last executing test programs: 9m33.504318449s ago: executing program 32 (id=82): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x0, &(0x7f0000000f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000100)=@tipc, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/215, 0xd7}, {&(0x7f00000003c0)=""/165, 0xa5}], 0x2, &(0x7f0000000480)=""/146, 0x92}, 0x5}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)=""/155, 0x9b}, {&(0x7f0000000600)=""/223, 0xdf}, {&(0x7f0000000700)=""/209, 0xd1}, {&(0x7f0000000800)=""/215, 0xd7}, {&(0x7f0000000200)=""/79, 0x4f}], 0x5, &(0x7f0000000980)=""/231, 0xe7}, 0x6}, {{&(0x7f0000000a80)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b00)=""/201, 0xc9}, {&(0x7f0000000c00)=""/58, 0x3a}, {&(0x7f0000001980)=""/4096, 0x1000}], 0x3, &(0x7f0000000c80)}, 0x8}, {{&(0x7f0000000cc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000d40)=""/110, 0x6e}], 0x1}, 0x3}], 0x4, 0x40000000, &(0x7f0000000f40)={r3, r4+10000000}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) rename(0x0, &(0x7f00000001c0)='./file1\x00') 9m17.200342686s ago: executing program 33 (id=225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x22000000, 0x0, 0x4}, 0x4000004) 9m5.081937076s ago: executing program 34 (id=308): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r5, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x4058534c, &(0x7f00000003c0)={0x80, 0x1, {0x3, 0x3, 0x8b2c, 0x3, 0x2c7}}) tkill(r4, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f00000000c0)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c0000001000000000000064f351cdf519edee68d4af439da656d888163f155cabd4ca85a8ac227bc6adc27de9fcff7eac54e5b977bfa5c327be0a3671f6c7f2fa0a055b4adb09c10921a32b3a2642a8368665ace366c2634cbb2a764ba3522316af9e0b55298d1dec80815e02314fe50e24f97fbe5003813db737", @ANYBLOB="86afb664b6cb8879f38163a2d51723db167f25baf9d25af2f2f43568e2d07df8873310af2ba5a2c97b0c888a693155cf2bed0b68c7d0efdacc71a00dfa0a3bdd90c46a243031e43bf88e49ddb727776fb29a226c7adfdaf49ad7a6b70df846d135c1", @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) mlockall(0x2) syz_clone3(&(0x7f0000000380)={0x20000, 0x0, 0x0, 0x0, {0x26}, &(0x7f0000000200), 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000361000/0x2000)=nil, 0x2000, 0x300000a, 0x769f00b363895638, 0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="10002abd7000ffdbdf251000000008000600ffff00003c00028006000f000200000006000f00f70000000800060004000000080006000700000006000e004e200000080005000600000008000700ab0d000060000380060007004e2400000800010001000000080003000400000005000800dd000000050008000c000000060007004e20000008000100010000000600040006000000060007004e22000014000600fc00000000000000000000000000000008000500d90c0000080005000000000008000400fcffffff"], 0xd0}, 0x1, 0x0, 0x0, 0x20048800}, 0x4041) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff2}}}, 0x24}}, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYRES16=r5, @ANYRES32=r9, @ANYRESHEX=r3, @ANYRES32=r5, @ANYRES16=r4, @ANYRES32=r2, @ANYRES8=r2, @ANYRESOCT, @ANYRESOCT=r2], &(0x7f0000000340)='syzkaller\x00', 0x4000, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r10, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r11, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) 6m22.850290165s ago: executing program 35 (id=1607): r0 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet6(0xa, 0x2, 0x0) ioprio_set$pid(0x1, 0x0, 0x3b3f1ec3947bf799) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000440)=0x1, 0x4) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600), 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0xa, 0x801, 0x0) getsockopt(r5, 0x29, 0x46, 0x0, &(0x7f0000001ffc)) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001d0005"], 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x6, 0x40, 0x1, 0x9, 0x7fffffffffffffff, 0xffffffffffffffff}) prlimit64(r6, 0xf, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x206000, 0x108) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xc9, @local, 0x5}, r8}}, 0x30) 5m15.428237947s ago: executing program 8 (id=2092): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46800c060001000000010000000200060001000000dd000000380000004503000008000000010020000005"], 0x58) set_mempolicy(0x3, &(0x7f0000000380)=0x3, 0x9) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 5m15.395144669s ago: executing program 8 (id=2093): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46800c060001000000010000000200060001000000dd000000380000004503000008000000010020000005"], 0x58) set_mempolicy(0x3, &(0x7f0000000380)=0x3, 0x9) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (fail_nth: 1) 5m14.983429402s ago: executing program 8 (id=2095): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x80000) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) 5m13.85182607s ago: executing program 8 (id=2098): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x4, 0x2, 0x6, 0x8, 0x7, 0x3, 0x20000000ffe, 0xf64, 0xffeffffc}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) stat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000500)='./file1\x00', r2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r4, r4) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000300)=@rnullb, r4, 0x0) r5 = syz_clone(0x1240000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r7 = syz_open_procfs(r5, &(0x7f0000000100)='map_files\x00') fchdir(r7) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x6, 0xc, 0x0, 0x3, 0x3}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x143000, 0xd8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x10001, 0xfffffffd, 0x3, 0xabca, 0x85, 0x100, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) inotify_add_watch(r6, &(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000004c0)={r9, 0x3, 0x6}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r9, {0x7, 0xa}, {0xfff2, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060088"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 5m13.296058629s ago: executing program 8 (id=2102): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1018ed8, &(0x7f0000000000), 0x0, 0x659, &(0x7f00000013c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x21f7}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7fff}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 5m12.787402646s ago: executing program 8 (id=2104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0xa040) r3 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa88000301"], 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32], 0x13) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1000, 0x6}, 0x6025, 0x4005, 0x14, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "a0d4f1ce8917c63d", "39db3a935c83f966a1f6ac19ee147c3c", "7d31a028", "bc19715f01808a0c"}, 0x28) syz_emit_ethernet(0x76, &(0x7f00000004c0)={@broadcast, @random='\x00\x00B\f\x00', @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @mcast2, [@hopopts={0x11}], "fafb17c133d11e59"}}}}}}}, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x2, 0x80, 0x6, r7}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xfc}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4810}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee8, 0x8031, 0xffffffffffffffff, 0x17440000) io_uring_setup(0x2929, &(0x7f0000000180)={0x0, 0x5e60, 0x8, 0x0, 0x194}) r8 = eventfd2(0x0, 0x0) write$eventfd(r8, &(0x7f0000000280)=0x9, 0x8) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x6) semget(0x2, 0x1, 0x5a2) 5m12.781449287s ago: executing program 36 (id=2104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0xa040) r3 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa88000301"], 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32], 0x13) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1000, 0x6}, 0x6025, 0x4005, 0x14, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "a0d4f1ce8917c63d", "39db3a935c83f966a1f6ac19ee147c3c", "7d31a028", "bc19715f01808a0c"}, 0x28) syz_emit_ethernet(0x76, &(0x7f00000004c0)={@broadcast, @random='\x00\x00B\f\x00', @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @mcast2, [@hopopts={0x11}], "fafb17c133d11e59"}}}}}}}, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x2, 0x80, 0x6, r7}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xfc}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4810}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee8, 0x8031, 0xffffffffffffffff, 0x17440000) io_uring_setup(0x2929, &(0x7f0000000180)={0x0, 0x5e60, 0x8, 0x0, 0x194}) r8 = eventfd2(0x0, 0x0) write$eventfd(r8, &(0x7f0000000280)=0x9, 0x8) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x6) semget(0x2, 0x1, 0x5a2) 3m46.440783044s ago: executing program 2 (id=2607): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x958b4000) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}]}, &(0x7f0000000180)=0x10) mlock(&(0x7f0000040000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0)={r2, 0x10, "886b8a6cc9700d43a4484d7e0b798e25"}, &(0x7f0000000340)=0x18) r3 = socket$netlink(0x10, 0x3, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 3m45.517115516s ago: executing program 2 (id=2620): socket$nl_sock_diag(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x5, 0x80000000, 0x0, 0xe06, 0xa0, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0xc, 0x81}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x6, 0xf7, 0x4, 0x56}, {0x0, 0x95, 0x0, 0xd247}]}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) syz_open_procfs(r1, &(0x7f0000000080)='attr/fscreate\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f40)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x20000040) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r5, 0x0) 3m44.49597024s ago: executing program 2 (id=2632): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) 3m44.4885353s ago: executing program 2 (id=2634): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1217, &(0x7f0000002200)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) (async) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async, rerun: 64) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) (rerun: 64) listxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)=""/126, 0x7e) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 3m44.349412865s ago: executing program 2 (id=2638): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f00000000c0)="c0e092bd35984c99456ed54dc02c8e791d7b92d4a008dfbc6cf475cc150e1d034f334ab5266eb2f3e08bccdf837210722f4d534eef5310285e35396a3b93087ab184e13f358eee0acf7e", &(0x7f0000000140)=""/99}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) 3m44.055227224s ago: executing program 2 (id=2643): ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0xaf51, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) stat(0x0, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000540)={0xc, 0x6, 0x42, 0x0, 0x1}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa1000000000000070100"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472613de626681f0d0c93ddfe0000", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',cache=none,\x00']) (async) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x125) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x43, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[], 0x1, 0x219, &(0x7f0000000440)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) socket(0x10, 0x3, 0x0) 3m44.021863876s ago: executing program 37 (id=2643): ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0xaf51, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) stat(0x0, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000540)={0xc, 0x6, 0x42, 0x0, 0x1}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa1000000000000070100"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472613de626681f0d0c93ddfe0000", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',cache=none,\x00']) (async) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x125) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="6000000001010200000000000000090a0000000c0019800800000000000000380002802c00018014000300fe80000000000000000000000000000000000003ff0100000000000000000000000000010600034000000000060012400002261663fbb92065a7dab1c062000000745936d75db2ef74d9bdf5763a3712fef33979225a167ba2d6da2742d440e1d60915841d3511bd40b93fc7a2cfbcf524f58986bf9e21013c760443f760e98c1b827fd31ed6ed168da72a5498cd97a8f0de5024ceb62a035abaf19983b4e8518232226a2bd4808b7059a55c9b95e8be2363683844be4237226a31762cb6136a81af4a4844b20e4b8d86e2f1937be0587356971f988cfed51d"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x43, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[], 0x1, 0x219, &(0x7f0000000440)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) socket(0x10, 0x3, 0x0) 3m4.847052275s ago: executing program 1 (id=2885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x5}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/rpc\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x138, r2, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x124, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x30516c91}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffff81}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffff81}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5a5}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x100}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8001}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8045}, 0x0) 3m4.67982427s ago: executing program 1 (id=2886): pipe(0x0) lstat(&(0x7f0000000100)='./file0\x00', 0x0) setreuid(0x0, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) write$P9_RGETLOCK(r0, &(0x7f0000000000)={0x28, 0x37, 0x1, {0x2, 0x5, 0x9, r1, 0xa, 'syzkaller\x00'}}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) 3m3.769946881s ago: executing program 1 (id=2888): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x509, &(0x7f0000000600)="$eJzs3F9oVfcdAPDvuTeJMdFFxzaGky2wP4RNk2nc9MHB8ubYmGwK28Negol/8EadydgSxsjeZO5Bhri2QlFKoZQWAuqDfSpU2pdCwfahD9JCH1pqSa0mLUhbbzn3j94kN7HGJEe8nw+ce36/372X3/fcL99z7zn5kQAaVmf6kESsiYi3IqKj3J35gs7y7kzvxMF0S6JY3HMjKb1uvHfiYPWl1fe1pw+5iK6IuHolifamufMOj44d7i8UBo9X+j0jQ8d6hkfHNh8a6j8weGDwSO+OX2zdtmP79iU81v//d8f/nnrtNz3PvD401f7xnw8k8evScces41gqndE587OsSiJ6lnqyjH27pp3UyTePnovJjzbnIyJNV3Op/jsiH+Xkta/9y62OGPvJfO+9svvpD1cyVmDpFYvF4vzPdhSBx1kSWUcAZKP6TZ9e/1a3FfrpEZf/uVIzMZ/JvvIF4Hjl3s6Zu/lvilxp31q6NmybSqL2sj6Zdc2/GOd3RXTGs8+dOruxLd1ime7D8GiaeC/rCMhSy7asIyBLG/6QdQRk6Y0TWUdAlt6czDoCsvTHPVlHQJZ+/8usIyBLZ29kHQEv90XEpnr3/3LxndK+tfQ4+/5Pe0Tl+cX7/qaIzvjur2rH5t7/yV1/yGlYwGRfxM6atV1navJfsS5f6a1NO9Gc7D9UGPx5RHwjIrqieVXa37LAHP/66fuf1Rv/9Fia/8GOXX/vWl3d0vnT/b1X5a43rZr5voH+kf6HPW7KJv8dsaGpXv6r9d5autfbNpWbc/+3WNmn25cLzPHSnRferje+81qa/1uHFs4/y6l4PuLHdev/3srFZKH1mT2ls0FP9ZxQz5Mvvlv3qdGTaf7PnZb/7KT137Zw/kvn/7vrdYcffI5LJyeu1p37XJr/1guLOf+3JHtLAbZUxv7RPzJyfEtES/K7ueNbHzzmx1X186h+Xmn+u35Y//v/m6V99fyfn3P+v1PZp+O3K2tI0/bNyq/G9LnpiPjB9z6/VC+WD15N8//JK6fObmxT/9lI8z9wn/pPZtT/gzf+c/FPhXpz9z2R5v+j3dW//6ZbOn/1b8Flaf1vKwXTVRnx++/+vm6Cso4TAAAAAAAAgKWRi4g1keS677Zzue7u8vreb0VbrnB0eORn+4/+7chA+X8ErovmXHWtV0fNetAtpfa9/tZZ/d6IWB8RJ/KrS/3ufUcLA1kfPDSoNRHvXPjrvpb2eeo/dS2fdZTAckjrf//p/Hjanlbn0FDS+n9+eui3of6h4ah/aFzqHxqX+ofGpf6hcal/aFzqHxqX+ofGpf6hcdXWPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACunbao59tb0k/GIO+k+IvLjEbcjoqky/kVENFfGb0ZEa2V8OsP4gcW5klt/OesYAAAAAAAAgKUzeHx4dOxwf6Ewp5F1ZADAcpnv219DQ+Pxb3wVAAD//3M6BdY=") setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) creat(0x0, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) sendfile(r1, r1, 0x0, 0xe3aa6ea) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c00078008"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}, 0x1c) r4 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0xff, {{0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x88) fallocate(r4, 0x0, 0x0, 0x8800000) 3m3.522724579s ago: executing program 1 (id=2889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x218, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x8, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00', {}, {}, 0xff84}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x21, 0xffffffff, 0x3, '\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@delalloc}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$eJzs3c9rXNUeAPDvncmkSZv30j4ej9fyHi/wFi1I00wtVt3Y1oVdFCzYhYiLhiapodMfNCmYWGgKLhQURNyKdOM/4F66dyeCunMtVJGKikpH7syddDKZSdIkM9Pmfj5wM/ece2fO+c6dM/fce3PmBpBbY+mfQsT+iAfnk4jRpmUjUV84lq13/6ebF9IpiWr1lR+TSLK8xvpJ9rgnSwxFxJenIv5RXF3u3MLipclKte5WxJH5y9eOzC0sHp69PHlx+uL0lfLRZ48dn3iufKy8LXHuyR5Pn3n5P++//cYzM19VDidxIs6V3pqKlji2y1iMxYMsxOb8gYg4ns60eV+eNDsghFwrZp/HUkT8K0ajWEvVjcbse32tHNBV1WJEFcipRPuHnGr0AxrH9hs7Dj7X5V5J79w7WT8AWh3/QP3cSAzVjo1230+ajowGauc29m5D+WkZf9488HE6xYrzEL8ub52BbSink6XbEfHvdvEntbrtrUWaxl9YUY8kIiYiYjCr34tbqEPSNN+N8zBr2Wz8hYg4kT2m+ac2Wf5YS7rX8QOQT3dPZjvypTT1cP+X9j0a/Z9Y1f+pXxtq3XdtRr/3f537f439/VDtHHmhpR+W9lnOtn/JUmvGd++e/rBT+c39v3RKy2/0BXvh3u2IAy3xv5MGm/V/0viTNts/XeX8iY2V8dLXP5zutKzf8VfvRBxse/zzsFeazrVenxzOlpWPlY/MzFamJ+p/25bx+Revf9qp/H7Hn27/3R3ib9r+hdbnpe/JtQ2W8dnZO5c7LRtZN/7C94NJ/XhzMMt5c3J+/no5YjA5k61Sv5BVyz+6dl0a6zReI43/0P/bt/8Vn//bK19nuPGVuQHXXr10v9OyzWz/povJD6obrEMnafxT62//Ve0/zftgOXVrzTJ+ee3GfzstWyv+4S3GBgAAAAAAAHlTqF2DTQrjy/OFwvh4fbzsP2N3oXJ1bv6pmas3rkxFHKr9P2Sp0LjSPVpPJ2m6nP0/bCN9tCX9dETsi4iPisO19PiFq5WpfgcPAAAAAAAAAAAAAAAAAAAAj4k92fj/xn2qfy7Wx/8DOdHNG8wBjzftH/Kr1v5X3eIJyAP7f8gv7R/yS/uH/NL+Ib+0f8gv7R/yS/uH/NL+AQAAAGBH2ve/u98mEbH0/HBtSg1my4wIgp2t1O8KAH1T7HcFgL5ZvvSvsw+5s6H+/+/ZjwN2vzpAHyTtMmudg+rajf9u22cCAAAAAAAAAAAAAF1wcH/78f+JscGw4xn2B/m1hfH/fjoAnnB++h/yyzE+sN4o/qFOC4z/BwAAAAAAAAAAAICeGalNSWE8Gws8EoXC+HjE3yJib5SSmdnK9ERE/D0ivimWdqXpcr8rDQAAAAAAAAAAAAAAAAAAADvM3MLipclKZfp688wfq3J29kzjLqg9KOuFeMRnRdL7t2U4IpZzShGPWufuzezKPrZbeZ2BuYXF5LdqTRKxFI9PgFuKa5tn1v3qGOzqFxMAAAAAAAAAAAAAAAAAAORQ09jj9g580uMaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvPbz/f/dm+h0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBk+isAAP//GjM9YA==") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x177) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r8) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x44085}, 0x8040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000380)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x88}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c004}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x14, r9, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40040892) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) write$nci(r6, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r13 = socket(0x1e, 0x1, 0x0) write$nci(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r7, @ANYRES16=r13], 0x14) 3m2.376124038s ago: executing program 1 (id=2898): r0 = socket$vsock_stream(0x28, 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x0) (async) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) (async) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 3m1.935165853s ago: executing program 1 (id=2901): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x10, 0x9, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288, 0x800000000000000}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, r0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) (async, rerun: 64) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async, rerun: 64) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010300006c366ba700000000e7d2000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet6(0xa, 0x80000, 0x5) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @loopback}], 0x10) (async) futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newtaction={0x84, 0x1c, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x1300}, [{0x70, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, 'vP'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x34, 0x10, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xfffffffffffffed1, 0x8, {0x1}}}}]}]}, 0x84}}, 0x20000800) sendmsg$inet_sctp(r5, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="1b", 0x2a000}], 0x1, 0x0, 0x0, 0x4000083}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r10 = perf_event_open(&(0x7f0000001000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xb, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}, r0, 0xd, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) r11 = gettid() clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) (async) rt_sigqueueinfo(r11, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x5, 0x0, 0x0, 0x0, 0xb, 0x40718, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x40}, 0x100b28, 0x8, 0x0, 0x4, 0xc, 0x20005, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x2) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) 3m1.934888493s ago: executing program 38 (id=2901): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x10, 0x9, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288, 0x800000000000000}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, r0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) (async, rerun: 64) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async, rerun: 64) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010300006c366ba700000000e7d2000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet6(0xa, 0x80000, 0x5) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @loopback}], 0x10) (async) futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newtaction={0x84, 0x1c, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x1300}, [{0x70, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, 'vP'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x34, 0x10, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xfffffffffffffed1, 0x8, {0x1}}}}]}]}, 0x84}}, 0x20000800) sendmsg$inet_sctp(r5, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="1b", 0x2a000}], 0x1, 0x0, 0x0, 0x4000083}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r10 = perf_event_open(&(0x7f0000001000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xb, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}, r0, 0xd, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) r11 = gettid() clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) (async) rt_sigqueueinfo(r11, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x5, 0x0, 0x0, 0x0, 0xb, 0x40718, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x40}, 0x100b28, 0x8, 0x0, 0x4, 0xc, 0x20005, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x2) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) 2m33.857543648s ago: executing program 9 (id=3128): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000003c000180060001000a000000080005000300e5ff0b00070000000000000000000800090043150000090006006e6f6e6500000000080008"], 0x50}}, 0x0) syz_io_uring_setup(0x47a8, &(0x7f0000000740)={0x0, 0xbe6b, 0x43, 0xa0000, 0x34c}, &(0x7f0000000180), &(0x7f0000000700), &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r5 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 2m32.3218736s ago: executing program 9 (id=3143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x8400, 0x0, 0x4000850}, 0x40) 2m32.238019493s ago: executing program 9 (id=3146): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011", 0x14, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 2m32.133823646s ago: executing program 9 (id=3149): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000080, &(0x7f00000006c0), 0x2, 0x24e, &(0x7f0000000140)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x8004, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080)="c70582e1aa96fa90", 0x8, 0x800, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='fF'], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x20000000002, &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000200000000020900010073797a31000000002c000000030a010100000000000000000a0000030900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x17e8}}, 0x40) ptrace$cont(0x21, r2, 0x9, 0x4) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2m30.983954075s ago: executing program 9 (id=3155): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', r1, 0x4, 0x1, 0x1, 0x0, 0x30, @remote, @rand_addr=' \x01\x00', 0x7, 0x1, 0x1, 0x938}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef9979"], 0x294}}, 0x0) 2m30.135497234s ago: executing program 9 (id=3158): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x5, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$x25(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000580)) setsockopt$packet_int(r1, 0x107, 0x8, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) pipe(0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00021202004788aa", 0xd, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 2m30.124714894s ago: executing program 39 (id=3158): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x5, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$x25(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000580)) setsockopt$packet_int(r1, 0x107, 0x8, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) pipe(0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00021202004788aa", 0xd, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 1m20.47587249s ago: executing program 3 (id=3498): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8005, 0x2, @private1, 0x10030000}}]}, 0x110) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1m20.460680121s ago: executing program 3 (id=3499): prctl$PR_SET_SECUREBITS(0x1c, 0xc) setresuid(0x0, 0xee00, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x400000c, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x40200, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000200)={r3, 0x0, {0x0, 0x0, 0x0, 0x5, 0x4000000000000ffe, 0x0, 0x0, 0xd, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfefffffffffffce8, 0x8000a]}}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x8, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000540)=ANY=[@ANYBLOB="6e725f696e6f6465733d302c696e6f646533322c00d39a51d8f8477227af5cb089fc6aad59"]) pread64(r4, &(0x7f00000000c0)=""/149, 0x95, 0x180f) r5 = socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='net/dev_mcast\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x1c77, &(0x7f0000000040)={0x0, 0xc8a0, 0x1c008, 0x8, 0x333}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffe0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x0, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xfffffffffffffff9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000785143f32fede15809000000070000000000000800000000000000000000006100"], 0x0, 0x2d}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x58, &(0x7f00000002c0)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x39, 0x1b, &(0x7f0000000380)=ANY=[@ANYBLOB="9500000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000500181200002da54cf62ccdd9b5b1eaf287d00e1a0399e5ec6fb6a15cd76fb6da32c749e1d6ab61120f88c4767a6bf288572d72130c911f3077ab932b00414ba4d5b0da1dc48908990b090909882149f90a1fdf9ca0bfa7fb3b6c0fd70b3491b910e5df13a3f85123dd590e118e967285bb2619bd76af2ceaabcb7cb2ea2a27026ca13562e29e1614a800a523a738ba6036d5d2a743d377e67699a160e68acbc1374786382f5a3e3486a9595c8071424fb3017f59356cb60619f27eae409cb8d90ea4051cad46c68826731284764e372510bef2fad8", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000400000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x10001, 0x8e, &(0x7f0000000140)=""/142, 0x41000, 0x36, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000200)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xe, 0x5, 0x7fff}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)=[{0x5, 0x1, 0x2, 0x8}, {0x5, 0x4, 0x2, 0x1}, {0x2, 0x3, 0x8, 0x2}, {0x0, 0x4, 0xa, 0x2}], 0x10, 0x401}, 0x94) 1m20.276723236s ago: executing program 3 (id=3500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x1000000, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1m20.191839659s ago: executing program 3 (id=3501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000003c000180060001000a000000080005000300e5ff0b00070000000000000000000800090043150000090006006e6f6e6500000000080008"], 0x50}}, 0x0) syz_io_uring_setup(0x47a8, &(0x7f0000000740)={0x0, 0xbe6b, 0x43, 0xa0000, 0x34c}, &(0x7f0000000180), &(0x7f0000000700), &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r5 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 1m18.500307397s ago: executing program 3 (id=3510): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) mkdirat(r2, &(0x7f0000002040)='./file0\x00', 0x5) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r1, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e8005"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) 1m18.366016261s ago: executing program 3 (id=3511): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000003f40)=0x1000, 0x4) sendto$inet6(r0, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback={0x200000000000000}, 0xc5f}, 0x1c) 1m2.212968965s ago: executing program 40 (id=3511): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000003f40)=0x1000, 0x4) sendto$inet6(r0, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback={0x200000000000000}, 0xc5f}, 0x1c) 6.491578021s ago: executing program 5 (id=4006): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x3263bca49d0e1a8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x1f, 0x20000000000002f1, &(0x7f0000000200)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0xa, 0x5, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b205b62c344bfdf01ef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e00008988ab013f40afe403041323110f62055394412158e7a3ad00000000115642561f6313a70df5f816249e5041aa40d4ab077fe34232aa8b31857c9d03729577"], 0x10b8}, 0xbfc9) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_read_part_table(0x5db, &(0x7f0000000600)="$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") r6 = open(&(0x7f0000000240)='./file0\x00', 0x145342, 0x20) ftruncate(r6, 0x2007ffc) personality(0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r7 = creat(&(0x7f0000000240)='./file0\x00', 0xa9) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x2000008}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_DISCONNECT(r7, 0x0, 0x0) getdents64(r7, 0x0, 0x0) 6.175433142s ago: executing program 5 (id=4012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x5) (fail_nth: 5) 5.704583128s ago: executing program 4 (id=4020): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x349300, 0x50) symlinkat(&(0x7f0000000100)='.\x00', r0, &(0x7f0000000080)='./file0/file0\x00') r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRES8, @ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRESDEC, @ANYRESDEC, @ANYRES32=0x0], 0x0, 0x28}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x1e) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x80) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c) sendto$inet6(r4, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) close(r4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000001340)={[{@lazytime}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0xc}}, {@test_dummy_encryption_v1}]}, 0x1, 0x5b9, &(0x7f0000000cc0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000040000000000000000000000000000000000beabd192f2de053151a991be7e7091bb9ac65a1df094d0d648dd71a1628e8b306a57c2131fa16aded45dc0511b5a8dabfa13fb2ae1fe763f1671a03432721ee58c8ed3c700ae02c10b2a2c54d5c442ae8ed8d2b18ed147daca92fb14c76d5b26134fcea02254ce315221d21a616c59f68a097a7d647e62ff1e18cad2d4e27c75c1cda996bf6e7b74e70f00020000f19995e3016043c63f2c6068f68c293f7395f5e8f5c8a32c9864"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1e000000060000007fd50000070000004000", @ANYRES32=r6, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x15, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x4, 0x4, 0x81, 0xbae}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000780), &(0x7f0000000bc0)=[{0x0, 0x4, 0x7, 0x5}, {0x0, 0x5, 0x1, 0x9}, {0x4, 0x5, 0x8, 0xb}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x10000, 0x0, 0x13}, 0x18) 5.250233113s ago: executing program 4 (id=4022): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) memfd_create(&(0x7f00000007c0)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe0]l\xa1s\b\xa5\xd2\xd59\xc8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\x16\t\xe8=\xa3\x88sN\x83N`\xf9\xec\xe1\xbb\x050xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="c437b78cb64c", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, '\x00', 0x0, 0x2c, 0x0, @rand_addr=' \x01\x00', @mcast2}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x50}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002200)={0x158, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x104, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x40, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_clone(0x201011, 0x0, 0xfffffffffffffdfc, 0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x5}, 0x105902, 0x10003, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 5.068546029s ago: executing program 5 (id=4023): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040), 0xff, 0x258, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000540)="2e9ff35e6bfd99ef4a8c337f6116b49d8cc28d93e0996a006cdd48deb9bbc7bf2adb9c1fcfc63037b75598bfa838654e147d7b0d025e7dbc7f7a367eac4fc29043579d0c3332c939d65abf01e5cc7be4b39879b30fa3dcffe3202eb80870d433499304468bec6ecc", 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x9, 0x0, 0x3fd, 0x4020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x4001000, 0x0, 0x408, &(0x7f0000000140), 0x0, 0x0) unshare(0x60000600) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xf071d66a62c5f274}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sync() syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f0000001180)={[{@fat=@discard}, {@fat=@nfs}, {@dots}, {}, {@fat=@fmask={'fmask', 0x3d, 0x10}}, {@nodots}, {@fat=@discard}, {@dots}]}, 0x1, 0x22d, &(0x7f0000000300)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10882, 0x97) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) unshare(0x22020600) r4 = socket(0x1e, 0x2, 0x0) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) sync() sync() socket(0x2b, 0x80801, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private1, 0x10100, 0x0, 0x1, 0x3, 0xfc65, 0x1}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000200)={@remote, 0x10100, 0x2, 0x0, 0x3, 0xfc67, 0xd6a9, 0x2000000}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) 3.299656189s ago: executing program 4 (id=4026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x48}, 0x1, 0xa7, 0x0, 0x40408c0}, 0x80) 3.26601005s ago: executing program 5 (id=4027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x4}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000bc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023892) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r9, 0x0, 0x0, 0xf) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x40895}, 0x4a000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@ipv6_delroute={0x5c, 0x19, 0x200, 0x70bd2a, 0x25dfdbfe, {0xa, 0x10, 0x14, 0x6, 0xff, 0x1, 0x0, 0x9, 0x3000}, [@RTA_MARK={0x8, 0x10, 0x3}, @RTA_METRICS={0x2d, 0x8, 0x0, 0x1, "cc86f73c6b61a0253c7f85a06747eb9b354d85195123c70566a2ceb096f2bb6b250bcc4367a6d68310"}, @RTA_IIF={0x8, 0x3, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4881) bind$phonet(r9, &(0x7f0000000140)={0x23, 0x10, 0x2, 0x2}, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x5) 3.167664433s ago: executing program 4 (id=4029): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x40) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4050) r0 = socket(0x2b, 0x80801, 0x1) socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0xfff, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xfffffffc}, 0x1c) listen(r0, 0x2) 3.161787363s ago: executing program 4 (id=4031): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x400200, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {r4, r5}}, './file0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x4}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) writev(r9, &(0x7f00000001c0)=[{&(0x7f0000000400)='9,', 0x2}], 0x1) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000480)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r12, 0x3ff}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000180)={r12, @in={{0x2, 0x4e22, @multicast2}}, [0x2, 0x7, 0x6, 0x747, 0x0, 0x4efd, 0xfffffffffffffe69, 0x2, 0x3, 0x7, 0x1, 0x1b, 0x6, 0x8000000000000000, 0x1]}, &(0x7f0000000000)=0x100) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000000000090002"], 0xbc}}, 0x48004) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000000270709a427677334c866f98386b2e8f5a6db128f8ab90870e2fdb873c605b68c96ae94606f591f9f0a96f52a0f2bcb8d30ac642aab13fa5100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0) 2.929997681s ago: executing program 4 (id=4033): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0], 0x158}, 0x1, 0x0, 0x0, 0x24000001}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000680001002dbd70000000008000000200000000000c00088008000600ffff0000240002000100000005000000000000008000000002"], 0x48}}, 0x44010) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0x9e, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000100)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000000206050000000000000000000a00000614000780080008000000008908000640000001250000010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970000900020073797a3200000000"], 0x64}}, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r8, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x64}, 0x1, 0x0, 0x0, 0x40014}, 0x4000) r10 = socket$pppoe(0x18, 0x1, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002) connect$pppoe(r10, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r10, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r8], 0x5) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, 0x0, &(0x7f0000000180)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604d2b752dd318002047478c210600fc010000000000000000000000000002fe8000"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780000080a0000000900007add0102"], 0x0) r12 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r12, &(0x7f0000000000)="5f750167a49066c11e46706e2e6486e8315c79c67cb2384cd9c62aca46bade516934c949c30023dd29d0d74e37945bac15e02f04c19f16354ee90120555b05b7d9329a009abd8811bc273eab02bfd7d4ccf37883c10108db2c5cf28f2ea1cc6e884d224fb73df25a83c0c3fdd3c4f6271f0b60e884f8a573176dfa96de0dd15b11f5e1e3563f81a111f0388bfa1087e4f8df130fe8ab6db2f46ef1005519b60fcd8e6dbe8e7c85a1b78fe9b75758824fb9b4bf17acfbe76f40133041fb4b7647e3c6fa5556a373ba082931b964d5f0aa3f5d9b6d84fbdd333a54ea26f869890782dd02aa140230391c28a8de9f5ad6aad752", 0xf2, 0x40000, &(0x7f0000000100)={0xa, 0x0, 0xffff, @remote, 0x5, 0x3}, 0x20) 2.789903456s ago: executing program 6 (id=4035): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c40)={0xffffffffffffffff, 0x6, 0x8}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b82, 0x0, @perf_bp={0x0, 0x1}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x20008844) 2.695388029s ago: executing program 6 (id=4036): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000200)={{}, {0x5}, 0x141, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)="af8824e9509f3ab519de699a179e3ec420e2c510292ec9dfa879de333205b8640bf79512b284508a8095a4a774de08b2e0a11bdbb773e28b63f6a5591543d161f0d860d1e433f8a99077157ed19d9b6a37dbfb8f51ad51971b0cbb5320c6be5a43b1268a318123da27427d59e90e946ecb7626af3aec3fb4d59c4ac5b4", 0x7d, 0x0, &(0x7f00000002c0)={0x2, 0x122, {0x1, 0xc, 0x3b, "fc221f9d2c28eb5a1d84c64b236583dd7d540f1f3ed0d67d85e0521f04fe218392ff017545c9e12bb81b5d316759dab16e6c96866876e01f6f3836", 0xda, "0aacfc8ffdb233f4aa03c3f4e37649118f3af48586e72ae244446f92f4c1f6349362a1a18782f622a9db586a1726ab855167c48abf42881ddad95ea2f3f8c68c613c1dfd9f99cbfe792517f2c057bba1f86bbb919aa23bfc91683e8f153ce09d6d24a714de8efef4da94b2b395a09b441b22ec5a4a4ed05c6d4fbbfdd95ac650d6132be3045830747918884805d27daf857328c800d6f8a59ea24440f70c438eda3b0bf7c3a808fbfa6c6ac6581a4e1de5294d445399c8b2d165f00feb4602b86e9df920cf35dc281ebbcba1a4380a605c09f4bfb5dc5f728c95"}, 0x16, "9f8c94f55454a22f6b202c2b80c528e87b308076143f"}, 0x144}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000280)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYBLOB="7e9d0d384318c4c653257f9fc0290a3b750c020652a91e", @ANYBLOB="08000b000000000008000200ac14143f080009c05c"], 0x54}}, 0x4000000) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x24000004}, 0xc000) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/97) 2.579099953s ago: executing program 6 (id=4037): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) close(r1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f00000000c0), &(0x7f00000002c0)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r2}, &(0x7f00000014c0), &(0x7f0000001500)=r1}, 0x20) (async) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x38, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") (async, rerun: 32) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) (rerun: 32) sendmsg$inet6(r5, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="24000000000000002900000032000000ff010000000000000000000000000001758e"], 0x28}, 0xc000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8541, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000580)=ANY=[]) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r4], 0x78}}, 0x0) 2.328880641s ago: executing program 5 (id=4039): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x21, 0x6, 0x800, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller0\x00'}) ioctl$sock_proto_private(r1, 0x89e3, &(0x7f0000000040)="d54dcd92e4332661b763bf55eb5816fc87d11adffc301e5d408d8d6641f4e3f151c8f6ed659d0b103fc5e7342fcf6080e828883503e1577b4d98f4e9cb66a971b01e4a289a") socket$packet(0x11, 0x2, 0x300) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) 2.255065194s ago: executing program 6 (id=4041): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000f00)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x16, 0x0, @void}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@discard}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket(0x1e, 0x4, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400009fbe0000ff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b8a050000000000440012800b000100697036746e6c00003400028008000100", @ANYRES32=r1, @ANYBLOB="14000300fe80000000000000000000000000003914000200fe880000000000000000000000000301"], 0x64}}, 0x4008000) 2.230212305s ago: executing program 5 (id=4043): r0 = syz_clone3(0x0, 0x0) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) syz_usb_connect$midi(0x3, 0xde, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x1, 0x1, 0x6, 0x40, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x0, 0x5, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x5, 0x5}, @ms_header={0x7, 0x24, 0x1, 0xc, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x3, 0x5}], [{{0x9, 0x5, 0xe, 0x0, 0x40, 0x6, 0xa, 0x0, {0x10, 0x25, 0x1, 0xc, "575055dfffe9eaf05a034328"}}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x0, 0xe3, 0x49, {0xf, 0x25, 0x1, 0xb, "b8b9ed0b85fa387f1ffaed"}}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0xb, 0x8, 0xc0, {0x7, 0x25, 0x1, 0x3, "a14ba7"}}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x7, 0x3, 0x2, {0x13, 0x25, 0x1, 0xf, "a12acfb4e7f0f01dd067637f54b584"}}}, {{0x9, 0x5, 0x0, 0x1, 0x240, 0xf8, 0x9, 0x40, {0x10, 0x25, 0x1, 0xc, "90e700c0cac7d8eba30fd83a"}}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x6, 0x3, 0xff, {0x13, 0x25, 0x1, 0xf, "ae2ce0d074a1e393802a0f250188e6"}}}, {{0x9, 0x5, 0xf, 0x1e, 0x8, 0x8, 0x6f, 0x1, {0xc, 0x25, 0x1, 0x8, "9d2623f52903c37f"}}}]}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x6, 0x7, 0xf9, 0x8, 0x6d}, 0x7e, &(0x7f00000003c0)={0x5, 0xf, 0x7e, 0x1, [@generic={0x79, 0x10, 0x2, "7c1f665aae5a46b1dfbab3bd9775ac5a4bd0c64c0e56401c4012ae9f732aa04cc69af679785dd1439d580f465ed9d8a11226bc276dc8e3e1faa22452167ef7e54082ebfdda40f5951ecbdbc7b10ee844ed3f0727f58a181fd6e4baaf613bcc50cbf4b587f81bc1a6ca60a9362519b9ccaaa90cbf5899"}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x827}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000d5d4f7c7cf52431d88b867ca00000000000000100000000000171fe5ff030000567749128edc75d15e6665a268f24d629316776d6ae011435325927d54efa8f6b92db4b964940000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080007000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x0, 0xffffffff}}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) close(0x3) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x34368, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x9, 0xfffffff8, 0x5, 0x100008, 0x20001, 0x9, 0x0, 0x1000, 0x0, 0x20000006}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffffffff, r3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read(r4, &(0x7f00000002c0)=""/149, 0x95) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x50, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ae1, 0x8}, 0x400, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, r5, 0x0) readv(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18001d00"/19], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742042d1085849792762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000940)=0x3) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, 0x0) capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000280)={0x0, 0x18, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r8, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000009c0)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf7, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x4}, {@multicast1}]}]}}, "64c3d10300a23377"}}}}}, 0x0) 1.959346884s ago: executing program 6 (id=4047): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) io_setup(0x2, &(0x7f0000000000)=0x0) r4 = eventfd(0x7) io_submit(r3, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x42, r4, 0x0, 0x0, 0x34}, &(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x7, 0x0, r4, 0x0, 0x0, 0x7, 0x0, 0x1, r4}]) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x300, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xb, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xf, 0x5, 0xfffffff9}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@newtfilter={0x15c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x130, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x124, 0x5, {0xb, 0x8, 0x9, 0x7, 0x0, 0xefdf, 0x2, 0x84c, [{0x4, 0x8000, 0x1, 0x32ec}, {0x9, 0x8001, 0x7, 0x1c00}, {0x9, 0xc3b, 0x80000001, 0x4}, {0xffff, 0x7, 0x2, 0x9}, {0x3, 0x8, 0x5c, 0x4}, {0xfffffffa, 0x3, 0x4, 0x3}, {0xffffffff, 0x6, 0x80, 0x4}, {0x1004, 0x2, 0x1, 0xa}, {0x2, 0x0, 0xf53, 0x8}, {0x6, 0x7, 0x7ff, 0x9}, {0x2, 0x7, 0x0, 0x4}, {0xc8f, 0x7}, {0x20, 0xf0, 0x3134, 0x8}, {0x1, 0xeb, 0x401, 0xd}, {0x0, 0xffffff50, 0xfffffff9, 0x2}, {0x0, 0x1, 0x464, 0x7fffffff}, {0x1ff, 0x0, 0x5, 0x5}]}}]}}]}, 0x15c}}, 0x24040084) 1.608293506s ago: executing program 6 (id=4051): ftruncate(0xffffffffffffffff, 0x5) socketpair(0x2a, 0x20000000000001, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x9, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047ee, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x34, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x34}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') faccessat(0xffffffffffffff9c, &(0x7f0000003040)='./file0/../file0\x00', 0x5) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, 0x52, 0x1, 0x70bd27, 0x4, {0x2}, [@typed={0xc, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410ed) rseq(0xfffffffffffffffe, 0x20, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) pwrite64(r4, &(0x7f0000000000)="2a826c2562c3d4c18b574c618175651f83b03f448c92a689518f7708e55641ae1ec503837654a8153585bbd4632f0ecc2c928c656cadc5a10f885851f4064547", 0x40, 0xe5c0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000100)='bond_slave_0\x00') 1.504592199s ago: executing program 0 (id=4056): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18090000000000000000000003ffffffbfa100000000000085100000fcffffff95"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@timestamp], 0x1) 1.46041454s ago: executing program 0 (id=4057): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2000cc0, r7}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r7}, 0x38) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181243, 0x1bd) r8 = socket(0x10, 0x803, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r8], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', r6, 0x4, 0x2, 0x81, 0x6, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x8000, 0x10, 0xe996, 0x10000300}}) 1.46004862s ago: executing program 0 (id=4058): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002800)=ANY=[@ANYRESOCT=0x0], 0x15c4}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000c40), 0x80000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30bd179caa9b6c33be090a010400000000000000000700000108000a40000000000900020073797a31000000000900010600797a30000000000800054000000011340011800a0001006c696d6974000000240002800c000240000000000000000e0c000140ffffffffffffffff0800034000000008140000001000010000000000000000000084000a"], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000480)=0x8) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) io_submit(r2, 0x4, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0xd99b, r4, &(0x7f0000000140)="8062cc8136dedf0040d8951d7fa966f712a45d8bb94d363f5aed069ec873941bd55bf294e9338bd0ea6d4a4ea0001fc40493347fa792f18bf2eaa97ca81b486ae51d1989aa5cce7617d93570f8e63dc68d1352d8a0d956b2b55bab46b263a796afe4247848afc21fe9bbf6d8286e698aa716406ef90e620a2758ee49eef433a37bffb472f6741ee124712f86cf9f8ac56e7efa9d4b41e72170fb01", 0x9b, 0x101}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x8d9, r3, &(0x7f0000000340)="f1660c60912ecd25713fce74dac0ce1437ee2029024cc502a538ecda435a710208c648cb2d1b870e1348f370607e7d92ac2781738907fd280a4a274be9d5371952f2597f44", 0x45, 0x8, 0x0, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0x267d, r4, &(0x7f0000000580)="3f2cdbad42ad7dd55b08525a316e75350d5024aedf98991f17eaa083654ce90e2f3ce2353830cd6e8a6212b039ab229f145d3e1f9d3c596939c01364a8a374965bf90a9a9796f62b38185f7c07fe8e35d2f9755bd324743545dddec491549ca433cfc479cd0b14b7c92d99f4c451a478dc0174b581013f", 0x77, 0x478000000000, 0x0, 0x2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x10, 0xffffffffffffffff, &(0x7f0000000640)="e0644b077f9c981b12e87c80fd3c346628694a3d442fcf857cd79594c39a9c9e731e512f106c14a340d42820bb2ab661f90f9e7ab8ef06c3becd455029e0ffd38d99b22a251dde0b259ee5ea93199e75aa3c1e36554a423f977415e2952637a5bead589bd5c8b20838672708ffca43f14909f597d9d25a8cbf99daf8ad081f2ccb43fbb28cc89c836e6f285b9001da24cdc6f7fb07f12753280c43d6830fb364c768782a9078b12d8822e815e195079850697452eb831fb8a19b8b0f7a4dd7abce1b2ab886a7655223bdca137574", 0xce, 0xffffffffffffdcb2, 0x0, 0x1}]) io_uring_setup(0x1fbc, &(0x7f0000000040)={0x0, 0xfa6f, 0x100, 0x2, 0x3df}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b47, 0x0) socket$key(0xf, 0x3, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) gettid() socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300048d9}, 0x20044040) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001400078008000640200000000800134000002a"], 0x64}, 0x1, 0x0, 0x0, 0x4040881}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.426131442s ago: executing program 0 (id=4059): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x0, 0x3}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty, 0x200000, 0x1}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000029000000370000000c0000000000000006204c6af5e171200624b67acfa097ca92b915b7757e8007108d71c2041869498165b65ba6ccb2e1df6d01ea80a6f7bb5b22b0cfaaaede08b695a62cfe00"/101], 0x18}}], 0x1, 0xff14) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x214c1e, &(0x7f0000000080)={[{@init_itable}, {@nogrpid}, {@mblk_io_submit}]}, 0x1, 0x510, &(0x7f0000000ac0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x4, 0xf5, 0xa0, 0x7fff0004}, {0x3, 0x6, 0x5, 0x9}]}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='decodes i'], 0xf) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) r4 = socket$can_j1939(0x1d, 0x2, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x3d, 0x85, 0x7, 0x7ffc0001}]}) bind$can_j1939(r4, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) 1.372564764s ago: executing program 7 (id=4060): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x6012}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000000004, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x4010, 0xffffffffffffffff, 0x1000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r2, &(0x7f0000000800)=[{&(0x7f00000005c0)="c800b66cf7e6a58cd8e0e80c86470ec8c3c0d6b06acd299df554ff6d4c46a5e948e458d6291d3aab88af945442040056972d9d82b584db7aed7075fcb4850257c7cf202122802afec235970a469a73ea4193e861993d0d14c39e25a81de895927d3a86ba369ed1c66b615488829a7502aaed5d20c90800753013f6a44d614d1d240b7420bed35583429fca6fd587a882589bea59703c5619a8697ee9661140a295a65ede871662b0a5713e89f3bfff54a01fbb1a641056b8f7d98a65a17dedcf11ffbb8c93ed0275431beebd524767543f3a0083992c9406001306a201fa", 0xde}, {&(0x7f00000029c0)="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", 0x5a3}], 0x2) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = syz_clone(0xa1881800, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setsig(0x4203, r4, 0x5, &(0x7f00000000c0)={0x1b, 0x7, 0x3}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0xd}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000000000000100100000b0000001400000000000000100100000b"], 0x28}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000020305000000000000000000020000030800034000000b4808000340faff00080800044000f8ff0708000440000000050800010081000018"], 0x3c}, 0x1, 0x0, 0x0, 0x40811}, 0x4040) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000240)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000030000000008002907864010101e00003000304907800030c58451c00000065000e4e24000c00000000ac141444f34e71e5823fa5acf437e7a434253a1ab35118b3df08bc2ac3eaaf72ce035bc533f9aba20b0ad6f0f651a61f7c17922ccbfd96ca7896c4e81c9dabc1533ae756e0135f58c1157c4534c6cbed72a3354eece1b23166c17d05f41cfbbb866c4b86e11582"], 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.372083034s ago: executing program 7 (id=4061): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000008000000000", @ANYRES32=0x1, @ANYBLOB="000000000000e9ff000000000200007c0042e551", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000140)=@framed={{0x5d, 0xa, 0xa, 0x0, 0x10000, 0x79, 0x10, 0x18}, [@map_fd={0x18, 0xb, 0x1, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) 1.315831535s ago: executing program 7 (id=4062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = semget$private(0x0, 0x6, 0x32) semtimedop(r1, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0) semop(r1, &(0x7f0000000200)=[{0x2}, {0x2}, {0x4, 0x7, 0x1000}, {0x3, 0xd2a8, 0x1000}, {0x0, 0x8, 0x800}], 0x5) r2 = semget(0x2, 0x0, 0x18) semctl$IPC_RMID(r2, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a01"], 0x44}}, 0x0) socket(0x2, 0x3, 0xff) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0xb, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xf, 0x5, 0xfffffff9}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@newtfilter={0xdc, 0x2c, 0xd2b, 0x70bd2b, 0x25dedbfb, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x4, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xb0, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xd, 0xd}}, @TCA_U32_SEL={0xa4, 0x5, {0xb, 0x8, 0x9, 0x7, 0x0, 0xefdf, 0x2, 0x84c, [{0x4, 0x8000, 0x1, 0x32ec}, {0x9, 0x8001, 0x7, 0x1c00}, {0xd5, 0xc3b, 0x80000001, 0x4}, {0xffff, 0x7, 0x2, 0x9}, {0x3, 0x8, 0x5c, 0x4}, {0xfffffffa, 0x3, 0x4, 0x3}, {0xffffffff, 0x6, 0x80, 0x4}, {0x1004, 0x8, 0x1, 0xa}, {0x2, 0x0, 0xf53, 0x8}]}}]}}]}, 0xdc}}, 0x24040084) ppoll(&(0x7f0000000000)=[{r0, 0x4}, {r0, 0x820}, {r0, 0x11}, {r0, 0x4460}, {0xffffffffffffffff, 0x402}, {r0}, {r0, 0x8028}, {r0, 0x4000}, {r0, 0x1002}, {r0}], 0xa, &(0x7f0000000080)={0x77359400}, &(0x7f0000000100)={[0x6]}, 0x8) 523.847442ms ago: executing program 0 (id=4063): socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000040, &(0x7f0000000300)={[{@nombcache}, {@nodioread_nolock}, {@delalloc}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x8}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@usrquota}, {@bh}]}, 0x21, 0x5c7, &(0x7f0000001080)="$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") openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) close(r2) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a40)=""/4080, 0xff0}], 0x1}, 0x10021) 506.150203ms ago: executing program 0 (id=4064): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r7, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) r8 = socket(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r11 = pidfd_getfd(r10, r10, 0x0) setns(r11, 0x64000080) sendfile(r9, 0xffffffffffffffff, 0x0, 0x7fffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) 429.277215ms ago: executing program 7 (id=4065): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x21, 0x6, 0x800, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, 0x0, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller0\x00'}) ioctl$sock_proto_private(r1, 0x89e3, &(0x7f0000000040)="d54dcd92e4332661b763bf55eb5816fc87d11adffc301e5d408d8d6641f4e3f151c8f6ed659d0b103fc5e7342fcf6080e828883503e1577b4d98f4e9cb66a971b01e4a289a") socket$packet(0x11, 0x2, 0x300) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) 251.813141ms ago: executing program 7 (id=4066): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x0, 0x3}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty, 0x200000, 0x1}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000029000000370000000c0000000000000006204c6af5e171200624b67acfa097ca92b915b7757e8007108d71c2041869498165b65ba6ccb2e1df6d01ea80a6f7bb5b22b0cfaaaede08b695a62cfe00"/101], 0x18}}], 0x1, 0xff14) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x214c1e, &(0x7f0000000080)={[{@init_itable}, {@nogrpid}, {@mblk_io_submit}]}, 0x1, 0x510, &(0x7f0000000ac0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x4, 0xf5, 0xa0, 0x7fff0004}, {0x3, 0x6, 0x5, 0x9}]}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='decodes i'], 0xf) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) unshare(0x22020400) vmsplice(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000200)="c6def776d45ce9f21eee3f4768e4ed1dc3a53799c5233f8c85e2241db7acf2513b2fd86d0d360603428c86351acd7198bee29ed796bb1baa599f1c73750b55d2e3250ba4d9532c78334dac20572c788adcf8857c3f0fc706209a5562abdac641223df8fa9e6a1e453c7c14019e5cdcc816e073772d12c4266e9501c8721e888865a383c10b765c78cc86e5b9eaffc3031f3c80638a9d2841d8a94b34c9fbec03597e07a1016a39676c1cff7507ccf80886518b44fc41b78ca005b7a0b30be0ee662242", 0xc3}, {&(0x7f00000000c0)="c87006338973c2faaf1c311e460f4ecbcb8d51c7245c942e102aa87df0a95e6d491c05aa34d08a77aa0cd140ad075337e749cd2d5b7e099209c4d9781c7c8e88de2f6f4e71c605b651edaeaef6ba300bcf478c23efa96b110bd8b7e37db03269869de5a393e424e8266a603f464bb56c68db2653", 0x74}, {&(0x7f0000000400)="935701d911a690e2314e9bcafb56551bfd72c0b9da239d3ad67118ac35a2dca5535ec5eedd4281468ee1309082943f4a7fa454a08d5d78a5f7ca6bc4541c561afcc4db366bab8f66f4c6f25f438d070cc912c0bf647cece450ff37b9ed209b7facfcb8409f7d4388920f58b3139e00b8816b78c8466b68a2ff33f7727f71ddb1c822e7d17c971f873fad1143c420d34d16e904491552f2b56fc8b474931a71e0183a587b925b063bd5ec5672234d3040b3c6615e77e49d07dcd98cbc4990e28ee9936b36998a4e005c25fba62ce2b6e7b2697725fea9bdc5fbdef4cb25edb8fbfc497645f741dc698147ad85aeee892c528b1c3c24e63391b8ff25f6869a32c12d1bbc7b07702276bf80d44d840ca02f98d120a429930e603abb9be75db76b4fd7c0399fb150f8f923c98f06eb7d0ac19370226a267607a5861b6612b4a04ceb3dd1e08378fb6aaeabfb0cf84a8a36238b9483bed542414a819e20927bb70213629cf5e5ca09564010c83384660e77c8f736d9b1c51cbd53509830f3087649da7ec28db5c0400ad3c1446f748680103a8e9139c745f3c4324c651ba6448c92f2d69e4fa7ccd65e6812e7943b594d0571a41c5994fcf5e5a36316c4ffbe58172c2db71fdf6518e508404345a8bcbf97af87f219bcc2de868fb8e9c5015ecc95c1c7a1d09a67d9d0318e6be5275499afb3aa197b958c0790a8340f9875aa0b82b73d7c349a2dce44a0dad404d02b5725a96b3aedfd290fc35a5e084d01a8021633385cab98c0a622973e692be95823bd22a1c56fe8956c8004c96a56b2f695e81ccc6b2806e8d6a8712b240109a699c43411a7311fc9c3b1d717872160b33837ca7a8c6d9464652473991d691ce8d0d2ff862255d00967432cb12875682743b3cb27bd25b6f347624c348028b38747c0c97fd2631b1238e5029d2d09c490dd9a0cff69c7a473d45ab8f93ec55f344c985c04965eb323b9baaf6749a1815cf5ccb26d5d5cf912407e77b2bcc9d89ebe109897a57f654acebbe53b38b5c41a9a7060d26ec49554e265c63dc92c8a21311aacabcceae5ec598e3ff943e07942c67ac8ed02950ef0924265948b82bcc2db4b367e9edaab7ecad5207a67914e600ee50e3cd7718687770f207f59af7ae45fe9c89caf82aa427d6c1e75323551d7111eb96b180a662972d5024b77f004a07fc13ba8e9a84cec1b676170511a88a4d85bf24fce22398fec397057ecd4a66d5467cf9c9b30962873c55f2e3404c6d35420aac0bfc10720026167f5412f60e53205463c4a274b2dfaece9689a92dd53d332fe9a5f56db167de790fdaa26534fc60026a082279ce7b41edb571ad04116365ffaf8fa7b28bd7afacb789ace078fd3bdc4e8460e2215cf93ce10e2afd14ee7998f5a255b3fa655a17d29abac3c452ad4fff10b3609891815b12c58707116b423f04bfb73b7bc4bc1a1268e7f3ac647371fe547979104d535a57b588b4115d90779ee9e7d3fc464d21664bf104e0df8bd6d01569433650e07c809445a0d467921b1696d4ae98312aefa895b598aea87c5c9d2e7ad976db91a0a12e4ec9b0f2336feb7dc84d51a31bc4236752145dfc982c72d3ccb4b4853469879a5ed7da883879f2c4734f13d4a0a04c8591e5de99177c16f2fa75773a1062bd24bf425f5ce4fd1b264501021d66c180d69a43876180744a5cc7e209fc755fe171f0bda8b86907ab20d178c020b28b8f9c036b911e836e61d4eca859000a6acf4ed02f54b439fe4810dfd0269781cc84e399536190fb11962bd406e788b573eab33703c19e036d468b9b0aadde3d10ef0f1b7a4beaf102886a9af977177fa28eac80fdb2f92f9a57c4240a9d1824de86144312aff26719e1f6d03c80d7f490e4e19842be87e588fdcc5ebe815cbd5449136ce7c3e6026cd7d545237431252a83e69d49b506550b3cc67f59d29af1eaf9694a1ae765b5ab59d9288039ff05236aac8c38254c5d8be9e9ec353c35873c5f12820d2dd924b244faef1766ea9698036feaaf56f084ae2d97a96d0ca49a352a2c35095a4b709f7bb5ab13c2b8938dc6928f14911d10b5712c7050e0cd937aceaecc5782ef2562c16e3a43fffc86a56ecfd870a0e3292f6a5df55eb87f2689cee234de828508adb2ea9592afd55618463e116e90a4b0d4c78b89956eb5f1c54e9d186bf021906d7579055975ffcbe2928c132cedb1eaa082302d26c116c4272c3b9d09fafed57e2ec8a64567965515dcb1116801299b5ccc37aadaa1daffd73bafb55c955bd7d499b12ce74002a7c029d01a7e530625171c9f10c0f8204b37836bda49ae3888435fa63f9fa735f559a0822d5b6887dd448531bd14c677206b6f6ba16d07a1232d91532d12862ca207c0a4c35664cfe44b591999875891da4f2db9088957d34d11dca8711048ae454b5378e5e60b9dbb6c1d43f2fcc6de8cb6e518b6ed11393993894de134d625371b152d86a6efbb59282744ad4e18a09cc33b00b5b709b85f302264d37c98c8d1d3be8e24943b777223c407fb97a01696e6fee071a8d01118fb218f7d9391d405e3374f4ab12469394b9e46e1c58a387b5b8e95f7a44b61104c857ed88636db819375fc6af1be34ed1d8f0e98dcdce952da09661472f8fc3b2178a03e8253575eea8a62a386fa98c91e6024cbdac58d2396df455a56595418bd71a78897e867c2d9e414698d32ddd2e00773b0ccb7cc048b6df394cd5dcf91bf4b657e3dfcbb18154cf7ae5ff4fd2a10e9e001ae7f3370fb1b2d9c874c772ccc109e4d0db87dbc6e25caf2cd9facde89d85c0253bb3a994eb49d83dd4bb139153535c43cfbcbf1e7637150dc296eb5237d75731d7a5d51863d972aa470047d9e23166c1438bf38a02325a00cb78e568cd7cbc1e01132fe0c0fe3977eefbc16fdd97f1bbe5033946d897df512b5f0c69a27a1d06e61255ed4920396cda059cbfaa9c89ae1b200edea1b5716988764908a9a7acd90f55d655075badaed76b6d2a008149148a23301a9081ad4a517b9d102bd0235ad48451c9d77a2dea3b88af63e97658e31ca917fb622e272381843f4aaedaede59beac9eff15711e647c084bf1a8bdc918631ce1d13c7f6b95e6e92c5df6e6301018ec9253b5025443bbccc1b3d216d751b127039adb25abef9d618e395b316f353e03a54fc9f00490f627f03e2017eba989b09439c0e1f8fc552905ce46f25a8aa42c27514304de687d4c9c5676aa88093a2c55222af0ed9f74645fc6b7ccadb4b6030e66593baf07e004a0232548dc0a8e568e5184e5d9930cab182431dc7bd29cdcea8976305b164bef845fd808e6a6839840640228aa8678f981f33f5716a3825ec428eac11e1040e6a4b2ef6de76659d73113de9a4f1664f8eaa6a7f3ac315f3919f08989b3b4c630a502823aa5c7815e2853ecb254031ce1d69485792b187a35ecfe5c1a86bda928807a19c6250525303004fb7072dc995925cb00318a9601c5e6eb4740f25492221a950e2578836767c71cc668894edc84eb21e89de19cdee4bde2d0258c0533b61f0fd0d3c9479d00ed9964338d476ec90807b1e0d493658e3bf23d55af46cbe6d84133b5304745cc317458f164d355976d76368859074cbb17605fb7883a1691206064f4da6622726124315bf94ea4be8e787f279c9745279542ff08b3254445b05d59f609779e9ec45dfad71c7474f11301c55b265103d52e7e0b3cdd2a9ae697a509ab6b4f62cafef74e8addc5aea7637c7eb15e08a957d3410766092ec27be6c415c3b20c74e396936e8e9c79b59ccadca4529906fce022ba578380046cd8dc805d106aed195810085562a31e2239a32af4e7572a629a90a5bfc66de9937c092defa18a2cc9036efef62bf61a1e6324d79733d2b0d884054ebfa51c31d9d2c3729766dfbc3e4eaae0c5526d944938610cbeaf3d77f42bfff30a7298094fbacaa0b57af947a0575f787198fb963fe844cf3763d54933d82ff676bd3520a0275b3f9d1dda0a2e5055e2960ba7259ba4ca7b91c43a0869d7c23b2445ecef66a4fcae806ad11647d9616624e805084e5a04074fa470bda3c5f01762d93f89b1014789ac5d54608d5907597ef8dc418eeabd5f71a750114261315822fd92bdca4eda88c55acbdc6f27b95826d0f905d9da90189091965ed95f6d1cd3b994d85939ec92d59b091caf3d4434e3020a08fdeecc1bd763c3ed3bed70fac96382f3f4d6fc9298ec5db0f1a3ae6f400eecc2e27e12a1219be2d965d2f3f888a9d0bc4ac365a7023d0b540f00d7f20113b82923b06748fbb27f49e21b3cf6fb5c0006ccd9b27ac2e3b462b83430eb637d5f31627585dae24000fb0d9732a6b973fd8dc84a7d42f4aff74cb10af4f66f0ffc11b58b5933dd7ebab8feec3336182200eadbbaa4ab5f5b1bd7095761266eb19d5bb87eacae8f650e469483db9ecbd43ec0ff26ab37bc7ffbb689e53a4908c7ac95212e878e01f554a11ba4c967110722e2d2bf4b12544c0d8293b39572a42c3c377c48c759b051f20104046aa860e9f64d4b8a37fa1eaa0934ed9dbd67e3e03e19d97c4ba1edfbfc1cf1cdbb4f61b02c94ff9593d5b742a336b83ae4bf85a739219b68537b43e6e4f708d4e4a5d5493daf3ed9323864e39857ccfc7652872523864915901a09ab43f83431bb3f75911815020030c46956af989202138269ae6a32306ff4b7622a0e16fd48e9e0b1d166e2ad6ba3657c7c7cda0e6c9628c2bf8e0bf0ed221486d750cfc0c659a49b7b41d5e4790de0aaad2ae90799cd088875c65a233cb7635a9cd31003094a7ba906badd16832f621988bcbe9df3fc5d37b76a6ea943e5d2ab91c93f9ea9dbb0f63df84ccc8c5e149bec0f830171976f62b82cbe979d3aece68e44775a55eec9b8910ba2ec78f757b4817839ea656a9f9065f244a75f8177ae8f67ad0addb510312379ef2b20f5e80f425c796609272a384df1bb7face5057d1763f597f99307ad1865037075e118c60fc3442eb23d0b86de5f0789def1d2da0b3271a73a094a1c2bfd7cc035a865b512b7e33588669e417f9a15f3de1c08382d43eb76130cecf5eca26f093cf28d93cfdaffbaabb829ffae945950c00cc4f15f45e2bcf2652ed2a36bd8cf66942451922b6fc0a8b85ac843a465865bc209a329f71cf44490b854987c9333d5b78a470eff8b5433f4bdf8f8381d529c5e11b22a83ba55c0aaa5d1254522b92686ea8292de7a3a83903ab0f25fadd815c03b9356a4fe6f44a7af9173a308793c489a4802555dcecb7c5d7b45fcc421891786ccc2d81cbdc6042663cf36e16b42974de7aa45e1823526bde7ddc8ab0da2af07dd53f3781e3f6038215b3", 0xeca}], 0x3, 0x1) 0s ago: executing program 7 (id=4067): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xba39, 0x400c42) lstat(&(0x7f00000008c0)='./bus\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r1, &(0x7f0000000980)={0x8000000000000000, 0x0, 0x0, 0x5}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$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") kernel console output (not intermixed with test programs): root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 569.088438][T18057] loop5: detected capacity change from 0 to 512 [ 569.115231][T18057] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 569.127603][T18060] loop6: detected capacity change from 0 to 512 [ 569.138530][T18060] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 569.145419][T18057] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 569.158691][T18057] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.3707: bad orphan inode 4 [ 569.169046][T18057] loop5: lost filesystem error report for type 5 error -117 [ 569.169326][T18057] EXT4-fs (loop5): 1 orphan inode deleted [ 569.175511][T18060] EXT4-fs (loop6): 1 orphan inode deleted [ 569.176738][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 569.182476][T18060] EXT4-fs (loop6): 1 truncate cleaned up [ 569.182812][T18060] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.188239][ C1] EXT4-fs (loop5): initial error at time 1774977152: ext4_orphan_get:1423 [ 569.188266][ C1] EXT4-fs (loop5): last error at time 1774977152: ext4_orphan_get:1423 [ 569.229766][T18057] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.245478][ T28] audit: type=1400 audit(1774977152.200:19538): avc: denied { read write } for pid=18056 comm="syz.5.3707" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 569.269955][ T28] audit: type=1400 audit(1774977152.200:19539): avc: denied { open } for pid=18056 comm="syz.5.3707" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 569.354176][T18065] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 569.370285][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 569.372621][T18065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18065 comm=syz.6.3708 [ 569.395418][T18065] bridge0: port 3(batadv1) entered blocking state [ 569.403311][T18065] bridge0: port 3(batadv1) entered disabled state [ 569.411756][T18065] batadv1: entered allmulticast mode [ 569.418032][T18065] batadv1: entered promiscuous mode [ 569.512325][T18072] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3707'. [ 569.935817][ T5056] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 569.945082][ T5056] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 570.137644][T14214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.160557][T18077] loop5: detected capacity change from 0 to 512 [ 570.167380][T18077] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 570.179228][T18077] EXT4-fs (loop5): 1 orphan inode deleted [ 570.185164][T18077] EXT4-fs (loop5): 1 truncate cleaned up [ 570.191267][T18077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.331237][T18080] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 570.349642][T18080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18080 comm=syz.5.3710 [ 570.365897][T18080] bridge0: port 7(batadv5) entered blocking state [ 570.372334][T18080] bridge0: port 7(batadv5) entered disabled state [ 570.378905][T18080] batadv5: entered allmulticast mode [ 570.384836][T18080] batadv5: entered promiscuous mode [ 570.826111][T17996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.859561][T14214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.878332][T17541] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.910602][ T5056] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 570.919937][ T5056] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 570.954056][ T28] audit: type=1400 audit(1774977153.781:19540): avc: denied { bind } for pid=18092 comm="syz.5.3712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 570.979624][T18095] loop4: detected capacity change from 0 to 512 [ 570.979952][T18091] netlink: 'syz.7.3715': attribute type 10 has an invalid length. [ 570.991379][ T28] audit: type=1400 audit(1774977153.781:19541): avc: denied { node_bind } for pid=18092 comm="syz.5.3712" saddr=::ffff:172.20.20.45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 571.016877][ T28] audit: type=1400 audit(1774977153.837:19542): avc: denied { connect } for pid=18092 comm="syz.5.3712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 571.037350][ T28] audit: type=1400 audit(1774977153.837:19543): avc: denied { write } for pid=18092 comm="syz.5.3712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 571.060309][T18093] loop5: detected capacity change from 0 to 512 [ 571.071216][T18093] EXT4-fs: Ignoring removed mblk_io_submit option [ 571.104012][T18095] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #3: comm syz.4.3716: corrupted inode contents [ 571.128682][T18093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.129756][T18095] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 571.141607][T18095] EXT4-fs error (device loop4): ext4_dirty_inode:6495: inode #3: comm syz.4.3716: mark_inode_dirty error [ 571.141990][T18093] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.150755][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 571.150779][ C0] EXT4-fs (loop4): initial error at time 1774977153: ext4_do_update_inode:5602 [ 571.173771][ T28] audit: type=1400 audit(1774977154.005:19544): avc: denied { read write } for pid=18092 comm="syz.5.3712" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 571.178867][ C0] : inode 3 [ 571.178890][ C0] EXT4-fs (loop4): last error at time 1774977153: ext4_do_update_inode:5602: inode 3 [ 571.185074][T18095] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 571.226390][T18095] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #3: comm syz.4.3716: corrupted inode contents [ 571.247278][T18095] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 571.247382][ T28] audit: type=1400 audit(1774977154.005:19545): avc: denied { open } for pid=18092 comm="syz.5.3712" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 571.250895][T18095] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.3716: mark_inode_dirty error [ 571.328902][T18107] vcan0: tx address claim with different name [ 571.335326][T18095] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 571.336044][T18095] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.3716: Failed to acquire dquot type 0 [ 571.364717][T14214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.390525][T18095] loop4: lost filesystem error report for type 5 error -117 [ 571.403084][T18095] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #16: comm syz.4.3716: corrupted inode contents [ 571.441949][T18095] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 571.442186][T18095] EXT4-fs error (device loop4): ext4_dirty_inode:6495: inode #16: comm syz.4.3716: mark_inode_dirty error [ 571.475269][T18095] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 571.475598][T18095] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #16: comm syz.4.3716: corrupted inode contents [ 571.531893][T18095] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 571.532124][T18095] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.3716: mark_inode_dirty error [ 571.573575][T18095] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 571.573815][T18095] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #16: comm syz.4.3716: corrupted inode contents [ 571.593519][T18105] loop7: detected capacity change from 0 to 512 [ 571.629783][T18095] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 571.630036][T18095] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 571.649523][T18095] loop4: lost filesystem error report for type 5 error -117 [ 571.712106][T18095] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #16: comm syz.4.3716: corrupted inode contents [ 571.713712][T18106] loop6: detected capacity change from 0 to 512 [ 571.736900][T18095] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 571.757682][T18095] EXT4-fs error (device loop4): ext4_truncate:4602: inode #16: comm syz.4.3716: mark_inode_dirty error [ 571.779042][T18095] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 571.788307][T18095] loop4: lost filesystem error report for type 5 error -117 [ 571.789299][T18095] EXT4-fs (loop4): 1 truncate cleaned up [ 571.803404][T18095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.816079][T18095] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.819054][T18105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.845673][T18106] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 571.885316][T18105] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.948530][T18105] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.965205][T18106] netlink: 532 bytes leftover after parsing attributes in process `syz.6.3717'. [ 572.117549][T18120] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #3: comm syz.4.3716: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 572.117549][T18120] [ 572.176844][T18124] loop6: detected capacity change from 0 to 512 [ 572.210094][T18124] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 572.253297][T18124] EXT4-fs (loop6): 1 orphan inode deleted [ 572.259538][T18124] EXT4-fs (loop6): 1 truncate cleaned up [ 572.266031][T18124] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.305921][T18124] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 572.388804][T18124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18124 comm=syz.6.3723 [ 572.409151][T18105] netlink: 'syz.7.3718': attribute type 2 has an invalid length. [ 572.413472][T18137] loop5: detected capacity change from 0 to 1024 [ 572.426907][T18137] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 572.428004][T18124] bridge0: port 4(batadv2) entered blocking state [ 572.443500][T18137] loop5: detected capacity change from 0 to 164 [ 572.448042][T18124] bridge0: port 4(batadv2) entered disabled state [ 572.456554][T18124] batadv2: entered allmulticast mode [ 572.464697][T18124] batadv2: entered promiscuous mode [ 572.499177][T18137] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 572.507860][T17541] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.520262][T13070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.572484][T18145] EXT4-fs: Ignoring removed mblk_io_submit option [ 572.582231][T18145] EXT4-fs: Ignoring removed bh option [ 572.597348][T18146] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 572.616464][T18145] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 572.632164][T18151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=18151 comm=syz.7.3732 [ 572.646485][T18145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.651557][T18143] netlink: 'syz.6.3728': attribute type 10 has an invalid length. [ 572.660832][T18145] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.670764][T18143] team0: Port device dummy0 added [ 572.886702][T18162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.910820][T18171] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3738'. [ 572.923073][T18162] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.948896][T18171] syzkaller0: entered promiscuous mode [ 572.965465][ T57] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 572.974780][ T57] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 573.212818][T18171] syzkaller0: entered allmulticast mode [ 573.307329][T18175] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3735: bg 0: block 345: padding at end of block bitmap is not set [ 573.361408][T18175] EXT4-fs (loop6): Remounting filesystem read-only [ 573.491100][ T57] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 573.738952][T18158] netlink: 532 bytes leftover after parsing attributes in process `syz.0.3733'. [ 573.926492][T17541] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.935855][T13070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 574.025866][T18189] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3743'. [ 574.055363][T18189] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3743'. [ 574.113023][T18193] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3744'. [ 574.231843][T18199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=18199 comm=syz.6.3746 [ 574.369240][T18205] netlink: 'syz.7.3748': attribute type 21 has an invalid length. [ 574.384845][T18202] IPVS: set_ctl: invalid protocol: 58 172.20.20.65:20003 [ 574.416548][ T28] kauditd_printk_skb: 202 callbacks suppressed [ 574.416578][ T28] audit: type=1400 audit(1774977157.036:19746): avc: denied { append } for pid=18206 comm="syz.6.3749" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 574.684245][T18223] netlink: 'syz.6.3751': attribute type 10 has an invalid length. [ 574.995655][ T28] audit: type=1400 audit(1774977157.560:19747): avc: denied { ioctl } for pid=18229 comm="syz.6.3756" path="socket:[57977]" dev="sockfs" ino=57977 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 575.049196][T18232] set_capacity_and_notify: 3 callbacks suppressed [ 575.049213][T18232] loop4: detected capacity change from 0 to 1024 [ 575.092436][T18232] EXT4-fs: Ignoring removed bh option [ 575.185211][T18232] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 575.196726][T18236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=18236 comm=syz.0.3759 [ 575.226608][T18232] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #3: block 2: comm syz.4.3757: lblock 2 mapped to illegal pblock 2 (length 1) [ 575.243339][T18232] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 575.249247][T18216] loop7: detected capacity change from 0 to 1024 [ 575.251453][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 575.251481][ C1] EXT4-fs (loop4): initial error at time 1774977157: ext4_map_blocks:786: inode 3: block 2 [ 575.251520][ C1] EXT4-fs (loop4): last error at time 1774977157: ext4_map_blocks:786: inode 3: block 2 [ 575.261075][T18232] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #3: block 48: comm syz.4.3757: lblock 0 mapped to illegal pblock 48 (length 1) [ 575.288623][T18216] EXT4-fs: test_dummy_encryption option not supported [ 575.640651][T18243] loop7: detected capacity change from 0 to 512 [ 575.656341][ T28] audit: type=1400 audit(1774977158.130:19748): avc: denied { append } for pid=18215 comm="syz.7.3752" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 575.701186][T18243] EXT4-fs (loop7): 1 orphan inode deleted [ 575.707707][T18243] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.720848][ T224] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 575.730691][ T224] EXT4-fs error (device loop7): ext4_release_dquot:7062: comm kworker/u8:5: Failed to release dquot type 1 [ 575.742681][T18243] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.810049][ T28] audit: type=1400 audit(1774977158.336:19749): avc: denied { setopt } for pid=18242 comm="syz.7.3760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 575.831425][ T28] audit: type=1400 audit(1774977158.355:19750): avc: denied { remount } for pid=18242 comm="syz.7.3760" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 576.293509][T18232] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 576.303632][T18246] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 576.312092][T18232] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.3757: Failed to acquire dquot type 0 [ 576.401219][T18248] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3761'. [ 576.414434][ T28] audit: type=1400 audit(1774977158.888:19751): avc: denied { write } for pid=18249 comm="syz.5.3762" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 576.444875][T18232] loop4: lost filesystem error report for type 5 error -117 [ 576.452675][T18232] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 576.482866][T16467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.535143][T18232] loop4: lost filesystem error report for type 5 error -117 [ 576.538522][ T28] audit: type=1400 audit(1774977158.888:19752): avc: denied { ioctl } for pid=18249 comm="syz.5.3762" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 576.579750][T18232] EXT4-fs error (device loop4): ext4_evict_inode:265: inode #11: comm syz.4.3757: mark_inode_dirty error [ 576.616636][T18257] loop6: detected capacity change from 0 to 1024 [ 576.621861][T18261] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3767'. [ 576.633948][T18232] fserror_report: 3 callbacks suppressed [ 576.633967][T18232] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 576.640765][T18257] EXT4-fs: test_dummy_encryption option not supported [ 576.651543][T18232] EXT4-fs warning (device loop4): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 576.668783][T18232] EXT4-fs (loop4): 1 orphan inode deleted [ 576.681581][ T5040] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 576.696864][ T5040] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 576.697007][ T5040] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:12: Failed to release dquot type 0 [ 576.697165][T18264] loop5: detected capacity change from 0 to 512 [ 576.724719][T18232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.737176][ T5040] loop4: lost filesystem error report for type 5 error -117 [ 576.743668][T18232] EXT4-fs error (device loop4): __ext4_get_inode_loc:4797: comm syz.4.3757: Invalid inode table block 1 in block_group 0 [ 576.768133][T18232] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 576.828883][T18232] EXT4-fs error (device loop4): ext4_dirty_inode:6495: inode #2: comm syz.4.3757: mark_inode_dirty error [ 576.841678][T18232] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #2: block 16: comm syz.4.3757: lblock 0 mapped to illegal pblock 16 (length 1) [ 576.858943][T18232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3757'. [ 576.863625][T18264] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 576.900324][T18264] EXT4-fs (loop5): orphan cleanup on readonly fs [ 576.918068][T18264] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #16: comm syz.5.3768: corrupted inode contents [ 577.069916][T18275] loop6: detected capacity change from 0 to 512 [ 577.109614][T18264] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 577.119723][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 577.135404][ C1] EXT4-fs (loop5): initial error at time 1774977159: ext4_do_update_inode:5602: inode 16 [ 577.145352][ C1] EXT4-fs (loop5): last error at time 1774977159: ext4_do_update_inode:5602: inode 16 [ 577.156318][ T57] EXT4-fs error (device loop4): __ext4_get_inode_loc:4797: comm kworker/u8:4: Invalid inode table block 1 in block_group 0 [ 577.181438][T18264] EXT4-fs (loop5): Remounting filesystem read-only [ 577.214743][T18264] EXT4-fs (loop5): 1 truncate cleaned up [ 577.260344][T18275] EXT4-fs (loop6): 1 orphan inode deleted [ 577.273987][T18275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.289149][T18275] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.370163][T18275] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 577.397552][T18275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3766'. [ 577.418229][T11283] IPVS: starting estimator thread 0... [ 577.427062][T18261] loop7: detected capacity change from 0 to 1024 [ 577.450446][T18261] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 577.467005][T18261] System zones: 0-1, 3-36 [ 577.492475][T18261] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.3767: bad orphan inode 134217728 [ 577.530958][T18261] loop7: lost filesystem error report for type 5 error -117 [ 577.533605][T18261] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.553970][T18280] IPVS: using max 2880 ests per chain, 144000 per kthread [ 577.945799][ T5047] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 577.957356][ T5047] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 577.977883][ T5047] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 577.996849][T13070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.006469][T18264] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 578.020467][T16467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.030178][T13070] EXT4-fs error (device loop4): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 578.080548][T13070] loop4: lost filesystem error report for type 5 error -117 [ 578.080739][T13070] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 578.109260][T14214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.124388][T18297] loop7: detected capacity change from 0 to 2048 [ 578.130872][T13070] loop4: lost filesystem error report for type 5 error -117 [ 578.131129][T13070] EXT4-fs error (device loop4): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 578.188039][T18297] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.207708][T13070] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 578.241383][T18303] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3770'. [ 578.275645][T18297] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.289655][T18305] loop5: detected capacity change from 0 to 512 [ 578.302985][T18305] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 578.336762][T18305] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 578.378306][T18305] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.3774: bad orphan inode 4 [ 578.396595][T18309] netlink: 'syz.4.3775': attribute type 5 has an invalid length. [ 578.408029][T18305] loop5: lost filesystem error report for type 5 error -117 [ 578.408185][T18305] EXT4-fs (loop5): 1 orphan inode deleted [ 578.415713][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 578.415735][ C1] EXT4-fs (loop5): initial error at time 1774977160: ext4_orphan_get:1423 [ 578.415761][ C1] EXT4-fs (loop5): last error at time 1774977160: ext4_orphan_get:1423 [ 578.465331][T18310] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz.7.3772: invalid fast symlink length 39 [ 578.490694][T18305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.505730][T18310] EXT4-fs (loop7): Remounting filesystem read-only [ 578.682149][T18315] 9p: Bad value for 'wfdno' [ 578.687546][T17541] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.733245][T18321] loop4: detected capacity change from 0 to 1024 [ 578.753408][T16467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.763193][T18321] EXT4-fs: Ignoring removed bh option [ 578.773646][T18321] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 579.058162][T18321] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #3: block 2: comm syz.4.3779: lblock 2 mapped to illegal pblock 2 (length 1) [ 579.085560][T18321] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 579.085875][T18321] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #3: block 48: comm syz.4.3779: lblock 0 mapped to illegal pblock 48 (length 1) [ 579.094977][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 579.094993][ C0] EXT4-fs (loop4): initial error at time 1774977161: ext4_map_blocks:786: inode 3: block 2 [ 579.095030][ C0] EXT4-fs (loop4): last error at time 1774977161: ext4_map_blocks:786: inode 3: block 2 [ 579.195292][T18321] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 579.195546][T18321] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.3779: Failed to acquire dquot type 0 [ 579.238109][T18321] loop4: lost filesystem error report for type 5 error -117 [ 579.238533][T18321] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 579.276468][T18321] loop4: lost filesystem error report for type 5 error -117 [ 579.276940][T18321] EXT4-fs error (device loop4): ext4_evict_inode:265: inode #11: comm syz.4.3779: mark_inode_dirty error [ 579.315173][T18321] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 579.315579][T18321] EXT4-fs warning (device loop4): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 579.356171][T18321] EXT4-fs (loop4): 1 orphan inode deleted [ 579.370368][T18321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.382966][ T5047] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 579.401278][ T5047] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 579.401498][ T5047] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:14: Failed to release dquot type 0 [ 579.444136][T18321] EXT4-fs error (device loop4): __ext4_get_inode_loc:4797: comm syz.4.3779: Invalid inode table block 1 in block_group 0 [ 579.478692][T18321] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 579.500991][T18321] EXT4-fs error (device loop4): ext4_dirty_inode:6495: inode #2: comm syz.4.3779: mark_inode_dirty error [ 579.534144][T18321] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #2: block 16: comm syz.4.3779: lblock 0 mapped to illegal pblock 16 (length 1) [ 579.571109][T18321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3779'. [ 579.611184][ T5040] EXT4-fs error (device loop4): __ext4_get_inode_loc:4797: comm kworker/u8:12: Invalid inode table block 1 in block_group 0 [ 579.625673][T13070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.650759][T13070] EXT4-fs error (device loop4): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 579.685636][T18239] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 579.709590][T13070] loop4: lost filesystem error report for type 5 error -117 [ 579.709920][T13070] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 579.792799][T18329] EXT4-fs: Ignoring removed bh option [ 579.829925][T13070] EXT4-fs error (device loop4): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 579.857016][T18329] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 579.899444][T13070] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 579.996224][T18329] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #3: block 2: comm syz.7.3780: lblock 2 mapped to illegal pblock 2 (length 1) [ 580.082096][T18329] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 580.082265][T18329] __quota_error: 23 callbacks suppressed [ 580.082300][T18329] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 580.097119][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 580.097136][ C0] EXT4-fs (loop7): initial error at time 1774977162: ext4_map_blocks:786: inode 3: block 2 [ 580.097173][ C0] EXT4-fs (loop7): last error at time 1774977162: ext4_map_blocks:786: inode 3: block 2 [ 580.168613][T18329] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #3: block 48: comm syz.7.3780: lblock 0 mapped to illegal pblock 48 (length 1) [ 580.346893][T18329] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 580.360503][T18329] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.3780: Failed to acquire dquot type 0 [ 580.380206][T18347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3784'. [ 580.380508][T18329] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 580.461440][T18341] set_capacity_and_notify: 1 callbacks suppressed [ 580.461457][T18341] loop6: detected capacity change from 0 to 1764 [ 580.498823][T18329] EXT4-fs error (device loop7): ext4_evict_inode:265: inode #11: comm syz.7.3780: mark_inode_dirty error [ 580.634098][T18329] EXT4-fs warning (device loop7): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 580.772918][T18329] EXT4-fs (loop7): 1 orphan inode deleted [ 580.847559][T18329] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.933283][T18329] EXT4-fs error (device loop7): __ext4_get_inode_loc:4797: comm syz.7.3780: Invalid inode table block 1 in block_group 0 [ 580.946572][ T224] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 580.967862][T18329] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 581.003256][T18329] EXT4-fs error (device loop7): ext4_dirty_inode:6495: inode #2: comm syz.7.3780: mark_inode_dirty error [ 581.022076][ T28] audit: type=1400 audit(1774977163.181:19766): avc: denied { create } for pid=18366 comm="syz.0.3786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 581.039762][ T224] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 581.050584][ T224] EXT4-fs error (device loop7): ext4_release_dquot:7062: comm kworker/u8:5: Failed to release dquot type 0 [ 581.082541][T14214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.107359][ T28] audit: type=1400 audit(1774977163.210:19767): avc: denied { ioctl } for pid=18366 comm="syz.0.3786" path="socket:[58139]" dev="sockfs" ino=58139 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 581.138968][T18329] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #2: block 16: comm syz.7.3780: lblock 0 mapped to illegal pblock 16 (length 1) [ 581.167103][T18381] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3785'. [ 581.169333][T18377] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3788'. [ 581.188112][ T28] audit: type=1400 audit(1774977163.256:19768): avc: denied { accept } for pid=18366 comm="syz.0.3786" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 581.232662][T18329] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3780'. [ 581.256922][ T224] EXT4-fs error (device loop7): __ext4_get_inode_loc:4797: comm kworker/u8:5: Invalid inode table block 1 in block_group 0 [ 581.290344][T16467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.302030][T16467] EXT4-fs error (device loop7): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 581.315864][T16467] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 581.326057][T16467] EXT4-fs error (device loop7): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 581.515083][T18401] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 581.532347][T18401] ip6tnl0: Caught tx_queue_len zero misconfig [ 581.554264][T18401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18401 comm=syz.0.3793 [ 581.573736][T18401] bridge0: port 3(batadv1) entered blocking state [ 581.580614][T18401] bridge0: port 3(batadv1) entered disabled state [ 581.587219][T18401] batadv1: entered allmulticast mode [ 581.593390][T18401] batadv1: entered promiscuous mode [ 581.769589][T18436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.786793][T18436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.833831][T18436] loop6: detected capacity change from 0 to 512 [ 581.846070][T18441] netlink: 'syz.0.3799': attribute type 10 has an invalid length. [ 581.900034][T18436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.924339][ T28] audit: type=1400 audit(1774977164.051:19769): avc: denied { connect } for pid=18444 comm="syz.0.3800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 581.952862][T18436] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.986360][T18450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3801'. [ 581.996148][T18450] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18450 comm=syz.0.3801 [ 582.014393][ T28] audit: type=1400 audit(1774977164.051:19770): avc: denied { setopt } for pid=18444 comm="syz.0.3800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 582.113510][ T224] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 582.122821][ T224] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 582.141105][T18453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3802'. [ 582.192669][T18457] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3803'. [ 582.202249][T18455] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3803'. [ 582.277798][T18455] netlink: 'syz.0.3803': attribute type 1 has an invalid length. [ 582.411851][T18464] loop5: detected capacity change from 0 to 512 [ 582.421301][T18464] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 582.448901][T18464] EXT4-fs (loop5): 1 orphan inode deleted [ 582.455385][T18464] EXT4-fs (loop5): 1 truncate cleaned up [ 582.463028][T18464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.540053][T18464] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 582.570715][T18464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18464 comm=syz.5.3806 [ 582.615042][T18464] bridge0: port 8(batadv6) entered blocking state [ 582.621610][T18464] bridge0: port 8(batadv6) entered disabled state [ 582.631469][T18464] batadv6: entered allmulticast mode [ 582.652082][T18464] batadv6: entered promiscuous mode [ 582.671970][T14214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.723105][T17541] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.783553][ T28] audit: type=1400 audit(1774977164.856:19771): avc: denied { connect } for pid=18471 comm="syz.0.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 582.987871][T18483] loop5: detected capacity change from 0 to 512 [ 582.994535][T18483] EXT4-fs: Ignoring removed mblk_io_submit option [ 583.023197][T18482] netlink: 'syz.6.3810': attribute type 10 has an invalid length. [ 583.042894][T18483] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.077856][T18489] loop6: detected capacity change from 0 to 1024 [ 583.087234][T18483] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 583.167899][T18489] EXT4-fs: Ignoring removed bh option [ 583.201044][ T408] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 583.202818][T18491] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3814'. [ 583.210614][ T408] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 583.229401][T18489] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 583.254917][T18489] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #3: block 2: comm syz.6.3813: lblock 2 mapped to illegal pblock 2 (length 1) [ 583.297191][T18493] vcan0: tx address claim with different name [ 583.318431][T14214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.361053][T18489] fserror_report: 3 callbacks suppressed [ 583.361080][T18489] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 583.406086][T18489] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 583.423347][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 583.423367][ C0] EXT4-fs (loop6): initial error at time 1774977165: ext4_map_blocks:786: inode 3: block 2 [ 583.423415][ C0] EXT4-fs (loop6): last error at time 1774977165: ext4_map_blocks:786: inode 3: block 2 [ 583.469973][T18489] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #3: block 48: comm syz.6.3813: lblock 0 mapped to illegal pblock 48 (length 1) [ 583.500877][T18489] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 583.501111][T18489] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.3813: Failed to acquire dquot type 0 [ 583.543664][T18489] fserror_report: 5 callbacks suppressed [ 583.543684][T18489] loop6: lost filesystem error report for type 5 error -117 [ 583.549821][T18489] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 583.568480][T18489] loop6: lost filesystem error report for type 5 error -117 [ 583.575237][T18489] EXT4-fs error (device loop6): ext4_evict_inode:265: inode #11: comm syz.6.3813: mark_inode_dirty error [ 583.594828][T18489] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 583.595619][T18489] EXT4-fs warning (device loop6): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 583.673097][T18489] EXT4-fs (loop6): 1 orphan inode deleted [ 583.684344][T18489] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.701467][ T5047] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 583.734812][ T5047] EXT4-fs error (device loop6): ext4_release_dquot:7062: comm kworker/u8:14: Failed to release dquot type 0 [ 583.770150][T18489] EXT4-fs error (device loop6): __ext4_get_inode_loc:4797: comm syz.6.3813: Invalid inode table block 1 in block_group 0 [ 583.791581][T18489] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 583.814775][T18489] EXT4-fs error (device loop6): ext4_dirty_inode:6495: inode #2: comm syz.6.3813: mark_inode_dirty error [ 583.883753][T18505] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #2: block 16: comm syz.6.3813: lblock 0 mapped to illegal pblock 16 (length 1) [ 583.923463][ T408] EXT4-fs error (device loop6): __ext4_get_inode_loc:4797: comm kworker/u8:6: Invalid inode table block 1 in block_group 0 [ 583.942592][T17541] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.976391][T17541] EXT4-fs error (device loop6): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 583.994345][T17541] loop6: lost filesystem error report for type 5 error -117 [ 583.994546][T17541] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 584.066884][T17541] loop6: lost filesystem error report for type 5 error -117 [ 584.067057][T17541] EXT4-fs error (device loop6): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 584.133879][T17541] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 584.160988][T18509] loop6: detected capacity change from 0 to 512 [ 584.187949][T18509] EXT4-fs: Ignoring removed oldalloc option [ 584.201280][T18509] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 584.224817][T18509] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.254221][T18509] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 584.271454][T18516] veth3: entered promiscuous mode [ 584.276840][T18516] veth3: entered allmulticast mode [ 585.203380][T17541] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.217987][T18528] loop4: detected capacity change from 0 to 512 [ 585.296620][T18528] EXT4-fs: Ignoring removed mblk_io_submit option [ 585.345406][T18528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.377768][T18528] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.545566][T13070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.975075][T18536] loop6: detected capacity change from 0 to 512 [ 586.009231][T18536] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 586.557204][T18536] __nla_validate_parse: 3 callbacks suppressed [ 586.557223][T18536] netlink: 532 bytes leftover after parsing attributes in process `syz.6.3826'. [ 586.618770][T18542] loop5: detected capacity change from 0 to 1024 [ 586.636645][T18542] EXT4-fs: Ignoring removed bh option [ 586.643582][T18542] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 586.812536][T18544] loop7: detected capacity change from 0 to 512 [ 586.845693][T18544] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 586.888608][T18544] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3828: bg 0: block 288: padding at end of block bitmap is not set [ 586.904308][T18544] loop7: lost filesystem error report for type 5 error -117 [ 586.908195][T18544] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 586.916276][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 586.916310][ C0] EXT4-fs (loop7): initial error at time 1774977168: ext4_validate_block_bitmap:441 [ 586.916470][ C0] EXT4-fs (loop7): last error at time 1774977168: ext4_validate_block_bitmap:441 [ 586.951500][T18544] loop7: lost filesystem error report for type 5 error -117 [ 586.961370][T18544] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.3828: attempt to clear invalid blocks 1024 len 1 [ 586.983121][T18544] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 586.987485][T18544] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.3828: invalid indirect mapped block 1819239214 (level 0) [ 587.011673][T18544] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 587.017843][T18544] EXT4-fs (loop7): 1 truncate cleaned up [ 587.042902][T18544] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.123189][T18542] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #3: block 2: comm syz.5.3830: lblock 2 mapped to illegal pblock 2 (length 1) [ 587.214691][T18533] loop4: detected capacity change from 0 to 512 [ 587.268059][T18542] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 587.268376][T18542] __quota_error: 11 callbacks suppressed [ 587.268401][T18542] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 587.277520][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 587.277538][ C0] EXT4-fs (loop5): initial error at time 1774977169: ext4_map_blocks:786: inode 3: block 2 [ 587.277578][ C0] EXT4-fs (loop5): last error at time 1774977169: ext4_map_blocks:786: inode 3: block 2 [ 587.658326][T18542] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #3: block 48: comm syz.5.3830: lblock 0 mapped to illegal pblock 48 (length 1) [ 587.692158][T18542] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 587.692371][T18542] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 588.300674][T18542] EXT4-fs error (device loop5): ext4_acquire_dquot:7026: comm syz.5.3830: Failed to acquire dquot type 0 [ 588.312024][T18542] loop5: lost filesystem error report for type 5 error -117 [ 588.332787][T18533] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 588.574841][T18542] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 588.601653][T16467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.614611][T18542] loop5: lost filesystem error report for type 5 error -117 [ 588.614776][T18542] EXT4-fs error (device loop5): ext4_evict_inode:265: inode #11: comm syz.5.3830: mark_inode_dirty error [ 588.666368][T18542] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 588.682536][T18542] EXT4-fs warning (device loop5): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 588.722010][T18542] EXT4-fs (loop5): 1 orphan inode deleted [ 588.737887][T18542] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.750135][ T224] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 588.857874][T18554] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 588.864432][T18554] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 588.915429][ T224] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 588.933661][ T224] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:5: Failed to release dquot type 0 [ 588.936975][T18559] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 588.951657][T18559] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 588.961331][T18566] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 588.968124][T18566] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 589.141877][T18569] loop6: detected capacity change from 0 to 512 [ 589.177086][T18569] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 589.201162][T18542] EXT4-fs error (device loop5): __ext4_get_inode_loc:4797: comm syz.5.3830: Invalid inode table block 1 in block_group 0 [ 589.228764][T18569] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3835: bg 0: block 288: padding at end of block bitmap is not set [ 589.244580][T18569] loop6: lost filesystem error report for type 5 error -117 [ 589.246686][T18569] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 589.254457][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 589.254523][ C0] EXT4-fs (loop6): initial error at time 1774977170: ext4_validate_block_bitmap:441 [ 589.254672][ C0] EXT4-fs (loop6): last error at time 1774977170: ext4_validate_block_bitmap:441 [ 589.289455][T18569] loop6: lost filesystem error report for type 5 error -117 [ 589.298173][T18569] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.3835: attempt to clear invalid blocks 1024 len 1 [ 589.319358][T18569] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 589.320641][ T9] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 589.340073][T18569] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3835: invalid indirect mapped block 1819239214 (level 0) [ 589.354825][T18569] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 589.358667][T18569] EXT4-fs (loop6): 1 truncate cleaned up [ 589.384118][T18569] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.570856][T18566] vhci_hcd vhci_hcd.0: Device attached [ 589.576590][T18554] vhci_hcd vhci_hcd.0: Device attached [ 589.603989][T18542] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 589.893044][T18574] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(20) [ 589.899683][T18574] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 589.909853][T18542] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #2: comm syz.5.3830: mark_inode_dirty error [ 589.946361][T18575] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3830'. [ 589.957680][T18578] loop4: detected capacity change from 0 to 512 [ 589.964253][T18559] vhci_hcd vhci_hcd.0: Device attached [ 589.984727][T18554] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(8) [ 589.991374][T18554] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 590.010627][T18573] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #2: block 16: comm syz.5.3830: lblock 0 mapped to illegal pblock 16 (length 1) [ 590.035896][T18578] EXT4-fs: Ignoring removed bh option [ 590.049563][T18578] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 590.074660][T18574] vhci_hcd vhci_hcd.0: Device attached [ 590.099040][T18578] EXT4-fs (loop4): 1 truncate cleaned up [ 590.105090][T18554] vhci_hcd vhci_hcd.0: Device attached [ 590.121089][T18578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.141697][T18559] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13) [ 590.148470][T18559] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 590.156088][ T8993] EXT4-fs error (device loop5): __ext4_get_inode_loc:4797: comm kworker/u8:29: Invalid inode table block 1 in block_group 0 [ 590.181185][T14214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.191366][T18559] vhci_hcd vhci_hcd.0: Device attached [ 590.197352][T18558] loop7: detected capacity change from 0 to 1024 [ 590.216105][T14214] EXT4-fs error (device loop5): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 590.238048][T18562] vhci_hcd: connection closed [ 590.238385][ T224] vhci_hcd vhci_hcd.0: stop threads [ 590.248444][T18576] vhci_hcd: connection closed [ 590.251013][T18567] vhci_hcd: connection closed [ 590.255806][T18579] vhci_hcd: connection closed [ 590.260858][T18581] vhci_hcd: connection closed [ 590.271361][T18560] vhci_hcd: connection reset by peer [ 590.290291][T18558] EXT4-fs: test_dummy_encryption option not supported [ 590.308053][T14214] loop5: lost filesystem error report for type 5 error -117 [ 590.308195][ T224] vhci_hcd vhci_hcd.0: release socket [ 590.326797][T14214] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 590.345832][ T224] vhci_hcd vhci_hcd.0: disconnect device [ 590.351588][T14214] loop5: lost filesystem error report for type 5 error -117 [ 590.351730][T14214] EXT4-fs error (device loop5): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 590.384077][ T224] vhci_hcd vhci_hcd.0: stop threads [ 590.400414][ T224] vhci_hcd vhci_hcd.0: release socket [ 590.416855][ T224] vhci_hcd vhci_hcd.0: disconnect device [ 590.439582][T14214] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 590.452986][ T224] vhci_hcd vhci_hcd.0: stop threads [ 590.483693][ T224] vhci_hcd vhci_hcd.0: release socket [ 590.502432][ T224] vhci_hcd vhci_hcd.0: disconnect device [ 590.515207][ T224] vhci_hcd vhci_hcd.0: stop threads [ 590.525135][ T224] vhci_hcd vhci_hcd.0: release socket [ 590.532059][T13070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.541279][ T224] vhci_hcd vhci_hcd.0: disconnect device [ 590.547978][ T224] vhci_hcd vhci_hcd.0: stop threads [ 590.553397][ T224] vhci_hcd vhci_hcd.0: release socket [ 590.562932][ T224] vhci_hcd vhci_hcd.0: disconnect device [ 590.569293][ T224] vhci_hcd vhci_hcd.0: stop threads [ 590.574653][ T224] vhci_hcd vhci_hcd.0: release socket [ 590.594260][ T224] vhci_hcd vhci_hcd.0: disconnect device [ 590.637960][T17541] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.211536][T18610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3844'. [ 591.259388][T18615] loop7: detected capacity change from 0 to 1024 [ 591.269615][T18610] vlan2: entered promiscuous mode [ 591.274861][T18610] vlan2: entered allmulticast mode [ 591.279987][T18610] hsr_slave_1: entered allmulticast mode [ 591.306830][T18615] EXT4-fs: Ignoring removed bh option [ 591.322797][T18615] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 591.350813][T18615] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #3: block 2: comm syz.7.3847: lblock 2 mapped to illegal pblock 2 (length 1) [ 591.365217][T18615] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 591.365514][T18615] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 591.374595][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 591.374615][ C1] EXT4-fs (loop7): initial error at time 1774977172: ext4_map_blocks:786: inode 3: block 2 [ 591.374658][ C1] EXT4-fs (loop7): last error at time 1774977172: ext4_map_blocks:786: inode 3: block 2 [ 591.409859][T18615] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #3: block 48: comm syz.7.3847: lblock 0 mapped to illegal pblock 48 (length 1) [ 591.424276][T18615] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 591.424464][T18615] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 591.443017][T18615] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.3847: Failed to acquire dquot type 0 [ 591.455208][T18615] loop7: lost filesystem error report for type 5 error -117 [ 591.455387][T18615] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 591.472461][T18615] loop7: lost filesystem error report for type 5 error -117 [ 591.472633][T18615] EXT4-fs error (device loop7): ext4_evict_inode:265: inode #11: comm syz.7.3847: mark_inode_dirty error [ 591.491406][T18615] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 591.495185][T18615] EXT4-fs warning (device loop7): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 591.536856][T18587] loop4: detected capacity change from 0 to 1024 [ 591.543866][T18615] EXT4-fs (loop7): 1 orphan inode deleted [ 591.544318][T18615] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.563958][ T8993] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:29: lblock 1 mapped to illegal pblock 1 (length 1) [ 591.567073][T18615] EXT4-fs error (device loop7): __ext4_get_inode_loc:4797: comm syz.7.3847: Invalid inode table block 1 in block_group 0 [ 591.607638][ T8993] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 591.620383][T18615] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 591.624638][T18587] EXT4-fs: test_dummy_encryption option not supported [ 591.638191][ T8993] EXT4-fs error (device loop7): ext4_release_dquot:7062: comm kworker/u8:29: Failed to release dquot type 0 [ 591.643380][T18615] EXT4-fs error (device loop7): ext4_dirty_inode:6495: inode #2: comm syz.7.3847: mark_inode_dirty error [ 591.662769][T18593] loop6: detected capacity change from 0 to 1024 [ 591.692289][T18620] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #2: block 16: comm syz.7.3847: lblock 0 mapped to illegal pblock 16 (length 1) [ 591.735620][T18615] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3847'. [ 591.755630][ T47] EXT4-fs error (device loop7): __ext4_get_inode_loc:4797: comm kworker/u8:3: Invalid inode table block 1 in block_group 0 [ 591.780134][ T28] audit: type=1400 audit(1774977173.274:19781): avc: denied { ioctl } for pid=18618 comm="syz.0.3848" path="socket:[59579]" dev="sockfs" ino=59579 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 591.809755][T18593] EXT4-fs: test_dummy_encryption option not supported [ 591.825860][T18621] syzkaller0: entered promiscuous mode [ 591.833098][T16467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.852016][T16467] EXT4-fs error (device loop7): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 591.871599][T18621] syzkaller0: entered allmulticast mode [ 591.877467][T16467] loop7: lost filesystem error report for type 5 error -117 [ 591.877606][T16467] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 591.895587][T16467] loop7: lost filesystem error report for type 5 error -117 [ 591.895873][T16467] EXT4-fs error (device loop7): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 591.945693][T16467] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 592.017433][T18629] loop7: detected capacity change from 0 to 1024 [ 592.041719][ T28] audit: type=1326 audit(1774977173.480:19782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18626 comm="syz.6.3851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabddcc819 code=0x7ffc0000 [ 592.055117][T18629] EXT4-fs: Ignoring removed mblk_io_submit option [ 592.082292][T18634] loop5: detected capacity change from 0 to 512 [ 592.091627][ T28] audit: type=1326 audit(1774977173.480:19783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18626 comm="syz.6.3851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabddcc819 code=0x7ffc0000 [ 592.115499][T18629] EXT4-fs: Ignoring removed bh option [ 592.116138][T18634] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 592.146033][T18635] audit: audit_backlog=65 > audit_backlog_limit=64 [ 592.152583][T18629] EXT4-fs (loop7): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 592.163759][T18629] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.189359][T18629] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.199601][T18634] EXT4-fs (loop5): 1 orphan inode deleted [ 592.205668][T18634] EXT4-fs (loop5): 1 truncate cleaned up [ 592.212104][T18634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.305607][T18644] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 592.323750][T16467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 592.345357][T18634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18634 comm=syz.5.3853 [ 592.393444][T18634] bridge0: port 9(batadv7) entered blocking state [ 592.400429][T18634] bridge0: port 9(batadv7) entered disabled state [ 592.407398][T18634] batadv7: entered allmulticast mode [ 592.414086][T18634] batadv7: entered promiscuous mode [ 592.505386][T14214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.732450][T18654] loop7: detected capacity change from 0 to 1024 [ 592.786577][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 592.786596][ T28] audit: type=1400 audit(1774977174.210:19891): avc: denied { setopt } for pid=18656 comm="syz.5.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 592.833753][T18654] EXT4-fs: Ignoring removed bh option [ 592.846551][T18659] loop5: detected capacity change from 0 to 512 [ 592.895979][T18654] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 592.917100][T18659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.941866][ T8989] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled [ 592.951270][ T8989] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled [ 592.980273][T18659] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 593.005123][T18654] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #3: block 2: comm syz.7.3859: lblock 2 mapped to illegal pblock 2 (length 1) [ 593.051811][T14214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.070138][T18654] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 593.070355][T18654] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 593.087634][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 593.087655][ C1] EXT4-fs (loop7): initial error at time 1774977174: ext4_map_blocks:786: inode 3: block 2 [ 593.087724][ C1] EXT4-fs (loop7): last error at time 1774977174: ext4_map_blocks:786: inode 3: block 2 [ 593.109149][T18641] loop6: detected capacity change from 0 to 512 [ 593.159178][T18654] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #3: block 48: comm syz.7.3859: lblock 0 mapped to illegal pblock 48 (length 1) [ 593.176834][T18641] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 593.218303][T18654] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 593.220370][T18654] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 593.306044][T18654] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.3859: Failed to acquire dquot type 0 [ 593.332736][T18654] loop7: lost filesystem error report for type 5 error -117 [ 593.332945][T18654] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 593.360860][T18654] loop7: lost filesystem error report for type 5 error -117 [ 593.363428][T18654] EXT4-fs error (device loop7): ext4_evict_inode:265: inode #11: comm syz.7.3859: mark_inode_dirty error [ 593.392671][T18654] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 593.419406][T18654] EXT4-fs warning (device loop7): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 593.438944][T18654] EXT4-fs (loop7): 1 orphan inode deleted [ 593.490724][ T8989] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1) [ 593.516377][T18665] loop4: detected capacity change from 0 to 1024 [ 593.539571][T18665] EXT4-fs: test_dummy_encryption option not supported [ 593.606888][ T8989] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 593.648590][ T8989] EXT4-fs error (device loop7): ext4_release_dquot:7062: comm kworker/u8:27: Failed to release dquot type 0 [ 593.677631][T18654] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.922263][T18654] EXT4-fs error (device loop7): __ext4_get_inode_loc:4797: comm syz.7.3859: Invalid inode table block 1 in block_group 0 [ 593.987778][T18681] loop6: detected capacity change from 0 to 1024 [ 594.094380][T18681] EXT4-fs: Ignoring removed mblk_io_submit option [ 594.106206][T18654] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 594.167798][T18684] loop4: detected capacity change from 0 to 512 [ 594.427419][ T28] audit: type=1400 audit(1774977174.790:19892): avc: denied { read write } for pid=18673 comm="syz.6.3865" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 594.458585][T18681] EXT4-fs: Ignoring removed bh option [ 594.464770][T18684] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 595.131561][ T9] usb 1-1: enqueue for inactive port 0 [ 595.139818][ T28] audit: type=1400 audit(1774977174.790:19893): avc: denied { open } for pid=18673 comm="syz.6.3865" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 595.163542][ T9] usb 1-1: enqueue for inactive port 0 [ 595.173239][T18688] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3859'. [ 595.193481][T18681] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 595.208287][T18654] EXT4-fs error (device loop7): ext4_dirty_inode:6495: inode #2: comm syz.7.3859: mark_inode_dirty error [ 595.220109][T18692] EXT4-fs: Ignoring removed mblk_io_submit option [ 595.220931][T18684] EXT4-fs (loop4): 1 orphan inode deleted [ 595.232371][ T28] audit: type=1400 audit(1774977174.996:19894): avc: denied { map_read map_write } for pid=18673 comm="syz.6.3865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 595.252577][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 595.259464][T18684] EXT4-fs (loop4): 1 truncate cleaned up [ 595.265589][T18682] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #2: block 16: comm syz.7.3859: lblock 0 mapped to illegal pblock 16 (length 1) [ 595.265934][T18684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.292069][ T28] audit: type=1400 audit(1774977175.014:19895): avc: denied { create } for pid=18673 comm="syz.6.3865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 595.303002][T18681] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.312446][ T28] audit: type=1400 audit(1774977175.014:19896): avc: denied { setopt } for pid=18673 comm="syz.6.3865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 595.337500][T18692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.344249][ T28] audit: type=1326 audit(1774977175.117:19897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18678 comm="syz.0.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c7a3c819 code=0x7ffc0000 [ 595.381507][T18692] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.393685][T18681] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.404888][T18705] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 595.423304][ T224] EXT4-fs error (device loop7): __ext4_get_inode_loc:4797: comm kworker/u8:5: Invalid inode table block 1 in block_group 0 [ 595.431913][T18684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18684 comm=syz.4.3868 [ 595.437503][T16467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.459355][T16467] EXT4-fs error (device loop7): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 595.474293][T16467] fserror_report: 1 callbacks suppressed [ 595.474309][T16467] loop7: lost filesystem error report for type 5 error -117 [ 595.480871][T16467] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 595.498279][T16467] loop7: lost filesystem error report for type 5 error -117 [ 595.498460][T16467] EXT4-fs error (device loop7): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 595.517702][T17541] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 595.527838][T16467] fserror_report: 1 callbacks suppressed [ 595.527854][T16467] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 595.535239][T18706] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 595.551144][T13070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.692217][T18725] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 595.784012][T18733] EXT4-fs: Ignoring removed mblk_io_submit option [ 595.808059][T18733] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.924152][T18722] Cannot find set identified by id 1 to match [ 596.121426][T18743] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 596.153178][T18743] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3881: bg 0: block 288: padding at end of block bitmap is not set [ 596.168665][T18743] loop4: lost filesystem error report for type 5 error -117 [ 596.170149][T18743] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 596.170583][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 596.170764][ C0] EXT4-fs (loop4): initial error at time 1774977177: ext4_validate_block_bitmap:441 [ 596.170884][ C0] EXT4-fs (loop4): last error at time 1774977177: ext4_validate_block_bitmap:441 [ 596.213667][T18743] loop4: lost filesystem error report for type 5 error -117 [ 596.218083][T18743] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.3881: attempt to clear invalid blocks 1024 len 1 [ 596.239789][T18743] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 596.262267][T18743] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3881: invalid indirect mapped block 1819239214 (level 0) [ 596.286587][T18743] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 596.291663][T18743] EXT4-fs (loop4): 1 truncate cleaned up [ 596.954883][T18746] set_capacity_and_notify: 4 callbacks suppressed [ 596.954904][T18746] loop7: detected capacity change from 0 to 1024 [ 597.033720][T18746] EXT4-fs: Ignoring removed bh option [ 597.063197][T18752] loop6: detected capacity change from 0 to 512 [ 597.082100][T18746] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 597.103482][T18752] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 597.137938][T18746] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #3: block 2: comm syz.7.3884: lblock 2 mapped to illegal pblock 2 (length 1) [ 597.162765][T18752] EXT4-fs (loop6): 1 orphan inode deleted [ 597.173284][T18752] EXT4-fs (loop6): 1 truncate cleaned up [ 597.179457][T18746] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 597.179693][T18746] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #3: block 48: comm syz.7.3884: lblock 0 mapped to illegal pblock 48 (length 1) [ 597.188771][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 597.188790][ C0] EXT4-fs (loop7): initial error at time 1774977178: ext4_map_blocks:786: inode 3: block 2 [ 597.188838][ C0] EXT4-fs (loop7): last error at time 1774977178: ext4_map_blocks:786: inode 3: block 2 [ 597.282101][T18752] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 597.310329][T18752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18752 comm=syz.6.3887 [ 597.327343][T18746] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 597.327571][T18746] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.3884: Failed to acquire dquot type 0 [ 597.366693][T18752] bridge0: port 5(batadv3) entered blocking state [ 597.374194][T18746] loop7: lost filesystem error report for type 5 error -117 [ 597.374650][T18746] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 597.406772][T18752] bridge0: port 5(batadv3) entered disabled state [ 597.422101][T18752] batadv3: entered allmulticast mode [ 597.432665][T18752] batadv3: entered promiscuous mode [ 597.442041][T18746] loop7: lost filesystem error report for type 5 error -117 [ 597.442260][T18746] EXT4-fs error (device loop7): ext4_evict_inode:265: inode #11: comm syz.7.3884: mark_inode_dirty error [ 597.468561][T18772] netlink: 'syz.0.3894': attribute type 11 has an invalid length. [ 597.487696][T18772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3894'. [ 597.498186][T18746] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 597.498371][T18746] EXT4-fs warning (device loop7): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 597.537437][T18746] EXT4-fs (loop7): 1 orphan inode deleted [ 597.549748][ T8993] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:29: lblock 1 mapped to illegal pblock 1 (length 1) [ 597.586623][T18774] tunl0: Caught tx_queue_len zero misconfig [ 597.603117][ T8993] EXT4-fs error (device loop7): ext4_release_dquot:7062: comm kworker/u8:29: Failed to release dquot type 0 [ 597.624962][T18746] EXT4-fs error (device loop7): __ext4_get_inode_loc:4797: comm syz.7.3884: Invalid inode table block 1 in block_group 0 [ 597.647086][T18746] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 597.720803][T18746] EXT4-fs error (device loop7): ext4_dirty_inode:6495: inode #2: comm syz.7.3884: mark_inode_dirty error [ 597.736799][T18779] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3884'. [ 597.749045][T18777] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #2: block 16: comm syz.7.3884: lblock 0 mapped to illegal pblock 16 (length 1) [ 597.827147][ T408] EXT4-fs error (device loop7): __ext4_get_inode_loc:4797: comm kworker/u8:6: Invalid inode table block 1 in block_group 0 [ 597.836331][T18785] loop4: detected capacity change from 0 to 1024 [ 597.859092][T16467] EXT4-fs error (device loop7): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 597.861445][T18785] EXT4-fs: Ignoring removed mblk_io_submit option [ 597.873400][T16467] loop7: lost filesystem error report for type 5 error -117 [ 597.878688][T16467] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 597.896492][T16467] loop7: lost filesystem error report for type 5 error -117 [ 597.896793][T16467] EXT4-fs error (device loop7): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 597.900039][T18785] EXT4-fs: Ignoring removed bh option [ 597.905309][ T408] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 597.930079][ T408] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 597.939603][T18774] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3895'. [ 597.943119][T16467] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 597.999834][T18789] loop7: detected capacity change from 0 to 512 [ 598.049589][T18785] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 598.063476][T18789] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 598.098587][T18785] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.115579][T18800] FAULT_INJECTION: forcing a failure. [ 598.115579][T18800] name failslab, interval 1, probability 0, space 0, times 0 [ 598.129310][T18789] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 598.148141][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 598.154587][ C1] EXT4-fs (loop7): initial error at time 1774977179: ext4_mb_generate_buddy:1317 [ 598.163782][ C1] EXT4-fs (loop7): last error at time 1774977179: ext4_mb_generate_buddy:1317 [ 598.184941][ T28] kauditd_printk_skb: 146 callbacks suppressed [ 598.184957][ T28] audit: type=1400 audit(1774977179.224:20041): avc: denied { read } for pid=18790 comm="syz.6.3901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 598.430630][ T28] audit: type=1400 audit(1774977179.252:20042): avc: denied { create } for pid=18790 comm="syz.6.3901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 598.430695][ T28] audit: type=1400 audit(1774977179.252:20043): avc: denied { bind } for pid=18790 comm="syz.6.3901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 598.430723][ T28] audit: type=1400 audit(1774977179.252:20044): avc: denied { write } for pid=18790 comm="syz.6.3901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 598.430744][ T28] audit: type=1400 audit(1774977179.252:20045): avc: denied { getopt } for pid=18790 comm="syz.6.3901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 598.584418][T18800] CPU: 1 UID: 0 PID: 18800 Comm: syz.5.3903 Tainted: G W syzkaller #0 PREEMPT(full) [ 598.584462][T18800] Tainted: [W]=WARN [ 598.584470][T18800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 598.584521][T18800] Call Trace: [ 598.584530][T18800] [ 598.584540][T18800] __dump_stack+0x1d/0x30 [ 598.584576][T18800] dump_stack_lvl+0x95/0xd0 [ 598.584667][T18800] dump_stack+0x15/0x1b [ 598.584693][T18800] should_fail_ex+0x263/0x280 [ 598.584726][T18800] should_failslab+0x8c/0xb0 [ 598.584807][T18800] __kvmalloc_node_noprof+0x155/0x650 [ 598.584878][T18800] ? path_openat+0x1ab2/0x2050 [ 598.584988][T18800] ? seq_read_iter+0x143/0x940 [ 598.585025][T18800] seq_read_iter+0x143/0x940 [ 598.585143][T18800] ? _parse_integer_limit+0x170/0x190 [ 598.585175][T18800] proc_reg_read_iter+0x110/0x180 [ 598.585199][T18800] do_iter_readv_writev+0x4fd/0x5a0 [ 598.585226][T18800] vfs_readv+0x1f4/0x6e0 [ 598.585312][T18800] do_readv+0xe9/0x210 [ 598.585342][T18800] __x64_sys_readv+0x45/0x50 [ 598.585366][T18800] x64_sys_call+0x27c0/0x3020 [ 598.585448][T18800] do_syscall_64+0x12c/0x370 [ 598.585480][T18800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.585524][T18800] RIP: 0033:0x7f841a77c819 [ 598.585544][T18800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.585566][T18800] RSP: 002b:00007f84191cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 598.585587][T18800] RAX: ffffffffffffffda RBX: 00007f841a9f5fa0 RCX: 00007f841a77c819 [ 598.585680][T18800] RDX: 0000000000000001 RSI: 00002000000014c0 RDI: 0000000000000005 [ 598.585693][T18800] RBP: 00007f84191cf090 R08: 0000000000000000 R09: 0000000000000000 [ 598.585706][T18800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.585719][T18800] R13: 00007f841a9f6038 R14: 00007f841a9f5fa0 R15: 00007ffe05d0f4b8 [ 598.585742][T18800] [ 598.807717][T18789] EXT4-fs (loop7): 1 truncate cleaned up [ 598.917701][ T28] audit: type=1400 audit(1774977179.944:20046): avc: denied { read } for pid=18788 comm="syz.7.3898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 598.977333][ T28] audit: type=1400 audit(1774977180.000:20047): avc: denied { setopt } for pid=18788 comm="syz.7.3898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 599.021046][T18808] loop6: detected capacity change from 0 to 128 [ 599.027597][ T28] audit: type=1400 audit(1774977180.000:20048): avc: denied { create } for pid=18788 comm="syz.7.3898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 599.115161][ T28] audit: type=1400 audit(1774977180.000:20049): avc: denied { write } for pid=18788 comm="syz.7.3898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 600.316956][T18820] loop4: detected capacity change from 0 to 1024 [ 600.350848][T18820] EXT4-fs: Ignoring removed bh option [ 600.392446][T18820] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 600.404723][ T28] audit: type=1400 audit(1774977181.347:20050): avc: denied { setopt } for pid=18821 comm="syz.5.3910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 600.464868][T18820] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #3: block 2: comm syz.4.3908: lblock 2 mapped to illegal pblock 2 (length 1) [ 600.507268][T18820] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 600.507432][T18820] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #3: block 48: comm syz.4.3908: lblock 0 mapped to illegal pblock 48 (length 1) [ 600.516596][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 600.516612][ C1] EXT4-fs (loop4): initial error at time 1774977181: ext4_map_blocks:786: inode 3: block 2 [ 600.516676][ C1] EXT4-fs (loop4): last error at time 1774977181: ext4_map_blocks:786: inode 3: block 2 [ 600.622537][T18820] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 600.622716][T18820] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.3908: Failed to acquire dquot type 0 [ 600.667069][T18820] loop4: lost filesystem error report for type 5 error -117 [ 600.667245][T18820] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 600.702890][T18820] loop4: lost filesystem error report for type 5 error -117 [ 600.703030][T18820] EXT4-fs error (device loop4): ext4_evict_inode:265: inode #11: comm syz.4.3908: mark_inode_dirty error [ 600.762413][T18820] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 600.762654][T18820] EXT4-fs warning (device loop4): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 600.802731][T18820] EXT4-fs (loop4): 1 orphan inode deleted [ 600.820033][T18820] EXT4-fs error (device loop4): __ext4_get_inode_loc:4797: comm syz.4.3908: Invalid inode table block 1 in block_group 0 [ 600.852696][T18820] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 600.872654][T18820] EXT4-fs error (device loop4): ext4_dirty_inode:6495: inode #2: comm syz.4.3908: mark_inode_dirty error [ 600.898849][T18831] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #2: block 16: comm syz.4.3908: lblock 0 mapped to illegal pblock 16 (length 1) [ 600.934407][T18820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3908'. [ 600.977599][ T47] EXT4-fs error (device loop4): __ext4_get_inode_loc:4797: comm kworker/u8:3: Invalid inode table block 1 in block_group 0 [ 601.282767][ T408] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 601.342982][ T408] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:6: Failed to release dquot type 0 [ 601.369144][T18833] loop7: detected capacity change from 0 to 512 [ 601.389986][T18833] EXT4-fs: Ignoring removed mblk_io_submit option [ 601.413196][T13070] EXT4-fs error (device loop4): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 601.458706][T18839] loop5: detected capacity change from 0 to 512 [ 601.469661][T13070] loop4: lost filesystem error report for type 5 error -117 [ 601.469848][T13070] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 601.490035][T18839] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 601.501738][T13070] loop4: lost filesystem error report for type 5 error -117 [ 601.505550][T18833] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.524760][T18839] EXT4-fs (loop5): orphan cleanup on readonly fs [ 601.560510][T13070] EXT4-fs error (device loop4): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 601.569349][T18839] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.3917: Block bitmap for bg 0 marked uninitialized [ 601.586629][T13070] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 601.587472][T18839] loop5: lost filesystem error report for type 5 error -117 [ 601.597043][T18839] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 601.604375][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 601.604395][ C1] EXT4-fs (loop5): initial error at time 1774977182: ext4_read_block_bitmap_nowait:517 [ 601.604419][ C1] EXT4-fs (loop5): last error at time 1774977182: ext4_read_block_bitmap_nowait:517 [ 601.638982][T18839] loop5: lost filesystem error report for type 5 error -117 [ 601.639413][T18839] EXT4-fs (loop5): 1 orphan inode deleted [ 601.645014][T18848] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3913'. [ 601.662690][T18839] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 601.690307][T18839] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 601.720208][T18854] loop4: detected capacity change from 0 to 512 [ 601.777264][T18854] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.864626][T18865] netlink: 4436 bytes leftover after parsing attributes in process `syz.5.3923'. [ 601.874007][T18865] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 601.890823][T18854] netlink: 'syz.4.3920': attribute type 29 has an invalid length. [ 601.919772][T18870] FAULT_INJECTION: forcing a failure. [ 601.919772][T18870] name failslab, interval 1, probability 0, space 0, times 0 [ 601.932969][T18870] CPU: 1 UID: 0 PID: 18870 Comm: syz.6.3925 Tainted: G W syzkaller #0 PREEMPT(full) [ 601.932996][T18870] Tainted: [W]=WARN [ 601.933004][T18870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 601.933092][T18870] Call Trace: [ 601.933099][T18870] [ 601.933104][T18870] __dump_stack+0x1d/0x30 [ 601.933124][T18870] dump_stack_lvl+0x95/0xd0 [ 601.933172][T18870] dump_stack+0x15/0x1b [ 601.933239][T18870] should_fail_ex+0x263/0x280 [ 601.933257][T18870] should_failslab+0x8c/0xb0 [ 601.933349][T18870] __kvmalloc_node_noprof+0x155/0x650 [ 601.933366][T18870] ? bpf_test_run_xdp_live+0x17e/0x1360 [ 601.933389][T18870] bpf_test_run_xdp_live+0x17e/0x1360 [ 601.933481][T18870] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 601.933528][T18870] ? __pfx_autoremove_wake_function+0x10/0x10 [ 601.933658][T18870] ? mutex_unlock+0x4e/0x90 [ 601.933672][T18870] ? 0xffffffffa02054c0 [ 601.933682][T18870] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 601.933737][T18870] ? 0xffffffffa02054c0 [ 601.933762][T18870] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 601.933783][T18870] bpf_prog_test_run_xdp+0x57b/0xa10 [ 601.933804][T18870] ? __rcu_read_unlock+0x4e/0x70 [ 601.933817][T18870] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 601.933886][T18870] bpf_prog_test_run+0x204/0x340 [ 601.933900][T18870] __sys_bpf+0x52e/0x7e0 [ 601.933990][T18870] __x64_sys_bpf+0x41/0x50 [ 601.934000][T18870] x64_sys_call+0x10cb/0x3020 [ 601.934013][T18870] do_syscall_64+0x12c/0x370 [ 601.934098][T18870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.934110][T18870] RIP: 0033:0x7ffabddcc819 [ 601.934118][T18870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.934128][T18870] RSP: 002b:00007ffabc81f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 601.934201][T18870] RAX: ffffffffffffffda RBX: 00007ffabe045fa0 RCX: 00007ffabddcc819 [ 601.934209][T18870] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 601.934216][T18870] RBP: 00007ffabc81f090 R08: 0000000000000000 R09: 0000000000000000 [ 601.934331][T18870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.934338][T18870] R13: 00007ffabe046038 R14: 00007ffabe045fa0 R15: 00007fff9cee7c88 [ 601.934348][T18870] [ 603.021682][T18899] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3936'. [ 603.030936][T18899] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3936'. [ 603.072423][T18905] loop5: detected capacity change from 0 to 512 [ 603.104289][T18905] EXT4-fs: Ignoring removed mblk_io_submit option [ 603.124385][T18905] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 603.193829][T18915] vcan0: tx address claim with different name [ 603.219018][T18918] loop7: detected capacity change from 0 to 7 [ 603.285000][T18922] FAULT_INJECTION: forcing a failure. [ 603.285000][T18922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.317424][T18922] CPU: 0 UID: 0 PID: 18922 Comm: syz.7.3943 Tainted: G W syzkaller #0 PREEMPT(full) [ 603.317463][T18922] Tainted: [W]=WARN [ 603.317474][T18922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 603.317487][T18922] Call Trace: [ 603.317494][T18922] [ 603.317501][T18922] __dump_stack+0x1d/0x30 [ 603.317593][T18922] dump_stack_lvl+0x95/0xd0 [ 603.317617][T18922] dump_stack+0x15/0x1b [ 603.317637][T18922] should_fail_ex+0x263/0x280 [ 603.317662][T18922] should_fail+0xb/0x20 [ 603.317718][T18922] should_fail_usercopy+0x1a/0x20 [ 603.317750][T18922] _copy_to_user+0x20/0xa0 [ 603.317778][T18922] simple_read_from_buffer+0xb5/0x130 [ 603.317851][T18922] proc_fail_nth_read+0x10e/0x150 [ 603.317944][T18922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 603.318032][T18922] vfs_read+0x1ab/0x7f0 [ 603.318054][T18922] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 603.318121][T18922] ? __rcu_read_unlock+0x4e/0x70 [ 603.318142][T18922] ? __fget_files+0x184/0x1c0 [ 603.318164][T18922] ? mutex_lock+0x57/0x90 [ 603.318186][T18922] ksys_read+0xdc/0x1a0 [ 603.318217][T18922] __x64_sys_read+0x40/0x50 [ 603.318238][T18922] x64_sys_call+0x2886/0x3020 [ 603.318318][T18922] do_syscall_64+0x12c/0x370 [ 603.318348][T18922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.318395][T18922] RIP: 0033:0x7f76e905d04e [ 603.318414][T18922] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 603.318432][T18922] RSP: 002b:00007f76e7ad5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 603.318452][T18922] RAX: ffffffffffffffda RBX: 00007f76e7ad66c0 RCX: 00007f76e905d04e [ 603.318466][T18922] RDX: 000000000000000f RSI: 00007f76e7ad60a0 RDI: 0000000000000005 [ 603.318666][T18922] RBP: 00007f76e7ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 603.318680][T18922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.318694][T18922] R13: 00007f76e9316128 R14: 00007f76e9316090 R15: 00007ffe5c016fd8 [ 603.318715][T18922] [ 603.336416][T18916] bridge0: entered promiscuous mode [ 603.538917][T18916] macvlan2: entered promiscuous mode [ 603.627983][T18935] loop7: detected capacity change from 0 to 8192 [ 603.757217][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 603.757234][ T28] audit: type=1400 audit(1774977184.471:20182): avc: denied { map } for pid=18936 comm="syz.6.3948" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=60438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 603.810877][T18942] 9p: Bad value for 'rfdno' [ 603.814179][ T28] audit: type=1400 audit(1774977184.509:20183): avc: denied { read write } for pid=18936 comm="syz.6.3948" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=60438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 603.856265][ T28] audit: type=1400 audit(1774977184.527:20184): avc: denied { append } for pid=18934 comm="syz.7.3947" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 603.883884][ T28] audit: type=1400 audit(1774977184.527:20185): avc: denied { mounton } for pid=18934 comm="syz.7.3947" path="/114/file2/file0" dev="loop7" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 603.931775][ T28] audit: type=1400 audit(1774977184.630:20186): avc: denied { write } for pid=18934 comm="syz.7.3947" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 603.976831][ T28] audit: type=1400 audit(1774977184.677:20187): avc: denied { map } for pid=18934 comm="syz.7.3947" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 604.024402][T14214] EXT4-fs unmount: 22 callbacks suppressed [ 604.024422][T14214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.111383][T18953] macvlan0: entered promiscuous mode [ 604.118066][T18953] dummy0: entered promiscuous mode [ 604.123328][T18953] dummy0: left promiscuous mode [ 604.137917][T18957] netlink: 'syz.6.3954': attribute type 1 has an invalid length. [ 604.145905][T18953] macvlan0: left promiscuous mode [ 604.159331][T18957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.185586][T18957] bond1: (slave gretap1): making interface the new active one [ 604.195348][T18957] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 604.207294][T18957] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18957 comm=syz.6.3954 [ 604.652919][T18969] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3957'. [ 604.680338][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3957'. [ 604.724782][T18969] netlink: 'syz.7.3957': attribute type 11 has an invalid length. [ 604.788612][T18969] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3957'. [ 604.800662][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3957'. [ 604.809884][T18969] netlink: 'syz.7.3957': attribute type 11 has an invalid length. [ 604.899237][ T28] audit: type=1400 audit(1774977185.547:20188): avc: denied { name_bind } for pid=18970 comm="syz.7.3958" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 604.921271][ T28] audit: type=1400 audit(1774977185.547:20189): avc: denied { node_bind } for pid=18970 comm="syz.7.3958" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 605.051563][ T28] audit: type=1400 audit(1774977185.687:20190): avc: denied { bind } for pid=18974 comm="syz.0.3959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 605.072210][ T28] audit: type=1400 audit(1774977185.687:20191): avc: denied { setopt } for pid=18974 comm="syz.0.3959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 605.241745][T18981] netlink: 199580 bytes leftover after parsing attributes in process `syz.5.3961'. [ 605.422444][T18998] loop5: detected capacity change from 0 to 512 [ 605.447476][T18998] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 606.318352][T19008] loop6: detected capacity change from 0 to 512 [ 606.332793][T19008] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 606.345502][T19008] EXT4-fs (loop6): 1 orphan inode deleted [ 606.351605][T19008] EXT4-fs (loop6): 1 truncate cleaned up [ 606.358128][T19008] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.508737][T19012] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 606.524562][T18924] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 606.559844][T19016] loop4: detected capacity change from 0 to 512 [ 606.586741][T19016] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 606.609011][T19008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19008 comm=syz.6.3970 [ 606.615964][T19016] EXT4-fs (loop4): 1 orphan inode deleted [ 606.629814][T19016] EXT4-fs (loop4): 1 truncate cleaned up [ 606.635829][T19016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.661404][T19008] bridge0: port 6(batadv4) entered blocking state [ 606.667988][T19008] bridge0: port 6(batadv4) entered disabled state [ 606.678864][T19008] batadv4: entered allmulticast mode [ 606.692733][T19008] batadv4: entered promiscuous mode [ 606.726067][T17541] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.775855][T19016] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 606.826995][T19016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19016 comm=syz.4.3971 [ 606.908468][T19038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3978'. [ 606.942153][T13070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.305622][T19044] loop6: detected capacity change from 0 to 512 [ 607.322736][ T408] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 607.331977][ T408] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 607.345987][T19044] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 607.372137][T19044] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3979: bg 0: block 288: padding at end of block bitmap is not set [ 607.387644][T19044] loop6: lost filesystem error report for type 5 error -117 [ 607.406202][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 607.419936][ C0] EXT4-fs (loop6): initial error at time 1774977187: ext4_validate_block_bitmap:441 [ 607.429533][ C0] EXT4-fs (loop6): last error at time 1774977187: ext4_validate_block_bitmap:441 [ 607.465445][T19044] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 607.475258][T19044] loop6: lost filesystem error report for type 5 error -117 [ 607.491808][T19044] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.3979: attempt to clear invalid blocks 1024 len 1 [ 607.512899][T19044] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 607.529304][T19044] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3979: invalid indirect mapped block 1819239214 (level 0) [ 607.553549][T19044] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 607.557907][T19044] EXT4-fs (loop6): 1 truncate cleaned up [ 607.582191][T19044] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.043102][T19035] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3978'. [ 608.059815][T19029] loop7: detected capacity change from 0 to 1024 [ 608.164630][T19029] EXT4-fs: test_dummy_encryption option not supported [ 608.369788][T19049] netlink: 'syz.4.3981': attribute type 10 has an invalid length. [ 608.407415][T19049] batman_adv: batadv0: Interface deactivated: dummy0 [ 608.439716][T19049] batman_adv: batadv0: Removing interface: dummy0 [ 608.486625][T19049] team0: Port device dummy0 added [ 608.565711][T19054] FAULT_INJECTION: forcing a failure. [ 608.565711][T19054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.644537][T19054] CPU: 0 UID: 0 PID: 19054 Comm: syz.7.3983 Tainted: G W syzkaller #0 PREEMPT(full) [ 608.644578][T19054] Tainted: [W]=WARN [ 608.644586][T19054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 608.644642][T19054] Call Trace: [ 608.644649][T19054] [ 608.644657][T19054] __dump_stack+0x1d/0x30 [ 608.644685][T19054] dump_stack_lvl+0x95/0xd0 [ 608.644776][T19054] dump_stack+0x15/0x1b [ 608.644798][T19054] should_fail_ex+0x263/0x280 [ 608.644873][T19054] should_fail+0xb/0x20 [ 608.644943][T19054] should_fail_usercopy+0x1a/0x20 [ 608.644974][T19054] _copy_from_user+0x1c/0xb0 [ 608.645019][T19054] do_fcntl+0x667/0xf80 [ 608.645056][T19054] __se_sys_fcntl+0xb1/0x120 [ 608.645087][T19054] __x64_sys_fcntl+0x43/0x50 [ 608.645154][T19054] x64_sys_call+0x2844/0x3020 [ 608.645179][T19054] do_syscall_64+0x12c/0x370 [ 608.645204][T19054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.645227][T19054] RIP: 0033:0x7f76e909c819 [ 608.645245][T19054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.645311][T19054] RSP: 002b:00007f76e7af7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 608.645408][T19054] RAX: ffffffffffffffda RBX: 00007f76e9315fa0 RCX: 00007f76e909c819 [ 608.645425][T19054] RDX: 0000200000001140 RSI: 0000000000000007 RDI: 0000000000000006 [ 608.645440][T19054] RBP: 00007f76e7af7090 R08: 0000000000000000 R09: 0000000000000000 [ 608.645453][T19054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.645465][T19054] R13: 00007f76e9316038 R14: 00007f76e9315fa0 R15: 00007ffe5c016fd8 [ 608.645484][T19054] [ 609.020972][T17541] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.166876][ T28] kauditd_printk_skb: 660 callbacks suppressed [ 609.166973][ T28] audit: type=1326 audit(1774977189.532:20852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19061 comm="syz.6.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabddcc819 code=0x7ffc0000 [ 609.218481][T19066] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 609.253572][ T28] audit: type=1326 audit(1774977189.569:20853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19061 comm="syz.6.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7ffabddcc819 code=0x7ffc0000 [ 609.257254][T19063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19063 comm=syz.0.3986 [ 609.298556][ T28] audit: type=1326 audit(1774977189.569:20854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19061 comm="syz.6.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabddcc819 code=0x7ffc0000 [ 609.308876][T19063] bridge0: port 4(batadv2) entered blocking state [ 609.338797][T19063] bridge0: port 4(batadv2) entered disabled state [ 609.348956][T19063] batadv2: entered allmulticast mode [ 609.355145][T19063] batadv2: entered promiscuous mode [ 609.374602][T19076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3990'. [ 609.388061][ T28] audit: type=1326 audit(1774977189.569:20855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19061 comm="syz.6.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ffabddcc819 code=0x7ffc0000 [ 609.416293][ T28] audit: type=1326 audit(1774977189.569:20856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19061 comm="syz.6.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabddcc819 code=0x7ffc0000 [ 609.441812][ T28] audit: type=1326 audit(1774977189.569:20857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19061 comm="syz.6.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffabddcc819 code=0x7ffc0000 [ 609.466818][ T28] audit: type=1326 audit(1774977189.569:20858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19061 comm="syz.6.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabddcc819 code=0x7ffc0000 [ 609.498932][T19073] loop7: detected capacity change from 0 to 512 [ 609.529659][ T28] audit: type=1326 audit(1774977189.569:20859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19061 comm="syz.6.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffabddcc819 code=0x7ffc0000 [ 609.559932][T19073] EXT4-fs warning (device loop7): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop7. [ 609.591509][ T28] audit: type=1326 audit(1774977189.569:20860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19061 comm="syz.6.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabddcc819 code=0x7ffc0000 [ 609.616280][ T28] audit: type=1326 audit(1774977189.569:20861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19061 comm="syz.6.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffabddcc819 code=0x7ffc0000 [ 609.860743][ T224] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 609.860761][ T224] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 609.933773][T19111] loop7: detected capacity change from 0 to 1024 [ 609.934994][T19111] EXT4-fs: Ignoring removed mblk_io_submit option [ 609.935076][T19111] EXT4-fs: Ignoring removed bh option [ 609.935736][T19111] EXT4-fs (loop7): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 609.973920][T19111] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.974134][T19111] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.296562][T19123] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4000'. [ 610.308562][T16467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 610.364735][T19131] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4003'. [ 610.392095][T19134] loop6: detected capacity change from 0 to 512 [ 610.411521][T19134] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.431293][T19134] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.459831][T19134] sg_write: data in/out 3156956/42 bytes for SCSI command 0x0-- guessing data in; [ 610.459831][T19134] program syz.6.4004 not setting count and/or reply_len properly [ 610.598948][T19148] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4008'. [ 610.620565][T19150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4010'. [ 610.673280][T17541] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.724170][T19153] loop7: detected capacity change from 0 to 512 [ 610.760994][T19155] syzkaller0: entered promiscuous mode [ 610.767339][T19153] EXT4-fs (loop7): 1 orphan inode deleted [ 610.773918][T19153] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.791923][T19155] syzkaller0: entered allmulticast mode [ 610.800214][T19155] FAULT_INJECTION: forcing a failure. [ 610.800214][T19155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.834642][T19155] CPU: 0 UID: 0 PID: 19155 Comm: syz.5.4012 Tainted: G W syzkaller #0 PREEMPT(full) [ 610.834669][T19155] Tainted: [W]=WARN [ 610.834734][T19155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 610.834744][T19155] Call Trace: [ 610.834750][T19155] [ 610.834822][T19155] __dump_stack+0x1d/0x30 [ 610.834895][T19155] dump_stack_lvl+0x95/0xd0 [ 610.834915][T19155] dump_stack+0x15/0x1b [ 610.834931][T19155] should_fail_ex+0x263/0x280 [ 610.834993][T19155] should_fail+0xb/0x20 [ 610.835014][T19155] should_fail_usercopy+0x1a/0x20 [ 610.835038][T19155] _copy_from_iter+0xcf/0xea0 [ 610.835135][T19155] ? skb_set_owner_w+0x19b/0x200 [ 610.835173][T19155] ? sock_alloc_send_pskb+0x469/0x500 [ 610.835306][T19155] skb_copy_datagram_from_iter+0xb2/0x480 [ 610.835329][T19155] ? __rcu_read_unlock+0x4e/0x70 [ 610.835351][T19155] ? __rcu_read_unlock+0x4e/0x70 [ 610.835372][T19155] ? skb_put+0xa9/0xf0 [ 610.835420][T19155] packet_sendmsg+0x26ba/0x3370 [ 610.835473][T19155] ? selinux_socket_sendmsg+0x192/0x1c0 [ 610.835513][T19155] ? __pfx_packet_sendmsg+0x10/0x10 [ 610.835554][T19155] ____sys_sendmsg+0x563/0x5b0 [ 610.835592][T19155] ___sys_sendmsg+0x195/0x1e0 [ 610.835624][T19155] __x64_sys_sendmsg+0xd4/0x160 [ 610.835655][T19155] x64_sys_call+0x194c/0x3020 [ 610.835689][T19155] do_syscall_64+0x12c/0x370 [ 610.835735][T19155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.835759][T19155] RIP: 0033:0x7f841a77c819 [ 610.835794][T19155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.835813][T19155] RSP: 002b:00007f84191cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.835895][T19155] RAX: ffffffffffffffda RBX: 00007f841a9f5fa0 RCX: 00007f841a77c819 [ 610.835918][T19155] RDX: 0000000000000005 RSI: 0000200000000000 RDI: 0000000000000007 [ 610.835932][T19155] RBP: 00007f84191cf090 R08: 0000000000000000 R09: 0000000000000000 [ 610.835946][T19155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.836007][T19155] R13: 00007f841a9f6038 R14: 00007f841a9f5fa0 R15: 00007ffe05d0f4b8 [ 610.836028][T19155] [ 610.857297][T19163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4014'. [ 610.881106][T19161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4013'. [ 611.088726][T16467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.108601][T19168] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 611.159337][T19173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.167959][T19173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.290500][T19183] loop6: detected capacity change from 0 to 2048 [ 611.348506][T19183] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.382956][T19183] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 611.435500][T19187] loop4: detected capacity change from 0 to 1024 [ 611.500942][ T47] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 611.526227][T19189] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz.6.4021: invalid fast symlink length 39 [ 611.526400][ T47] EXT4-fs (loop6): Remounting filesystem read-only [ 611.547764][T19187] EXT4-fs: test_dummy_encryption option not supported [ 611.856666][T17541] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.872674][T19194] loop5: detected capacity change from 0 to 128 [ 611.989500][T19194] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 612.115684][T19194] ext4 filesystem being mounted at /214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 612.270717][T15535] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 612.403166][T15535] CPU: 0 UID: 0 PID: 15535 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 612.403258][T15535] Tainted: [W]=WARN [ 612.403268][T15535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 612.403334][T15535] Call Trace: [ 612.403342][T15535] [ 612.403351][T15535] __dump_stack+0x1d/0x30 [ 612.403378][T15535] dump_stack_lvl+0x95/0xd0 [ 612.403406][T15535] dump_stack+0x15/0x1b [ 612.403496][T15535] dump_header+0x80/0x240 [ 612.403521][T15535] oom_kill_process+0x295/0x350 [ 612.403549][T15535] out_of_memory+0x97d/0xb80 [ 612.403575][T15535] try_charge_memcg+0x62e/0xa10 [ 612.403642][T15535] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 612.403701][T15535] __swap_cache_prepare_and_add+0x67/0x460 [ 612.403729][T15535] ? alloc_pages_mpol+0x217/0x260 [ 612.403790][T15535] swap_cache_alloc_folio+0xa2/0x120 [ 612.403825][T15535] swap_cluster_readahead+0x26e/0x3d0 [ 612.403863][T15535] swapin_readahead+0xde/0x840 [ 612.403967][T15535] ? __rcu_read_unlock+0x4e/0x70 [ 612.403992][T15535] ? __perf_event_task_sched_in+0xa65/0xad0 [ 612.404024][T15535] ? __list_add_valid_or_report+0x38/0xe0 [ 612.404148][T15535] ? __rcu_read_unlock+0x4e/0x70 [ 612.404168][T15535] ? swap_cache_get_folio+0x26f/0x280 [ 612.404200][T15535] do_swap_page+0x2fe/0x21e0 [ 612.404313][T15535] ? __schedule+0x93c/0xd40 [ 612.404340][T15535] ? __rcu_read_lock+0x36/0x50 [ 612.404362][T15535] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 612.404440][T15535] handle_mm_fault+0xb46/0x3020 [ 612.404562][T15535] ? vma_start_read+0x1c7/0x2c0 [ 612.404589][T15535] do_user_addr_fault+0x62f/0x1050 [ 612.404681][T15535] ? trace_page_fault_user+0x1f/0xe0 [ 612.404785][T15535] exc_page_fault+0x62/0xa0 [ 612.404808][T15535] asm_exc_page_fault+0x26/0x30 [ 612.404827][T15535] RIP: 0033:0x7f42c79f7997 [ 612.404844][T15535] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 612.404862][T15535] RSP: 002b:00007fffd0eb6e80 EFLAGS: 00010202 [ 612.404881][T15535] RAX: 0000000000000000 RBX: 0000555562fa6500 RCX: 00007f42c79f7997 [ 612.404923][T15535] RDX: 00007fffd0eb6ec0 RSI: 0000000000000000 RDI: 0000000000000000 [ 612.404939][T15535] RBP: 00007fffd0eb6f2c R08: 0000000000000000 R09: 0000000000000000 [ 612.404955][T15535] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 612.404971][T15535] R13: 00000000000927c0 R14: 00000000000904f2 R15: 00007fffd0eb6f80 [ 612.405027][T15535] [ 612.871294][T15535] memory: usage 307200kB, limit 307200kB, failcnt 803 [ 612.973326][T15535] memory+swap: usage 193520kB, limit 9007199254740988kB, failcnt 0 [ 613.030610][T15535] kmem: usage 192968kB, limit 9007199254740988kB, failcnt 0 [ 613.077123][T15535] Memory cgroup stats for /syz0: [ 613.077413][T15535] cache 0 [ 613.112610][T15535] rss 0 [ 613.132680][T15535] shmem 0 [ 613.135674][T15535] mapped_file 0 [ 613.151508][T15535] dirty 0 [ 613.157524][T19205] loop6: detected capacity change from 0 to 512 [ 613.171281][T15535] writeback 0 [ 613.178003][T15535] workingset_refault_anon 119 [ 613.187653][T19205] EXT4-fs: Ignoring removed mblk_io_submit option [ 613.202010][T15535] workingset_refault_file 104 [ 613.217744][T15535] swap 372736 [ 613.242445][T15535] swapcached 16650240 [ 613.250626][T19205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.265858][T15535] pgpgin 153241 [ 613.273946][T15535] pgpgout 153240 [ 613.280920][T15535] pgfault 164137 [ 613.284482][T15535] pgmajfault 92 [ 613.292861][T19205] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.305916][T15535] inactive_anon 0 [ 613.314269][T15535] active_anon 0 [ 613.317759][T15535] inactive_file 0 [ 613.331997][T15535] active_file 0 [ 613.338981][T15535] unevictable 0 [ 613.347971][T15535] hierarchical_memory_limit 314572800 [ 613.360698][T15535] hierarchical_memsw_limit 9223372036854771712 [ 613.372654][T15535] total_cache 0 [ 613.376160][T15535] total_rss 0 [ 613.386322][T15535] total_shmem 0 [ 613.394530][T15535] total_mapped_file 0 [ 613.402141][T15535] total_dirty 0 [ 613.410218][T15535] total_writeback 0 [ 613.417681][T15535] total_workingset_refault_anon 119 [ 613.428773][T15535] total_workingset_refault_file 104 [ 613.441156][T15535] total_swap 372736 [ 613.448863][T15535] total_swapcached 16650240 [ 613.460404][T15535] total_pgpgin 153241 [ 613.469161][T15535] total_pgpgout 153240 [ 613.477939][T15535] total_pgfault 164137 [ 613.485942][T15535] total_pgmajfault 92 [ 613.495315][T15535] total_inactive_anon 0 [ 613.505655][T15535] total_active_anon 0 [ 613.514239][T15535] total_inactive_file 0 [ 613.522933][T15535] total_active_file 0 [ 613.530430][T15535] total_unevictable 0 [ 613.539052][T15535] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4019,pid=19175,uid=0 [ 613.570558][T15535] Memory cgroup out of memory: Killed process 19175 (syz.0.4019) total-vm:104404kB, anon-rss:1232kB, file-rss:21720kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 613.665489][T14214] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 613.765962][T19221] tipc: Enabling of bearer rejected, failed to enable media [ 613.800102][T19224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4031'. [ 613.826271][T19224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4031'. [ 613.873560][T19226] syzkaller0: entered promiscuous mode [ 613.887283][T19226] syzkaller0: entered allmulticast mode [ 614.001920][T19230] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4033'. [ 614.049116][T17541] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.259199][T19243] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4036'. [ 614.328276][T19245] loop6: detected capacity change from 0 to 512 [ 614.351072][T19247] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4037'. [ 614.382002][T19245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.398924][T19245] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 614.544015][T19247] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 614.562408][T19250] gtp0: entered promiscuous mode [ 614.567381][T19250] gtp0: entered allmulticast mode [ 614.610722][T17541] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.633642][ T28] kauditd_printk_skb: 115 callbacks suppressed [ 614.633661][ T28] audit: type=1326 audit(1774977194.658:20977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19255 comm="syz.7.4042" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76e909c819 code=0x0 [ 614.657280][T19252] netlink: 'syz.5.4039': attribute type 10 has an invalid length. [ 614.696847][T19260] loop6: detected capacity change from 0 to 512 [ 614.706761][ T28] audit: type=1400 audit(1774977194.704:20978): avc: denied { mount } for pid=19259 comm="syz.6.4041" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 614.732848][T19260] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 614.741601][T19260] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 614.761918][T19266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.776736][T19260] EXT4-fs (loop6): 1 truncate cleaned up [ 614.783443][T19260] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.790917][T19266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.798215][T19260] EXT4-fs: group quota file already specified [ 614.812173][ T28] audit: type=1400 audit(1774977194.817:20979): avc: denied { read } for pid=19261 comm="syz.5.4043" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 614.839223][ T28] audit: type=1400 audit(1774977194.817:20980): avc: denied { open } for pid=19261 comm="syz.5.4043" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 614.863105][ T28] audit: type=1400 audit(1774977194.835:20981): avc: denied { ioctl } for pid=19261 comm="syz.5.4043" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 614.889308][ T28] audit: type=1400 audit(1774977194.873:20982): avc: denied { getopt } for pid=19259 comm="syz.6.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 614.909358][ T28] audit: type=1400 audit(1774977194.873:20983): avc: denied { name_connect } for pid=19271 comm="syz.0.4046" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 614.929935][ T28] audit: type=1400 audit(1774977194.882:20984): avc: denied { listen } for pid=19271 comm="syz.0.4046" lport=58571 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 614.953564][ T28] audit: type=1400 audit(1774977194.882:20985): avc: denied { accept } for pid=19271 comm="syz.0.4046" lport=58571 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 614.977208][ T28] audit: type=1400 audit(1774977194.882:20986): avc: denied { write } for pid=19271 comm="syz.0.4046" lport=58571 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 615.164079][T17541] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.348061][T19287] netlink: 'syz.0.4053': attribute type 10 has an invalid length. [ 615.357910][T19290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4051'. [ 615.624452][T19311] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4062'. [ 616.608455][T19320] netlink: 'syz.7.4065': attribute type 10 has an invalid length. [ 616.735469][T19326] loop7: detected capacity change from 0 to 512 [ 616.743581][T19326] EXT4-fs: Ignoring removed mblk_io_submit option [ 616.829006][T19326] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.842057][T19326] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 616.883231][T16467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.039609][T19330] ================================================================== [ 617.047729][T19330] BUG: KCSAN: data-race in bdev_statx / queue_limits_commit_update [ 617.055700][T19330] [ 617.058021][T19330] read to 0xffff888101dccfd0 of 4 bytes by task 17799 on cpu 1: [ 617.065657][T19330] bdev_statx+0x295/0x2d0 [ 617.069972][T19330] vfs_getattr_nosec+0x1b6/0x1e0 [ 617.074890][T19330] vfs_getattr+0x48/0x60 [ 617.079110][T19330] vfs_statx_path+0x28/0x140 [ 617.083683][T19330] vfs_statx+0xc4/0x170 [ 617.087818][T19330] vfs_fstatat+0x118/0x170 [ 617.092321][T19330] __se_sys_newfstatat+0x55/0x3e0 [ 617.097327][T19330] __x64_sys_newfstatat+0x55/0x70 [ 617.102433][T19330] x64_sys_call+0x2c64/0x3020 [ 617.107118][T19330] do_syscall_64+0x12c/0x370 [ 617.111700][T19330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.117640][T19330] [ 617.119960][T19330] write to 0xffff888101dccf90 of 192 bytes by task 19330 on cpu 0: [ 617.127935][T19330] queue_limits_commit_update+0x4b/0x160 [ 617.133580][T19330] loop_configure+0x78c/0x9c0 [ 617.138241][T19330] lo_ioctl+0x1e1/0x13a0 [ 617.142539][T19330] blkdev_ioctl+0x387/0x460 [ 617.147073][T19330] __se_sys_ioctl+0xce/0x140 [ 617.151672][T19330] __x64_sys_ioctl+0x43/0x50 [ 617.156353][T19330] x64_sys_call+0x1563/0x3020 [ 617.161238][T19330] do_syscall_64+0x12c/0x370 [ 617.165823][T19330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.171732][T19330] [ 617.174043][T19330] Reported by Kernel Concurrency Sanitizer on: [ 617.180188][T19330] CPU: 0 UID: 0 PID: 19330 Comm: syz.7.4067 Tainted: G W syzkaller #0 PREEMPT(full) [ 617.191203][T19330] Tainted: [W]=WARN [ 617.195027][T19330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 617.196885][T19230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 617.205087][T19330] ================================================================== [ 617.205414][T19330] loop7: detected capacity change from 0 to 512 [ 617.230170][T19330] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 617.257297][T19330] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 617.276119][T19330] EXT4-fs (loop7): 1 truncate cleaned up [ 617.282489][T19330] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.304473][T16467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.