last executing test programs: 17m31.111955068s ago: executing program 32 (id=636): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xc, 0xffff}, {0x6, 0x5}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4c040) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@nodioread_nolock}, {@minixdf}, {@norecovery}]}, 0x2, 0x4c5, &(0x7f0000000540)="$eJzs3ctrXNcZAPBvZixZktX60VJsF2qDC+4Da/SgWGq76artwlBq6KYFV5HGiqORRmhGjiW8kJOdF1mEhARCFtnnL8gmXsUEQlZZJPuQRXBIHAWSQGDCvTNjSyONMiSyxtb9/eBa5z5mvnM8fIdzz9w7N4DMOpv8k4sYjoj3I+JoY3XrAWcbfzbu35xJllzU65c/z6XHJeutQ1uvOxIR6xExEBH//nvEU7ntcaura/PT5XJpublerC0sFauraxeuLUzPleZKi2OTF6emJkcnxqf2rK23X3jm9qW3/tn/5tfP37v74jtvJ9Uabu7b3I691Gh6XxzftO1QRPz1UQTrgUKzPYO9rgg/SvL5/SIizqX5fzQK6acJZEG9Xq9/Vz/cafd6HTiw8ukYOJcfiYhGOZ8fGWmM4X8ZQ/lypVr749XKyuJsY6x8LPryV6+VS6PNc4Vj0ZdL1sfS8sP18bb1iYh0DPxSYTBdH5mplGf3t6sD2hxpy/+vCo38BzLCKT9kl/yH7JL/kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QSf+6dClZ6q3732evr67MV65fmC1V50cWVmZGZirLSyNzlcpces/Owg+9X7lSWRr7U6zcKNZK1Vqxurp2ZaGysli7kt7Xf6XUty+tArpx/Mydj3IRsf7nwXRJ9Df3yVU42Or1XPT6HmSgNwq97oCAnjH1B9nlHB9o/4ne9nHBQKcXLj2cLwSeLPleVwDomfOnfP8HWWX+H7LL/D9klzE+sMMj+rbYbf4feDKZ/4fsGu7w/K+fbXp212hE/DwiPiz0HW496ws4CPKf5prj//NHfzvcvrc/9036FUF/RDz72uVXbkzXastjyfYvHmyvvdrcPr7phR1PGIBeaeVpK48BgOzauH9zprXsZ9zP/ta4CGF7/EPNucmB9DvKoY3clmsVcnt07cL6rYg4uVP8XPN5540TmaGNwrb4J5p/c423SOt7KH1u+v7EP7Up/m82xT/9k/9XIBvuJP3P6E75l09zOh7k39b+Z3iPrp3o3P/lH/R/hQ7935kuYzz9+nOfdIx/K+L0jvFb8QbSWO3xk7qd7zL+vf/951ed9tXfaLzPTvFbklKxtrBUrK6uXUh/R26utDg2eXFqanJ0YnyqmM5RF1sz1dv95eR7d3dr/1CH+Lu1P9n2+y7b/+2v3/3v2V3i/+7czp//iV3iD0bEH7qM/+X4x//vtC+JP9uh/fld4ifbJrqMX335H4e7PBQA2AfV1bX56XK5tKyg8OQUPng8qrE3hVuPRzXaCr3umYBHrbqanJonSd/rmgAAAAAAAAAAAADd2o/LiXvdRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAg+D7AAAA//+M69Uq") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x54, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 16m43.241414943s ago: executing program 33 (id=1084): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000002200000020000000000000000000000017c606029f159b3085719bf28192510ace7b95d590ae111ad2079f55999da0b60f9b050a004112c4ee806d1b7b1fb31be2b245151b68e53c20cb5510ce831408507bdd9bcadb943d343a87ba6a166119874c616fb429361730cf65dc04d4a0bdf211690bb8b62ab5c8178adc6a50"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0), 0x900}, 0x20) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000002c0)="c0a011d118c82d82fde590416d20f343a9f9bbadf8d85d7389f4cfdd658c85d2937daf2a8df7aa9566a3f718630b73493f3a2b743588f656943c375d742e546c9ee6307a1161c5bb87cb19888ff7884f1c91e92e99f101b02fe73b86b4a03b2ba6696132e062869d608fa91a215ee34c99adca8c5d10f86b2e91b541deb4d10f24d3e095ba83205af756fae55c982c3b6a20e352c30f7c54ea8eca1bae", 0x9d) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fda600000000000008000f0001", 0x21) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x20, 0x700, 0x7, 0xc94, {{0x12, 0x4, 0x1, 0x2, 0x48, 0x68, 0x0, 0xf, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2c}, {[@generic={0x94, 0x5, "926e00"}, @timestamp={0x44, 0x14, 0xbd, 0x0, 0x6, [0x4, 0x81, 0x2, 0xcc]}, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xb5, [@empty]}, @noop, @timestamp_addr={0x44, 0xc, 0x78, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x7}]}, @end]}}}}}) 16m9.209511739s ago: executing program 1 (id=1379): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x3) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents(r1, &(0x7f0000000040)=""/48, 0x30) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0xfc, @dev={0xfe, 0x80, '\x00', 0xe}, 0x7}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000040)=0x4, 0x4) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000000)=0x2, 0x4) shutdown(r0, 0x1) r4 = accept(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0) bind(r2, &(0x7f0000000000)=@generic={0x23, "d44950be537a3b93836734cc2bacbebf8b3704d3e5d29aec556d8cb18dd714e1fd9980742a9bc0a2171739aa9374020d7aa1ea4fe3be6e71ebae9c9ea0b4e474dedc40792b8004db02b9cfcedb784f0a647455b09d6d873d7587d4fb32ef9f06769d8f311f91e337c499caff51a70f52381f83b233d887a3852372b6335e"}, 0x80) bind$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_void(r4, 0x1, 0x1b, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) getpid() 16m8.137663681s ago: executing program 1 (id=1383): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x4, 0x4}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket(0x10, 0x803, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 16m8.097738363s ago: executing program 1 (id=1384): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xff21, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x10}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000400)={&(0x7f0000000000)=""/57, 0x120c000, 0x800, 0x0, 0x1}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0xc000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000040)=0x4800, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) ioprio_set$uid(0x3, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x169a82, 0x109) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) sendfile(r5, r5, 0x0, 0xb) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@deltaction={0x110, 0x31, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x161369fa}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6dd}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x110}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0xc, 0x5, 0x4, 0x3, 0x1, 0xa, 0x5, 0x2, 0xa, 0x10, 0xa, 0xf, 0x7, 0x0, 0xc, 0xa], 0x0, [0x8, 0x2, 0x3, 0x7f, 0xd848, 0x3, 0x0, 0x5, 0x95, 0x6, 0x8c31, 0xa9, 0x401, 0x100, 0x6, 0x800], [0xfffe, 0x1, 0x7ff, 0x0, 0x2, 0x7, 0x2, 0xfdfb, 0x3, 0xfbe9, 0x1, 0x8, 0x8, 0x1a, 0x9]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00'}) 16m7.618140266s ago: executing program 1 (id=1393): syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004845) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xb1d7, 0xc880, 0x1, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3, 0xffff}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000)=0x6, 0x2c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16m7.520880741s ago: executing program 1 (id=1395): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x82) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d00000000000000000300000000000000030000000400000003"], 0x0, 0x5e, 0x0, 0x1}, 0x28) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x3c, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, @in={0x2, 0x97, @broadcast}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}]}, &(0x7f00000001c0)=0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x40001, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3, 0x4, 0x6, 0x0, 0xffffffff}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, {0x1, 0x2, 0x2}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, 'W)', 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) sendmsg$inet(r4, 0x0, 0x3000c085) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r7, 0x11, 0x68, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000085fce604ddc4a4c0f4399f2f262e00000085000000110000009500"/54], &(0x7f0000000980)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 16m7.355768328s ago: executing program 1 (id=1399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002ffffff8100000081"], 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x16) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x24060400) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="a29e85292694650bc6827c0256553be4da5b89ac603886a8d70df6fb647045b546eba140579612b51514c5d5b4c50b4d3f143ef702152679fe13dcb30afec517ee79e1718bc254b282e22760f4be5ae3b088b5b7152874965bfc3b186415e0ed995ba96e5f0bb88aa0920100000000000000c0a64dfb8058c0687a523cb8e096ee807923e78664cf1ca4a2598206caf4dbd45037a0289c840eabc99765286b07f0d0786110767a42d720c5dff13c90459babc8614cc93f8d1e65c81d7a81cb96e291", @ANYRES16=r7, @ANYBLOB="01002dbd7000ffdbdf250a0000000400068008000200050000000500050000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x800) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@allocspi={0x2dc, 0x16, 0x1, 0x0, 0x0, {{{@in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2, 0x4e24, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x0, 0x33}, @in=@empty, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @sa={0xe4, 0x6, {{@in=@empty, @in6=@empty, 0x4e20, 0x25, 0x4e22, 0x2, 0xa, 0x20, 0x0, 0x11, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x4d4, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @local}, {0x3ff, 0xffffffff, 0x60, 0x5, 0x3ff, 0x7ff, 0x2, 0xe6}, {0x7563, 0x1, 0x8}, {0x9, 0xf0, 0x89}, 0x70bd26, 0x3505, 0x2, 0x4, 0x3, 0x9a}}, @policy={0xac, 0x7, {{@in=@empty, @in6=@mcast2, 0x4e22, 0x3, 0x4e24, 0x1, 0xa, 0x30, 0x80, 0x3a}, {0x1, 0x3, 0x16, 0xe3, 0x5, 0x6, 0x7, 0x400}, {0x8001, 0x10001, 0x20000000, 0x6}, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x6}}, @proto={0x5, 0x19, 0x32}, @extra_flags={0x8}, @lifetime_val={0x24, 0x9, {0x400, 0x639b, 0x7fffffff, 0x2}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r9 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r9, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendto$llc(r9, &(0x7f0000000040)="3c352f5708e9c52c84067687699f2ac8121030ddd8d186d24780e4a2c08b", 0x1e, 0x10, &(0x7f0000000080)={0x1a, 0x17, 0x5, 0xc0, 0xc, 0xcb, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x10) move_mount(r4, &(0x7f0000000140)='.\x00', r3, 0x0, 0x41) sendmsg$inet(r2, &(0x7f0000000940)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0}, 0x30004081) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000514210626bd700000000000080006000000200008"], 0x20}}, 0x40004) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, 0x0, 0x4080) 16m7.31963377s ago: executing program 34 (id=1399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002ffffff8100000081"], 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x16) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x24060400) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="a29e85292694650bc6827c0256553be4da5b89ac603886a8d70df6fb647045b546eba140579612b51514c5d5b4c50b4d3f143ef702152679fe13dcb30afec517ee79e1718bc254b282e22760f4be5ae3b088b5b7152874965bfc3b186415e0ed995ba96e5f0bb88aa0920100000000000000c0a64dfb8058c0687a523cb8e096ee807923e78664cf1ca4a2598206caf4dbd45037a0289c840eabc99765286b07f0d0786110767a42d720c5dff13c90459babc8614cc93f8d1e65c81d7a81cb96e291", @ANYRES16=r7, @ANYBLOB="01002dbd7000ffdbdf250a0000000400068008000200050000000500050000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x800) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@allocspi={0x2dc, 0x16, 0x1, 0x0, 0x0, {{{@in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2, 0x4e24, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x0, 0x33}, @in=@empty, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @sa={0xe4, 0x6, {{@in=@empty, @in6=@empty, 0x4e20, 0x25, 0x4e22, 0x2, 0xa, 0x20, 0x0, 0x11, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x4d4, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @local}, {0x3ff, 0xffffffff, 0x60, 0x5, 0x3ff, 0x7ff, 0x2, 0xe6}, {0x7563, 0x1, 0x8}, {0x9, 0xf0, 0x89}, 0x70bd26, 0x3505, 0x2, 0x4, 0x3, 0x9a}}, @policy={0xac, 0x7, {{@in=@empty, @in6=@mcast2, 0x4e22, 0x3, 0x4e24, 0x1, 0xa, 0x30, 0x80, 0x3a}, {0x1, 0x3, 0x16, 0xe3, 0x5, 0x6, 0x7, 0x400}, {0x8001, 0x10001, 0x20000000, 0x6}, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x6}}, @proto={0x5, 0x19, 0x32}, @extra_flags={0x8}, @lifetime_val={0x24, 0x9, {0x400, 0x639b, 0x7fffffff, 0x2}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r9 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r9, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendto$llc(r9, &(0x7f0000000040)="3c352f5708e9c52c84067687699f2ac8121030ddd8d186d24780e4a2c08b", 0x1e, 0x10, &(0x7f0000000080)={0x1a, 0x17, 0x5, 0xc0, 0xc, 0xcb, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x10) move_mount(r4, &(0x7f0000000140)='.\x00', r3, 0x0, 0x41) sendmsg$inet(r2, &(0x7f0000000940)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0}, 0x30004081) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000514210626bd700000000000080006000000200008"], 0x20}}, 0x40004) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, 0x0, 0x4080) 12m49.233471829s ago: executing program 7 (id=2589): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mincore(&(0x7f0000ff9000/0x3000)=nil, 0x3000, &(0x7f0000000140)=""/248) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000000)=""/31}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r0) 12m48.687157766s ago: executing program 7 (id=2591): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f0000000100)=0xb) setuid(0xee00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0xfffffffffffffc9c, &(0x7f0000000e80)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000004000000ffffffffffffff7f00000000000000000000010000000000000000000000000000000000000000000000000000000000f9ffffffffffffff02000000000000000400000000000000000000000000000200000000000000000000000000000000000103020000000008001f00020000000c0015005e07350005000000"], 0xcc}}, 0x2c0008c4) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015001f0f"], 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000002c0)={r4}, &(0x7f0000000340)=0x8) 12m45.607368595s ago: executing program 7 (id=2607): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) ioctl$int_in(r0, 0x5452, &(0x7f0000000380)=0x2003) r1 = accept4(r0, 0x0, 0x0, 0x0) unshare(0x2c020400) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x4}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x5, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x41, 0x690c, 0x0, 0x9, 0x2, 0xe, 0xb, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x2, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x4007, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) 12m44.600654893s ago: executing program 7 (id=2621): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$gtp(0x0, r0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x111081, 0x43) r3 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x3be}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703665727370616e000000140002800600020081ed64b59f9dfbaf20300000c4573ca53d0bd11d52dc2b7a9036"], 0x48}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r3, 0x0, 0x0, 0x1, 0x1}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x19, &(0x7f0000000040)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x10, 0x8, 0xfbff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x80, 0x86, 0x6}]}, 0x6, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x500e}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4b, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]}]}) io_uring_enter(r3, 0x22d0, 0x20, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 12m43.02392162s ago: executing program 7 (id=2625): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000001c0)={&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)='#! ', 0x100000001}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000440)) (async) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x25a5, 0x4) write$binfmt_script(r5, &(0x7f0000000180)={'#! ', './file0'}, 0xb) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x3}, 0x9092, 0x0, 0x7, 0x2, 0x9, 0x723e, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_setup(0x20fe, 0x0) (async) io_setup(0x20fe, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x48081) (async) sendmmsg$inet6(r9, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x48081) 12m42.701545165s ago: executing program 7 (id=2627): move_pages(0x0, 0x90249c01dd736e4b, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0) 12m27.324646589s ago: executing program 35 (id=2627): move_pages(0x0, 0x90249c01dd736e4b, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0) 6m3.732066124s ago: executing program 8 (id=4839): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003001c0012800b00010067726574617000000c00028008000700ac14142808000a00", @ANYRES32=r6], 0x44}}, 0x804) r7 = socket(0x10, 0x803, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xfff2}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44044}, 0x4048884) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="04000000"], 0x158}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) write$binfmt_misc(r9, &(0x7f0000000000), 0xfffffecc) splice(r8, 0x0, r11, 0x0, 0x4ffe6, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r7) 6m2.812995458s ago: executing program 8 (id=4844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 6m2.765828661s ago: executing program 8 (id=4845): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x80, 0x4, 0x63, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x7800, 0xfffffffe, 0xff}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, [@exit]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) (async) keyctl$update(0x2, 0x0, &(0x7f0000000ac0)="39c1e5", 0x3) (async) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000140)=0x1) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000d00)={'\x00', 0x2, 0x74, 0x3, 0x3ea0, 0x5, 0x0}) capset(&(0x7f0000000d80)={0x19980330, r10}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000c40)={0x73622a85, 0x0, 0x1}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x7, 0x20000000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) 6m2.653622706s ago: executing program 8 (id=4846): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = getpid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x7, 0x0, 0x80000, 0x0, 0x2009}, r0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) ioprio_set$pid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4000000000000, 0xffffffffffbffffe, 0x7f, 0xfffffffd}, 0x0) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) accept4(r1, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) r2 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78cf2}], 0x7b, 0x2000, 0x0, 0x3) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x46) close_range(r3, r3, 0x2) r4 = socket$xdp(0x2c, 0x3, 0x0) openat(r3, &(0x7f0000000180)='./file1\x00', 0x2, 0x8b) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000300)=0xffffffffffffffff, 0x4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,\b\x00dnoV', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) 6m2.242034136s ago: executing program 8 (id=4855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 6m0.783610476s ago: executing program 8 (id=4866): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x2c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = accept4$tipc(r0, &(0x7f0000000480), &(0x7f0000000640)=0x10, 0x80800) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}, 0x20}}, 0x10) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10400c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54cd2efc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r4) write$cgroup_pid(r4, &(0x7f00000005c0), 0x12) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r4, 0x20, &(0x7f0000000340)={&(0x7f0000000240)=""/124, 0x7c, 0x0, &(0x7f0000000540)=""/232, 0xe8}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYRESOCT=0x0], 0x54}}, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) 6m0.71027603s ago: executing program 36 (id=4866): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x2c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = accept4$tipc(r0, &(0x7f0000000480), &(0x7f0000000640)=0x10, 0x80800) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}, 0x20}}, 0x10) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10400c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54cd2efc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r4) write$cgroup_pid(r4, &(0x7f00000005c0), 0x12) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r4, 0x20, &(0x7f0000000340)={&(0x7f0000000240)=""/124, 0x7c, 0x0, &(0x7f0000000540)=""/232, 0xe8}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYRESOCT=0x0], 0x54}}, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) 5m17.208641584s ago: executing program 9 (id=5144): r0 = socket(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_open_procfs(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdffffff"], 0xfc}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000001200000026bd7000fcdbdf2508060a014e244e23f8ffffff03000000060000000000000000040000090000000800000009000000", @ANYRES32=0x0, @ANYBLOB="010000000000004c600000000b0000000d000100f102dcf29effaefacc"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="180000001c10000000000000000000001800000004000000000000000700000085100000fbffffff186400000300000000000000020000009500000000000000ce39c063026b3615bd4a0ee7cc"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 5m17.065784091s ago: executing program 9 (id=5146): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x200000000000000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x7, 0xb, 0x7, 0x7, 0x0, 0x70bd26, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xbbc4}}]}, 0x38}}, 0x84) 5m15.805666952s ago: executing program 9 (id=5152): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, 0x0, 0x25, 0x0, @val=@netkit}, 0x1c) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000040)='1\x00', 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r3}, 0x20) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, 0x0, 0xfffffffffffffeb4}, 0x0) close(r1) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x7, &(0x7f0000000040), 0x4) 5m15.041421309s ago: executing program 9 (id=5157): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000007f00000000000000f1ffffff91117a041b00"/32], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x80009, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0x8001ff, 0x0, 0x8, 0x8, 0x23, 0x7, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = dup(r1) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff98b6, 0x4, 0x330, 0x80000001, 0xdb}, 0x9c) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40080) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) geteuid() socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x8002, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {}, {@nodiscard}, {@delalloc}, {@resgid}, {@jqfmt_vfsv0}, {@init_itable}]}, 0xff, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") r6 = socket(0x2, 0x80805, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x118, 0x50000089) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xf, 0x5}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f0000000100)={0x84, @multicast2, 0x4e23, 0x3, 'sh\x00', 0x14, 0xc, 0x22}, 0x2c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r8, &(0x7f0000000dc0)="6d8b510563db73e443be20c32670bcfb68eda45cbef0f5dff53a1b6610bb329af3093a410e588afae7b7b1f7154c9f5f1a40747d1d5d71d8fd0e35abee748c496c165bc2108614e35551fe930ad7c8207f8988b7b7fac4ef3cb174d2186a1c76d29a6e2bd13b311adaf13544fd70d1d81168f99e63d5ff75edd2d26df57f39e740efb6a03328e07a7e0634cd687ac8616d6896f11a5b0c540b3aea160687796b6fdf46b0cd47d39b6ad0182d381af40740312939127a8a4420c4c06d48a8f20eeeaa656f1dd30858d92ae633c308891227241f881a6f89cd47f3c66939f6af7cab5ff850dff2039398f729559ddb0c7fdc11e7ffcd9da75b991e8686d72b0b4b20abd28477ac4c7aa02c892183392be6c6a4a9fbd6ba56d69cdeebd5e855b95907cd59549fc5e4a74210ef7b28e978f873153c14499cb05e8bddaa8508d8218c7193592a663b0f95bf4dd69cc0718b549e56a365558ad4329e667be25f69a8fe9de1757b7a8570a30ca77467782b71d4aa69548201593ac811e1775be9b1a16f9f88e16de982e0f43c5adc8345738c276d5b2ec313b2a898578b375e39fcd4a806882d1e1e350a1cea91639c0923a998a73bbf7fd9d81f0f6d468c785dc7a20e1d3b8a0fa4c1812fbce34ec17ea41129d528395af8846a9ee4e359959d1f675d7266bf79b472cdbcc09273e02c205a803d55630d2f208c8a9dbe1ca416476b33d14083f916061d7bfedf7f17414dbb34f76fdd664a166a2c2cf01628f636c21a667fbc24228c6ada93947115d303ead00f2de030539ec89231dfe2ffd0735d1029d67a0b70e8b6b2b5cab60cbcb65e6ebc19c3999a9a4b196fbf706162c8e5f9e0f05b0740c86e17f0bf2aa1531c6410ec423e336b706465dd280d8522abc665dde5aa63da8b532280c3d88da88810bcaf1305ffca5b5bdd027206cbf8d1bcf83ec81e3e4a2796fee9561e4136021c53328f40e419e22447cd5f637c0726997b32156691ba0af2f901a28b8ae82e9fb37616d9eee4a4376e018f504441b78b52198bc86d82d9fee9a418b0c20f6581d4c60957dad4c0c7d9f6aaa87a68a68bca5f8405315503bbf65bb6ec55bf0a4eac64fa799674a14b3d40be4dc7c0345ba9de5ddffb39526f43561324d9318049ea3f8507d794ab5ab2cd59feab0c827f952f077ec0225732618a5b3480daddf2392210d548a818434fd03b508e37c7017e1a8f9d3b46e715eb45f8e0f39b8daeab9e89eb31c1969f0af6dc9512f60c756cde4697ddf95018a776cda4356e9ba3397b19f9f4008be9dfff2b48e165ca15824f093e6c3adaf01b2bd90fc63c84265a4ee22e73c91e5a356564387eabde00ba35a70aba6a8a8531ee41c6dba878fa44e4879867eaf5d303da78fe743b8a9d3f3c5883c370c59873c8dd1396b7cddff8ae474fdb202b725674db77e9bee30e875df328760fdeddb26a5a46b19d113e32051f03de0a7412283de72e491d61196be7ef091e58f5d008208e80cb6cd15e30d118b7d880a3f15326b0a8c1f998debc50fffebc4a62671a44413a2acb6602bceb9315aee1afe1cf1fa7004bc74610c37aa60aec4fc593412f505292dbf2fbf8eef7f5e752b01442dc5c21d7295ea7142b5bae0dbe2c71339e68f16815e1dd8499bf76ea7cc1e34a8758cc74a9cbabcc10f5246adcb73d9fa9b6370497c438d19b13a2d80686f360da9b3a718f227d074aa9e96e3c38364af48f058c9a10efedfd73db762bcfef6359fcc6e9866fded7298feb73f33e1753c7b306a6fc4c464d5342574e1ecca39be6cfa90b6773c61dc1cc869903b62a5bac931dadebdb3740169dd842583425aa11ced74dd7378d71486cb1bde9fc6e14cbc8711677bd148f82c1ddedc28f64d19771d2c182f82377bc9a863ab17f8c956cd772b7277b6da4c5a8d9d27c113c5ec4ecbba2d157316240f0c46ab19ca63c850cfcbf5515f274bef33d7e8d9a03d3ff7c1713c6369cda56cdf32f3ac1f36a55013652577348e79a333242b919de3e8c9c13fdeb95760d8c187f9842af226da5bcd8a751", 0x5ad, 0x8000, &(0x7f0000000180)={0xa, 0x4e21, 0xf, @dev={0xfe, 0x80, '\x00', 0x12}, 0x6}, 0x1c) r9 = perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x29, 0x1, 0x4, 0x3, 0x0, 0x9, 0x4010, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xb}, 0x10804, 0x8e, 0xffff0000, 0x7, 0x9, 0x5, 0xe033, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18081b236d04bd8bf1a00000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) getpid() 5m10.977253366s ago: executing program 9 (id=5163): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtaction={0xb8, 0x30, 0x53b, 0x0, 0x0, {}, [{0xa4, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7ff, 0x3, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x5, 0x4, 0x8, 0x7fff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xb8}, 0x1, 0x200000000000000}, 0x0) 5m10.805610524s ago: executing program 9 (id=5164): socketpair$unix(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mremap(&(0x7f00004aa000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000036000/0x4000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x867d7000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (rerun: 64) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setresuid(0xee01, 0xee00, 0x0) (async) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) unshare(0x6a040000) (async, rerun: 32) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 32) unshare(0x24020100) 5m10.785306885s ago: executing program 37 (id=5164): socketpair$unix(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mremap(&(0x7f00004aa000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000036000/0x4000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x867d7000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (rerun: 64) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b700000081200000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000006b030000000000001d400500000000004704000001ed000072030200000000001d44000000000000730a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67a41b9e320146ee9f566a28"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setresuid(0xee01, 0xee00, 0x0) (async) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) unshare(0x6a040000) (async, rerun: 32) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 32) unshare(0x24020100) 1m8.746258723s ago: executing program 3 (id=7521): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x4, &(0x7f0000000000), 0x0, 0x23d, &(0x7f0000000540)="$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") (async) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) (async) syz_emit_ethernet(0xa56, &(0x7f0000000800)=ANY=[], 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b16000000e8fe55a11800150006001400030000120800040048000000a80016000a0001400d000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) (async) read$eventfd(r1, &(0x7f0000000000), 0x8) io_pgetevents(r2, 0x7, 0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) (async) r3 = io_uring_setup(0x5c2b, &(0x7f0000000340)={0x0, 0xf0d6, 0x20, 0x3, 0x3cc}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)=""/195, 0xc3}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000480)=""/81, 0x51}, {&(0x7f0000000880)=""/164, 0xa4}, {&(0x7f0000000980)=""/195, 0xc3}, {&(0x7f0000000a80)=""/150, 0x96}, {&(0x7f0000000b40)=""/189, 0xbd}], 0x7) (async) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) r4 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) (async) r6 = socket(0x28, 0x5, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r7, 0x4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) (async) recvfrom$inet_nvme(r6, 0x0, 0x0, 0x40000002, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f00000000c0)='./file1/file1\x00', 0x108) 1m8.025429759s ago: executing program 3 (id=7535): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) creat(&(0x7f00000000c0)='./file0\x00', 0x81) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001d5566752ecbe95886"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') write$binfmt_script(r2, &(0x7f0000003140)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 1m7.901651445s ago: executing program 3 (id=7538): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1, &(0x7f0000000240)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x85, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) listen(r1, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x800, 0x6014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb43, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000001f40)=""/4073, 0x45, 0xfe9, 0x1}, 0x28) socketpair(0x1e, 0x1, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = getpid() process_vm_readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0x1000}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0xa, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffa, 0x6}}}, 0x118) 1m7.834899419s ago: executing program 3 (id=7539): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0xf3d9, 0x2, 0x8, 0x5}, {0x3, 0x0, 0xe, 0x8}]}) ioctl(r0, 0x676, &(0x7f00000003c0)="cae7ee7ba759a42e42758d82b8b3c7dd182336c91b9fc90baadf584b1a8ac405de00cc99428e0ebab63ef747ee1558c57c285633c3f30a50f1b0c889693c04d098d42d0f370fc1f622c9a74a663e9470fd3783275f56e582063a359c153520d6baf30c41e80a2dc964e11952bc99f10305a667f36f44ccab2a75b8d1bc8d9ae6aa1ae35ebcafbe3cb3f08cc45e1b2a91cc1d14a26e8f65e9d3e273968f93852623c40b6a0381acc878f95a6b681911579fb194782dc4ae0e624cdb935d5b24ebac1f52f06b7bf5812cda81e7eb24b2e43367b145ad513af9f7bf2da1f41e166710d6d15e2a2ebbf3dad4c55a20f27f") syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0xff, 0x51c, &(0x7f0000000280)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000e27f00000400000000000000", @ANYRES32, @ANYBLOB="00f8ffffffffffffff000000eec20abf044b5d6544"], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000080)={[{@fat=@errors_continue}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x32}}, {@fat=@flush}]}, 0x1, 0x29e, &(0x7f0000000680)="$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") r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cb2e') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@empty, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {0x1, 0x2}, [], {0x4, 0x2}, [], {}, {0x20, 0x5}}, 0x24, 0x1) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003500)={0x23cc, 0x14, 0x1, 0x0, 0x0, {0xa}, [@nested={0x22b4, 0x4, 0x0, 0x1, [@generic="53c5081bae57bd8b8e28cda2e6e2d2b83d05f228a56b3486ce1bc50e474f20d3c08b3d77e2c01d8c999f2d58fc729b6c5459a02785d18cf2cbe5d1e9c06fc69ddbca415368704a5f51c978cf29f44ef08b6dd56eb0112823fb7ca1d69cd2814c3693202b596577fabe7d730ac4d32e60f6f15e2b0ae5a63552fa35af935145e134dc595678699baa898a69ce138440b2d3b8eebd2316850c08206874f49ecfb5502e450d6c9b63d2273142c8acfe1e1586f2544974318816f3c70b56f76ed2961be1c542a9e693dd61f84ec24fe1cc5b409e592f89438b8ee1c74fbe903de832ef43c17a7c7e23947620167be8", @generic="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", @generic="51218f64e3c89f8613728daff8cf66824e6c12bc31af320727b73db26dd838591ad36a707fdf238683d0410f139550019489e2d69e57b28b3504a03a2d97c85eb0485bc65418275e3dd891285c4919f8ef70cffc7a93dd962cedb0421792c933b8a9d061c6bf0a76828e6aac21425bb744e13a0861c80edcba864b7b9700a14b5c621624ca925dc4441e06f810a07d26038f05cccdf5f37b81e33a50f159778b", @typed={0x8, 0xf3, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x144, 0x0, 0x0, @uid=r6}, @generic="7b23b6efef8363b1861191f5b478d216c3cec824fc9df6453e30e0b5e099d7d68ef5cfe83d18396b04c45858fd448f17507b83074b963422ebaa0dd90e0c57", @typed={0x14, 0x116, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0xe1, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r6}, @nested={0x10a4, 0x76, 0x0, 0x1, [@nested={0x1088, 0xb6, 0x0, 0x1, [@typed={0x84, 0xb7, 0x0, 0x0, @binary="47aa9985afa01dc451f3449e1b69403f3de86b681f798922ea5f619c49ba0ed171e64ed991b0f6bde5a1b391f34aee2e9b2a2b92038ff83dd51f96d4d6ab757b39ebed2eb6276f6ade1e79374789e89935771c05e0aa36b3158821fc0bc1258ad869fba58f76d6fa77500df27d73fe4290c7dfeae46862ee70b32d1bb38a13e8"}, @generic="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"]}, @typed={0x8, 0x143, 0x0, 0x0, @pid=r5}, @nested={0x10, 0x126, 0x0, 0x1, [@typed={0xc, 0xc2, 0x0, 0x0, @u64=0x34b3}]}]}]}, @generic="be8e81a1f17a04d5259636b9e9a98fb452e6d15bd7dbcd978c00164a20bcda6997e46f3cb28a53099f0f1d897649f9fcebdabaa4f9bc5a39e53851370c1eda5c33527a969c5c189c4c5e9a457612702f1a42a2c6", @typed={0x8, 0x9e, 0x0, 0x0, @u32=0x7}, @typed={0x89, 0x135, 0x0, 0x0, @binary="a3ace54f0403cd4d478b43625452523832a48505b6ef87d53c32e241a47419ae7550360dd201fa204018534540eb4732eda08fd324f8a2cd866f39b9f1e82d256dba4e5739f16aceeac6e05d6b8d3760a36126be16d15200840cab00f96484e30b4c9072b8aae2bfc3b0d6be9ed7da7f1117e1db975c30cfe929c7444727196ac0fd361d9c"}, @typed={0x8, 0x63, 0x0, 0x0, @u32}, @typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@mcast2}]}, 0x23cc}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "bd"}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0xfffffffffffffd5d, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x1b8, r10, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7c6a, 0x3f}}}}, [@NL80211_ATTR_IE={0x148, 0x2a, [@mic={0x8c, 0x18, {0x8ae, "ff2c512b24a0", @long="5ec184217c4353106e2aec39dee97ab5"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x3, 0x80, 0xe7}}, @ibss={0x6, 0x2, 0x400}, @random_vendor={0xdd, 0x33, "c27c3b1572189493b9d6007b7f5cde8ddf3c3447bdf40787cb0a175b0fc5362199f27f897cb80ecc6cc10afeb01ec9b0017385"}, @challenge={0x10, 0x1, 0xe}, @random={0x4, 0xc0, "fe9f169bc43377950a1f27ed02c4124cd9da87f78a14ebe34c734c22a83d4754cc1b9422c64b9f5c518ca5a7695f890d932fe8cdc009c80f2e5353da6366a8cf4def8ca738fcc8f3ea0345fbbb30fadff6724bd05e1ced60c73d8278df1a4dffe466eb7c25d4c05e93400808e0a71ff44c87e7f11ae3ed96b92ddf33923f2011e7e14c38ea2fd0ebc73b8001b7e34801898749d0d1bd8c33d971f09367f5daab774c4c6e16c23375508ba5fa6a47e0ddc27375855e49698a5876cd998c4ab15d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x5, @val=0x80, @void, @void}}, @ibss={0x6, 0x2, 0x3}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0x5, 0x1, @device_b, 0x8, 0xaf, 0x1}}]}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x1, 0x0, 0x8, 0x94, 0xd, 0x6, 0x0, 0x394, 0x0, 0x7ff, 0x7f, 0x7, 0x9, 0x0, 0x9, 0x5]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xd, {0x401, 0x7, 0x0, 0x401}}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x200, {0x6, 0x5, 0x40, 0x8}}}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x1b8}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffe6b, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES16], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m7.563287992s ago: executing program 3 (id=7544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f00000001c0)=0x83a, 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101840, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000040)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x19, 0x19, 0x3, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x204, 0x0, 0x800}], '%'}]}, {0x0, [0x5f]}}, &(0x7f0000000540)=""/145, 0x37, 0x91, 0x1}, 0x28) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) 1m7.39575129s ago: executing program 3 (id=7547): socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x80c4) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x490283, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x81, 0x4a45}, 0x7606, 0x2, 0x0, 0x2, 0x6, 0x2, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x622, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0) writev(r4, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0, 0x2200}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100006ab76dc93d8e9494a8f6f3f94ffcd13bfa7d956902f58aa742c03f5bc2e53699ff16e79870d1284b99eba052c4d443a1ae08bbf8b2316e6bdb0bb50c50130b4737a671a60f2e84f25bcde6bc324c984a50c8437fdd659e8ac6bc19ad0342d31e91a6fc6eaccbef417ee9f24a03fc43f30f972553b7158c91d53b43de9212d2bf956c39a35b64", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2a, 0x8001, 0x2, 0x6, 0x8, 0x5, 0x3, 0x200, 0xfffffffb}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x84000000, 0x7, 0x4d, 0x80000000, 0x1ff, 0x8, 0x9, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1m7.352899023s ago: executing program 38 (id=7547): socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x80c4) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x490283, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x81, 0x4a45}, 0x7606, 0x2, 0x0, 0x2, 0x6, 0x2, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x622, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0) writev(r4, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0, 0x2200}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100006ab76dc93d8e9494a8f6f3f94ffcd13bfa7d956902f58aa742c03f5bc2e53699ff16e79870d1284b99eba052c4d443a1ae08bbf8b2316e6bdb0bb50c50130b4737a671a60f2e84f25bcde6bc324c984a50c8437fdd659e8ac6bc19ad0342d31e91a6fc6eaccbef417ee9f24a03fc43f30f972553b7158c91d53b43de9212d2bf956c39a35b64", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2a, 0x8001, 0x2, 0x6, 0x8, 0x5, 0x3, 0x200, 0xfffffffb}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x84000000, 0x7, 0x4d, 0x80000000, 0x1ff, 0x8, 0x9, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 8.387386272s ago: executing program 0 (id=7801): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f00000002c0)={[0x537e]}, 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 8.209664181s ago: executing program 0 (id=7804): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x21081e, &(0x7f0000000000)={[{@nomblk_io_submit}, {}, {@block_validity}]}, 0x1, 0x51a, &(0x7f0000000a40)="$eJzs3U9sHFcZAPBv1vHfuHVaegAEbWgLAUVZ25s2qnqAckIIVUL0CFJq1hvL8q7X8q5LbXJwz1yRqMQJjhw5cO6JOxcENy7lgMQfKyhG4jBoZmfD2t5NVontdb2/nzSaN/Mm830vzrznfZvdF8DYuh4R+xExFRHvR8RCcT4ptnins2XXPTy4Xz08uF9NIk3f+2eS12fnoufPZK4W95yJiB98J+LHycm4rd29jZV6vbZdHC+2G1uLrd29W+uNlbXaWm2zUrmzfGfprdtvVk6tra80porSlz/9w/43fpqlNV+c6W3Haeo0ffJRnMyViPjeWQQbgYmiPVOjToSnUoqIFyPi1fz5X4iJ/KcJAFxmaboQ6ULvMQBw2ZXyObCkVC7mAuajVCqXO3N4L8Vcqd5stW/ea+5srnbmyq7FZOneer22VMwVXomI7Hg5r8vrk+y4cuz4dkS8EBE/n57Nj8vVZn11lL/4AMAYu3ps/P/3dGf8BwAuuZlRJwAAnDvjPwCMH+M/AIwf4z8AjJ/O+D876jQAgHPk9T8AjB/jPwCMle+/+262pYfF91+vfrC7s9H84NZqrbVRbuxUy9Xm9lZ5rdlcy7+zp/Gk+9Wbza3lN2Lnw2vf3Gq1F1u7e3cbzZ3N9t38e73v1ibzq/bPoWUAwCAvvPLJn5NsRH57Nt+iZy2HyZFmBpy10qgTAEZmYtQJACNjtS8YX8/wGt/0AFwSfZboPWKm3weE0jRNzy4l4Izd+MIw8//JED0E8FnTM//vfwHDmDH/D+PL/D+MrzRNhl3zP4a9EAC42Pz+Dwx4d+/FYv+b4s2BH60ev+Ljs8wKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrbu+r/lYi3w+SiVyuWI5yLiWkwm99brtaWIeD4i/jQ9OZ0dL484ZwDgWZX+lhTrf91YeH3+SNXLVx8VpyLiJ7987xcfrrTb23+MmEr+Nd093/64OF/pH+CsWwAAPF53nM73PS/ki0G6+vDgfvU88/n7tyNiJiKLe3gwFYdF/N0H3bWJZ2IyIuYeJNG7VnHSM3fxLPY/iojPd+J3t26E+XwOpLPy6fH4WeznzjV+6Uj8Ul7X2Wd/F587hVxg3HyS9T/v9Hv+SnE93/d//rOzp7F2etH/ZbeqHuZ94P/jd/u/iQH93/VhY7zx++92SrMn6z6K+OKViG7sw57+pxs/GRD/9SHj/+VLL786qC79VcSN6B+/N9Ziu7G12Nrdu7XeWFmrrdU2K5WJuLP01u03K4v5HPXi4NHgH2/ffH5QXdb+uQHxZ57Q/q8O2f5f//f9H37lMfG//lq/+KV46THxszHxa0PGX5n73cyguiz+6oD2P+nnf3PQTZOjC4p/+te9E8uGAwCj09rd21ip12vbCgp54bdxIdLoX8j+yV6ANPoWvnUmd04XTlRNRf+Lf/Za55k+VpWmTxV9UI9xGrNuwEXw6KGPiP+MOhkAAAAAAAAAAAAAAKCv8/h01KjbCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOX1vwAAAP//OvzM5w==") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201001c00128009000100626f6e64000000000c00028008000200297d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000540)=@framed={{}, [@jmp={0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249, 0x0, 0x0, '\x00', r1}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xd28e, @mcast2, 0xbfa}}, {{0xa, 0x4e24, 0x1e, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x2}}}, 0x108) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, 0x0, 0x0) r7 = syz_open_procfs(0x0, 0x0) preadv(r7, 0x0, 0x0, 0x2001, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_audit(0x10, 0x3, 0x9) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7.400118491s ago: executing program 2 (id=7811): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x1, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf4263, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x3ffffffffd, r3, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5e5, &(0x7f0000000ac0)="$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") sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c617374"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 7.184859813s ago: executing program 0 (id=7813): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x80c4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="f917fa43a9900752ef0e0f568a693860aa28", 0x12) 6.461667768s ago: executing program 2 (id=7815): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x5, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x382e, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x3be}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r2, 0x0, 0x0, 0x1, 0x1}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x22d0, 0x20, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) socket(0xa, 0x5, 0x0) 6.168088043s ago: executing program 4 (id=7818): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000040)={0x2, 0x5}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r5, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) r6 = socket(0x10, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r7, &(0x7f0000000240)='\x00', 0x1, 0xf000000, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback={0x600}, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) recvmmsg(r7, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x2}], 0x64, 0x100, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) 4.485673177s ago: executing program 4 (id=7820): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xa300400, 0x0, 0x0, 0x0, 0x0, 0x0) 4.439771689s ago: executing program 2 (id=7822): r0 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0xffffffffffff8518]}, 0x0, 0x0, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0xea) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 4.232721139s ago: executing program 4 (id=7823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff}) io_setup(0x3, &(0x7f0000008240)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x7, 0x7ffc0001}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) 4.153974803s ago: executing program 5 (id=7824): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1, &(0x7f0000000240)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x85, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) listen(r1, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x800, 0x6014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb43, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0x1000}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0xa, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffa, 0x6}}}, 0x118) 4.064105808s ago: executing program 5 (id=7826): r0 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0xffffffffffff8518]}, 0x0, 0x0, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0xea) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f00000002c0)={[0x537e]}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 3.719641035s ago: executing program 0 (id=7828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 3.719042525s ago: executing program 0 (id=7829): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x5, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x3be}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r2, 0x0, 0x0, 0x1, 0x1}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x19, &(0x7f0000000040)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x10, 0x8, 0xfbff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x80, 0x86, 0x6}]}, 0x6, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x500e}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4b, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]}]}) io_uring_enter(r2, 0x22d0, 0x20, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 3.675006527s ago: executing program 4 (id=7830): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x3ff, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071121a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setlease(r1, 0x400, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r3, r1) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) vmsplice(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000400)}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x48) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x500, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet6_tcp_buf(r4, 0x6, 0xe, &(0x7f0000000180)="33820fe98b0965a8aade3ddabfc99b1c549c67cdb02ca59b000ac3da28f2f5df0ff47c315909a24bd16b33f0833568e0def75d773d992628aa250f39eac4dcbb2dd00066c3f55813d51bb85dea5f0c3ea0d53d9ed4ab66ebb56d9c81f91e5b0898708091e8f50123a12b104b380362e546e57f6cff4558675db8d174bcb15d531cd5f713f23838e3afe2f741431f75793c8294f2", 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x11, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r5, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60, 0x0}}, 0x10) 3.520873265s ago: executing program 2 (id=7831): perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) chdir(&(0x7f0000000000)='./file0\x00') sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, 0x0, 0x40000) set_mempolicy(0x2004, 0x0, 0x200) openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, r1) r3 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r3, &(0x7f0000000fc0)=""/224, 0xe0) 3.183530802s ago: executing program 5 (id=7832): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1, &(0x7f0000000240)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x85, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) listen(r0, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12}}) 2.459382828s ago: executing program 2 (id=7834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x4}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc0}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r2, 0x5602, 0x0) syz_emit_ethernet(0x2e1, &(0x7f0000000200)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x19, 0x4, 0x1, 0x4, 0x2d3, 0x67, 0x0, 0x5, 0x2f, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0x40, 0x3, 0x1, [{@empty, 0x4}, {@empty, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@remote, 0x539f}, {@loopback, 0xfffffff9}]}, @lsrr={0x83, 0x7, 0xda, [@empty]}, @generic={0x82, 0x2}, @end, @rr={0x7, 0x17, 0x14, [@remote, @broadcast, @multicast1, @empty, @local]}, @ssrr={0x89, 0x3, 0xfe}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe4, 0x2, [0x1, 0x2], "dbeba8fa6e95dc6e42b8b7a11864bb1d49765694261f21dc8846a568b9d2adf978883408c83cbcde9cb579466e9483f58c7b48cc3fdff63c6c126a54c1fd3fa387b1a3ff5dcd06a03f0b7f202b2ce59c58354a9158b7543148ecf18435df333d6520361590981c660074d728d1ac7b366654f2e1194fb55cb05644f81aa3164f19f22d97964188c738795082cbdfe53b92a518c1cdcf1f490b69d45af9add507bb9320f2cb34798aeaa5ea77cff8fb5ccc0ffbb3c96fc3df2f04bef69f83dc380993db7088eebb3acd31a44b3f06e3a9a0a0e922041e781ea6f8b83f82d5798b19271d43"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x1e, 0x2, 0x4], "d3cc4f62b0983150ad0cdd5d752368a12285787fa6df24d030eaa31df57b630874884365d669ec5ab038e54211fb682c4a1657404a8d6b4cd7409ad3780b93d74a399431dcba2d816ec17a2baa1560eafe4447abae3c12421c746081792d0ce3c53ea3f01876bd8a683d37"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x0], "a922200d55150e2edebc0e121dafd00f301bedd839a8733b6c868d1a8a8e43df48bcf3baa2236f6d361d3a2924257f1b2e462bc223d348c0e699021c7029c0a02446466f9ddb74220f2143030b50899b38bee7eb416c8ab8c84fd2ee35efc90b2c"}, {0x8, 0x88be, 0x3, {{0x1, 0x1, 0x5, 0x0, 0x1, 0x1, 0x3, 0xb9}}}, {0x8, 0x22eb, 0x0, {{0x8, 0x2, 0x9, 0x3, 0x0, 0x0, 0x7, 0x5c}, 0x2, {0x80, 0xa, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "35129c450039c421b12998f5c174b5fd0ea4b9d92a41197cb60a549b8c54a74daad1b15573dc357efb19923edafdf5cd732322cb002a8f9ecf790b0ec32212852213f0b8b4088a9d1eae014df62b9665ad80b505ec987642495861694464b77360399db0e25cd6029c75ee5e3f01f4"}}}}}}, 0x0) r3 = socket(0x200000000000011, 0x2, 0xd) semop(0x0, &(0x7f0000000000)=[{0x1, 0xbbdd, 0x1000}, {0x0, 0x7fff, 0x800}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000006c0)=""/243, 0xf3, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x1}], 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @random="aac7962b05d8"}, 0x14) 2.053631758s ago: executing program 6 (id=7835): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xa300400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.036908579s ago: executing program 6 (id=7836): perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) chdir(&(0x7f0000000000)='./file0\x00') sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, 0x0, 0x40000) set_mempolicy(0x2004, 0x0, 0x200) openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = open(0x0, 0x20000, 0x0) getdents64(r3, &(0x7f0000000fc0)=""/224, 0xe0) 1.766243462s ago: executing program 0 (id=7837): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180300000000000000000000000000808510000006000000180000000000000000000000000000006600020000000000180000000000000000000000000000009500000000000000870300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000002, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x6f, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x7, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x2, 0x7ff, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x3, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0xfffffe00, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x2003, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x40000009, 0x68, 0x7, 0x1ff, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x9, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0xe, 0x981, 0x80000000, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x40, 0x0, 0x1, 0x8002, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x390, 0x1, 0xa, 0x3, 0x4, 0x9, 0x9, 0x37c, 0xd, 0x8, 0x1, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x6, 0xd, 0x34ea, 0xfffc, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x4, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x7c, 0x9, 0x40000000, 0x4, 0x10000004, 0x0, 0xd, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x2c95, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x400006, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x81, 0x0, 0xae, 0x8, 0x1, 0xfffffeff, 0x6, 0x5, 0x7fff, 0x103, 0x7, 0x8000006, 0x709, 0x2, 0x49, 0x10, 0x7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0x4, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0xc, 0x7fffffff, 0x0, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x2, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0x1c, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x1, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x9, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x101, 0xffef, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0x4000d, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x3, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x8, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x7f, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x5, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x0, 0xf, 0x3, 0x7f, 0x8, 0x7, 0x3, 0x7, 0x382d, 0x2000459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x7, 0x0, 0x0, 0x35, 0x8, 0x5, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x100001, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x1, 0x6, 0x9, 0x0, 0x4000008, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x7, 0x9, 0x8, 0x3, 0x28f, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x1, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x2, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x0, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0x7, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0xffffffff, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0xfffffff7, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x1, 0x0, 0x6, 0x7, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x6, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x42, 0x3, 0x4, 0x5, 0x5, 0x675, 0x5, 0x8, 0x5, 0x3, 0x8, 0x0, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x5, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0x7, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x4, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x5, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0xf, 0x7, 0x8, 0x4010000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0xf, 0x5, 0x7, 0xde, 0x6, 0x89, 0xfffffffd, 0x100, 0x1, 0x9, 0x6, 0x3fe, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x1, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) r6 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000001280)='veth0_to_bond\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'bridge0\x00', &(0x7f0000002500)=@ethtool_dump={0x19, 0x7, 0x9}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x918, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd7}, 0x10311, 0x0, 0x8, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1c0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) ioctl$TIOCL_BLANKSCREEN(r8, 0x541c, &(0x7f0000001300)) 1.557695052s ago: executing program 6 (id=7838): perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x210, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x40000, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) unshare(0x6020400) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x2014050, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1.462519687s ago: executing program 4 (id=7839): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060088"], 0x24}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000408010100e22cc8c07037f3ceee7600000000000000005c1f09280100000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x428}, 0x1, 0x0, 0x0, 0x8010}, 0x841) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = dup(r3) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r5 = syz_open_pts(r3, 0x80) r6 = dup3(r5, r3, 0x80000) read(r3, &(0x7f00000005c0)=""/228, 0xe4) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000e00)={{r0}, "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"}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x80, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x10}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x405, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000300)={0x0, @broadcast, @dev}, &(0x7f00000003c0)=0xc) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x25dedbfd, {0x0, 0x0, 0x0, r13, {0xb, 0xd}, {0xc}, {0xe, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000b80)={0x128, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x44001}, 0xc000) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000001c0)={0x3, 0x2, 0x2, 0xfbdfffd3, 0x3, "65bd219f000062f800", 0xfffff7a4, 0xc}) write$9p(r4, &(0x7f0000000280)='\x00', 0x1) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) 1.443468438s ago: executing program 5 (id=7840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff}) io_setup(0x3, &(0x7f0000008240)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x7, 0x7ffc0001}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) 1.41306961s ago: executing program 6 (id=7841): r0 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0xffffffffffff8518]}, 0x0, 0x0, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0xea) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 1.355721633s ago: executing program 2 (id=7842): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r1, 0x7f, 0x0, 0x4) 1.288115946s ago: executing program 5 (id=7843): socket$kcm(0x2b, 0x1, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x21bf, &(0x7f0000000080)={0x0, 0x6b86, 0x18, 0x2, 0x20000002}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000100)={0x7, 0x0, &(0x7f0000000140), 0x0, 0x4d}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.113485755s ago: executing program 4 (id=7844): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x3ff, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071121a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setlease(r1, 0x400, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r3, r1) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) vmsplice(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000400)}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x48) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x500, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet6_tcp_buf(r4, 0x6, 0xe, &(0x7f0000000180)="33820fe98b0965a8aade3ddabfc99b1c549c67cdb02ca59b000ac3da28f2f5df0ff47c315909a24bd16b33f0833568e0def75d773d992628aa250f39eac4dcbb2dd00066c3f55813d51bb85dea5f0c3ea0d53d9ed4ab66ebb56d9c81f91e5b0898708091e8f50123a12b104b380362e546e57f6cff4558675db8d174bcb15d531cd5f713f23838e3afe2f741431f75793c8294f2", 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x11, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r5, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60, 0x0}}, 0x10) 681.207017ms ago: executing program 5 (id=7845): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x5, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x382e, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x3be}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r2, 0x0, 0x0, 0x1, 0x1}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x22d0, 0x20, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) socket(0xa, 0x5, 0x0) 341.675673ms ago: executing program 6 (id=7846): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 0s ago: executing program 6 (id=7847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f00000001c0)=0x83a, 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101840, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000040)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) semctl$GETZCNT(0x0, 0x3, 0xf, &(0x7f0000000100)=""/110) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): 66][T29379] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7341'. [ 1104.922426][T29394] loop2: detected capacity change from 0 to 128 [ 1105.143693][T24228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1105.250469][T29401] syzkaller0: entered promiscuous mode [ 1105.256747][T29401] syzkaller0: entered allmulticast mode [ 1105.489440][T29414] loop5: detected capacity change from 0 to 512 [ 1105.638973][T29414] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.7354: iget: bad extra_isize 90 (inode size 256) [ 1105.749604][T29414] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1105.750228][T29414] EXT4-fs (loop5): Remounting filesystem read-only [ 1105.759427][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1105.759442][ C0] EXT4-fs (loop5): initial error at time 2000000011: ext4_xattr_inode_iget:441: inode 11 [ 1105.759467][ C0] EXT4-fs (loop5): last error at time 2000000011: ext4_xattr_inode_iget:441: inode 11 [ 1106.139300][T29414] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 1106.215515][T29423] __nla_validate_parse: 4 callbacks suppressed [ 1106.228162][T29423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7357'. [ 1106.258219][T29414] EXT4-fs (loop5): 1 orphan inode deleted [ 1106.308460][T29414] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1106.361625][T29414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.420053][T29427] loop2: detected capacity change from 0 to 512 [ 1106.519210][T29427] EXT4-fs (loop2): 1 orphan inode deleted [ 1106.531143][T29429] netlink: 'syz.5.7359': attribute type 11 has an invalid length. [ 1106.550893][ T6097] __quota_error: 97 callbacks suppressed [ 1106.550910][ T6097] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1106.574894][T29427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1106.591834][T29429] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7359'. [ 1106.611100][T29427] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1106.622392][ T6097] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:23: Failed to release dquot type 1 [ 1106.633985][ T28] audit: type=1400 audit(2000000012.430:14742): avc: denied { mounton } for pid=29432 comm="syz.6.7360" path="/58/file1" dev="tmpfs" ino=322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1106.665277][T29436] loop6: detected capacity change from 0 to 1024 [ 1106.694440][T29436] journal_path: Non-blockdev passed as './file0' [ 1106.744975][T29438] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1106.756562][T29436] EXT4-fs: error: could not find journal device path [ 1106.765587][T29440] netlink: 45 bytes leftover after parsing attributes in process `syz.5.7363'. [ 1106.786920][T23611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.809520][T29436] loop6: detected capacity change from 0 to 512 [ 1106.816129][T29441] netlink: 45 bytes leftover after parsing attributes in process `syz.5.7363'. [ 1106.870054][T29436] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1106.883257][T29443] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7365'. [ 1106.913114][T29436] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 1106.923125][T29443] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7365'. [ 1106.945349][T29436] EXT4-fs (loop6): 1 truncate cleaned up [ 1106.965976][T29436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1107.002878][T29453] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7366'. [ 1107.023869][T29436] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1107.086957][T29457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7369'. [ 1107.259168][T29461] loop5: detected capacity change from 0 to 512 [ 1107.309570][ T28] audit: type=1326 audit(2000000013.130:14743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.3.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2599ac799 code=0x7ffc0000 [ 1107.735500][ T28] audit: type=1326 audit(2000000013.550:14744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.3.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fe2599ac799 code=0x7ffc0000 [ 1107.812288][T29461] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.7370: iget: bad extra_isize 90 (inode size 256) [ 1107.859118][T29464] loop3: detected capacity change from 0 to 2048 [ 1107.952023][T29469] tipc: Enabled bearer , priority 0 [ 1107.967331][T28095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.986207][T29461] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1107.987052][T29461] EXT4-fs (loop5): Remounting filesystem read-only [ 1107.996209][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1107.996270][ C0] EXT4-fs (loop5): initial error at time 2000000013: ext4_xattr_inode_iget:441: inode 11 [ 1107.996302][ C0] EXT4-fs (loop5): last error at time 2000000013: ext4_xattr_inode_iget:441: inode 11 [ 1108.039262][ T28] audit: type=1326 audit(2000000013.550:14745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.3.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2599ac799 code=0x7ffc0000 [ 1108.065067][T29469] syzkaller0: entered promiscuous mode [ 1108.070552][T29469] syzkaller0: entered allmulticast mode [ 1108.078926][T29464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1108.091919][T29469] tipc: Resetting bearer [ 1108.122277][T29468] tipc: Resetting bearer [ 1108.135472][ T28] audit: type=1326 audit(2000000013.550:14746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.3.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2599ac799 code=0x7ffc0000 [ 1108.183633][T29468] tipc: Disabling bearer [ 1108.201536][T29461] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 1108.242771][ T28] audit: type=1326 audit(2000000013.550:14747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.3.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe2599ac799 code=0x7ffc0000 [ 1108.266845][T29461] EXT4-fs (loop5): 1 orphan inode deleted [ 1108.301396][T29464] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7371: bg 0: block 234: padding at end of block bitmap is not set [ 1108.319704][T29461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1108.372238][T29461] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.383982][ T28] audit: type=1326 audit(2000000013.550:14748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.3.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2599ac799 code=0x7ffc0000 [ 1108.409863][T29464] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 672 with error 28 [ 1108.456196][T29484] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7377'. [ 1108.503715][T29484] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7377'. [ 1108.524549][ T28] audit: type=1326 audit(2000000013.550:14749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.3.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2599ac799 code=0x7ffc0000 [ 1108.548513][T29464] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1108.548513][T29464] [ 1108.662723][T29464] EXT4-fs (loop3): Total free blocks count 0 [ 1108.812412][ T28] audit: type=1326 audit(2000000013.550:14750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.3.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe2599ac799 code=0x7ffc0000 [ 1109.058823][T29464] EXT4-fs (loop3): Free/Dirty block details [ 1109.204485][T29500] loop5: detected capacity change from 0 to 1024 [ 1109.269464][T29500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1109.468614][T29464] EXT4-fs (loop3): free_blocks=0 [ 1109.738478][T29464] EXT4-fs (loop3): dirty_blocks=672 [ 1109.782033][T29464] EXT4-fs (loop3): Block reservation details [ 1109.961444][T29464] EXT4-fs (loop3): i_reserved_data_blocks=42 [ 1110.744461][T26831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.006351][T24228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.377278][T29543] syzkaller0: entered promiscuous mode [ 1111.405625][T29543] syzkaller0: entered allmulticast mode [ 1111.413496][T29545] __nla_validate_parse: 5 callbacks suppressed [ 1111.413512][T29545] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7396'. [ 1112.071415][T29570] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7403'. [ 1112.102365][T29570] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7403'. [ 1112.151783][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 1112.151802][ T28] audit: type=1326 audit(2000000017.970:14778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29571 comm="syz.2.7404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1112.215855][ T28] audit: type=1326 audit(2000000017.970:14779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29571 comm="syz.2.7404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1112.265541][ T28] audit: type=1326 audit(2000000017.970:14780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29571 comm="syz.2.7404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1112.309917][ T28] audit: type=1326 audit(2000000017.970:14781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29571 comm="syz.2.7404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1112.384287][ T28] audit: type=1326 audit(2000000017.970:14782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29571 comm="syz.2.7404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1112.499616][ T28] audit: type=1326 audit(2000000017.970:14783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29571 comm="syz.2.7404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1112.585663][T29563] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1112.608425][ T28] audit: type=1326 audit(2000000017.970:14784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29571 comm="syz.2.7404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1112.714261][ T28] audit: type=1326 audit(2000000017.970:14785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29571 comm="syz.2.7404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1112.771509][ T28] audit: type=1326 audit(2000000017.970:14786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29571 comm="syz.2.7404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1112.820236][T29587] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7407'. [ 1112.867171][ T28] audit: type=1326 audit(2000000017.970:14787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29571 comm="syz.2.7404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1112.925587][T29592] loop6: detected capacity change from 0 to 512 [ 1112.944278][T29592] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1112.980854][T29592] EXT4-fs (loop6): 1 orphan inode deleted [ 1112.987096][T29592] EXT4-fs (loop6): 1 truncate cleaned up [ 1112.993472][T29592] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1113.008269][T29592] EXT4-fs (loop6): shut down requested (1) [ 1113.038994][T28095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.076485][T29597] loop6: detected capacity change from 0 to 512 [ 1113.096914][T29599] loop2: detected capacity change from 0 to 512 [ 1113.116582][T29597] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.7411: iget: bad extra_isize 90 (inode size 256) [ 1113.130963][T29597] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1113.141680][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1113.148495][T29597] EXT4-fs (loop6): Remounting filesystem read-only [ 1113.150838][ C1] EXT4-fs (loop6): initial error at time 2000000018: ext4_xattr_inode_iget:441: inode 11 [ 1113.150865][ C1] EXT4-fs (loop6): last error at time 2000000018: ext4_xattr_inode_iget:441: inode 11 [ 1113.185841][T29599] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.7412: iget: bad extra_isize 90 (inode size 256) [ 1113.219666][T29597] EXT4-fs warning (device loop6): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 1113.229878][T29599] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1113.231685][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1113.231694][T29597] EXT4-fs (loop6): 1 orphan inode deleted [ 1113.232831][T29597] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1113.240839][ C0] EXT4-fs (loop2): initial error at time 2000000019: ext4_xattr_inode_iget:441: inode 11 [ 1113.272835][T29597] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.275056][ C0] EXT4-fs (loop2): last error at time 2000000019: ext4_xattr_inode_iget:441: inode 11 [ 1113.284084][T29599] EXT4-fs (loop2): Remounting filesystem read-only [ 1113.304343][T29599] EXT4-fs warning (device loop2): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 1113.347664][T29599] EXT4-fs (loop2): 1 orphan inode deleted [ 1113.363921][T29599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1113.405814][T29599] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.789546][T29618] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7417'. [ 1113.924249][T29623] FAULT_INJECTION: forcing a failure. [ 1113.924249][T29623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1113.961409][T29620] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7418'. [ 1114.048892][T29623] CPU: 0 UID: 0 PID: 29623 Comm: syz.2.7419 Tainted: G W syzkaller #0 PREEMPT(full) [ 1114.048925][T29623] Tainted: [W]=WARN [ 1114.048932][T29623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1114.048946][T29623] Call Trace: [ 1114.049018][T29623] [ 1114.049034][T29623] __dump_stack+0x1d/0x30 [ 1114.049062][T29623] dump_stack_lvl+0x95/0xd0 [ 1114.049155][T29623] dump_stack+0x15/0x1b [ 1114.049178][T29623] should_fail_ex+0x263/0x280 [ 1114.049206][T29623] should_fail+0xb/0x20 [ 1114.049298][T29623] should_fail_usercopy+0x1a/0x20 [ 1114.049406][T29623] _copy_from_user+0x1c/0xb0 [ 1114.049444][T29623] ___sys_sendmsg+0xc1/0x1e0 [ 1114.049495][T29623] __x64_sys_sendmsg+0xd4/0x160 [ 1114.049566][T29623] x64_sys_call+0x194c/0x3020 [ 1114.049601][T29623] do_syscall_64+0x12c/0x370 [ 1114.049632][T29623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.049710][T29623] RIP: 0033:0x7fa92711c799 [ 1114.049770][T29623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.049857][T29623] RSP: 002b:00007fa925b6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1114.049880][T29623] RAX: ffffffffffffffda RBX: 00007fa927395fa0 RCX: 00007fa92711c799 [ 1114.049895][T29623] RDX: 000000000400c040 RSI: 0000200000000140 RDI: 0000000000000003 [ 1114.049909][T29623] RBP: 00007fa925b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.049925][T29623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.050010][T29623] R13: 00007fa927396038 R14: 00007fa927395fa0 R15: 00007ffd0b21ff98 [ 1114.050038][T29623] [ 1114.434268][T29630] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7420'. [ 1114.483542][T29631] syzkaller0: entered promiscuous mode [ 1114.489150][T29631] syzkaller0: entered allmulticast mode [ 1114.708807][T29629] tipc: Started in network mode [ 1114.715015][T29629] tipc: Node identity 76edaf5967d6, cluster identity 4711 [ 1114.731771][T29629] tipc: Enabled bearer , priority 0 [ 1114.753223][T29627] tipc: Resetting bearer [ 1114.772868][T29627] tipc: Disabling bearer [ 1114.984268][T29642] loop6: detected capacity change from 0 to 2048 [ 1115.016517][T29647] --map-set only usable from mangle table [ 1115.043692][T29642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1115.094603][T29642] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1115.206837][T29652] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7426: bg 0: block 345: padding at end of block bitmap is not set [ 1115.270697][T29652] EXT4-fs (loop6): Remounting filesystem read-only [ 1115.294182][ T6083] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 1115.503405][T28095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.563480][T29665] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7431'. [ 1115.616299][T29662] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7432'. [ 1115.625484][T29662] netlink: 88 bytes leftover after parsing attributes in process `syz.5.7432'. [ 1115.817373][T29676] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1115.877351][T29681] loop3: detected capacity change from 0 to 512 [ 1116.094959][T29681] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1116.203446][T29681] EXT4-fs (loop3): 1 orphan inode deleted [ 1116.257491][T29681] EXT4-fs (loop3): 1 truncate cleaned up [ 1116.335725][T29681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1116.591323][T29681] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.7437: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 1116.592271][T29681] EXT4-fs (loop3): Remounting filesystem read-only [ 1116.751068][T24228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.945366][T29690] loop3: detected capacity change from 0 to 512 [ 1116.986574][T29690] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.7439: iget: bad extra_isize 90 (inode size 256) [ 1117.055014][T29690] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1117.057608][T29690] EXT4-fs (loop3): Remounting filesystem read-only [ 1117.066955][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1117.066978][ C0] EXT4-fs (loop3): initial error at time 2000000022: ext4_xattr_inode_iget:441: inode 11 [ 1117.067021][ C0] EXT4-fs (loop3): last error at time 2000000022: ext4_xattr_inode_iget:441: inode 11 [ 1117.221745][T29690] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 1117.247386][T29690] EXT4-fs (loop3): 1 orphan inode deleted [ 1117.369910][T29690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1117.394958][T29690] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.719633][T29699] __nla_validate_parse: 1 callbacks suppressed [ 1117.719664][T29699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7442'. [ 1117.941511][T29702] loop3: detected capacity change from 0 to 2048 [ 1118.069793][T29706] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7444'. [ 1118.133236][T29702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1118.246673][T29710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7445'. [ 1118.267145][T29706] netlink: 88 bytes leftover after parsing attributes in process `syz.5.7444'. [ 1118.293134][T29702] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1118.417120][T29715] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7443: bg 0: block 345: padding at end of block bitmap is not set [ 1118.471510][T29715] EXT4-fs (loop3): Remounting filesystem read-only [ 1118.495729][ T6083] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 1118.605679][T29720] loop2: detected capacity change from 0 to 4096 [ 1118.632021][T29720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1118.707981][T23611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.794595][T24228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.257963][T29727] loop2: detected capacity change from 0 to 128 [ 1119.319258][T29735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7454'. [ 1119.332325][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 1119.332342][ T28] audit: type=1326 audit(2000000000.810:14795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29731 comm="syz.6.7453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1119.377473][T29732] loop6: detected capacity change from 0 to 2048 [ 1119.384124][T29737] syzkaller0: entered promiscuous mode [ 1119.389617][T29737] syzkaller0: entered allmulticast mode [ 1119.397001][ T28] audit: type=1326 audit(2000000000.810:14796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29731 comm="syz.6.7453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1119.420921][ T28] audit: type=1326 audit(2000000000.810:14797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29731 comm="syz.6.7453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1119.453781][ T28] audit: type=1326 audit(2000000000.810:14798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29731 comm="syz.6.7453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1119.477736][T29740] loop5: detected capacity change from 0 to 512 [ 1119.484956][T29742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7457'. [ 1119.489195][ T28] audit: type=1326 audit(2000000000.810:14799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29731 comm="syz.6.7453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1119.519173][ T28] audit: type=1326 audit(2000000000.810:14800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29731 comm="syz.6.7453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1119.544860][T29740] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.7456: iget: bad extra_isize 90 (inode size 256) [ 1119.563321][ T28] audit: type=1326 audit(2000000000.810:14801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29731 comm="syz.6.7453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1119.574217][T29732] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1119.597556][T29740] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1119.601663][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1119.617270][ C0] EXT4-fs (loop5): initial error at time 2000000001: ext4_xattr_inode_iget:441: inode 11 [ 1119.627172][ C0] EXT4-fs (loop5): last error at time 2000000001: ext4_xattr_inode_iget:441: inode 11 [ 1119.631783][ T28] audit: type=1326 audit(2000000000.810:14802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29731 comm="syz.6.7453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1119.657889][T29740] EXT4-fs (loop5): Remounting filesystem read-only [ 1119.667235][T29740] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 1119.678521][T29740] EXT4-fs (loop5): 1 orphan inode deleted [ 1119.684785][T29740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1119.702580][ T28] audit: type=1326 audit(2000000000.810:14803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29731 comm="syz.6.7453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1119.726325][ T28] audit: type=1326 audit(2000000000.810:14804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29731 comm="syz.6.7453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1119.727046][T29740] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.836653][T29732] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7453: bg 0: block 234: padding at end of block bitmap is not set [ 1119.856337][T29732] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 596 with error 28 [ 1119.868979][T29732] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1119.868979][T29732] [ 1119.884437][T29732] EXT4-fs (loop6): Total free blocks count 0 [ 1119.890511][T29732] EXT4-fs (loop6): Free/Dirty block details [ 1119.896631][T29732] EXT4-fs (loop6): free_blocks=0 [ 1119.933713][T29732] EXT4-fs (loop6): dirty_blocks=608 [ 1119.939265][T29732] EXT4-fs (loop6): Block reservation details [ 1119.945707][T29732] EXT4-fs (loop6): i_reserved_data_blocks=38 [ 1119.954468][T29752] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1120.080283][T29769] loop5: detected capacity change from 0 to 128 [ 1120.096812][T29752] bond2 (unregistering): Released all slaves [ 1120.155767][T29770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.197505][T28095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.229120][T29776] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7467'. [ 1120.249596][T29770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.289226][T29778] syzkaller0: entered promiscuous mode [ 1120.299591][T29778] syzkaller0: entered allmulticast mode [ 1120.319469][T29780] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7469'. [ 1120.751341][T29792] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7474'. [ 1121.155838][T29797] loop5: detected capacity change from 0 to 128 [ 1121.209561][T29801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7478'. [ 1121.246538][T29803] netlink: 'syz.5.7477': attribute type 1 has an invalid length. [ 1121.281420][T29803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1121.311870][T29803] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1121.321696][T29807] syzkaller0: entered promiscuous mode [ 1121.327209][T29807] syzkaller0: entered allmulticast mode [ 1121.333078][T29803] loop5: detected capacity change from 0 to 512 [ 1121.347762][T29803] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1121.358060][T29803] EXT4-fs (loop5): blocks per group (32) and clusters per group (8192) inconsistent [ 1122.297518][T29829] loop5: detected capacity change from 0 to 512 [ 1122.360950][T29829] msdos: Unknown parameter 'nmdots' [ 1122.544016][T29836] syzkaller0: entered promiscuous mode [ 1122.566099][T29836] syzkaller0: entered allmulticast mode [ 1122.831818][T29847] __nla_validate_parse: 9 callbacks suppressed [ 1122.831839][T29847] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7493'. [ 1122.871159][T29852] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29852 comm=syz.5.7493 [ 1122.895203][T29853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7496'. [ 1122.938571][T29855] loop6: detected capacity change from 0 to 512 [ 1122.965421][T29855] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1123.152265][T29855] EXT4-fs (loop6): 1 orphan inode deleted [ 1123.164199][T29855] EXT4-fs (loop6): 1 truncate cleaned up [ 1123.576524][T29861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1123.588652][T29861] 8021q: adding VLAN 0 to HW filter on device team0 [ 1123.609820][T29855] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1123.624288][T29861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1123.724292][T29855] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #12: block 7: comm syz.6.7497: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 1123.784619][T29864] loop2: detected capacity change from 0 to 128 [ 1123.897511][T29855] EXT4-fs (loop6): Remounting filesystem read-only [ 1123.950721][T29869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7501'. [ 1123.977270][T28095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.997071][T29868] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7500'. [ 1124.011991][T29868] netlink: 88 bytes leftover after parsing attributes in process `syz.5.7500'. [ 1124.024931][T29876] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7504'. [ 1124.080954][T29878] loop2: detected capacity change from 0 to 2048 [ 1124.108914][T29880] loop6: detected capacity change from 0 to 2048 [ 1124.146666][T29878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1124.170660][T29878] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1124.209315][T29880] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1124.271899][T29895] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7505: bg 0: block 345: padding at end of block bitmap is not set [ 1124.302039][T29895] EXT4-fs (loop2): Remounting filesystem read-only [ 1124.325443][ T6095] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 1124.342365][T29880] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7503: bg 0: block 234: padding at end of block bitmap is not set [ 1124.380242][T29880] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 414 with error 28 [ 1124.394274][T29880] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1124.394274][T29880] [ 1124.404430][T29880] EXT4-fs (loop6): Total free blocks count 0 [ 1124.410472][T29880] EXT4-fs (loop6): Free/Dirty block details [ 1124.416642][T29880] EXT4-fs (loop6): free_blocks=0 [ 1124.421788][T29880] EXT4-fs (loop6): dirty_blocks=416 [ 1124.427092][T29880] EXT4-fs (loop6): Block reservation details [ 1124.433349][T29880] EXT4-fs (loop6): i_reserved_data_blocks=26 [ 1124.445103][ T28] kauditd_printk_skb: 132 callbacks suppressed [ 1124.445181][ T28] audit: type=1326 audit(2000000000.250:14937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29879 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1124.658359][ T28] audit: type=1326 audit(2000000000.280:14938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29879 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1124.746899][ T28] audit: type=1326 audit(2000000000.350:14939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29879 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1124.849381][ T28] audit: type=1326 audit(2000000000.350:14940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29879 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1124.903532][T28095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.915452][ T28] audit: type=1326 audit(2000000000.350:14941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29879 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1124.939973][ T28] audit: type=1326 audit(2000000000.350:14942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29879 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1124.970274][ T28] audit: type=1326 audit(2000000000.350:14943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29879 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1124.996395][ T28] audit: type=1326 audit(2000000000.350:14944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29879 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1125.020685][ T28] audit: type=1326 audit(2000000000.350:14945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29879 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1125.228402][ T28] audit: type=1326 audit(2000000000.350:14946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29879 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1125.282285][T23611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.475597][T29910] loop3: detected capacity change from 0 to 512 [ 1125.501560][T29906] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29906 comm=syz.6.7512 [ 1125.516941][T29910] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1125.622076][T29913] syzkaller0: entered promiscuous mode [ 1125.627726][T29913] syzkaller0: entered allmulticast mode [ 1125.635473][T29913] tipc: Enabled bearer , priority 0 [ 1125.644813][T29912] tipc: Resetting bearer [ 1125.653705][T29912] tipc: Disabling bearer [ 1125.660654][T29910] EXT4-fs (loop3): 1 orphan inode deleted [ 1125.666731][T29910] EXT4-fs (loop3): 1 truncate cleaned up [ 1125.677383][T29910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1125.713322][T29918] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7517'. [ 1125.722666][T29910] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.7514: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 1125.779555][T29910] EXT4-fs (loop3): Remounting filesystem read-only [ 1125.858866][T24228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.874841][T29926] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7518'. [ 1125.897857][T29926] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7518'. [ 1125.963305][T29929] loop2: detected capacity change from 0 to 512 [ 1125.973219][T29929] EXT4-fs: Ignoring removed oldalloc option [ 1125.986049][T29929] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1126.001188][T29929] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.7522: bad orphan inode 131083 [ 1126.011959][T29929] loop2: lost filesystem error report for type 5 error -117 [ 1126.012419][T29929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1126.071402][T23611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.156393][T29935] tipc: Enabled bearer , priority 0 [ 1126.170483][T29935] syzkaller0: entered promiscuous mode [ 1126.177279][T29935] syzkaller0: entered allmulticast mode [ 1126.188188][T29935] tipc: Resetting bearer [ 1126.196451][T29934] tipc: Resetting bearer [ 1126.212494][T29934] tipc: Disabling bearer [ 1126.242111][T29938] syzkaller0: entered promiscuous mode [ 1126.247765][T29938] syzkaller0: entered allmulticast mode [ 1126.342204][T29941] loop3: detected capacity change from 0 to 128 [ 1126.362695][T29942] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7521'. [ 1126.376346][T29941] ext4: Unknown parameter '' [ 1126.381276][T29942] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 1126.472520][T29950] syzkaller0: entered promiscuous mode [ 1126.478224][T29950] syzkaller0: entered allmulticast mode [ 1126.485532][T29950] tipc: Enabled bearer , priority 0 [ 1126.492733][T29949] tipc: Resetting bearer [ 1126.499606][T29949] tipc: Disabling bearer [ 1126.645588][T29970] IPv6: NLM_F_CREATE should be specified when creating new route [ 1126.654507][T29970] syzkaller0: entered promiscuous mode [ 1126.660322][T29970] syzkaller0: entered allmulticast mode [ 1126.799825][T29975] loop3: detected capacity change from 0 to 512 [ 1126.833101][T29975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1126.846011][T29975] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1126.882457][T29983] loop6: detected capacity change from 0 to 128 [ 1126.971936][T29985] syzkaller0: entered promiscuous mode [ 1126.977505][T29985] syzkaller0: entered allmulticast mode [ 1127.041797][T24228] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 1127.059086][T29993] random: crng reseeded on system resumption [ 1127.064934][T24228] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 1127.070421][T29993] tipc: Failed to remove unknown binding: 66,1,1/0:2420160965/2420160967 [ 1127.193914][T29987] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1127.328409][T30007] loop6: detected capacity change from 0 to 128 [ 1127.501975][ T6097] vlan2: left allmulticast mode [ 1127.507004][ T6097] geneve0: left allmulticast mode [ 1127.512612][ T6097] vlan2: left promiscuous mode [ 1127.517412][ T6097] geneve0: left promiscuous mode [ 1127.524674][ T6097] bridge0: port 3(vlan2) entered disabled state [ 1127.531909][ T6097] bridge_slave_1: left allmulticast mode [ 1127.537614][ T6097] bridge_slave_1: left promiscuous mode [ 1127.543525][ T6097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.551492][ T6097] bridge_slave_0: left allmulticast mode [ 1127.563995][ T6097] bridge_slave_0: left promiscuous mode [ 1127.572931][ T6097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.751345][ T6097] erspan0 (unregistering): left promiscuous mode [ 1127.764045][ T6097] gretap0 (unregistering): left promiscuous mode [ 1127.857601][ T6097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1127.868122][ T6097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1127.961592][ T6097] bond0 (unregistering): Released all slaves [ 1128.029746][ T6097] bond1 (unregistering): Released all slaves [ 1128.427690][T30042] syzkaller0: entered promiscuous mode [ 1128.483655][T30058] __nla_validate_parse: 9 callbacks suppressed [ 1128.483729][T30058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7560'. [ 1128.504698][T30042] syzkaller0: entered allmulticast mode [ 1128.578118][ T6097] tipc: Left network mode [ 1128.664858][ T6097] hsr_slave_0: left promiscuous mode [ 1128.710341][ T6097] hsr_slave_1: left promiscuous mode [ 1128.769232][ T6097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.838329][ T6097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.075346][ T6097] team0 (unregistering): Port device team_slave_1 removed [ 1129.088375][ T6097] team0 (unregistering): Port device team_slave_0 removed [ 1129.426692][T30004] chnl_net:caif_netlink_parms(): no params data found [ 1129.434671][T30095] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7566'. [ 1129.467407][T30095] netlink: 88 bytes leftover after parsing attributes in process `syz.5.7566'. [ 1129.712129][T30004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.732871][T30004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.848275][T30004] bridge_slave_0: entered allmulticast mode [ 1129.924817][T30004] bridge_slave_0: entered promiscuous mode [ 1129.985602][T30116] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7569'. [ 1130.005954][T30004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.998943][T30004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.006375][T30004] bridge_slave_1: entered allmulticast mode [ 1131.013054][T30004] bridge_slave_1: entered promiscuous mode [ 1131.057253][T30111] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7569'. [ 1131.067715][T30111] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30111 comm=syz.6.7569 [ 1132.709083][T30004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.024709][T30004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.172542][T30149] syzkaller0: entered promiscuous mode [ 1133.182370][T30149] syzkaller0: entered allmulticast mode [ 1133.233047][T30004] team0: Port device team_slave_0 added [ 1133.250292][T30004] team0: Port device team_slave_1 added [ 1133.314015][T30004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.337924][T30164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7576'. [ 1133.359312][T30004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.417414][T30004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.428816][T30004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1133.435893][T30004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.470063][T30004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1133.581422][T30179] FAULT_INJECTION: forcing a failure. [ 1133.581422][T30179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1133.611679][T30179] CPU: 1 UID: 0 PID: 30179 Comm: syz.2.7580 Tainted: G W syzkaller #0 PREEMPT(full) [ 1133.611718][T30179] Tainted: [W]=WARN [ 1133.611725][T30179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1133.611741][T30179] Call Trace: [ 1133.611772][T30179] [ 1133.611780][T30179] __dump_stack+0x1d/0x30 [ 1133.611808][T30179] dump_stack_lvl+0x95/0xd0 [ 1133.611839][T30179] dump_stack+0x15/0x1b [ 1133.611863][T30179] should_fail_ex+0x263/0x280 [ 1133.611968][T30179] should_fail+0xb/0x20 [ 1133.612034][T30179] should_fail_usercopy+0x1a/0x20 [ 1133.612063][T30179] _copy_from_user+0x1c/0xb0 [ 1133.612145][T30179] ___sys_sendmsg+0xc1/0x1e0 [ 1133.612197][T30179] ? path_openat+0x1b01/0x2050 [ 1133.612311][T30179] __sys_sendmmsg+0x185/0x320 [ 1133.612356][T30179] __x64_sys_sendmmsg+0x57/0x70 [ 1133.612413][T30179] x64_sys_call+0x27aa/0x3020 [ 1133.612485][T30179] do_syscall_64+0x12c/0x370 [ 1133.612575][T30179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.612598][T30179] RIP: 0033:0x7fa92711c799 [ 1133.612615][T30179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.612633][T30179] RSP: 002b:00007fa925b6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1133.612652][T30179] RAX: ffffffffffffffda RBX: 00007fa927395fa0 RCX: 00007fa92711c799 [ 1133.612667][T30179] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1133.612734][T30179] RBP: 00007fa925b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.612747][T30179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.612764][T30179] R13: 00007fa927396038 R14: 00007fa927395fa0 R15: 00007ffd0b21ff98 [ 1133.612790][T30179] [ 1133.631587][T30004] hsr_slave_0: entered promiscuous mode [ 1133.802229][T30004] hsr_slave_1: entered promiscuous mode [ 1133.808326][T30004] debugfs: 'hsr0' already exists in 'hsr' [ 1133.814451][T30004] Cannot create hsr debugfs directory [ 1134.070214][T30004] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.144948][T30004] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.194912][T30004] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.257015][T30004] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.346816][T30004] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1134.376739][T30221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7587'. [ 1134.409913][T30004] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1134.424395][T30004] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1134.435235][T30223] syzkaller0: entered promiscuous mode [ 1134.440737][T30223] syzkaller0: entered allmulticast mode [ 1134.447470][T30004] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1134.497761][T30004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.565435][T30004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.577365][ T6095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.584567][ T6095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.684207][T30236] loop6: detected capacity change from 0 to 512 [ 1134.738674][ T6097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.745790][ T6097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1134.971194][T30247] FAULT_INJECTION: forcing a failure. [ 1134.971194][T30247] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.063415][T30247] CPU: 1 UID: 0 PID: 30247 Comm: syz.2.7592 Tainted: G W syzkaller #0 PREEMPT(full) [ 1135.063458][T30247] Tainted: [W]=WARN [ 1135.063465][T30247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1135.063551][T30247] Call Trace: [ 1135.063557][T30247] [ 1135.063565][T30247] __dump_stack+0x1d/0x30 [ 1135.063596][T30247] dump_stack_lvl+0x95/0xd0 [ 1135.063678][T30247] dump_stack+0x15/0x1b [ 1135.063700][T30247] should_fail_ex+0x263/0x280 [ 1135.063735][T30247] should_failslab+0x8c/0xb0 [ 1135.063813][T30247] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1135.063840][T30247] ? __alloc_skb+0x2d6/0x690 [ 1135.063904][T30247] __alloc_skb+0x2d6/0x690 [ 1135.063932][T30247] ? __alloc_skb+0x200/0x690 [ 1135.063995][T30247] netlink_alloc_large_skb+0xbf/0xf0 [ 1135.064044][T30247] netlink_sendmsg+0x40c/0x6f0 [ 1135.064091][T30247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1135.064245][T30247] ____sys_sendmsg+0x563/0x5b0 [ 1135.064307][T30247] ___sys_sendmsg+0x195/0x1e0 [ 1135.064401][T30247] __x64_sys_sendmsg+0xd4/0x160 [ 1135.064444][T30247] x64_sys_call+0x194c/0x3020 [ 1135.064473][T30247] do_syscall_64+0x12c/0x370 [ 1135.064539][T30247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.064563][T30247] RIP: 0033:0x7fa92711c799 [ 1135.064578][T30247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.064596][T30247] RSP: 002b:00007fa925b2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1135.064614][T30247] RAX: ffffffffffffffda RBX: 00007fa927396180 RCX: 00007fa92711c799 [ 1135.064681][T30247] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000004 [ 1135.064713][T30247] RBP: 00007fa925b2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.064725][T30247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.064737][T30247] R13: 00007fa927396218 R14: 00007fa927396180 R15: 00007ffd0b21ff98 [ 1135.064756][T30247] [ 1135.453718][T30004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.742848][T30236] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.7590: iget: bad extra_isize 90 (inode size 256) [ 1135.820175][T30236] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1135.820404][T30236] EXT4-fs (loop6): Remounting filesystem read-only [ 1135.829649][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1135.829675][ C1] EXT4-fs (loop6): initial error at time 2000000009: ext4_xattr_inode_iget:441: inode 11 [ 1135.829721][ C1] EXT4-fs (loop6): last error at time 2000000009: ext4_xattr_inode_iget:441: inode 11 [ 1135.881761][T30236] EXT4-fs warning (device loop6): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 1135.931706][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 1135.931724][ T28] audit: type=1326 audit(2000000009.500:14997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30270 comm="syz.2.7594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1135.965802][T30236] EXT4-fs (loop6): 1 orphan inode deleted [ 1135.972455][T30236] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1135.984559][ T28] audit: type=1326 audit(2000000009.500:14998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30270 comm="syz.2.7594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1136.009384][T30236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.021222][ T28] audit: type=1326 audit(2000000009.500:14999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30270 comm="syz.2.7594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1136.045395][ T28] audit: type=1326 audit(2000000009.500:15000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30270 comm="syz.2.7594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1136.070189][ T28] audit: type=1326 audit(2000000009.530:15001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30270 comm="syz.2.7594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1136.098739][ T28] audit: type=1326 audit(2000000009.540:15002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30270 comm="syz.2.7594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1136.130403][ T28] audit: type=1326 audit(2000000009.540:15003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30270 comm="syz.2.7594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1136.155522][ T28] audit: type=1326 audit(2000000009.540:15004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30270 comm="syz.2.7594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1136.179468][ T28] audit: type=1326 audit(2000000009.540:15005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30272 comm="syz.2.7594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa9270dcfce code=0x7ffc0000 [ 1136.205423][ T28] audit: type=1326 audit(2000000009.540:15006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30270 comm="syz.2.7594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1136.277962][T30004] veth0_vlan: entered promiscuous mode [ 1136.286445][T30004] veth1_vlan: entered promiscuous mode [ 1136.303495][T30004] veth0_macvtap: entered promiscuous mode [ 1136.311197][T30004] veth1_macvtap: entered promiscuous mode [ 1136.330072][T30004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.343367][T30004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1136.355011][T13589] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.364745][T13589] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.383158][T13589] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.411960][T13589] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.478021][T30286] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7595'. [ 1136.488421][T30286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7595'. [ 1136.771578][T30292] FAULT_INJECTION: forcing a failure. [ 1136.771578][T30292] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.820869][T30292] CPU: 0 UID: 0 PID: 30292 Comm: syz.0.7597 Tainted: G W syzkaller #0 PREEMPT(full) [ 1136.820956][T30292] Tainted: [W]=WARN [ 1136.820964][T30292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1136.820976][T30292] Call Trace: [ 1136.820983][T30292] [ 1136.820990][T30292] __dump_stack+0x1d/0x30 [ 1136.821023][T30292] dump_stack_lvl+0x95/0xd0 [ 1136.821122][T30292] dump_stack+0x15/0x1b [ 1136.821160][T30292] should_fail_ex+0x263/0x280 [ 1136.821188][T30292] should_failslab+0x8c/0xb0 [ 1136.821278][T30292] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1136.821305][T30292] ? __alloc_skb+0x2d6/0x690 [ 1136.821377][T30292] __alloc_skb+0x2d6/0x690 [ 1136.821410][T30292] ? __alloc_skb+0x200/0x690 [ 1136.821445][T30292] netlink_alloc_large_skb+0xbf/0xf0 [ 1136.821483][T30292] netlink_sendmsg+0x40c/0x6f0 [ 1136.821590][T30292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1136.821630][T30292] ____sys_sendmsg+0x563/0x5b0 [ 1136.821681][T30292] ___sys_sendmsg+0x195/0x1e0 [ 1136.821784][T30292] __x64_sys_sendmsg+0xd4/0x160 [ 1136.821894][T30292] x64_sys_call+0x194c/0x3020 [ 1136.821930][T30292] do_syscall_64+0x12c/0x370 [ 1136.821977][T30292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.822078][T30292] RIP: 0033:0x7f58d16fc799 [ 1136.822103][T30292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1136.822122][T30292] RSP: 002b:00007f58d0157028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1136.822141][T30292] RAX: ffffffffffffffda RBX: 00007f58d1975fa0 RCX: 00007f58d16fc799 [ 1136.822157][T30292] RDX: 0000000004040000 RSI: 0000200000000d80 RDI: 0000000000000004 [ 1136.822182][T30292] RBP: 00007f58d0157090 R08: 0000000000000000 R09: 0000000000000000 [ 1136.822197][T30292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1136.822210][T30292] R13: 00007f58d1976038 R14: 00007f58d1975fa0 R15: 00007ffec19e4158 [ 1136.822230][T30292] [ 1139.185564][T30298] loop6: detected capacity change from 0 to 1024 [ 1140.484238][T30298] EXT4-fs warning (device loop6): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop6. [ 1140.565163][T30318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7602'. [ 1140.847459][T30331] tipc: Started in network mode [ 1140.855363][T30333] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7606'. [ 1140.933760][T30331] tipc: Node identity c29dd431d896, cluster identity 4711 [ 1140.935812][T30344] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7606'. [ 1140.960094][T30331] tipc: Enabled bearer , priority 0 [ 1141.073861][T30355] tipc: Resetting bearer [ 1141.094850][T30331] syzkaller0: entered promiscuous mode [ 1141.114341][T30331] syzkaller0: entered allmulticast mode [ 1141.207965][T30330] tipc: Resetting bearer [ 1141.258680][T30330] tipc: Disabling bearer [ 1142.033854][T30377] loop4: detected capacity change from 0 to 2048 [ 1142.102978][T30377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1142.271350][T30377] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7612: bg 0: block 234: padding at end of block bitmap is not set [ 1142.328681][T30377] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 494 with error 117 [ 1142.366032][T30377] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1142.366032][T30377] [ 1142.815064][T30394] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7618'. [ 1142.841197][T30394] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7618'. [ 1143.013205][T30396] loop2: detected capacity change from 0 to 1024 [ 1143.299463][T30400] FAULT_INJECTION: forcing a failure. [ 1143.299463][T30400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1143.329946][T30379] Set syz1 is full, maxelem 65536 reached [ 1143.359055][T30004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.415435][T30400] CPU: 0 UID: 0 PID: 30400 Comm: syz.5.7619 Tainted: G W syzkaller #0 PREEMPT(full) [ 1143.415469][T30400] Tainted: [W]=WARN [ 1143.415478][T30400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1143.415494][T30400] Call Trace: [ 1143.415502][T30400] [ 1143.415511][T30400] __dump_stack+0x1d/0x30 [ 1143.415579][T30400] dump_stack_lvl+0x95/0xd0 [ 1143.415601][T30400] dump_stack+0x15/0x1b [ 1143.415691][T30400] should_fail_ex+0x263/0x280 [ 1143.415724][T30400] should_fail+0xb/0x20 [ 1143.415749][T30400] should_fail_usercopy+0x1a/0x20 [ 1143.415777][T30400] _copy_from_user+0x1c/0xb0 [ 1143.415875][T30400] __se_sys_io_uring_register+0x114/0x12d0 [ 1143.415905][T30400] ? mutex_unlock+0x4e/0x90 [ 1143.415938][T30400] __x64_sys_io_uring_register+0x55/0x70 [ 1143.416029][T30400] x64_sys_call+0x2be0/0x3020 [ 1143.416059][T30400] do_syscall_64+0x12c/0x370 [ 1143.416082][T30400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.416123][T30400] RIP: 0033:0x7f6d3221c799 [ 1143.416171][T30400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.416251][T30400] RSP: 002b:00007f6d30c77028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1143.416275][T30400] RAX: ffffffffffffffda RBX: 00007f6d32495fa0 RCX: 00007f6d3221c799 [ 1143.416294][T30400] RDX: 0000200000000000 RSI: 000000000000001f RDI: ffffffffffffffff [ 1143.416313][T30400] RBP: 00007f6d30c77090 R08: 0000000000000000 R09: 0000000000000000 [ 1143.416330][T30400] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1143.416347][T30400] R13: 00007f6d32496038 R14: 00007f6d32495fa0 R15: 00007ffefb488408 [ 1143.416398][T30400] [ 1144.116373][T30396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1144.406400][T30411] netlink: 'syz.5.7624': attribute type 10 has an invalid length. [ 1144.414734][T30411] veth1_vlan: left promiscuous mode [ 1144.420419][T30411] team0: Device veth1_vlan failed to register rx_handler [ 1144.478551][T30413] syzkaller0: entered promiscuous mode [ 1144.484132][T30413] syzkaller0: entered allmulticast mode [ 1144.639065][T30428] tipc: Enabled bearer , priority 0 [ 1144.646330][T30428] syzkaller0: entered promiscuous mode [ 1144.653980][T30428] syzkaller0: entered allmulticast mode [ 1144.661910][T30428] tipc: Resetting bearer [ 1144.668376][T30427] tipc: Resetting bearer [ 1144.675106][T30427] tipc: Disabling bearer [ 1144.744098][T23611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1144.810851][T30435] loop6: detected capacity change from 0 to 512 [ 1144.831566][T30435] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #3: comm syz.6.7628: corrupted inode contents [ 1144.864617][T30435] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1144.864776][T30435] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #3: comm syz.6.7628: mark_inode_dirty error [ 1144.874186][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1144.874210][ C0] EXT4-fs (loop6): initial error at time 2000000018: ext4_do_update_inode:5569: inode 3 [ 1144.874250][ C0] EXT4-fs (loop6): last error at time 2000000018: ext4_do_update_inode:5569: inode 3 [ 1145.121707][T30435] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1145.162784][T30435] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #3: comm syz.6.7628: corrupted inode contents [ 1145.252425][T30435] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1145.252714][T30435] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.7628: mark_inode_dirty error [ 1145.277812][T30435] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1145.278724][T30435] __quota_error: 64 callbacks suppressed [ 1145.278742][T30435] Quota error (device loop6): write_blk: dquota write failed [ 1145.310899][T30435] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1145.333276][T30435] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.7628: Failed to acquire dquot type 0 [ 1145.363978][T30435] loop6: lost filesystem error report for type 5 error -117 [ 1145.370300][T30435] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.7628: corrupted inode contents [ 1145.422757][T30435] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1145.422944][T30459] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1145.423218][T30435] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #16: comm syz.6.7628: mark_inode_dirty error [ 1145.432141][T30459] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1145.462404][T30459] vhci_hcd vhci_hcd.0: Device attached [ 1145.462525][T30435] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1145.469251][T30459] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 1145.484943][T30459] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1145.494038][T30459] vhci_hcd vhci_hcd.0: Device attached [ 1145.495820][T30435] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.7628: corrupted inode contents [ 1145.518483][T30435] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1145.518754][T30435] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.7628: mark_inode_dirty error [ 1145.540210][T30435] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1145.540472][T30435] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.7628: corrupted inode contents [ 1145.562642][T30459] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 1145.569228][T30459] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1145.584277][T30435] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1145.584553][T30435] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1145.605854][T30459] vhci_hcd vhci_hcd.0: Device attached [ 1145.616041][T30469] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(10) [ 1145.622735][T30469] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1145.630824][T30435] loop6: lost filesystem error report for type 5 error -117 [ 1145.630984][T30435] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.7628: corrupted inode contents [ 1145.650558][T30469] vhci_hcd vhci_hcd.0: Device attached [ 1145.656388][T30474] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(13) [ 1145.663073][T30474] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1145.670996][T30435] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1145.671277][T30435] EXT4-fs error (device loop6): ext4_truncate:4587: inode #16: comm syz.6.7628: mark_inode_dirty error [ 1145.694435][T30474] vhci_hcd vhci_hcd.0: Device attached [ 1145.694749][T30459] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1145.700861][T30435] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1145.731746][T30435] loop6: lost filesystem error report for type 5 error -117 [ 1145.736608][T30435] EXT4-fs (loop6): 1 truncate cleaned up [ 1145.749950][T30469] FAULT_INJECTION: forcing a failure. [ 1145.749950][T30469] name failslab, interval 1, probability 0, space 0, times 0 [ 1145.763152][T30469] CPU: 0 UID: 0 PID: 30469 Comm: syz.5.7634 Tainted: G W syzkaller #0 PREEMPT(full) [ 1145.763186][T30469] Tainted: [W]=WARN [ 1145.763193][T30469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1145.763265][T30469] Call Trace: [ 1145.763275][T30469] [ 1145.763285][T30469] __dump_stack+0x1d/0x30 [ 1145.763317][T30469] dump_stack_lvl+0x95/0xd0 [ 1145.763347][T30469] dump_stack+0x15/0x1b [ 1145.763440][T30469] should_fail_ex+0x263/0x280 [ 1145.763482][T30469] should_failslab+0x8c/0xb0 [ 1145.763506][T30469] kmem_cache_alloc_noprof+0x66/0x400 [ 1145.763572][T30469] ? security_inode_alloc+0x37/0x100 [ 1145.763614][T30469] security_inode_alloc+0x37/0x100 [ 1145.763655][T30469] inode_init_always_gfp+0x4b7/0x500 [ 1145.763684][T30469] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1145.763713][T30469] alloc_inode+0x58/0x170 [ 1145.763779][T30469] __sock_create+0x120/0x580 [ 1145.763806][T30469] __sys_socketpair+0x16f/0x420 [ 1145.763838][T30469] ? ksys_write+0x194/0x1a0 [ 1145.763922][T30469] __x64_sys_socketpair+0x52/0x60 [ 1145.763955][T30469] x64_sys_call+0x2de5/0x3020 [ 1145.763984][T30469] do_syscall_64+0x12c/0x370 [ 1145.764012][T30469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.764034][T30469] RIP: 0033:0x7f6d3221e03a [ 1145.764059][T30469] Code: 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.764082][T30469] RSP: 002b:00007f6d30c55f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1145.764107][T30469] RAX: ffffffffffffffda RBX: 00007f6d32496000 RCX: 00007f6d3221e03a [ 1145.764183][T30469] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1145.764200][T30469] RBP: 00007f6d30c56090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.764217][T30469] R10: 00007f6d30c55f88 R11: 0000000000000246 R12: 0000000000000006 [ 1145.764262][T30469] R13: 00007f6d32496128 R14: 00007f6d32496090 R15: 00007ffefb488408 [ 1145.764289][T30469] [ 1145.764337][T30469] socket: no more sockets [ 1145.772037][ T1032] usb 11-1: new low-speed USB device number 6 using vhci_hcd [ 1145.781274][T30435] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1145.878138][T30466] vhci_hcd: connection closed [ 1145.887396][T30475] vhci_hcd: connection closed [ 1145.888484][T30472] vhci_hcd: connection closed [ 1145.994572][T30435] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1146.010068][T30460] vhci_hcd: connection closed [ 1146.010177][T30462] vhci_hcd: connection closed [ 1146.021103][ T6081] vhci_hcd vhci_hcd.5: stop threads [ 1146.031257][ T6081] vhci_hcd vhci_hcd.5: release socket [ 1146.036726][ T6081] vhci_hcd vhci_hcd.5: disconnect device [ 1146.057664][T30435] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #3: comm syz.6.7628: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 1146.057664][T30435] [ 1146.078384][ T6081] vhci_hcd vhci_hcd.5: stop threads [ 1146.083783][ T6081] vhci_hcd vhci_hcd.5: release socket [ 1146.089392][ T6081] vhci_hcd vhci_hcd.5: disconnect device [ 1146.153718][T30435] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1146.174304][T30489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7636'. [ 1146.211025][ T6081] vhci_hcd vhci_hcd.5: stop threads [ 1146.217263][ T6081] vhci_hcd vhci_hcd.5: release socket [ 1146.231890][ T6081] vhci_hcd vhci_hcd.5: disconnect device [ 1146.232514][T28095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.246741][ T6081] vhci_hcd vhci_hcd.5: stop threads [ 1146.253355][ T6081] vhci_hcd vhci_hcd.5: release socket [ 1146.258843][ T6081] vhci_hcd vhci_hcd.5: disconnect device [ 1146.267944][ T6081] vhci_hcd vhci_hcd.5: stop threads [ 1146.274512][ T6081] vhci_hcd vhci_hcd.5: release socket [ 1146.280045][ T6081] vhci_hcd vhci_hcd.5: disconnect device [ 1146.347257][T30493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1146.357285][T30493] 8021q: adding VLAN 0 to HW filter on device team0 [ 1146.436564][T30493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1146.785516][T30500] syzkaller0: entered promiscuous mode [ 1146.791035][T30500] syzkaller0: entered allmulticast mode [ 1147.183556][T30514] loop6: detected capacity change from 0 to 1024 [ 1147.282036][T30513] netlink: 'syz.0.7641': attribute type 6 has an invalid length. [ 1147.319081][T30514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1147.497943][T30520] loop2: detected capacity change from 0 to 512 [ 1147.585094][T30520] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 1147.729802][T30520] FAT-fs (loop2): Filesystem has been set read-only [ 1147.775609][ T28] audit: type=1400 audit(2000000021.340:15071): avc: denied { mounton } for pid=30521 comm="syz.0.7643" path="/479/file0" dev="tmpfs" ino=2490 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 1147.805289][T30526] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 1147.857628][T30526] FAT-fs (loop2): error, invalid access to FAT (entry 0x000000c8) [ 1148.029667][T30538] loop2: detected capacity change from 0 to 2048 [ 1148.073034][T30538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1148.085745][T30538] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1148.172087][T30544] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7646: bg 0: block 345: padding at end of block bitmap is not set [ 1148.204416][T30544] EXT4-fs (loop2): Remounting filesystem read-only [ 1148.219235][ T6070] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 1148.559628][T30554] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7647'. [ 1148.582156][T30554] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7647'. [ 1148.614770][T30557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7648'. [ 1148.687588][T30559] tipc: Enabled bearer , priority 0 [ 1148.700613][T30559] syzkaller0: entered promiscuous mode [ 1148.706379][T30559] syzkaller0: entered allmulticast mode [ 1148.715406][T30559] tipc: Resetting bearer [ 1148.722311][T30558] tipc: Resetting bearer [ 1148.728937][T30558] tipc: Disabling bearer [ 1148.769640][T28095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.821729][T30561] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7650'. [ 1148.841229][T30561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7650'. [ 1148.877563][T23611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.959518][T30568] loop2: detected capacity change from 0 to 512 [ 1148.974533][T30568] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1149.018564][T30568] EXT4-fs (loop2): 1 orphan inode deleted [ 1149.027249][T30568] EXT4-fs (loop2): 1 truncate cleaned up [ 1149.047156][T30568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1149.127410][T30568] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.2.7653: path /376/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 1149.263562][T30568] EXT4-fs (loop2): Remounting filesystem read-only [ 1149.274616][ T28] audit: type=1326 audit(2000000001.280:15072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30580 comm="syz.4.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1149.318709][ T28] audit: type=1326 audit(2000000001.300:15073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30580 comm="syz.4.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1149.348729][ T28] audit: type=1326 audit(2000000001.300:15074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30580 comm="syz.4.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1149.383739][ T28] audit: type=1326 audit(2000000001.300:15075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30580 comm="syz.4.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1149.437685][ T28] audit: type=1326 audit(2000000001.300:15076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30580 comm="syz.4.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1149.464772][ T28] audit: type=1326 audit(2000000001.300:15077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30580 comm="syz.4.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1149.489251][ T28] audit: type=1326 audit(2000000001.300:15078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30580 comm="syz.4.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1149.521224][T23611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1149.616650][T30583] loop4: detected capacity change from 0 to 2048 [ 1149.722862][T30583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1149.874015][T30583] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7657: bg 0: block 234: padding at end of block bitmap is not set [ 1149.905729][T30591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7659'. [ 1149.938608][T30583] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 174 with error 28 [ 1149.955283][T30583] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1149.955283][T30583] [ 1149.989362][T30583] EXT4-fs (loop4): Total free blocks count 0 [ 1150.014059][T30583] EXT4-fs (loop4): Free/Dirty block details [ 1150.030269][T30583] EXT4-fs (loop4): free_blocks=0 [ 1150.042420][T30583] EXT4-fs (loop4): dirty_blocks=176 [ 1150.060584][T30583] EXT4-fs (loop4): Block reservation details [ 1150.088154][T30583] EXT4-fs (loop4): i_reserved_data_blocks=11 [ 1150.232578][T30595] loop5: detected capacity change from 0 to 2048 [ 1150.448228][T30598] loop2: detected capacity change from 0 to 1024 [ 1150.491730][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 1150.491753][ T28] audit: type=1326 audit(2000000002.270:15147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30580 comm="syz.4.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1150.647776][ T28] audit: type=1326 audit(2000000002.480:15148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30580 comm="syz.4.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1150.795852][ T28] audit: type=1326 audit(2000000002.480:15149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30580 comm="syz.4.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1150.944898][ T28] audit: type=1326 audit(2000000002.480:15150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30580 comm="syz.4.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1151.041701][ T1032] usb 11-1: enqueue for inactive port 0 [ 1151.047347][ T1032] usb 11-1: enqueue for inactive port 0 [ 1151.104765][ T28] audit: type=1326 audit(2000000002.480:15151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30580 comm="syz.4.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1151.129043][ T1032] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1151.224791][T30595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1151.242913][T30004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.302454][T30598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1151.548078][ T28] audit: type=1326 audit(2000000002.490:15152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30580 comm="syz.4.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1151.622164][T30595] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7660: bg 0: block 234: padding at end of block bitmap is not set [ 1151.725025][T30595] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 30 with error 117 [ 1151.770310][ T28] audit: type=1326 audit(2000000002.490:15153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30580 comm="syz.4.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1151.831394][T30595] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1151.831394][T30595] [ 1151.954145][ T28] audit: type=1326 audit(2000000002.490:15154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30580 comm="syz.4.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1152.131044][T30613] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7665'. [ 1152.169403][ T28] audit: type=1326 audit(2000000002.490:15155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30580 comm="syz.4.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1152.207751][T30613] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7665'. [ 1152.312008][ T28] audit: type=1326 audit(2000000002.490:15156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30580 comm="syz.4.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1152.402521][T23611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.413588][T26831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.541131][T30629] loop5: detected capacity change from 0 to 2048 [ 1152.570569][T30629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1152.637539][T30634] syzkaller0: entered promiscuous mode [ 1152.657624][T30627] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7670: bg 0: block 234: padding at end of block bitmap is not set [ 1152.711395][T30634] syzkaller0: entered allmulticast mode [ 1152.832668][T30627] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 648 with error 28 [ 1152.898537][T30639] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7673'. [ 1152.924877][T30627] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1152.924877][T30627] [ 1152.944601][T30639] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30639 comm=syz.6.7673 [ 1152.979179][T30627] EXT4-fs (loop5): Total free blocks count 0 [ 1153.009041][T30627] EXT4-fs (loop5): Free/Dirty block details [ 1153.050057][T30627] EXT4-fs (loop5): free_blocks=0 [ 1153.069657][T30627] EXT4-fs (loop5): dirty_blocks=656 [ 1153.090074][T30627] EXT4-fs (loop5): Block reservation details [ 1153.098459][T30627] EXT4-fs (loop5): i_reserved_data_blocks=41 [ 1153.174668][T30649] loop4: detected capacity change from 0 to 512 [ 1153.208281][T30649] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1153.412984][T30649] EXT4-fs (loop4): 1 orphan inode deleted [ 1153.418853][T30649] EXT4-fs (loop4): 1 truncate cleaned up [ 1153.428340][T30649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1153.462677][T30649] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.4.7676: path /19/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 1153.506242][T30649] EXT4-fs (loop4): Remounting filesystem read-only [ 1153.543306][T30004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.421166][T30660] loop6: detected capacity change from 0 to 1024 [ 1154.476177][T30660] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1154.611058][T26831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.879879][T30670] loop2: detected capacity change from 0 to 2048 [ 1154.924488][T30670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1155.064864][T30670] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7682: bg 0: block 234: padding at end of block bitmap is not set [ 1155.115589][T30670] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 436 with error 28 [ 1155.155161][T30670] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1155.155161][T30670] [ 1155.188046][T30670] EXT4-fs (loop2): Total free blocks count 0 [ 1155.208437][T30670] EXT4-fs (loop2): Free/Dirty block details [ 1155.229848][T30670] EXT4-fs (loop2): free_blocks=0 [ 1155.245569][T30670] EXT4-fs (loop2): dirty_blocks=448 [ 1155.258086][T30670] EXT4-fs (loop2): Block reservation details [ 1155.271286][T30670] EXT4-fs (loop2): i_reserved_data_blocks=28 [ 1155.418508][T30692] tipc: Enabled bearer , priority 0 [ 1155.441137][T30692] syzkaller0: entered promiscuous mode [ 1155.459354][T30692] syzkaller0: entered allmulticast mode [ 1155.485635][T30692] tipc: Resetting bearer [ 1155.505813][T30691] tipc: Resetting bearer [ 1155.518096][ T28] kauditd_printk_skb: 135 callbacks suppressed [ 1155.518114][ T28] audit: type=1326 audit(2000000000.490:15292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30668 comm="syz.2.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1155.560189][T30691] tipc: Disabling bearer [ 1155.612861][ T28] audit: type=1326 audit(2000000000.520:15293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30668 comm="syz.2.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1155.657200][T23611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.695858][ T28] audit: type=1326 audit(2000000000.520:15294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30668 comm="syz.2.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9270dcfce code=0x7ffc0000 [ 1155.807802][ T28] audit: type=1326 audit(2000000000.520:15295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30668 comm="syz.2.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa92711da97 code=0x7ffc0000 [ 1155.903448][ T28] audit: type=1326 audit(2000000000.520:15296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30668 comm="syz.2.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1155.951829][ T28] audit: type=1326 audit(2000000000.520:15297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30668 comm="syz.2.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa92711da97 code=0x7ffc0000 [ 1155.976189][ T28] audit: type=1326 audit(2000000000.520:15298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30668 comm="syz.2.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa9270dcfce code=0x7ffc0000 [ 1155.990069][T28095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.999971][ T28] audit: type=1326 audit(2000000000.520:15299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30668 comm="syz.2.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1156.035229][ T28] audit: type=1326 audit(2000000000.520:15300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30668 comm="syz.2.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa9270dcfce code=0x7ffc0000 [ 1156.111792][ T28] audit: type=1326 audit(2000000000.560:15301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30668 comm="syz.2.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa9270dcfce code=0x7ffc0000 [ 1156.281648][T30699] loop4: detected capacity change from 0 to 512 [ 1156.786479][T30733] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1156.891816][T30733] bond2 (unregistering): Released all slaves [ 1157.190908][T30742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.355081][T30742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.320283][T30761] loop6: detected capacity change from 0 to 1024 [ 1159.377160][T30761] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1160.192285][T28095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.308883][T30792] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1160.321030][T30792] bond1 (unregistering): Released all slaves [ 1160.401551][T30792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.417734][T30792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.476809][T30798] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1160.489319][T30798] bond2 (unregistering): Released all slaves [ 1160.521682][ T28] kauditd_printk_skb: 359 callbacks suppressed [ 1160.521700][ T28] audit: type=1326 audit(2000000005.490:15661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30776 comm="syz.2.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa9270dcfce code=0x7ffc0000 [ 1160.573001][ T28] audit: type=1326 audit(2000000005.500:15662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30776 comm="syz.2.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa9270dcfce code=0x7ffc0000 [ 1160.579789][T30800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.607983][ T28] audit: type=1326 audit(2000000005.500:15663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30776 comm="syz.2.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa9270dcfce code=0x7ffc0000 [ 1160.612477][T30800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.647468][ T28] audit: type=1326 audit(2000000005.500:15664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30776 comm="syz.2.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa9270dcfce code=0x7ffc0000 [ 1160.681741][ T28] audit: type=1326 audit(2000000005.500:15665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30776 comm="syz.2.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa9270dcfce code=0x7ffc0000 [ 1160.705495][ T28] audit: type=1326 audit(2000000005.510:15666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30776 comm="syz.2.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa9270dcfce code=0x7ffc0000 [ 1160.734027][ T28] audit: type=1326 audit(2000000005.510:15667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30776 comm="syz.2.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa9270dcfce code=0x7ffc0000 [ 1160.771695][ T28] audit: type=1326 audit(2000000005.510:15668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30776 comm="syz.2.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa9270dcfce code=0x7ffc0000 [ 1160.813540][ T28] audit: type=1326 audit(2000000005.510:15669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30776 comm="syz.2.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa9270dcfce code=0x7ffc0000 [ 1160.840047][ T28] audit: type=1326 audit(2000000005.510:15670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30776 comm="syz.2.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa9270dcfce code=0x7ffc0000 [ 1160.983816][T30807] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1161.094477][T30807] bond2 (unregistering): Released all slaves [ 1161.167239][T30814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.205793][T30814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.225865][T30829] loop4: detected capacity change from 0 to 1024 [ 1163.358770][T30829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1164.480128][T30850] FAULT_INJECTION: forcing a failure. [ 1164.480128][T30850] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.521954][T30850] CPU: 1 UID: 0 PID: 30850 Comm: syz.0.7727 Tainted: G W syzkaller #0 PREEMPT(full) [ 1164.522035][T30850] Tainted: [W]=WARN [ 1164.522045][T30850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1164.522062][T30850] Call Trace: [ 1164.522070][T30850] [ 1164.522079][T30850] __dump_stack+0x1d/0x30 [ 1164.522173][T30850] dump_stack_lvl+0x95/0xd0 [ 1164.522197][T30850] dump_stack+0x15/0x1b [ 1164.522226][T30850] should_fail_ex+0x263/0x280 [ 1164.522303][T30850] should_failslab+0x8c/0xb0 [ 1164.522327][T30850] __kmalloc_noprof+0xb8/0x4e0 [ 1164.522423][T30850] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 1164.522458][T30850] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 1164.522492][T30850] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 1164.522588][T30850] ? genl_get_cmd+0x425/0x660 [ 1164.522611][T30850] ? radix_tree_lookup+0xfa/0x140 [ 1164.522694][T30850] genl_rcv_msg+0x432/0x470 [ 1164.522717][T30850] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1164.522797][T30850] netlink_rcv_skb+0x123/0x220 [ 1164.522829][T30850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1164.522866][T30850] genl_rcv+0x28/0x40 [ 1164.522909][T30850] netlink_unicast+0x5c0/0x690 [ 1164.522948][T30850] netlink_sendmsg+0x5c8/0x6f0 [ 1164.523006][T30850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1164.523041][T30850] ____sys_sendmsg+0x563/0x5b0 [ 1164.523151][T30850] ___sys_sendmsg+0x195/0x1e0 [ 1164.523195][T30850] __x64_sys_sendmsg+0xd4/0x160 [ 1164.523242][T30850] x64_sys_call+0x194c/0x3020 [ 1164.523340][T30850] do_syscall_64+0x12c/0x370 [ 1164.523364][T30850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.523393][T30850] RIP: 0033:0x7f58d16fc799 [ 1164.523430][T30850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1164.523449][T30850] RSP: 002b:00007f58d0157028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1164.523471][T30850] RAX: ffffffffffffffda RBX: 00007f58d1975fa0 RCX: 00007f58d16fc799 [ 1164.523536][T30850] RDX: 00000000240400c4 RSI: 0000200000000100 RDI: 0000000000000003 [ 1164.523553][T30850] RBP: 00007f58d0157090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.523649][T30850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1164.523666][T30850] R13: 00007f58d1976038 R14: 00007f58d1975fa0 R15: 00007ffec19e4158 [ 1164.523693][T30850] [ 1164.764437][T30857] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7728'. [ 1164.781724][T30857] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30857 comm=syz.6.7728 [ 1165.071036][T30004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.084946][T30864] loop5: detected capacity change from 0 to 512 [ 1165.148842][T30868] syzkaller0: entered promiscuous mode [ 1165.154446][T30868] syzkaller0: entered allmulticast mode [ 1165.570606][T30887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.586273][T30887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.598186][T30888] netlink: 'syz.4.7737': attribute type 10 has an invalid length. [ 1166.001064][T30880] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1166.005166][T30880] bond1 (unregistering): Released all slaves [ 1166.035456][T30888] team0: Device vxcan1 is of different type [ 1166.101631][ T28] kauditd_printk_skb: 607 callbacks suppressed [ 1166.101649][ T28] audit: type=1326 audit(2000000011.070:16278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30890 comm="syz.4.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1166.161654][ T28] audit: type=1326 audit(2000000011.070:16279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30890 comm="syz.4.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1166.221673][ T28] audit: type=1326 audit(2000000011.070:16280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30890 comm="syz.4.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1166.281634][ T28] audit: type=1326 audit(2000000011.070:16281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30890 comm="syz.4.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1166.368273][ T28] audit: type=1326 audit(2000000011.070:16282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30890 comm="syz.4.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1166.451659][ T28] audit: type=1326 audit(2000000011.070:16283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30890 comm="syz.4.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1166.499803][ T28] audit: type=1326 audit(2000000011.070:16284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30892 comm="syz.4.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdb19fecfce code=0x7ffc0000 [ 1166.543850][ T28] audit: type=1326 audit(2000000011.070:16285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30890 comm="syz.4.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1166.599046][ T28] audit: type=1326 audit(2000000011.080:16286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30890 comm="syz.4.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1166.641689][ T28] audit: type=1326 audit(2000000011.080:16287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30890 comm="syz.4.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1169.255575][T30923] syzkaller0: entered promiscuous mode [ 1169.363662][T30923] syzkaller0: entered allmulticast mode [ 1169.474994][T30928] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7746'. [ 1169.502458][T30928] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30928 comm=syz.6.7746 [ 1170.244955][T30943] loop6: detected capacity change from 0 to 512 [ 1170.272161][T30943] ext4: Unknown parameter 'uid>00000000000000000000' [ 1170.526214][T30947] io-wq is not configured for unbound workers [ 1170.955350][T30963] loop5: detected capacity change from 0 to 1024 [ 1171.076749][T30965] tipc: Failed to remove unknown binding: 66,1,1/0:826980911/826980913 [ 1171.239307][T30963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1171.329836][T30965] tipc: Failed to remove unknown binding: 66,1,1/0:826980911/826980913 [ 1171.733816][ T263] bridge_slave_1: left allmulticast mode [ 1171.819657][ T263] bridge_slave_1: left promiscuous mode [ 1171.851054][ T263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.917514][ T263] bridge_slave_0: left allmulticast mode [ 1171.932653][ T263] bridge_slave_0: left promiscuous mode [ 1171.951905][ T263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.182143][T30990] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7764'. [ 1172.715681][T30993] loop6: detected capacity change from 0 to 512 [ 1172.945730][T30994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7761'. [ 1172.963655][T30994] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30994 comm=syz.4.7761 [ 1173.202179][T26831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.355736][ T263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.395595][ T263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.423915][ T263] bond0 (unregistering): Released all slaves [ 1173.574242][ T263] hsr_slave_0: left promiscuous mode [ 1173.580080][ T263] hsr_slave_1: left promiscuous mode [ 1173.596058][ T263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1173.624921][ T263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1173.888094][ T263] team0 (unregistering): Port device team_slave_1 removed [ 1173.928598][ T263] team0 (unregistering): Port device team_slave_0 removed [ 1174.049759][T31004] loop5: detected capacity change from 0 to 512 [ 1174.484611][ T28] kauditd_printk_skb: 1239 callbacks suppressed [ 1174.484630][ T28] audit: type=1326 audit(2000000019.460:17527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31015 comm="syz.6.7766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1174.485698][T30979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.492413][ T28] audit: type=1326 audit(2000000019.460:17528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31015 comm="syz.6.7766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1174.515035][T30979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.583224][ T28] audit: type=1326 audit(2000000019.510:17529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31015 comm="syz.6.7766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1174.609861][T30979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1174.624012][T30979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1174.637454][ T28] audit: type=1326 audit(2000000019.510:17530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31015 comm="syz.6.7766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1174.683645][ T28] audit: type=1326 audit(2000000019.510:17531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31015 comm="syz.6.7766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1174.732476][ T28] audit: type=1326 audit(2000000019.530:17532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31015 comm="syz.6.7766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1174.796868][ T28] audit: type=1326 audit(2000000019.530:17533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31017 comm="syz.6.7766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fadfe2ecfce code=0x7ffc0000 [ 1174.820767][ T6081] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.830892][ T6081] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.851751][T31021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7767'. [ 1174.870780][ T6081] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.886948][ T28] audit: type=1326 audit(2000000019.530:17534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31015 comm="syz.6.7766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1174.892115][ T6081] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.951392][ T28] audit: type=1326 audit(2000000019.530:17535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31015 comm="syz.6.7766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1175.078449][ T28] audit: type=1326 audit(2000000019.530:17536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31015 comm="syz.6.7766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fadfe32c799 code=0x7ffc0000 [ 1175.371090][T31050] loop2: detected capacity change from 0 to 512 [ 1178.168053][T31062] loop2: detected capacity change from 0 to 2048 [ 1178.205974][T31063] loop4: detected capacity change from 0 to 2048 [ 1178.313288][T31063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1178.370752][T31063] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1178.571857][T31088] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7773: bg 0: block 345: padding at end of block bitmap is not set [ 1178.705197][T31091] loop2: detected capacity change from 0 to 512 [ 1179.396986][T31088] EXT4-fs (loop4): Remounting filesystem read-only [ 1179.437634][ T6073] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 1179.495124][ T3375] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1179.523088][ T3375] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1179.595999][T30004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.754110][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 1179.754124][ T28] audit: type=1326 audit(2000000024.730:17601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31108 comm="syz.4.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1179.833041][T31110] loop4: detected capacity change from 0 to 2048 [ 1179.955699][ T28] audit: type=1326 audit(2000000024.760:17602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31108 comm="syz.4.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1180.012791][T31110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1180.110981][ T28] audit: type=1326 audit(2000000024.760:17603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31108 comm="syz.4.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1180.222712][T31110] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7780: bg 0: block 234: padding at end of block bitmap is not set [ 1180.240949][ T28] audit: type=1326 audit(2000000024.760:17604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31108 comm="syz.4.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1180.348428][T31110] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 456 with error 28 [ 1180.386006][ T28] audit: type=1326 audit(2000000024.760:17605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31108 comm="syz.4.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1180.446623][T31110] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1180.446623][T31110] [ 1181.437321][ T28] audit: type=1326 audit(2000000024.760:17606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31108 comm="syz.4.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1181.466193][T31110] EXT4-fs (loop4): Total free blocks count 0 [ 1182.433865][T31110] EXT4-fs (loop4): Free/Dirty block details [ 1182.455889][ T28] audit: type=1326 audit(2000000024.760:17607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31108 comm="syz.4.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1182.467728][T31110] EXT4-fs (loop4): free_blocks=0 [ 1183.481693][ T28] audit: type=1326 audit(2000000024.760:17608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31108 comm="syz.4.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1183.492905][T31110] EXT4-fs (loop4): dirty_blocks=464 [ 1184.305309][T31110] EXT4-fs (loop4): Block reservation details [ 1184.351162][T31110] EXT4-fs (loop4): i_reserved_data_blocks=29 [ 1184.495354][T31143] loop2: detected capacity change from 0 to 512 [ 1184.515981][ T28] audit: type=1326 audit(2000000024.760:17609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31108 comm="syz.4.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1184.565964][T31143] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1184.609349][ T28] audit: type=1326 audit(2000000024.760:17610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31108 comm="syz.4.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb1a02c799 code=0x7ffc0000 [ 1184.684980][T31143] EXT4-fs (loop2): 1 orphan inode deleted [ 1184.690810][T31143] EXT4-fs (loop2): 1 truncate cleaned up [ 1184.706790][T31143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1184.763490][T31143] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #12: block 7: comm syz.2.7786: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 1184.821927][T31143] EXT4-fs (loop2): Remounting filesystem read-only [ 1184.863261][T23611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.108990][T30004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.777162][T31160] loop4: detected capacity change from 0 to 2048 [ 1185.814448][T31162] loop6: detected capacity change from 0 to 512 [ 1185.841686][T31160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1185.855709][T31162] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.7791: iget: bad extra_isize 90 (inode size 256) [ 1185.885467][T31160] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1185.923674][T31162] fserror_report: 1 callbacks suppressed [ 1185.923687][T31162] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1185.929559][T31162] EXT4-fs (loop6): Remounting filesystem read-only [ 1185.931667][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1185.951692][ C0] EXT4-fs (loop6): initial error at time 2000000030: ext4_xattr_inode_iget:441: inode 11 [ 1185.961526][ C0] EXT4-fs (loop6): last error at time 2000000030: ext4_xattr_inode_iget:441: inode 11 [ 1185.976332][T31162] EXT4-fs warning (device loop6): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 1185.986697][T31162] EXT4-fs (loop6): 1 orphan inode deleted [ 1185.993027][T31162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1186.036436][T31162] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.077790][T31160] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7790: bg 0: block 345: padding at end of block bitmap is not set [ 1186.143684][T31160] EXT4-fs (loop4): Remounting filesystem read-only [ 1186.152046][T31175] loop5: detected capacity change from 0 to 2048 [ 1186.174094][T31185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7800'. [ 1186.183227][ T6073] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 1186.238608][T31175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1186.279572][T31175] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1186.312173][T30004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.351821][T31195] loop2: detected capacity change from 0 to 512 [ 1186.415256][T31199] loop4: detected capacity change from 0 to 512 [ 1186.430144][T31195] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1186.543611][T31195] EXT4-fs (loop2): 1 orphan inode deleted [ 1186.549606][T31195] EXT4-fs (loop2): 1 truncate cleaned up [ 1186.556774][T31195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1186.570384][T31195] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.2.7803: path /404/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 1186.581184][T31199] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1186.602850][T31195] EXT4-fs (loop2): Remounting filesystem read-only [ 1186.633044][T31204] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7796: bg 0: block 345: padding at end of block bitmap is not set [ 1186.728628][T23611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.766846][T31199] EXT4-fs (loop4): 1 orphan inode deleted [ 1186.773048][T31199] EXT4-fs (loop4): 1 truncate cleaned up [ 1186.780565][T31199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1186.796254][T31204] EXT4-fs (loop5): Remounting filesystem read-only [ 1186.857170][T31199] EXT4-fs (loop4): shut down requested (1) [ 1186.865860][ T263] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 1186.891949][T31199] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 1186.966028][T31199] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 1187.084894][T30004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.141282][T26831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.406727][T31232] loop2: detected capacity change from 0 to 1024 [ 1187.414302][T31232] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1187.425306][T31232] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 1187.436187][T31232] EXT4-fs (loop2): invalid journal inode [ 1187.441912][T31232] EXT4-fs (loop2): can't get journal size [ 1187.449422][T31232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1187.462728][T31232] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7811'. [ 1187.703503][T31238] loop5: detected capacity change from 0 to 1024 [ 1187.778035][T31232] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7811'. [ 1187.842416][T31238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1188.099045][T23611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1188.383856][T31251] loop6: detected capacity change from 0 to 164 [ 1188.434328][T31251] rock: directory entry would overflow storage [ 1188.526936][T31251] rock: sig=0x4543, size=28, remaining=18 [ 1189.775306][T31259] loop4: detected capacity change from 0 to 4096 [ 1189.786431][T31259] EXT4-fs: Ignoring removed bh option [ 1189.861355][T31259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1190.073492][T30004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.106181][T31268] loop6: detected capacity change from 0 to 512 [ 1190.134982][T31268] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1190.159888][T26831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.177104][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 1190.177134][ T28] audit: type=1326 audit(2000000035.150:17633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31269 comm="syz.2.7822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1190.241016][T31268] EXT4-fs (loop6): 1 orphan inode deleted [ 1190.271285][T31268] EXT4-fs (loop6): 1 truncate cleaned up [ 1190.290233][T31268] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1190.311714][ T28] audit: type=1326 audit(2000000035.190:17634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31269 comm="syz.2.7822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1190.323997][T31268] EXT4-fs (loop6): shut down requested (1) [ 1190.353362][T31268] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 1190.392740][T31268] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 1190.421805][ T28] audit: type=1326 audit(2000000035.190:17635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31269 comm="syz.2.7822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1190.449723][T28095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.481687][ T28] audit: type=1326 audit(2000000035.190:17636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31269 comm="syz.2.7822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1190.566538][ T28] audit: type=1326 audit(2000000035.190:17637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31269 comm="syz.2.7822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1190.640924][ T28] audit: type=1326 audit(2000000035.210:17638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31269 comm="syz.2.7822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1190.694690][ T28] audit: type=1326 audit(2000000035.210:17639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31269 comm="syz.2.7822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1190.730668][ T28] audit: type=1326 audit(2000000035.210:17640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31269 comm="syz.2.7822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1190.756496][ T28] audit: type=1326 audit(2000000035.210:17641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31269 comm="syz.2.7822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92711c799 code=0x7ffc0000 [ 1190.780500][ T28] audit: type=1326 audit(2000000035.220:17642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31272 comm="syz.2.7822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa9270dcfce code=0x7ffc0000 [ 1190.811829][T31306] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7827'. [ 1190.826882][T31306] vxlan0: entered promiscuous mode [ 1190.833578][T13588] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1190.840437][T31306] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31306 comm=syz.6.7827 [ 1190.842833][T13588] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1190.892708][T13588] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1190.925253][T13588] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1191.093304][T31320] loop2: detected capacity change from 0 to 512 [ 1191.114999][T31320] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1191.311108][T31321] loop4: detected capacity change from 0 to 1024 [ 1191.382308][ T263] vlan0: left allmulticast mode [ 1191.416753][ T263] geneve0: left allmulticast mode [ 1191.471135][T31320] EXT4-fs (loop2): 1 orphan inode deleted [ 1191.491748][T31321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1191.589315][T31320] EXT4-fs (loop2): 1 truncate cleaned up [ 1191.605304][ T263] vlan0: left promiscuous mode [ 1191.642307][T31320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1191.661833][ T263] geneve0: left promiscuous mode [ 1191.706580][ T263] bridge0: port 3(vlan0) entered disabled state [ 1191.750811][ T263] bridge_slave_1: left allmulticast mode [ 1191.941547][T31320] EXT4-fs (loop2): shut down requested (1) [ 1191.954066][ T263] bridge_slave_1: left promiscuous mode [ 1191.983386][T31320] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 1191.997650][ T263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.027861][ T263] bridge_slave_0: left allmulticast mode [ 1192.043604][T31320] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 1192.054285][ T263] bridge_slave_0: left promiscuous mode [ 1192.075594][ T263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.144348][T23611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.158278][ T263] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 1192.194511][ T263] erspan0 (unregistering): left promiscuous mode [ 1192.215254][ T263] gretap0 (unregistering): left promiscuous mode [ 1192.353248][ T263] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1192.362655][ T263] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.371361][ T263] .` (unregistering): Released all slaves [ 1192.379157][ T263] bond1 (unregistering): Released all slaves [ 1192.390041][ T263] bond2 (unregistering): Released all slaves [ 1192.399391][ T263] bond3 (unregistering): Released all slaves [ 1192.408611][ T263] bond4 (unregistering): Released all slaves [ 1192.417895][ T263] bond0 (unregistering): Released all slaves [ 1192.579602][T31347] loop6: detected capacity change from 0 to 512 [ 1192.591796][ T263] tipc: Left network mode [ 1192.598446][ T263] hsr_slave_0: left promiscuous mode [ 1192.610019][ T263] hsr_slave_1: left promiscuous mode [ 1192.621003][T31347] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1192.640738][ T263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1192.663106][T31347] EXT4-fs (loop6): 1 orphan inode deleted [ 1192.669290][ T263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1192.678702][T31347] EXT4-fs (loop6): 1 truncate cleaned up [ 1192.689868][T31347] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1192.725577][T31347] EXT4-fs (loop6): shut down requested (1) [ 1192.734029][ T263] team0 (unregistering): Port device team_slave_1 removed [ 1192.751378][ T263] team0 (unregistering): Port device team_slave_0 removed [ 1192.760029][T31347] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 1192.776580][T31347] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 1192.795781][T31347] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 1192.845884][T31347] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 1192.873418][T31347] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 1192.910490][T31347] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 1192.935095][T31347] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 1192.980509][T31358] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1193.000697][T28095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1193.054125][T31358] bond2 (unregistering): Released all slaves [ 1193.139610][T30004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1193.232595][T31383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7839'. [ 1193.269990][T31386] loop2: detected capacity change from 0 to 2048 [ 1193.315187][T31386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1193.315270][T31386] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1193.386373][ T263] IPVS: stop unused estimator thread 0... [ 1193.396486][T31400] ================================================================== [ 1193.396532][T31400] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 1193.396571][T31400] [ 1193.396578][T31400] read-write to 0xffff88811ad8d6b0 of 8 bytes by task 31386 on cpu 1: [ 1193.396603][T31400] __xa_set_mark+0xd2/0x1a0 [ 1193.396633][T31400] __folio_mark_dirty+0x383/0x4a0 [ 1193.396671][T31400] mark_buffer_dirty+0x120/0x220 [ 1193.396711][T31400] folio_zero_new_buffers+0x28c/0x2e0 [ 1193.396740][T31400] block_write_end+0x200/0x210 [ 1193.396771][T31400] ext4_da_write_end+0x1d3/0x810 [ 1193.396800][T31400] generic_perform_write+0x311/0x490 [ 1193.396838][T31400] ext4_buffered_write_iter+0x1ee/0x3c0 [ 1193.396859][T31400] ext4_file_write_iter+0x380/0xfa0 [ 1193.396875][T31400] vfs_write+0x5a6/0x9f0 [ 1193.396910][T31400] ksys_write+0xdc/0x1a0 [ 1193.396930][T31400] __x64_sys_write+0x40/0x50 [ 1193.396951][T31400] x64_sys_call+0x27e1/0x3020 [ 1193.396981][T31400] do_syscall_64+0x12c/0x370 [ 1193.396999][T31400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.397019][T31400] [ 1193.397026][T31400] read to 0xffff88811ad8d6b0 of 8 bytes by task 31400 on cpu 0: [ 1193.397045][T31400] xas_find_marked+0x213/0x620 [ 1193.397071][T31400] filemap_get_folios_tag+0xfa/0x510 [ 1193.397099][T31400] mpage_prepare_extent_to_map+0x328/0xc50 [ 1193.397128][T31400] ext4_do_writepages+0xa07/0x2840 [ 1193.397168][T31400] ext4_writepages+0x18f/0x320 [ 1193.397194][T31400] do_writepages+0x1c6/0x310 [ 1193.397224][T31400] filemap_flush_range+0x105/0x140 [ 1193.397263][T31400] generic_fadvise+0x338/0x460 [ 1193.397290][T31400] __x64_sys_fadvise64+0xcb/0x110 [ 1193.397319][T31400] x64_sys_call+0x242b/0x3020 [ 1193.397369][T31400] do_syscall_64+0x12c/0x370 [ 1193.397389][T31400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.397409][T31400] [ 1193.397414][T31400] value changed: 0x000000000000003f -> 0x00000000000001ff [ 1193.397429][T31400] [ 1193.397434][T31400] Reported by Kernel Concurrency Sanitizer on: [ 1193.397453][T31400] CPU: 0 UID: 0 PID: 31400 Comm: syz.2.7842 Tainted: G W syzkaller #0 PREEMPT(full) [ 1193.397491][T31400] Tainted: [W]=WARN [ 1193.397501][T31400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1193.397518][T31400] ================================================================== [ 1193.903645][T31408] loop4: detected capacity change from 0 to 1024 [ 1193.932449][T31400] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7842: bg 0: block 345: padding at end of block bitmap is not set [ 1193.933303][T31400] EXT4-fs (loop2): Remounting filesystem read-only [ 1193.933441][ T6081] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 1193.987290][T31408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1194.528148][T31417] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7846'. [ 1194.529383][T31417] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7846'. [ 1195.560934][T30004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.717711][T23611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.