffer I/O error on dev loop7, logical block 116, lost async page write [ 358.077946][T23822] Buffer I/O error on dev loop7, logical block 88, lost async page write [ 358.088385][T23822] Buffer I/O error on dev loop7, logical block 92, lost async page write [ 358.101044][T23822] Buffer I/O error on dev loop7, logical block 120, lost async page write [ 358.253123][T23670] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 358.278026][T23670] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 358.288091][T23670] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 358.297811][T23670] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 358.480156][T23670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.977257][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 358.979059][T23670] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.993260][T23875] syz.6.6739 (23875) used greatest stack depth: 6008 bytes left [ 359.011764][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.018886][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.046368][ T3441] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.053596][ T3441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.093698][T23924] loop9: detected capacity change from 0 to 128 [ 359.128015][T23924] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 359.161349][T23924] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 359.238277][T23939] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 359.238277][T23939] program syz.7.6749 not setting count and/or reply_len properly [ 359.296309][T23670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.430274][ T29] audit: type=1400 audit(1769992336.066:4481): avc: denied { create } for pid=23954 comm="syz.7.6752" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 359.658559][T22930] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 359.675340][T23670] veth0_vlan: entered promiscuous mode [ 359.687817][T23670] veth1_vlan: entered promiscuous mode [ 359.756198][T23670] veth0_macvtap: entered promiscuous mode [ 359.788851][T23670] veth1_macvtap: entered promiscuous mode [ 359.810124][T23670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.819973][T23987] loop9: detected capacity change from 0 to 512 [ 359.832557][T23670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.861382][T23987] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.6759: invalid block [ 359.905388][T10328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.908483][T23967] syz.2.6755 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 359.925293][T23967] CPU: 1 UID: 0 PID: 23967 Comm: syz.2.6755 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 359.925360][T23967] Tainted: [W]=WARN [ 359.925369][T23967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 359.925385][T23967] Call Trace: [ 359.925393][T23967] [ 359.925403][T23967] __dump_stack+0x1d/0x30 [ 359.925430][T23967] dump_stack_lvl+0x95/0xd0 [ 359.925487][T23967] dump_stack+0x15/0x1b [ 359.925520][T23967] dump_header+0x80/0x240 [ 359.925546][T23967] oom_kill_process+0x295/0x350 [ 359.925583][T23967] out_of_memory+0x97d/0xb80 [ 359.925671][T23967] try_charge_memcg+0x62e/0xa10 [ 359.925702][T23967] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 359.925792][T23967] __read_swap_cache_async+0x17b/0x2d0 [ 359.925825][T23967] swap_cluster_readahead+0x262/0x3c0 [ 359.925866][T23967] swapin_readahead+0xde/0x840 [ 359.925970][T23967] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 359.926001][T23967] ? lruvec_stat_mod_folio+0xd2/0x110 [ 359.926024][T23967] ? __rcu_read_unlock+0x4e/0x70 [ 359.926067][T23967] ? swap_cache_get_folio+0x26f/0x280 [ 359.926239][T23967] do_swap_page+0x59b/0x2a50 [ 359.926280][T23967] ? __rcu_read_lock+0x36/0x50 [ 359.926389][T23967] ? __pfx_default_wake_function+0x10/0x10 [ 359.926422][T23967] handle_mm_fault+0xb40/0x3030 [ 359.926464][T23967] ? vma_start_read+0x1c7/0x2c0 [ 359.926533][T23967] do_user_addr_fault+0x62f/0x1050 [ 359.926563][T23967] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 359.926664][T23967] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 359.926834][T23967] ? irqentry_exit+0x3c/0x510 [ 359.926859][T23967] exc_page_fault+0x62/0xa0 [ 359.926958][T23967] asm_exc_page_fault+0x26/0x30 [ 359.926983][T23967] RIP: 0033:0x7feb344b6083 [ 359.927005][T23967] Code: 25 00 03 00 00 e8 1d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d ce f4 28 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 359.927024][T23967] RSP: 002b:00007ffcb215dcc0 EFLAGS: 00010246 [ 359.927043][T23967] RAX: 0000000000000000 RBX: 000055558e809500 RCX: 0000000000000000 [ 359.927057][T23967] RDX: 00007ffcb215dd00 RSI: 0000000000000000 RDI: 0000000000000000 [ 359.927195][T23967] RBP: 00007feb34777da0 R08: 0000000000000000 R09: 0000000000000000 [ 359.927210][T23967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000057fa2 [ 359.927226][T23967] R13: 00007feb3477609c R14: 0000000000057d49 R15: 00007feb34776090 [ 359.927298][T23967] [ 360.037499][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 360.038480][T23967] memory: usage 281196kB, limit 307200kB, failcnt 1557 [ 360.051092][T10328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.053273][T23967] memory+swap: usage 282760kB, limit 9007199254740988kB, failcnt 0 [ 360.077745][T10328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.080180][T23967] kmem: usage 246760kB, limit 9007199254740988kB, failcnt 0 [ 360.084807][T10328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.089621][T23967] Memory cgroup stats for /syz2: [ 360.218597][T23987] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.6759: invalid indirect mapped block 4294967295 (level 1) [ 360.250261][T23967] cache 0 [ 360.253312][T23967] rss 0 [ 360.256153][T23967] shmem 0 [ 360.259211][T23967] mapped_file 0 [ 360.262742][T23967] dirty 0 [ 360.265758][T23967] writeback 24576 [ 360.269579][T23967] workingset_refault_anon 1328 [ 360.274353][T23967] workingset_refault_file 7713 [ 360.279263][T23967] swap 1601536 [ 360.282648][T23967] swapcached 24576 [ 360.286393][T23967] pgpgin 495141 [ 360.290159][T23967] pgpgout 495135 [ 360.293721][T23967] pgfault 435472 [ 360.297327][T23967] pgmajfault 306 [ 360.300982][T23967] inactive_anon 24576 [ 360.304978][T23967] active_anon 0 [ 360.308505][T23967] inactive_file 0 [ 360.312202][T23967] active_file 0 [ 360.315746][T23967] unevictable 0 [ 360.319254][T23967] hierarchical_memory_limit 314572800 [ 360.324734][T23967] hierarchical_memsw_limit 9223372036854771712 [ 360.330934][T23967] total_cache 0 [ 360.334403][T23967] total_rss 0 [ 360.337767][T23967] total_shmem 0 [ 360.341232][T23967] total_mapped_file 0 [ 360.345236][T23967] total_dirty 0 [ 360.348823][T23967] total_writeback 24576 [ 360.352995][T23967] total_workingset_refault_anon 1328 [ 360.358310][T23967] total_workingset_refault_file 7713 [ 360.363609][T23967] total_swap 1601536 [ 360.367544][T23967] total_swapcached 24576 [ 360.371801][T23967] total_pgpgin 495141 [ 360.375853][T23967] total_pgpgout 495135 [ 360.379960][T23967] total_pgfault 435472 [ 360.384033][T23967] total_pgmajfault 306 [ 360.388126][T23967] total_inactive_anon 24576 [ 360.392275][T23987] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.6759: invalid indirect mapped block 4294967295 (level 1) [ 360.392708][T23967] total_active_anon 0 [ 360.392720][T23967] total_inactive_file 0 [ 360.392736][T23967] total_active_file 0 [ 360.392744][T23967] total_unevictable 0 [ 360.392753][T23967] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.6755,pid=23967,uid=0 [ 360.438022][T23967] Memory cgroup out of memory: Killed process 23967 (syz.2.6755) total-vm:94132kB, anon-rss:1204kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 360.441370][T23987] EXT4-fs (loop9): 2 truncates cleaned up [ 360.502773][T23987] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.597601][ T29] audit: type=1400 audit(1769992337.236:4482): avc: denied { append } for pid=23986 comm="syz.9.6759" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 360.699754][T24026] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6759'. [ 360.727390][T23987] netlink: 'syz.9.6759': attribute type 2 has an invalid length. [ 360.735695][T24019] FAULT_INJECTION: forcing a failure. [ 360.735695][T24019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.749051][T24019] CPU: 1 UID: 0 PID: 24019 Comm: syz.3.6768 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 360.749084][T24019] Tainted: [W]=WARN [ 360.749092][T24019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.749108][T24019] Call Trace: [ 360.749116][T24019] [ 360.749126][T24019] __dump_stack+0x1d/0x30 [ 360.749252][T24019] dump_stack_lvl+0x95/0xd0 [ 360.749299][T24019] dump_stack+0x15/0x1b [ 360.749322][T24019] should_fail_ex+0x263/0x280 [ 360.749420][T24019] should_fail+0xb/0x20 [ 360.749450][T24019] should_fail_usercopy+0x1a/0x20 [ 360.749485][T24019] _copy_from_user+0x1c/0xb0 [ 360.749518][T24019] move_addr_to_kernel+0x7e/0x120 [ 360.749609][T24019] io_bind_prep+0x115/0x130 [ 360.749631][T24019] io_submit_sqes+0x70e/0x11b0 [ 360.749705][T24019] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 360.749779][T24019] ? __rcu_read_unlock+0x4e/0x70 [ 360.749841][T24019] ? get_pid_task+0x96/0xd0 [ 360.749873][T24019] ? proc_fail_nth_write+0x13b/0x160 [ 360.749912][T24019] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 360.749942][T24019] ? vfs_write+0x86e/0x9f0 [ 360.750022][T24019] ? __rcu_read_unlock+0x4e/0x70 [ 360.750087][T24019] ? __fget_files+0x184/0x1c0 [ 360.750115][T24019] ? mutex_lock+0x57/0x90 [ 360.750141][T24019] ? mutex_unlock+0x4e/0x90 [ 360.750167][T24019] ? fput+0x8f/0xc0 [ 360.750218][T24019] __x64_sys_io_uring_enter+0x78/0x90 [ 360.750249][T24019] x64_sys_call+0x27e4/0x3000 [ 360.750276][T24019] do_syscall_64+0xc0/0x2a0 [ 360.750305][T24019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.750408][T24019] RIP: 0033:0x7fc080fcaeb9 [ 360.750427][T24019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.750449][T24019] RSP: 002b:00007fc07fa27028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 360.750544][T24019] RAX: ffffffffffffffda RBX: 00007fc081245fa0 RCX: 00007fc080fcaeb9 [ 360.750560][T24019] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 360.750576][T24019] RBP: 00007fc07fa27090 R08: 0000000000000000 R09: 0000000000000000 [ 360.750592][T24019] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 360.750609][T24019] R13: 00007fc081246038 R14: 00007fc081245fa0 R15: 00007ffef2880ab8 [ 360.750632][T24019] [ 360.768420][T24034] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 360.768420][T24034] program syz.7.6771 not setting count and/or reply_len properly [ 361.057237][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 361.066653][T22930] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.085522][T24051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6773'. [ 361.153826][T24064] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8219 sclass=netlink_xfrm_socket pid=24064 comm=syz.3.6776 [ 361.234983][T24011] tipc: Enabled bearer , priority 0 [ 361.243287][T24074] loop9: detected capacity change from 0 to 512 [ 361.273776][T24079] netlink: 324 bytes leftover after parsing attributes in process `syz.3.6779'. [ 361.285585][T24074] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 361.300253][T24011] syzkaller0: entered promiscuous mode [ 361.305762][T24011] syzkaller0: entered allmulticast mode [ 361.363313][T24074] EXT4-fs (loop9): 1 truncate cleaned up [ 361.371016][T24011] tipc: Resetting bearer [ 361.379634][T24009] tipc: Resetting bearer [ 361.403545][T24074] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.422524][T24009] tipc: Disabling bearer [ 361.489161][T22930] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.581421][T24105] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6784'. [ 361.590445][T24105] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6784'. [ 361.647954][T24110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=24110 comm=syz.9.6783 [ 361.696906][ T29] audit: type=1400 audit(1769992338.336:4483): avc: denied { mounton } for pid=24106 comm="syz.9.6783" path=2F36362FE91F7189591E9233614B dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 361.696969][T24118] 9p: Could not find request transport: uni^ek}toر)&KpJws A4}(3ݒ [ 361.749993][T24120] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 361.749993][T24120] program syz.7.6787 not setting count and/or reply_len properly [ 361.896596][T24137] loop9: detected capacity change from 0 to 1024 [ 361.921812][T24144] loop3: detected capacity change from 0 to 128 [ 361.930696][T10323] bond0: (slave bond_slave_0): interface is now down [ 361.933153][T24145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.937617][T10323] bond0: (slave bond_slave_1): interface is now down [ 361.995909][T10319] bridge_slave_1: left allmulticast mode [ 362.001698][T10319] bridge_slave_1: left promiscuous mode [ 362.007613][T10319] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.035293][ T29] audit: type=1400 audit(1769992338.676:4484): avc: denied { setopt } for pid=24141 comm="syz.6.6793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 362.074501][T10319] bridge_slave_0: left promiscuous mode [ 362.080530][T10319] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.093685][T24137] loop9: detected capacity change from 0 to 1024 [ 362.100111][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 362.100168][ T12] bond0: (slave bond_slave_0): interface is now down [ 362.100189][ T12] bond0: (slave bond_slave_1): interface is now down [ 362.237381][T10328] bond0: (slave bond_slave_0): interface is now down [ 362.244182][T10328] bond0: (slave bond_slave_1): interface is now down [ 362.267540][T24137] loop9: detected capacity change from 0 to 1024 [ 362.323761][T24137] loop9: detected capacity change from 0 to 1024 [ 362.355434][T24137] loop9: detected capacity change from 0 to 1024 [ 362.387273][ T12] bond0: (slave bond_slave_0): interface is now down [ 362.394001][ T12] bond0: (slave bond_slave_1): interface is now down [ 362.407545][T10319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.413793][T24137] loop9: detected capacity change from 0 to 1024 [ 362.425046][T10319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.435670][T10319] bond0 (unregistering): Released all slaves [ 362.451642][T10319] bond1 (unregistering): Released all slaves [ 362.487013][T10319] bond2 (unregistering): Released all slaves [ 362.524405][T24175] bond3: entered promiscuous mode [ 362.529818][T24180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.537605][T10323] bond0: (slave bond_slave_0): interface is now down [ 362.544370][T10323] bond0: (slave bond_slave_1): interface is now down [ 362.576355][T24180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.608815][T10319] tipc: Disabling bearer [ 362.613821][T10319] tipc: Left network mode [ 362.656571][T24210] ext4: Unknown parameter 'nojournal' [ 362.686146][T10319] hsr_slave_0: left promiscuous mode [ 362.697322][T11116] bond0: (slave bond_slave_0): interface is now down [ 362.704039][T11116] bond0: (slave bond_slave_1): interface is now down [ 362.733664][T10319] hsr_slave_1: left promiscuous mode [ 362.759740][T10319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.767400][T10319] batadv0: mtu less than device minimum [ 362.773590][T10319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 362.784442][T10319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 362.795287][T10319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 362.806333][T10319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 362.817338][T10319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 362.828487][T10319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 362.839520][T10319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 362.850270][T10319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 362.857275][T11116] bond0: (slave bond_slave_0): interface is now down [ 362.867512][T11116] bond0: (slave bond_slave_1): interface is now down [ 362.867774][T10319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.049579][T11116] bond0: (slave bond_slave_0): interface is now down [ 363.056358][T11116] bond0: (slave bond_slave_1): interface is now down [ 363.112707][T10319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.130462][T10319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.197230][T10328] bond0: (slave bond_slave_0): interface is now down [ 363.204043][T10328] bond0: (slave bond_slave_1): interface is now down [ 363.347234][T10328] bond0: (slave bond_slave_0): interface is now down [ 363.354005][T10328] bond0: (slave bond_slave_1): interface is now down [ 363.375152][T10319] batman_adv: batadv0: Interface deactivated: dummy0 [ 363.382358][T10319] batman_adv: batadv0: Removing interface: dummy0 [ 363.429485][T24249] netlink: 204 bytes leftover after parsing attributes in process `syz.6.6808'. [ 363.498785][T11116] bond0: (slave bond_slave_0): interface is now down [ 363.505518][T11116] bond0: (slave bond_slave_1): interface is now down [ 363.531589][T24264] ieee802154 phy0 wpan0: encryption failed: -22 [ 363.559922][T24266] netlink: 'syz.6.6811': attribute type 16 has an invalid length. [ 363.567821][T24266] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.6811'. [ 363.647476][T11116] bond0: (slave bond_slave_0): interface is now down [ 363.654386][T11116] bond0: (slave bond_slave_1): interface is now down [ 363.674434][T11116] bond0: now running without any active interface! [ 363.699004][T24273] lo speed is unknown, defaulting to 1000 [ 363.735893][ T10] IPVS: starting estimator thread 0... [ 363.743562][T24279] netlink: 'syz.3.6812': attribute type 15 has an invalid length. [ 363.751499][T24279] netlink: 25 bytes leftover after parsing attributes in process `syz.3.6812'. [ 363.766557][T24218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6803'. [ 363.775551][T24218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6803'. [ 363.832111][T24289] netlink: 'syz.9.6817': attribute type 21 has an invalid length. [ 363.848598][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.857000][T24289] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6817'. [ 363.857372][T24280] IPVS: using max 2400 ests per chain, 120000 per kthread [ 363.866149][T24289] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6817'. [ 363.882288][T24218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6803'. [ 363.891431][T24218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6803'. [ 363.908253][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.936105][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.966502][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.010725][T24305] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6820'. [ 364.031547][T10319] IPVS: stop unused estimator thread 0... [ 364.165105][T24324] set_capacity_and_notify: 5 callbacks suppressed [ 364.165124][T24324] loop7: detected capacity change from 0 to 128 [ 364.381988][T24345] loop9: detected capacity change from 0 to 512 [ 364.438167][T24345] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 364.456763][T24345] EXT4-fs (loop9): 1 truncate cleaned up [ 364.488788][T24345] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.525832][T24345] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.6830: corrupted xattr block 33: invalid header [ 364.557571][T24345] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 364.590313][T24354] xt_hashlimit: size too large, truncated to 1048576 [ 364.599905][T24345] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.6830: corrupted xattr block 33: invalid header [ 364.668852][T24345] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 364.678014][T24345] EXT4-fs error (device loop9): ext4_xattr_block_list:766: inode #15: comm syz.9.6830: corrupted xattr block 33: invalid header [ 364.730932][T22930] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.178591][T24394] loop3: detected capacity change from 0 to 1024 [ 365.309527][T24398] lo speed is unknown, defaulting to 1000 [ 365.321079][T24394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.424774][T23670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.571995][T24424] can: request_module (can-proto-0) failed. [ 365.716939][T24434] loop3: detected capacity change from 0 to 256 [ 365.818234][T24424] wireguard0: entered promiscuous mode [ 365.825054][T24424] wireguard0: entered allmulticast mode [ 365.927142][T24437] tipc: Enabled bearer , priority 0 [ 365.934016][T24438] syzkaller0: entered promiscuous mode [ 365.939673][T24438] syzkaller0: entered allmulticast mode [ 365.975930][T24418] tipc: Resetting bearer [ 365.982699][T24417] tipc: Resetting bearer [ 365.990358][T24417] tipc: Disabling bearer [ 366.242104][T24458] loop9: detected capacity change from 0 to 8192 [ 366.537386][T24489] can: request_module (can-proto-0) failed. [ 366.626404][T24497] loop2: detected capacity change from 0 to 256 [ 366.758863][T24489] wireguard0: entered promiscuous mode [ 366.765292][T24489] wireguard0: entered allmulticast mode [ 366.961168][T24485] lo speed is unknown, defaulting to 1000 [ 367.071655][T24485] chnl_net:caif_netlink_parms(): no params data found [ 367.176564][T24522] FAULT_INJECTION: forcing a failure. [ 367.176564][T24522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.189842][T24522] CPU: 0 UID: 0 PID: 24522 Comm: syz.3.6872 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 367.189880][T24522] Tainted: [W]=WARN [ 367.189957][T24522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 367.189972][T24522] Call Trace: [ 367.189981][T24522] [ 367.189991][T24522] __dump_stack+0x1d/0x30 [ 367.190021][T24522] dump_stack_lvl+0x95/0xd0 [ 367.190047][T24522] dump_stack+0x15/0x1b [ 367.190070][T24522] should_fail_ex+0x263/0x280 [ 367.190146][T24522] should_fail+0xb/0x20 [ 367.190177][T24522] should_fail_usercopy+0x1a/0x20 [ 367.190212][T24522] _copy_to_user+0x20/0xa0 [ 367.190237][T24522] simple_read_from_buffer+0xb5/0x130 [ 367.190340][T24522] proc_fail_nth_read+0x10e/0x150 [ 367.190372][T24522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.190404][T24522] vfs_read+0x1ab/0x7f0 [ 367.190480][T24522] ? __rcu_read_unlock+0x4e/0x70 [ 367.190514][T24522] ? __fget_files+0x184/0x1c0 [ 367.190540][T24522] ? mutex_lock+0x57/0x90 [ 367.190566][T24522] ksys_read+0xdc/0x1a0 [ 367.190586][T24522] __x64_sys_read+0x40/0x50 [ 367.190653][T24522] x64_sys_call+0x2889/0x3000 [ 367.190682][T24522] do_syscall_64+0xc0/0x2a0 [ 367.190716][T24522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.190742][T24522] RIP: 0033:0x7fc080f8b78e [ 367.190779][T24522] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 367.190801][T24522] RSP: 002b:00007fc07fa26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 367.190827][T24522] RAX: ffffffffffffffda RBX: 00007fc07fa276c0 RCX: 00007fc080f8b78e [ 367.190842][T24522] RDX: 000000000000000f RSI: 00007fc07fa270a0 RDI: 0000000000000005 [ 367.190865][T24522] RBP: 00007fc07fa27090 R08: 0000000000000000 R09: 0000000000000000 [ 367.190880][T24522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 367.190895][T24522] R13: 00007fc081246038 R14: 00007fc081245fa0 R15: 00007ffef2880ab8 [ 367.190917][T24522] [ 367.230598][T24485] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.402467][T24485] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.420197][T24527] xt_hashlimit: size too large, truncated to 1048576 [ 367.554992][T24485] bridge_slave_0: entered allmulticast mode [ 367.578273][T24485] bridge_slave_0: entered promiscuous mode [ 367.595323][T24485] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.602432][T24485] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.631313][T24485] bridge_slave_1: entered allmulticast mode [ 367.642075][T24485] bridge_slave_1: entered promiscuous mode [ 367.741146][T24547] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 367.741146][T24547] program syz.7.6880 not setting count and/or reply_len properly [ 367.756107][T24548] loop2: detected capacity change from 0 to 128 [ 367.770798][T24485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.785575][T24535] bridge0: entered promiscuous mode [ 367.796579][T10333] bridge_slave_1: left allmulticast mode [ 367.802341][T10333] bridge_slave_1: left promiscuous mode [ 367.808070][T10333] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.834046][T10333] bridge_slave_0: left promiscuous mode [ 367.839905][T10333] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.867469][T10333] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 367.880256][T10333] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 367.989174][T10333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.001600][T10333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.017861][T10333] bond0 (unregistering): Released all slaves [ 368.025693][T10333] bond1 (unregistering): Released all slaves [ 368.041107][T10333] bond2 (unregistering): Released all slaves [ 368.049812][T10333] bond3 (unregistering): Released all slaves [ 368.068744][T24485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.107557][T10333] tipc: Left network mode [ 368.124973][T10333] hsr_slave_0: left promiscuous mode [ 368.130781][T10333] hsr_slave_1: left promiscuous mode [ 368.136345][T10333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.144540][T10333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.269356][ T10] lo speed is unknown, defaulting to 1000 [ 368.269446][T24576] tipc: Enabled bearer , priority 0 [ 368.275182][ T10] infiniband syz2: ib_query_port failed (-19) [ 368.293006][T24485] team0: Port device team_slave_0 added [ 368.303731][T24485] team0: Port device team_slave_1 added [ 368.320671][T24560] syzkaller0: entered promiscuous mode [ 368.326311][T24560] syzkaller0: entered allmulticast mode [ 368.350983][T24485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.358008][T24485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.383962][T24485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.405033][T24560] tipc: Resetting bearer [ 368.411804][T24485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.418876][T24485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.444880][T24485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.480068][T24559] tipc: Resetting bearer [ 368.486599][T24559] tipc: Disabling bearer [ 368.591016][T24485] hsr_slave_0: entered promiscuous mode [ 368.630421][T24485] hsr_slave_1: entered promiscuous mode [ 368.664231][T10333] IPVS: stop unused estimator thread 0... [ 368.830016][ T29] audit: type=1326 audit(1769992345.476:4485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24596 comm="syz.3.6889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc080fcaeb9 code=0x7fc00000 [ 368.843995][T24620] loop7: detected capacity change from 0 to 512 [ 368.912804][T24620] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.6894: corrupted in-inode xattr: invalid ea_ino [ 368.957270][T24620] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.6894: couldn't read orphan inode 15 (err -117) [ 368.985336][T24620] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.015785][T24636] Unsupported ieee802154 address type: 0 [ 369.050690][T24485] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 369.058708][T24636] loop9: detected capacity change from 0 to 1024 [ 369.069694][T24485] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 369.090345][T24636] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 369.102317][T24485] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 369.115991][T24485] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 369.147369][T24636] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.6896: Invalid block bitmap block 0 in block_group 0 [ 369.161340][T24636] Quota error (device loop9): write_blk: dquota write failed [ 369.168881][T24636] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 369.180067][T24636] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.6896: Failed to acquire dquot type 0 [ 369.210800][T24636] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.6896: Freeing blocks not in datazone - block = 0, count = 4096 [ 369.247575][T24636] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.6896: Invalid inode bitmap blk 0 in block_group 0 [ 369.260615][T24636] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 369.270011][ T12] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-7 [ 369.279032][ T12] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 369.337622][T24636] EXT4-fs (loop9): 1 orphan inode deleted [ 369.344124][T24636] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.354222][T24485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.366594][T15637] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.376304][T24636] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.380548][T24485] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.401259][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.408586][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.437343][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.444439][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.452594][ T29] audit: type=1326 audit(1769992346.096:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24596 comm="syz.3.6889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc080fcaeb9 code=0x7fc00000 [ 369.564423][ T29] audit: type=1326 audit(1769992346.196:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24669 comm="syz.7.6901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df371aeb9 code=0x7ffc0000 [ 369.588158][ T29] audit: type=1326 audit(1769992346.196:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24669 comm="syz.7.6901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3df371aeb9 code=0x7ffc0000 [ 369.611804][ T29] audit: type=1326 audit(1769992346.196:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24669 comm="syz.7.6901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df371aeb9 code=0x7ffc0000 [ 369.635615][ T29] audit: type=1326 audit(1769992346.196:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24669 comm="syz.7.6901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3df371aeb9 code=0x7ffc0000 [ 369.659738][ T29] audit: type=1326 audit(1769992346.196:4491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24669 comm="syz.7.6901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df371aeb9 code=0x7ffc0000 [ 369.782571][T24695] __nla_validate_parse: 5 callbacks suppressed [ 369.782590][T24695] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6905'. [ 369.807230][T24485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.889089][T24711] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 369.889089][T24711] program syz.9.6908 not setting count and/or reply_len properly [ 369.923272][T24715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6909'. [ 370.029346][T24727] loop3: detected capacity change from 0 to 1024 [ 370.063089][T24727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.112003][T24485] veth0_vlan: entered promiscuous mode [ 370.122359][T24485] veth1_vlan: entered promiscuous mode [ 370.123167][T23670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.135318][T24485] veth0_macvtap: entered promiscuous mode [ 370.157619][T24485] veth1_macvtap: entered promiscuous mode [ 370.228818][T24485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.237136][T24753] FAULT_INJECTION: forcing a failure. [ 370.237136][T24753] name failslab, interval 1, probability 0, space 0, times 0 [ 370.249936][T24753] CPU: 1 UID: 0 PID: 24753 Comm: syz.3.6912 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 370.250038][T24753] Tainted: [W]=WARN [ 370.250046][T24753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 370.250060][T24753] Call Trace: [ 370.250068][T24753] [ 370.250077][T24753] __dump_stack+0x1d/0x30 [ 370.250106][T24753] dump_stack_lvl+0x95/0xd0 [ 370.250132][T24753] dump_stack+0x15/0x1b [ 370.250168][T24753] should_fail_ex+0x263/0x280 [ 370.250206][T24753] should_failslab+0x8c/0xb0 [ 370.250237][T24753] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 370.250293][T24753] ? __alloc_skb+0x2f0/0x4b0 [ 370.250385][T24753] __alloc_skb+0x2f0/0x4b0 [ 370.250414][T24753] ? __alloc_skb+0x219/0x4b0 [ 370.250448][T24753] netlink_alloc_large_skb+0xbf/0xf0 [ 370.250521][T24753] netlink_sendmsg+0x40c/0x6f0 [ 370.250547][T24753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.250573][T24753] ____sys_sendmsg+0x5af/0x600 [ 370.250605][T24753] ___sys_sendmsg+0x195/0x1e0 [ 370.250634][T24753] __x64_sys_sendmsg+0xd4/0x160 [ 370.250681][T24753] x64_sys_call+0x17ba/0x3000 [ 370.250710][T24753] do_syscall_64+0xc0/0x2a0 [ 370.250773][T24753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.250843][T24753] RIP: 0033:0x7fc080fcaeb9 [ 370.250864][T24753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.250884][T24753] RSP: 002b:00007fc07fa27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.250910][T24753] RAX: ffffffffffffffda RBX: 00007fc081245fa0 RCX: 00007fc080fcaeb9 [ 370.250927][T24753] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000005 [ 370.250955][T24753] RBP: 00007fc07fa27090 R08: 0000000000000000 R09: 0000000000000000 [ 370.250970][T24753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.250986][T24753] R13: 00007fc081246038 R14: 00007fc081245fa0 R15: 00007ffef2880ab8 [ 370.251011][T24753] [ 370.262288][T24485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.381331][T24744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.477940][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.491291][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.550723][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.586914][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.600818][T24774] netlink: 792 bytes leftover after parsing attributes in process `syz.3.6919'. [ 370.610000][T24774] netlink: 792 bytes leftover after parsing attributes in process `syz.3.6919'. [ 370.610078][T24744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.619122][T24774] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6919'. [ 370.665380][T24760] FAULT_INJECTION: forcing a failure. [ 370.665380][T24760] name failslab, interval 1, probability 0, space 0, times 0 [ 370.678234][T24760] CPU: 0 UID: 0 PID: 24760 Comm: syz.7.6907 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 370.678275][T24760] Tainted: [W]=WARN [ 370.678284][T24760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 370.678298][T24760] Call Trace: [ 370.678306][T24760] [ 370.678317][T24760] __dump_stack+0x1d/0x30 [ 370.678408][T24760] dump_stack_lvl+0x95/0xd0 [ 370.678429][T24760] dump_stack+0x15/0x1b [ 370.678453][T24760] should_fail_ex+0x263/0x280 [ 370.678483][T24760] should_failslab+0x8c/0xb0 [ 370.678572][T24760] kmem_cache_alloc_noprof+0x68/0x490 [ 370.678602][T24760] ? do_timer_create+0x17a/0x980 [ 370.678695][T24760] do_timer_create+0x17a/0x980 [ 370.678722][T24760] ? mutex_lock+0x57/0x90 [ 370.678750][T24760] __x64_sys_timer_create+0xb9/0xe0 [ 370.678857][T24760] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 370.678880][T24760] x64_sys_call+0x29c8/0x3000 [ 370.679005][T24760] do_syscall_64+0xc0/0x2a0 [ 370.679109][T24760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.679201][T24760] RIP: 0033:0x7f3df371aeb9 [ 370.679299][T24760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.679318][T24760] RSP: 002b:00007f3df2135028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 370.679341][T24760] RAX: ffffffffffffffda RBX: 00007f3df3996180 RCX: 00007f3df371aeb9 [ 370.679356][T24760] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 370.679452][T24760] RBP: 00007f3df2135090 R08: 0000000000000000 R09: 0000000000000000 [ 370.679466][T24760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.679478][T24760] R13: 00007f3df3996218 R14: 00007f3df3996180 R15: 00007ffe043a3bf8 [ 370.679566][T24760] [ 370.882148][T24744] bond1: Unable to set up delay as MII monitoring is disabled [ 370.891044][T24744] bond1 (unregistering): Released all slaves [ 370.917057][T24782] loop3: detected capacity change from 0 to 512 [ 371.056433][T24791] netlink: 34 bytes leftover after parsing attributes in process `syz.6.6922'. [ 371.150159][T24782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.228138][T24782] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.381770][T24782] sctp: [Deprecated]: syz.3.6921 (pid 24782) Use of int in maxseg socket option. [ 371.381770][T24782] Use struct sctp_assoc_value instead [ 371.443089][T24796] xt_hashlimit: size too large, truncated to 1048576 [ 371.506734][T24782] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 371.801124][T23670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.885116][T24821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.893766][T24821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.904634][T24821] ref_ctr_offset mismatch. inode: 0x214 offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 371.988277][T24825] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 372.111614][T24828] netlink: 204 bytes leftover after parsing attributes in process `syz.2.6933'. [ 372.154044][T24832] xt_hashlimit: size too large, truncated to 1048576 [ 372.173663][T24838] loop2: detected capacity change from 0 to 164 [ 372.358823][T24855] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 372.358823][T24855] program syz.7.6942 not setting count and/or reply_len properly [ 372.410810][T24851] usb usb7: usbfs: process 24851 (syz.2.6940) did not claim interface 1 before use [ 372.622530][T24869] netlink: 204 bytes leftover after parsing attributes in process `syz.6.6947'. [ 372.736361][T24877] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6951'. [ 372.745413][T24877] tipc: Enabling of bearer rejected, media not registered [ 372.784797][T24883] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 372.784797][T24883] program syz.3.6954 not setting count and/or reply_len properly [ 372.816719][T24887] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6956'. [ 373.376533][T24927] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 373.376533][T24927] program syz.7.6970 not setting count and/or reply_len properly [ 374.274529][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 374.274549][ T29] audit: type=1400 audit(1769992350.916:4515): avc: denied { listen } for pid=25006 comm="syz.2.6992" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 374.321432][T25012] can: request_module (can-proto-0) failed. [ 374.383311][ T29] audit: type=1400 audit(1769992351.006:4516): avc: denied { read } for pid=25006 comm="syz.2.6992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 374.402852][ T29] audit: type=1400 audit(1769992351.006:4517): avc: denied { create } for pid=25006 comm="syz.2.6992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 374.502548][T25012] wireguard0: entered promiscuous mode [ 374.509566][T25012] wireguard0: entered allmulticast mode [ 374.520981][T25026] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.521487][ T29] audit: type=1400 audit(1769992351.126:4518): avc: denied { accept } for pid=25025 comm="syz.7.6997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 375.108455][T25065] syzkaller0: entered promiscuous mode [ 375.113984][T25065] syzkaller0: entered allmulticast mode [ 375.284272][T25075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5635 sclass=netlink_route_socket pid=25075 comm=syz.2.7011 [ 375.875014][T25092] can: request_module (can-proto-0) failed. [ 375.965239][T25092] wireguard0: entered promiscuous mode [ 375.971709][T25092] wireguard0: entered allmulticast mode [ 376.056516][ T29] audit: type=1400 audit(1769992352.696:4519): avc: denied { connect } for pid=25108 comm="syz.3.7025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 376.270844][T25135] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 376.270844][T25135] program syz.7.7035 not setting count and/or reply_len properly [ 376.517329][ T29] audit: type=1400 audit(1769992353.156:4520): avc: denied { write } for pid=25141 comm="syz.7.7038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 376.708425][T25156] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 376.716371][T25156] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 376.725819][T10328] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.740739][T25156] loop2: detected capacity change from 0 to 512 [ 376.749352][T25156] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 376.770180][T25156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.793543][T10328] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.805663][T25156] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.877911][T10328] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.889224][ T29] audit: type=1400 audit(1769992353.536:4521): avc: denied { map } for pid=25155 comm="syz.2.7042" path="/238/file0/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 376.930676][T20854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.935672][ T29] audit: type=1400 audit(1769992353.546:4522): avc: denied { setattr } for pid=25155 comm="syz.2.7042" name="cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 376.980137][T10328] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.108720][T25181] can: request_module (can-proto-0) failed. [ 377.109201][T10328] bridge_slave_1: left promiscuous mode [ 377.120668][T10328] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.140952][T10328] bridge_slave_0: left promiscuous mode [ 377.146757][T10328] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.207838][T25195] xt_hashlimit: size too large, truncated to 1048576 [ 377.284705][T10328] bond1 (unregistering): Released all slaves [ 377.368535][T25181] wireguard0: entered promiscuous mode [ 377.374516][T25181] wireguard0: entered allmulticast mode [ 377.406794][T25186] syz_tun: entered allmulticast mode [ 377.421104][T10328] tipc: Left network mode [ 377.438565][T10328] hsr_slave_0: left promiscuous mode [ 377.449001][T10328] hsr_slave_1: left promiscuous mode [ 377.464638][T25210] xt_hashlimit: size too large, truncated to 1048576 [ 377.471936][T10328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.537802][T10328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.654048][T10328] team0 (unregistering): Port device team_slave_1 removed [ 377.674221][T10328] team0 (unregistering): Port device team_slave_0 removed [ 377.762489][T25157] chnl_net:caif_netlink_parms(): no params data found [ 377.775626][T25218] __nla_validate_parse: 10 callbacks suppressed [ 377.775646][T25218] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7052'. [ 377.791045][T25218] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7052'. [ 377.907781][T25157] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.914915][T25157] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.922405][T25157] bridge_slave_0: entered allmulticast mode [ 377.929278][T25157] bridge_slave_0: entered promiscuous mode [ 377.940841][T25233] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7053'. [ 377.960519][T25157] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.967854][T25157] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.985201][T25157] bridge_slave_1: entered allmulticast mode [ 378.006031][T25157] bridge_slave_1: entered promiscuous mode [ 378.012475][T25236] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7053'. [ 378.064472][T25157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.090460][T25157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.125177][T25157] team0: Port device team_slave_0 added [ 378.132883][T25157] team0: Port device team_slave_1 added [ 378.143355][T10328] IPVS: stop unused estimator thread 0... [ 378.171725][T25157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.178830][T25157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.204851][T25157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.240882][T25260] netlink: 204 bytes leftover after parsing attributes in process `syz.6.7061'. [ 378.305861][T25268] netlink: 316 bytes leftover after parsing attributes in process `syz.3.7063'. [ 378.316721][T25157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.323779][T25157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.349772][T25157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.380160][T25275] loop2: detected capacity change from 0 to 2048 [ 378.399424][T25271] can: request_module (can-proto-0) failed. [ 378.438313][T25275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.490101][T25287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7066'. [ 378.505157][ T29] audit: type=1326 audit(1769992355.146:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25286 comm="syz.3.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc080fcaeb9 code=0x7ffc0000 [ 378.528837][ T29] audit: type=1326 audit(1769992355.146:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25286 comm="syz.3.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc080fcaeb9 code=0x7ffc0000 [ 378.573298][T25271] wireguard0: entered promiscuous mode [ 378.588703][T25271] wireguard0: entered allmulticast mode [ 378.632812][T25157] hsr_slave_0: entered promiscuous mode [ 378.639030][T25157] hsr_slave_1: entered promiscuous mode [ 378.644842][T25157] debugfs: 'hsr0' already exists in 'hsr' [ 378.650626][T25157] Cannot create hsr debugfs directory [ 378.731027][T20854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.229251][T25157] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 379.270750][T25157] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 379.278308][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 379.278326][ T29] audit: type=1326 audit(1769992355.926:4844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25286 comm="syz.3.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc080f8b78e code=0x7ffc0000 [ 379.312619][ T29] audit: type=1326 audit(1769992355.956:4845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25286 comm="syz.3.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc080f8b78e code=0x7ffc0000 [ 379.319773][T25157] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 379.336139][ T29] audit: type=1326 audit(1769992355.956:4846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25286 comm="syz.3.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc080f8b78e code=0x7ffc0000 [ 379.447725][T25157] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 379.466070][ T29] audit: type=1326 audit(1769992355.966:4847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25286 comm="syz.3.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc080fcaeb9 code=0x7ffc0000 [ 379.489675][ T29] audit: type=1326 audit(1769992356.006:4848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25286 comm="syz.3.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc080fcaeb9 code=0x7ffc0000 [ 379.626276][T25157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.673570][T25387] can0: slcan on ttyS3. [ 379.683726][T25157] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.715391][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.722579][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.751703][T25398] netlink: 12900 bytes leftover after parsing attributes in process `syz.9.7082'. [ 379.761353][T25387] can0 (unregistered): slcan off ttyS3. [ 379.781595][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.788795][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.808952][T25403] sg_write: data in/out 196864/128 bytes for SCSI command 0x0-- guessing data in; [ 379.808952][T25403] program syz.6.7085 not setting count and/or reply_len properly [ 379.886924][T25157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.969233][T25415] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7090'. [ 379.978331][T25415] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7090'. [ 379.988626][T25421] loop2: detected capacity change from 0 to 128 [ 380.264153][T25157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.365713][T25449] loop3: detected capacity change from 0 to 512 [ 380.387998][T25449] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7098: bg 0: block 393: padding at end of block bitmap is not set [ 380.388152][T25449] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 380.388426][T25449] EXT4-fs (loop3): 2 truncates cleaned up [ 380.388981][T25449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.442895][T25453] netlink: 'syz.9.7099': attribute type 2 has an invalid length. [ 380.444079][T23670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.468557][T25453] batadv_slave_0: entered promiscuous mode [ 380.473010][T25453] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.529146][T25453] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.570446][T25453] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.582632][T25457] netlink: 'syz.3.7100': attribute type 1 has an invalid length. [ 380.604856][T25457] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 380.604881][T25457] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 380.607202][T25457] bond1: (slave ip6gre2): making interface the new active one [ 380.607600][T25457] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 380.609320][T25457] 9pnet_fd: p9_fd_create_unix (25457): problem connecting socket: ./file1: -1 [ 380.609554][T25457] bond1: option fail_over_mac: unable to set because the bond device has slaves [ 380.621599][T25453] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.701859][ T12] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.701930][ T12] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.711003][T10323] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.711048][T10323] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.737157][T25453] batadv_slave_0: left promiscuous mode [ 380.773497][T25157] veth0_vlan: entered promiscuous mode [ 380.775656][T25157] veth1_vlan: entered promiscuous mode [ 380.838120][T25157] veth0_macvtap: entered promiscuous mode [ 380.840424][T25157] veth1_macvtap: entered promiscuous mode [ 380.857461][T25157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.870593][T25157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.972245][T10328] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.990141][T10328] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.023325][T10328] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.032375][T10328] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.062205][T25478] loop9: detected capacity change from 0 to 256 [ 381.069265][T25478] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 381.098218][T25478] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 381.319763][T25497] loop9: detected capacity change from 0 to 128 [ 381.377553][ T29] audit: type=1400 audit(1769994918.023:4849): avc: denied { mounton } for pid=25496 comm="syz.9.7114" path="/133/file1/bus" dev="loop9" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 381.441359][ T29] audit: type=1400 audit(1769994918.063:4850): avc: denied { unmount } for pid=22930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 381.481959][T25482] tipc: Started in network mode [ 381.486888][T25482] tipc: Node identity 6a13d87c2564, cluster identity 4711 [ 381.487169][T25507] loop2: detected capacity change from 0 to 1024 [ 381.494192][T25482] tipc: Enabled bearer , priority 0 [ 381.510060][T25482] syzkaller0: entered promiscuous mode [ 381.515558][T25482] syzkaller0: entered allmulticast mode [ 381.572094][T25482] tipc: Resetting bearer [ 381.579463][T25507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.612035][T25481] tipc: Resetting bearer [ 381.625885][T25481] tipc: Disabling bearer [ 381.779720][ T29] audit: type=1326 audit(1769994918.423:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25498 comm="syz.2.7115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb344faeb9 code=0x7ffc0000 [ 381.803670][ T29] audit: type=1326 audit(1769994918.423:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25498 comm="syz.2.7115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb344faeb9 code=0x7ffc0000 [ 381.827267][ T29] audit: type=1326 audit(1769994918.423:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25498 comm="syz.2.7115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb344faeb9 code=0x7ffc0000 [ 381.894316][T25522] loop9: detected capacity change from 0 to 512 [ 382.098128][T25525] hsr_slave_1 (unregistering): left promiscuous mode [ 382.505256][T20854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.653744][T25522] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 382.690943][T25522] EXT4-fs warning (device loop9): read_mmp_block:111: Error -74 while reading MMP block 17 [ 382.807626][T25571] netlink: 'syz.3.7136': attribute type 1 has an invalid length. [ 382.834400][T25565] __nla_validate_parse: 84 callbacks suppressed [ 382.834478][T25565] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7135'. [ 382.838425][T25570] can: request_module (can-proto-0) failed. [ 382.887387][T25565] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.894757][T25565] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.988603][T25565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.009377][T25565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.155907][T25570] wireguard0: entered promiscuous mode [ 383.163532][T25570] wireguard0: entered allmulticast mode [ 383.234304][T25582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7140'. [ 383.252686][T10323] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.262584][T10323] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.282875][T10323] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.293490][T10323] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.374184][T25586] ================================================================== [ 383.382306][T25586] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 383.389683][T25586] [ 383.392013][T25586] write to 0xffff8881121fe000 of 4096 bytes by task 25585 on cpu 1: [ 383.400170][T25586] _copy_from_iter+0x106/0xea0 [ 383.404940][T25586] copy_page_from_iter+0x178/0x2a0 [ 383.410057][T25586] process_vm_rw+0x6ad/0x9c0 [ 383.414715][T25586] __x64_sys_process_vm_writev+0x78/0x90 [ 383.420440][T25586] x64_sys_call+0x27ef/0x3000 [ 383.425133][T25586] do_syscall_64+0xc0/0x2a0 [ 383.429735][T25586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.435723][T25586] [ 383.438051][T25586] write to 0xffff8881121fe000 of 4096 bytes by task 25586 on cpu 0: [ 383.446030][T25586] _copy_from_iter+0x106/0xea0 [ 383.450796][T25586] copy_page_from_iter+0x178/0x2a0 [ 383.455914][T25586] process_vm_rw+0x6ad/0x9c0 [ 383.460509][T25586] __x64_sys_process_vm_writev+0x78/0x90 [ 383.466150][T25586] x64_sys_call+0x27ef/0x3000 [ 383.470840][T25586] do_syscall_64+0xc0/0x2a0 [ 383.475531][T25586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.481430][T25586] [ 383.483762][T25586] Reported by Kernel Concurrency Sanitizer on: [ 383.490092][T25586] CPU: 0 UID: 0 PID: 25586 Comm: syz.9.7141 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 383.501564][T25586] Tainted: [W]=WARN [ 383.505369][T25586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 383.515427][T25586] ==================================================================