last executing test programs: 6m44.326334427s ago: executing program 32 (id=690): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000040)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="20b2"]) 3m3.937917146s ago: executing program 33 (id=2484): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0xecb42, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x1000000, 0x3) 2m57.946196957s ago: executing program 34 (id=2537): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x80, 0x8000, 0x8, 0x8, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x64, 0x0, 0x4, 0x4, 0x0, @local, @remote}}}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x125342, 0x20) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x48080) ftruncate(r3, 0x2007ffc) unshare(0x20000400) setresuid(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468"], 0xfc}}, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000007c0)={0x7, 0xb, 0x10, 0xb, 0x6, 0xff, 0x6, 0x11e, 0xffffffffffffffff}) 2m40.761228416s ago: executing program 35 (id=2656): syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100), 0x0, 0xb6c, &(0x7f00000017c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) 2m39.750010264s ago: executing program 36 (id=2666): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'macsec0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_read_part_table(0x1057, &(0x7f0000001080)="$eJzsz7FNxDAYBeBnJ3ZIkQaJnjUYhIGyDgVzQcEGSEGYcCPcXfF91bP95F9/uKllfk/aeZiSfsbHJHOStX1ttYw49Ppfbqm/nZLPtmTq5e92f9lrUsvHMY2vvo+nbTysycMIz+UyvL++XWNHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALh3PwEAAP//kk8JiQ==") ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000240)={0x9, 0x3, 0xf93, 0x0, 0x3, "1aaf805089cc36243aee3f1ce19eb3f156ddd4", 0x5}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffc, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x2, 0x5}, {0xffff, 0xc}, {0x8}}}, 0x24}}, 0x40004) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e00000038000280140006002001000000000000000000000000000214000700fc020000000000000000000000000000040012000800", @ANYRES32=r4], 0x6c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x8, 0x7, 0x0, 0xffff, {{0x10, 0x4, 0x0, 0x2, 0x40, 0x65, 0x0, 0x80, 0x2f, 0x0, @local, @local, {[@ssrr={0x89, 0xb, 0x73, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end, @rr={0x7, 0x1f, 0x41, [@multicast1, @multicast1, @remote, @local, @private=0xa010101, @private=0xa010100, @multicast1]}]}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0}, 0x3e96564ea7a9e37e, 0x30, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) r11 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x550, 0xfffffffffffffc75}, 0x0, 0x0, 0x8000003, 0x4, 0x0, 0x40d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000000180)='cpu<=-||!') ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r13}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r12}, @IFLA_HSR_SLAVE2={0x8, 0x2, r13}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x38, 0x7, 0xa, 0x5, 0x2, @private2, @mcast2, 0x7, 0x8000, 0xffffff80, 0x2}}) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) 2m36.909627401s ago: executing program 37 (id=2702): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40100, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000200)={'batadv_slave_1\x00', @random="85182e6c44d3"}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x2, 0x80010, 0x23b, 0x200800b, 0x4, "0200efff0f000013d500800000000700", 0x0, 0x41ff}) (async) ioperm(0xf, 0x8, 0x2) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) (rerun: 32) 1m55.186276119s ago: executing program 38 (id=3086): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000680)="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", 0x1aa}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932", 0x1e}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41bca238e0548c5e955d74bbb", 0xe7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000840)="d43b64ef458596fceaa7429c9625f6466b172ec4cd65f33cac7e897355acf564019cfc6467819235e672d404e4ec43e61ca4253cef7bae502ae750198ae83454c1c1dc04d0fd6b6bfff4cafd793b3068df7d3dbe34da76d439ad6042df5401436af4a5f1718d68b33d0a5033ff3f70881d117aa024768421839032e3ce4126c66d3faca7802c090cd5d1307748a06b86f36cd50e39cc6372f5c5e33058451744920dd53df4226cf0e33a9cf8736ded7d5dcbc780722e29e405e6dfd83a1bb53a631a1003db5e83cbe08a67007717bdf57b329885f8cd6f551e4dafc016193b0b263e1504e337fc6320b7", 0xea}, {&(0x7f00000001c0)="adfde71efa339240f029a6b2635b689930165865e16a6f057bb8b837c80e0de7f5501a7bf6a91bca02e03ec7e6222fca2fb1c36cbaf4a036b4a67a202fd9733647bf26480873b0", 0x47}, {&(0x7f0000000400)="153a2bd78e239c603a8b33ad2fdbaae09001b8483d9736b773a2e82a0dd750ae8875bcf8ae306173108110b9eedaed5df0a419408040e7c1277344fef316797f7cb755f6b38bd85946fe36dc40b65cdb282308b9e3439014c51ddc75a6416b27d0f8a71f2b0a33a1f3a9928f944374cf", 0x70}, {&(0x7f0000000940)="772fd0b58bccd7f1936b02a6719e6fd6e687357d8eed957a8f89b96fdf06e1909a4f7c9b8e36f06bac79d1b3f38910b181df12bad0be3e6052d195956508255f9f51c75d5d406631c442b9511f9467a0094b49d7488627710a0c663e1fa6c69282653be875b89c894e5c3f8ec23683f416524677c261e60574c4ecb2c191ccddb801740ea7c6abf0e59a9432a2c8cd68133cca59441698a265168367d0dea182f0a885732429c9ce7fb2c1fc09c55d50ba4642b5208bae07d76f936e4c9930b7588ed427a8de28afd48653cd2a0a6e2e8d952d364cc2c470a96675a9ae65ef8b5adba0cebf76eb2373cb", 0xea}, {&(0x7f0000000a40)="050f732244cc77e5d686f9e146a4add727c4c3a599663b9c8171e651c46eba480950952c5784d1f9f6c07de205f96a5aafa8c009e5c6a606acfe0f1ab3ff3e91629714746991a262fc759d132da5dbc0c95b4029ca7f7d40c32b146f8c9df9085bcd0990f897dfa2ef4e3c6fb965264202cf03987db93654a651eff17d3a9023258da66abd80f022d8d3ad8d2abbc35aa3c0ebf58e69036c3e937f8a6c915c08e0df7c9ecf1aaf19ce05c0f5", 0xac}, {&(0x7f0000000c80)="95c27fc9f25beac8406310cc34a606ac0e8242fceb89d89ccb890b343d852e7ab5408e6c5ea13b92cf9c825823a27174ac147f52e723be86ea15991d500a3af9484b3a48a1c4dcec5c95cb37209416e5bee890c71a7d7700094aa999534e769cf5aebd57b1ba7a83ea88beb007b89653364de3bc72d5fbda4b1e912ad52bb2ccaaed2391156d3e45f86d3bbf70f87f78e7", 0x91}, {&(0x7f0000000e00)="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", 0x83}], 0x7}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x241, &(0x7f0000003480)=[{&(0x7f0000001200)="5d9703da00d30d2750e6a4a65a0876adab9c6e32ef752531be2416d66df27aad9c64ee4d11e3f5c798101ffaf738bee81685fd59df4b", 0x36}, {&(0x7f00000022c0)="08b3c183978e3b2cd88f7807d25f36e4034cf684d089", 0x16}, {&(0x7f0000002300)="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", 0x6fd}, {&(0x7f0000003300)}, {0x0, 0x61}], 0x5}}], 0x5, 0x2090) 1m39.612194742s ago: executing program 39 (id=3249): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={r1, 0x80000004}, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={r1, 0x80000004}, 0x8) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) (async) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) (async) 1m30.621523383s ago: executing program 5 (id=3339): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='fG'], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)) openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000001440)={0x122640, 0x10b, 0x7}, 0x18) socket(0x28, 0x801, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x100, 0x0, 0x0, 0x100000c00, 0x38, 0x24, 0x42, 0x6e}) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1m30.199386272s ago: executing program 5 (id=3343): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x40000}, 0x14}, 0x1, 0x2b1e}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r4], 0x54}}, 0x800) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000a00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x48442, 0x320) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r7, &(0x7f0000000440)=[{&(0x7f0000000340)}, {&(0x7f0000000200)="f3de00618e3c3f085e4bea2d876ab6679e0052e87afda29254bc7532c5c2479145760e72d8db44d2dd7f2fe56251e1604e4e7de6ddc50d6461ae2181beb1", 0x3e}, {0x0}], 0x3, 0x1600, 0x0, 0x17) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02037f02210000000000000000000000030006000000000002000000ac14142e00000000000000000200010000000000100000007fffffff030005002b00000002000000ac1414aa000000000000000017000800"], 0x108}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x3, 0x0, 0x81, 0xfffffffa}, {}, {0x0, 0x40}, {0x6}]}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="400d3f000000ac774675b7cb0ab4f78a174ebeab7ef3e51105580c38bed500778b01d18d3815c773270e42b71df40d231b3029a41837c24e5a7cf311375aa6afbf8739ae7a"], 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x89}, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="40850007000000e7ffffff"]}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x50, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6}]}) write$char_usb(r10, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r10, 0x80404518, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r8], 0x104}}, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB='}'], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m28.679686583s ago: executing program 5 (id=3354): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="b406000000002b007111690000000000851000000200000085000000070000009500000000000000950000000000000059a30f4936e44feb8adb9474dd7d10406d8bb1f72366e95281c2c0be09e6af23f926d804488628cda2ad6fe64f"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) 1m28.528648358s ago: executing program 5 (id=3356): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@debug}, {@acl}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0xb6c, &(0x7f00000017c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) 1m27.628541935s ago: executing program 5 (id=3373): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x400005}, 0x1c) (async) r1 = epoll_create1(0x0) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x12, 0x1, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x1d, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000400)='syzkaller\x00', 0x7, 0x49, &(0x7f0000000440)=""/73, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x10, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x4, 0x4, 0x6, 0x3}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=r4, r2, 0x3f, 0x0, 0x0, @void, @value=r5, @void, @void, r3}, 0x20) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x90000000}) 1m27.195522391s ago: executing program 5 (id=3375): socket$xdp(0x2c, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000deff00010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 1m27.155117854s ago: executing program 40 (id=3375): socket$xdp(0x2c, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000deff00010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 1m23.450461815s ago: executing program 9 (id=3395): syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xabca, 0x5, 0xa, 0x0, 0x7, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x110695, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, r1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000440)=0x543, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r4, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0x9000000}], 0x1, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f00000000c0)="800009f3220800ce", 0x8, 0x800, &(0x7f0000000240)={0xa, 0x4e24, 0x6, @local, 0x1}, 0x1c) recvmsg(r5, 0x0, 0x40000040) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x10000005, 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="18f9ffff0100000000000000010000008500000027000000b7080000000000007b8af8ff0000b7080000000000007b8af0ff00000000bfa100005000000007010000c2f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$XFS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000100)) 1m22.59878383s ago: executing program 9 (id=3398): r0 = socket(0xa, 0x1, 0x84) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000feffff0102004e20e0"], 0x90) 1m22.522637887s ago: executing program 9 (id=3399): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0xffff, 0x2000, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9, 0x8}, {0x1, 0x9, 0x80, 0x1000000}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, [@tmpl={0x104, 0x5, [{{@in=@loopback, 0x4d4, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000, 0xfffffffc}, {{@in=@loopback, 0xfffffffc, 0x2b}, 0x0, @in6=@dev, 0x3504, 0x0, 0x0, 0x0, 0x800}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0x32}, 0x0, @in=@empty, 0x800000, 0x3}, {{@in6=@local, 0x4d4, 0xff}, 0x0, @in=@loopback, 0x3505}]}]}, 0x1bc}}, 0x0) 1m22.520843877s ago: executing program 9 (id=3400): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000700000005a0bce80000000000000f17000000000000612e2e00"/46], &(0x7f0000005bc0)=""/239, 0x2b, 0xef, 0x9, 0xfff}, 0x28) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000100)={[{@debug}, {@init_itable}]}, 0x1, 0x5a2, &(0x7f0000000180)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) setresuid(0x0, 0xee00, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="3800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001800122d08000100677265000c00af11f8ed4b04000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x0, 0x8, 0xb, 0xfb, 0x0, 0x39, 0xc002, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) setregid(0xee00, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000780)='net/xfrm_stat\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x820005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000004c0)=@ccm_128={{0x303}, "d579f7bf7a8547e5", "d38800000000d9e119e8021a6cf000", "7eb09414", "976f2a244e5025c9"}, 0x28) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r4, 0x6f58, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x10a) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file1\x00', &(0x7f00000007c0)=[0x5, 0x5, 0x1, 0x3, 0x1d, 0xa], 0x0, 0x0, 0x6, 0x1, r8}}, 0x40) r9 = syz_clone(0xe020000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r9, &(0x7f0000000040)='syscall\x00') 1m22.260700912s ago: executing program 9 (id=3402): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x11, 0xa, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x1b05, 0x4c1, 0x43, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x9) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x1c1100, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="ed", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) socket$nl_route(0x10, 0x3, 0x0) 1m22.07501655s ago: executing program 1 (id=3405): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0x1, 0x23f, &(0x7f00000006c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1m21.942280668s ago: executing program 1 (id=3407): openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x15, 0x2, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x4e1f, 0x1, @empty, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x2a8, 0x2a8, 0x0, 0xf0, 0x3b8, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@ip={@remote, @multicast1, 0xff, 0xffffff00, 'syzkaller0\x00', 'batadv_slave_1\x00', {}, {}, 0x32, 0x1, 0x20}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xc7}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x81, @local, 0x4e20}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffff00, 0xffffff00, 'veth0_macvtap\x00', 'wlan0\x00', {}, {}, 0x4, 0x0, 0x40}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @remote, 0xffffff00, 0xff, 'veth0\x00', 'team0\x00', {0xff}, {}, 0x33, 0x2, 0xb}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x2, @broadcast, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r2 = dup(r0) r3 = dup(r0) ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, &(0x7f00000000c0)={'\x00', 0x1, 0x3, 0xc000}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0xf, @empty, 0x1}}, 0x400, 0xbffc, 0xe652, 0x2, 0x24, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r4, 0x10, 0x0, @void}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e640500000000007502faff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000032000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6d5b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa387a8077927a1ad367c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f20002b35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8c367d1bfd1aea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82dc568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000000000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac6f09c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccf5e882602897a85bf8523d891080593d831d758deb4f2c7e49c6d6b35d8fd92601c8500febb0c5fe0be294bf6bbbecad444695277a9e3992a354492513b43091d161c7c7cdbbe44e8e83b4cf333238a52f214b278c6485236ea880db2f113f6381187679a4620d6149808b0af024b3b3e6ba99b4b15ca"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xfffffffc}, 0x143}, 0x31) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040002006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a2288ff000000000000002bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0160516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead88d7acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980dc58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952fd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e2224f2d338fab2acc5014f74e420988486de2ace27ce59379378ca34eeedbd9a323a889f295e5d3bae64fc48ba194fc70973b39525123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49963a195e2fdffe6bdce6fa78ab2ded1ff74f9e54f1b82da2d444f9727be708710b90a872282f4dce55468a681e"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r7, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m21.13165623s ago: executing program 1 (id=3410): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$eJzs3c9vHFcdAPDvrL2Okzi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQbM7G5v1rL0xa2+8/nykybw3v77f5/iNZ2afZgM4t56PiDci4sM0TV+KiNl8eSmfotWZsu3ef/jucjYlkaZv/S2JJF+WbZamado95uV8t+mI+NpXIr6Z7As4nc93dm8v1eu1zbxaba7fqW7t7F5fW19ara3WNhYW5l9dfG3xlcUbQ2nnlYh4/Ut/+v53fvrl13/52Xf+ePMv176VpTWTr++24xgmD1vZaXr5wnTPDpvHDPYkytpT/iCvXBxsn3snmRAAAH1l1/gfiYhPRcRLMRsTh1/OAgAAAGdQ+oWZ+CDpfH5XYKrPcgAAAOAMKbXHwCalSj4WYCZKpUqlM4b3Y3GpVG9sNT9zq7G9sdIZKzsX5dKttXrtRj5WeC7KSVafb5f36i/31Bci4umI+N7sxXa9styor4z64QcAAACcE5f33f9PRMQ/Zzv3/4dLTic5AAAAYHjmRp0AAAAAcOLc/wMAAMBYK486AQAAAODEffXNN7Mp7X7/9crbO9u3G29fX6lt3a6sby9XlhubdyqrjcZq+51960cdr95o3PlcbGzfrTZrW83qlZ3dm+uN7Y3mzbWYPpUGAQAAAAc8/cn7v08iovX5i+0pMzXqpIBTMfmo1H2nZ0Hv/8NTnfl7p5QUcComBtjmvQvFy10nwNk22bugT18Hxo/x/8BR3+jRd/DObzqz0pDzAQAAhu/qJ477+X/LJT+ccToxnF89n/+ns6NKBDh17ef+gw7kcbEAY6U80AhAYJz9v5//Hy1NHyshAABg6GbaU1Kq5I/3ZqJUqlQirrS/FrCc3Fqr125ExFMR8bvZ8oWsPt/eMznyngEAAAAAAAAAAAAAAAAAAAAAAAAA6EjTJFIAAABgrEWU/pz8qvMu/6uzL870Ph+YSv7d/krgqYh450dv/eDuUrO5OZ8t//uj5c0f5stfHsUTDAAAAKBX9z69Pf/XqLMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNy8//Dd5e40wOYXhxX3r1+MiLmi+JMx3Z5PRzkiLv0jicl9+yURMTGE+K17EfHxovhJltajkEXxh/FDaN1LWmlbYfyYy38KRfEvDyE+nGf3s/PPG0X9vxTPt+fF/W8y4n/qx9X//BePzn8Tffr/lQFjPPPg59W+8e9FPDNZfP7rxk/6xH9hoOjl+MbXd3f7rU1/HHG1+/enfcbbH2GvVG2u36lu7exeX1tfWq2t1jYWFuZfXXxt8ZXFG9Vba/Va/m9hjO8++4sPD2v/pcK/f0meTf/2v1hwvImC/P/z4O7Dj3YrrYPxr71QEP/XP8m3OBi/lMf5dF7O1l/tllud8n7P/ey3zx3W/pW99pcf5///Wr+D9jrQUZ4d7FcHADgRWzu7t5fq9drm2Bayu/QnII3jFKbiiUhjfAvfzgoPhnXANE3TrE8VrLofEYMcJ4kht7RUnM9eoe8ZYNRnJgAAYNj2LvpHnQkAAAAAAAAAAAAAAAAAAACcX6fxlrXemHuvQE6G8QptAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICh+G8AAAD//wt23AM=") 1m21.038337175s ago: executing program 9 (id=3411): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000100003040000000000000000dc050000", @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x572, &(0x7f00000006c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=ANY=[], 0x361, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004040, &(0x7f0000000240)={0xa, 0x4ea2, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8401}, 0x1c) 1m21.036272084s ago: executing program 41 (id=3411): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000100003040000000000000000dc050000", @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=ANY=[], 0x361, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004040, &(0x7f0000000240)={0xa, 0x4ea2, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8401}, 0x1c) 1m20.705682308s ago: executing program 1 (id=3414): syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100), 0x0, 0xb6c, &(0x7f00000017c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) 1m20.48130518s ago: executing program 1 (id=3416): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8602, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@generic={0x91, 0x1, 0x1, 0xa}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv2(r0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000080)=""/40, 0x28}, {&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000480)=""/143, 0x8f}, {&(0x7f0000000540)=""/93, 0x5d}, {&(0x7f00000005c0)=""/14, 0xe}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000006c0)=""/253, 0xfd}, {&(0x7f0000000900)=""/103, 0x67}], 0xa, 0x7fffffff, 0x100, 0xa) 1m18.382362823s ago: executing program 1 (id=3432): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x40000}, 0x14}, 0x1, 0x2b1e}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r4], 0x54}}, 0x800) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000a00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x48442, 0x320) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r7, &(0x7f0000000440)=[{&(0x7f0000000340)}, {&(0x7f0000000200)="f3de00618e3c3f085e4bea2d876ab6679e0052e87afda29254bc7532c5c2479145760e72d8db44d2dd7f2fe56251e1604e4e7de6ddc50d6461ae2181beb1", 0x3e}, {0x0}], 0x3, 0x1600, 0x0, 0x17) 1m18.366990001s ago: executing program 42 (id=3432): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x40000}, 0x14}, 0x1, 0x2b1e}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r4], 0x54}}, 0x800) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000a00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x48442, 0x320) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r7, &(0x7f0000000440)=[{&(0x7f0000000340)}, {&(0x7f0000000200)="f3de00618e3c3f085e4bea2d876ab6679e0052e87afda29254bc7532c5c2479145760e72d8db44d2dd7f2fe56251e1604e4e7de6ddc50d6461ae2181beb1", 0x3e}, {0x0}], 0x3, 0x1600, 0x0, 0x17) 55.142409653s ago: executing program 8 (id=3581): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0x0, 0x0, 0x4}, 0x50) gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x30, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x30}}, 0x10004000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8982, &(0x7f0000000080)={0x7, 'syz_tun\x00', {0x7fff}, 0x2}) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a94000000060a0b0400000000000000000200000068000480540001800a0001006d617463680000004400028008240240000000002c000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce2316334e8278ad0a0001006c696d6974000000100001800b00010064796e73657400000900010073797a30000000000900020073797a32"], 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r9) getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r11}]}}}]}, 0x3c}}, 0x40848c0) 54.292198108s ago: executing program 8 (id=3585): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x290, 0xe0, 0x380, 0xe0, 0xe0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xc8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {0x1}, {0x87}}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x290}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) 54.24550512s ago: executing program 8 (id=3587): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_gettime(r0, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) creat(&(0x7f0000000080)='./file0\x00', 0x42) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 52.934619428s ago: executing program 8 (id=3595): syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100), 0x0, 0xb6c, &(0x7f00000017c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) 52.790658933s ago: executing program 8 (id=3599): r0 = syz_clone(0x1011, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2a, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0x0, 0xfffffffe}, 0x80, 0x0, 0x0, 0x0, 0xffffffb7}, 0x48080) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280070002800900020073797a320000000008000180fffffffd0900010073797a30000000000900020073797a32"], 0x274}}, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffffffffffc37, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) r10 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg(r10, &(0x7f000000a680)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)='\n', 0x1}, {&(0x7f0000000900)="3c69cb3faf2524", 0x7}], 0x2}}], 0x1, 0x4004) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10400, 0x84) epoll_ctl$EPOLL_CTL_DEL(r11, 0x2, r9) fcntl$lock(r11, 0x6, &(0x7f0000000040)={0x1, 0x1, 0x0, 0xfffffffffffffff8, r0}) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x891a, 0x0) 52.622871975s ago: executing program 7 (id=3602): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x7, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d390887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b364a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc825d8e524b2451138e495bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b4fd42513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cfe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541e4505bc3a45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd735892892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af40005b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb84d9a88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0x1000}}, 0x375) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) 52.563076794s ago: executing program 7 (id=3603): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5e}, {@in=@dev, 0x0, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {}, {0x0, 0x4000000}, {}, 0x0, 0x3505, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'essiv-cbc-aes-sha256-neon\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e21, 0x0, @in=@initdev={0xac, 0x1e, 0x4, 0x0}}}]}, 0x154}}, 0x200000000000000) 52.446263544s ago: executing program 7 (id=3604): syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100), 0x0, 0xb6c, &(0x7f00000017c0)="$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") syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800082, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x1, 0x191, &(0x7f00000002c0)="$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") openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket(0x6, 0x3, 0xfffffffe) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002340)=@deltfilter={0x90, 0x2d, 0x300, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xb}, {}, {0x8, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xd1}}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @random="7f46963e567d"}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @loopback}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0xffffff00, 0x0, 0x2b954ec63a9f4726]}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @multicast1}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x73}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x90}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x40010) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = bpf$MAP_CREATE_RINGBUF(0x100000000000000, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000007ca6785eafb0309c78b1f54e7fb600000055924eda431ebf7e3d983509192ce926e1c533d05f6b34e88c64a8b6f1b9b4bf26118d73ab9dd48a39b6b09d3ff9e2cdd9d45c90a34e0bd0c12b8830e60e0c6c3f3a08cd8e3bad5c89a33feab2d1bc7baf9762ff618b79586e1f1c06c10a9331745bcc66f8ac23463efe21b37a45cda03a6166e5707d4196be29c4f419473ab2cf262ac418cfc3835b09d24c40b1529c0eef9db60e85b251152004c788a4d05d0d0398cb8e29bbc895d57274f9bc376e9bbba9135debf0c4f887ac633fae52ee96ad3cbea93978200cf7b0c53f189d5d396dd4bd6a2cf0e0776e3c23c756", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000040000000000000000a20000000000a01030000000000000000010000060900010073797a300000000040000000030a01020000000000000000011300000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048044000180090001007866726d000000003400028008000240000000050500030001000000080001"], 0xf8}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 51.554213483s ago: executing program 7 (id=3607): r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\x9b}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x120, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100), 0x0, 0xb6c, &(0x7f00000017c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) 51.390407715s ago: executing program 7 (id=3608): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) r3 = timerfd_create(0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000480)={0x0, 0x0, {}, {}, {0x0, @struct}}) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0xffffffffffffffff, &(0x7f0000000380)=""/207, 0xcf, 0x2}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) mkdirat(r2, &(0x7f0000000080)='./file1\x00', 0x0) timerfd_settime(r3, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, &(0x7f0000001080)) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x3882, 0x0) fcntl$notify(r7, 0x402, 0xa) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a3bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) recvmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x20, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 51.343604627s ago: executing program 8 (id=3611): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x820005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a1000"/196], 0x119) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nodelalloc}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000080)={0x5, "105ec1874dad01bbe860f9022263dae95b81e09a204303beb023908d48ea7f794b315dde584f7229e3f0349c97d30419a7e61ac97731997cef90b2218ec4891d"}) close_range(r0, 0xffffffffffffffff, 0x0) 51.326921164s ago: executing program 43 (id=3611): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x820005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a1000"/196], 0x119) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nodelalloc}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000080)={0x5, "105ec1874dad01bbe860f9022263dae95b81e09a204303beb023908d48ea7f794b315dde584f7229e3f0349c97d30419a7e61ac97731997cef90b2218ec4891d"}) close_range(r0, 0xffffffffffffffff, 0x0) 50.48082745s ago: executing program 7 (id=3623): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xc, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000fe00000000000000feffffff8500000029000000851f00000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0xad9840d16f7c11f3, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 50.480775701s ago: executing program 44 (id=3623): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xc, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000fe00000000000000feffffff8500000029000000851f00000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0xad9840d16f7c11f3, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.706878702s ago: executing program 6 (id=3948): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0x0, 0x0, 0x4}, 0x50) gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x30, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x30}}, 0x10004000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r8, 0x9c3fa077fa966179, 0x2000, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8982, &(0x7f0000000080)={0x7, 'syz_tun\x00', {0x7fff}, 0x2}) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x24, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a94000000060a0b0400000000000000020200000068000480540001800a0001006d617463680000004400028008000240000000002c000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce2316334e8278ad0a0001006c696d6974000000100001800b00010064796e73657400000900010073797a30000000000900020073797a32"], 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r9) getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r11}]}}}]}, 0x3c}}, 0x40848c0) 3.290645992s ago: executing program 2 (id=3950): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000e00)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383163030890e0879b0a71c6e70a9b336c959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074d090acd3b78130daa61d8e8040000065802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae13f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea77b5602984e4de7c6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6932fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cff7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f2157322c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f19880f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060085ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e606000000e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999b596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f203903dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efe5496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5ca00000000000000008734dd73583df292892448039ef799cf0630becdcce04579f5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebd078ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9dec58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6b331b4603b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0006087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c2769310123cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f4647b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1de51f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d4db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72932b99b380000000000000006859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec8982b6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000002601e87b162dadc600", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x50, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6}]}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r2, 0x80404518, 0x0) 2.454649762s ago: executing program 0 (id=3958): mlockall(0x7) mlockall(0x1) setresuid(0xee00, 0xee00, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\t\x00\x00\x00\f\x00\x00\x00B\x00\x00\x00@'], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r0}, 0x38) 2.272589321s ago: executing program 2 (id=3959): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000400), 0x12) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="7800000010000104000000000002000000000000", @ANYRES32=0x0, @ANYRES64=r0], 0x78}}, 0x0) 2.178733606s ago: executing program 2 (id=3960): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6, 0x2, 0x9, 0x3ff}, {0x6, 0x7, 0x1, 0x5}]}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r7, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c804}, 0x20000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2) sendmsg$IPVS_CMD_SET_SERVICE(r9, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x4c, r10, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x8c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x68712c3f, 0x0}) 2.054341085s ago: executing program 2 (id=3961): socket$nl_sock_diag(0x10, 0x3, 0x4) timer_create(0x0, 0x0, 0x0) socket(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x42, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_config_ext={0x7d0f14e0, 0x5}, 0x24, 0x0, 0x10000, 0x0, 0x8002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}}, 0x0) 1.974252982s ago: executing program 2 (id=3963): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x200000, &(0x7f0000000340)={[{@block_validity}, {}, {@usrjquota}, {@inode_readahead_blks}, {}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000280)='./bus\x00', 0x42cd869, 0x0, 0x0, 0x0, &(0x7f00000000c0)) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x140, r1, 0x200, 0x70bd2c, 0x27dfdbfb, {}, [@TIPC_NLA_LINK={0x12c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5073}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb84}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x668}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd275}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x80cd}, 0x20000000) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000000)=0x480e, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, r5, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0xe4, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x79}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x88f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x11}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) 1.640489436s ago: executing program 6 (id=3965): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0xde}}, './file0/../file0\x00'}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002cbd70eafadbdf25040000000500060006006b0008000300080000000008000201521b000008000300f9ffffff"], 0x44}, 0x1, 0x0, 0x0, 0x20008044}, 0x4000004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000e40)=ANY=[@ANYBLOB="00008863bbbbbbbbbbbb0180c20000038cfb"], 0x12) syz_emit_ethernet(0x10e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd60fc414a00d83c0020010000000000000000000003000001fe8000000000000000000000000000aa6203000000000000c910000000000000000000"], 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd41, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x4000011, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2b0, 0x20a, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e20], [0x4e20, 0x4e25], 0x3, 0x8, 0x80, 0x7}}, @common=@inet=@tcp={{0x30}, {[], [], 0x22, 0x0, 0x8}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x5c, 0x8, 0x9, 0x9, 0x1000, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff000000, 0x0, 0xffffffff], [0xffffffff, 0xff, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00], 0x1d69, 0x2000}}, @common=@ipv6header={{0x28}, {0x4, 0x11, 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6cab2ea9}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) setresuid(0x0, 0xee00, 0x0) chroot(0x0) mount$bind(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0x2a05004, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0xffffffffffffffff, &(0x7f0000000180)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') 1.426583669s ago: executing program 6 (id=3966): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x10000, 0x40000, 0x5, 0x3, 0x20005, 0xa, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) shutdown(r1, 0x1) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 1.376274081s ago: executing program 3 (id=3967): syz_emit_ethernet(0x0, 0x0, 0x0) 1.350342597s ago: executing program 3 (id=3968): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8b}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.294390488s ago: executing program 0 (id=3969): setpriority(0x1, 0x0, 0x9) timer_create(0x2, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000100)={{r1, r2+60000000}, {r3, r4+10000000}}, &(0x7f0000000140)) r5 = syz_clone(0x80000000, &(0x7f0000000180)="b19a", 0x2, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) ptrace$peeksig(0x4209, r5, &(0x7f0000000280)={0x0, 0x0, 0x6}, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}]) capget(&(0x7f00000005c0)={0x20071026, r5}, &(0x7f0000000600)={0x4, 0x10001, 0x10001, 0x7, 0x0, 0xff}) ptrace(0x8, r5) ptrace$ARCH_GET_GS(0x1e, r5, &(0x7f0000000640), 0x1004) timer_gettime(r0, &(0x7f0000000680)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) timerfd_gettime(r6, &(0x7f00000006c0)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0xa, 0xa0, 0x8, 0x2, 0x0, 0xd, 0x200, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2, 0x2}, 0x400, 0x78, 0x3, 0x9, 0x3, 0xfffffff8, 0x9, 0x0, 0xa, 0x0, 0xffffffff}, 0x0, 0xd, r6, 0x3) timer_gettime(r0, &(0x7f0000000780)) ioprio_set$pid(0x0, r5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000007c0)={0x0}, &(0x7f0000000800)=0xc) ptrace$ARCH_SET_CPUID(0x1e, r7, 0x1, 0x1012) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000000840)='sit0\x00') ioctl$RTC_EPOCH_SET(r6, 0x4008700e, 0xcc5e) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000008c0), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000900)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x33, 0x21, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00', 0x10, 0x20, 0xecc8, 0x4}}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, r8, 0xcfd11f6d3def6ee0, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004801}, 0x703920b476063de2) symlink(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='./file0\x00') write$UHID_CREATE2(r6, &(0x7f0000000b80)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0xe5, 0xfffa, 0x7fff, 0x2, 0x0, 0x80, "b6149ffe9871e5fb891e5674dfb0f395d49f19b2004fc75aa52ec1ce95849cf9e0f15fa359766c64b21abea233fc578877bf0535a929eda1e583ecd253d12b3454f94fc6cde50e1a8229081637679b337de00ee185f820bc2d07111640bee9589b88c0f154732b9e1d33d4d722388f3ed3c88527686fb85cb71b92f0889db93f37f0f8fc3d7c103a126f07d0d9c96dd6f9f1c1fc7f7c2bc0a05b1f1e99c68ff83fdc0481088e0584ea803c057614a9c41fa2e7428371c315fcffa5bb3c80d5dcfaec192fa66bd4707a98976f2d3b1bc3a27530da6406d401ed49b7ae7c13d49c75bcf712b6"}}, 0x1fd) capget(&(0x7f0000000d80)={0x20080522, r7}, 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mknodat(r6, &(0x7f0000000dc0)='./file0\x00', 0x8200, 0x2bd6dceb) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000e00)={0x2e, @remote, 0x4e22, 0x2, 'none\x00', 0x0, 0x3, 0x1}, 0x2c) 1.294196337s ago: executing program 6 (id=3970): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="74000000090601020000000000000000010000010900020073797a310000000005000100070000004c00078007000280"], 0x74}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 1.282161666s ago: executing program 0 (id=3971): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x23, 0x0, 0xffcb}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) 1.263426902s ago: executing program 4 (id=3972): unshare(0x20000680) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x40180, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00\x00\x00', @ANYRES32], 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast1, 0x4}, 0x1c) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x10b, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0xa, 0x148, 0x0, 0x10, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @local, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x1, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2d0) (async) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001ec0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") (async) getsockopt$inet_mptcp_buf(r2, 0x6, 0x1e, 0xfffffffffffffffd, &(0x7f0000000000)=0x2000000) (async) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) (async) ioctl$TIOCGWINSZ(r0, 0x5413, 0xfffffffffffffffd) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) (async) syz_clone3(&(0x7f0000007040)={0x400, &(0x7f0000006e40), 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, &(0x7f0000007000)=[0xffffffffffffffff], 0x1}, 0x58) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (async) unshare(0x10000000) 1.206501763s ago: executing program 0 (id=3973): mount$tmpfs(0xfff0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x4480, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}]}) 1.206330613s ago: executing program 4 (id=3974): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048041}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a0c0000000000d500ffff01000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000000700000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0x2f}, 0x94) 1.205918473s ago: executing program 0 (id=3975): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0x0, 0x0, 0x4}, 0x50) gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x30, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x30}}, 0x10004000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8982, &(0x7f0000000080)={0x7, 'syz_tun\x00', {0x7fff}, 0x2}) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a94000000060a0b0400000000000000000200000068000480540001800a0001006d617463680000004400028008000240240000002c000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce2316334e8278ad0a0001006c696d6974000000100001800b00010064796e73657400000900010073797a30000000000900020073797a32"], 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r9) getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r11}]}}}]}, 0x3c}}, 0x40848c0) 1.195853251s ago: executing program 4 (id=3976): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x49, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @empty=0xac1414aa, @loopback}, "c964585c75baeb"}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0xa1ffffff, 0x0, 0x800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000911125000000000095000000000000fd9d6d1c2d340c201ee04b7920f9450000"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 994.847227ms ago: executing program 3 (id=3977): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) write$rfkill(r0, &(0x7f0000000080)={0xe5, 0x1}, 0x8) 922.725695ms ago: executing program 4 (id=3978): syz_emit_ethernet(0x0, 0x0, 0x0) 744.740525ms ago: executing program 4 (id=3979): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x4480, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}]}) (fail_nth: 12) 657.64132ms ago: executing program 3 (id=3980): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x3410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffff95da, 0x9}, 0x102260, 0x10000, 0x0, 0x2, 0x8, 0x20005, 0x200, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000646000/0x3000)=nil, 0x3000, 0x1000001, 0x10, r0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x3, 0x100010, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd_index=0x3, 0xffffffffffffff80, 0x6, 0xbc, 0x2, 0x0, {0x1}}) r3 = openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x18) copy_file_range(r3, 0x0, r3, 0x0, 0xfffffffffffffffe, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) r4 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r4, &(0x7f00000002c0)='ns/cgroup\x00') perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x7c, 0xff, 0xc, 0x0, 0x8000000000000001, 0x820, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xe, 0x2, @perf_bp={&(0x7f00000000c0), 0x7}, 0xc, 0x4, 0x5, 0x1, 0x1, 0xfd29, 0x2, 0x0, 0xffffffff, 0x0, 0xcd}, r4, 0x8, 0xffffffffffffffff, 0xa) 238.65862ms ago: executing program 6 (id=3981): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x14}, {}, {0x4}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x211, 0x24}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000200)='GPL\x00', 0x6, 0xffb, &(0x7f0000001b00)=""/4091, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) 238.07337ms ago: executing program 4 (id=3982): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x0, 0xffff}, [@IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000110000000000000000000700000a0000"], 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = io_uring_setup(0x2fcc, &(0x7f0000000000)={0x0, 0x413, 0x10, 0x2, 0x2ca}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(r4, 0x1a, &(0x7f00000000c0)={0xe}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x3f, 0x70bd2e, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x9, 0x0, 0x1000, 0x3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x68}}, 0x10) r6 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) 237.63818ms ago: executing program 3 (id=3983): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc0100001900010025bd7000fcdbdf2500000000000000000000ffffe0000001fe80000000000000000000000000043700000000000000000200000089000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000200000000000000000100000000004401050020"], 0x1fc}, 0x1, 0x0, 0x0, 0x81}, 0x4000) 234.21593ms ago: executing program 2 (id=3984): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000004900)=""/170, 0xaa}], 0x1, 0x17e, 0x9) pread64(r0, &(0x7f00000000c0)=""/164, 0xa4, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) 229.247889ms ago: executing program 0 (id=3985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x608, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="2703021c030214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 154.522246ms ago: executing program 6 (id=3986): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048041}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a0c0000000000d500ffff01000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000000700000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0x2f}, 0x94) 0s ago: executing program 3 (id=3987): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000140), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4028030, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getxattr(0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): executor" name="cpuacct.usage_all" dev="tmpfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 454.532003][T19103] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 454.553338][T19062] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3470'. [ 454.618459][T19103] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 2 with error 28 [ 454.630866][T19103] EXT4-fs (loop4): This should not happen!! Data will be lost [ 454.630866][T19103] [ 454.631069][T19111] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3474'. [ 454.652960][T19103] EXT4-fs (loop4): Total free blocks count 0 [ 454.664056][T19103] EXT4-fs (loop4): Free/Dirty block details [ 454.681118][T19103] EXT4-fs (loop4): free_blocks=65280 [ 454.691186][T19103] EXT4-fs (loop4): dirty_blocks=31 [ 454.701311][T19103] EXT4-fs (loop4): Block reservation details [ 454.711465][T19103] EXT4-fs (loop4): i_reserved_data_blocks=31 [ 454.731830][T19103] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 454.953814][T19134] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3480'. [ 454.965713][T19134] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 454.979600][T19134] loop6: detected capacity change from 0 to 512 [ 455.008446][T18663] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.027274][T19134] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.100544][T19134] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.239685][T19134] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 455.311366][T19134] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 2 with error 28 [ 455.401825][T19134] EXT4-fs (loop6): This should not happen!! Data will be lost [ 455.401825][T19134] [ 455.438259][T19134] EXT4-fs (loop6): Total free blocks count 0 [ 455.458743][T19134] EXT4-fs (loop6): Free/Dirty block details [ 455.477343][T19134] EXT4-fs (loop6): free_blocks=65280 [ 455.499060][T19134] EXT4-fs (loop6): dirty_blocks=31 [ 455.517254][T19134] EXT4-fs (loop6): Block reservation details [ 455.529663][T19134] EXT4-fs (loop6): i_reserved_data_blocks=31 [ 455.535986][T19134] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 455.559973][T19155] loop7: detected capacity change from 0 to 512 [ 455.609068][T19155] FAT-fs (loop7): Directory bread(block 199916) failed [ 455.628213][T19155] FAT-fs (loop7): Directory bread(block 199917) failed [ 455.637297][T19155] FAT-fs (loop7): Directory bread(block 199918) failed [ 455.656693][T19155] FAT-fs (loop7): Directory bread(block 199919) failed [ 455.656768][T19167] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3485'. [ 455.659184][T19167] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.673305][T19155] FAT-fs (loop7): Directory bread(block 199920) failed [ 455.680029][T19167] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.703318][T19155] FAT-fs (loop7): Directory bread(block 199921) failed [ 455.720986][T19155] FAT-fs (loop7): Directory bread(block 199922) failed [ 455.731849][T19155] FAT-fs (loop7): Directory bread(block 199923) failed [ 455.750022][T19174] loop4: detected capacity change from 0 to 1024 [ 455.776977][T19174] EXT4-fs: inline encryption not supported [ 455.861082][T19179] xt_hashlimit: max too large, truncated to 1048576 [ 455.889241][T19174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.903219][T19179] Cannot find set identified by id 0 to match [ 456.037890][T19155] FAT-fs (loop7): FAT read failed (blocknr 128) [ 456.138033][T19194] FAULT_INJECTION: forcing a failure. [ 456.138033][T19194] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 456.151398][T19194] CPU: 1 UID: 0 PID: 19194 Comm: syz.4.3486 Tainted: G W syzkaller #0 PREEMPT(full) [ 456.151471][T19194] Tainted: [W]=WARN [ 456.151477][T19194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 456.151489][T19194] Call Trace: [ 456.151496][T19194] [ 456.151503][T19194] __dump_stack+0x1d/0x30 [ 456.151531][T19194] dump_stack_lvl+0x95/0xd0 [ 456.151688][T19194] dump_stack+0x15/0x1b [ 456.151752][T19194] should_fail_ex+0x263/0x280 [ 456.151777][T19194] should_fail_alloc_page+0xf2/0x100 [ 456.151857][T19194] __alloc_frozen_pages_noprof+0x108/0x360 [ 456.151890][T19194] alloc_pages_mpol+0xb3/0x260 [ 456.151921][T19194] alloc_pages_noprof+0x8f/0x130 [ 456.151978][T19194] kimage_alloc_control_pages+0x2d1/0x7c0 [ 456.152084][T19194] alloc_pgt_page+0x17/0x60 [ 456.152187][T19194] ident_pud_init+0x14a/0x320 [ 456.152213][T19194] ident_p4d_init+0xe0/0x230 [ 456.152236][T19194] ? kimage_alloc_control_pages+0x777/0x7c0 [ 456.152277][T19194] kernel_ident_mapping_init+0x1a6/0x370 [ 456.152306][T19194] machine_kexec_prepare+0x1d2/0xb10 [ 456.152332][T19194] ? __pfx_alloc_pgt_page+0x10/0x10 [ 456.152359][T19194] do_kexec_load+0x3fe/0x530 [ 456.152425][T19194] __se_sys_kexec_load+0x134/0x160 [ 456.152451][T19194] __x64_sys_kexec_load+0x55/0x70 [ 456.152477][T19194] x64_sys_call+0x16c0/0x3020 [ 456.152550][T19194] do_syscall_64+0x12c/0x370 [ 456.152569][T19194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.152589][T19194] RIP: 0033:0x7fa1664dc799 [ 456.152605][T19194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.152656][T19194] RSP: 002b:00007fa164ef5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 456.152675][T19194] RAX: ffffffffffffffda RBX: 00007fa166756180 RCX: 00007fa1664dc799 [ 456.152687][T19194] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 456.152716][T19194] RBP: 00007fa164ef5090 R08: 0000000000000000 R09: 0000000000000000 [ 456.152729][T19194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.152748][T19194] R13: 00007fa166756218 R14: 00007fa166756180 R15: 00007ffd06f83498 [ 456.152777][T19194] [ 456.416275][T19193] loop7: detected capacity change from 0 to 4096 [ 456.443451][T19193] EXT4-fs: Ignoring removed mblk_io_submit option [ 456.473134][T19193] EXT4-fs: test_dummy_encryption option not supported [ 456.505370][T19200] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3490'. [ 456.858846][T16468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.471976][T19254] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3498'. [ 458.731871][T19269] lo speed is unknown, defaulting to 1000 [ 458.765492][T19269] ip6_vti0 speed is unknown, defaulting to 1000 [ 458.840221][T19279] loop4: detected capacity change from 0 to 4096 [ 458.868791][T19269] xfrm0 speed is unknown, defaulting to 1000 [ 458.884589][T19279] EXT4-fs: Ignoring removed mblk_io_submit option [ 458.906931][T19279] EXT4-fs: test_dummy_encryption option not supported [ 458.966205][T19289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10000 sclass=netlink_route_socket pid=19289 comm=syz.4.3502 [ 459.170439][T19297] loop4: detected capacity change from 0 to 512 [ 459.495576][T19303] loop8: detected capacity change from 0 to 128 [ 459.879062][T19323] loop8: detected capacity change from 0 to 2048 [ 460.252140][T19323] loop8: p1 < > p4 [ 460.282621][T19323] loop8: p4 size 8388608 extends beyond EOD, truncated [ 460.418434][T19358] netlink: 792 bytes leftover after parsing attributes in process `syz.4.3515'. [ 460.424816][T13588] udevd[13588]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 460.427783][T19358] netlink: 792 bytes leftover after parsing attributes in process `syz.4.3515'. [ 460.440064][T13589] udevd[13589]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 460.473771][T19358] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3515'. [ 460.498207][T19362] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3516'. [ 460.503007][T19339] loop7: detected capacity change from 0 to 512 [ 460.516690][T19362] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 460.542711][T19354] program syz.2.3513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 460.555309][T19362] loop8: detected capacity change from 0 to 512 [ 460.578015][T19339] FAT-fs (loop7): Directory bread(block 199916) failed [ 460.586320][T19339] FAT-fs (loop7): Directory bread(block 199917) failed [ 460.616863][T19362] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.632565][T19339] FAT-fs (loop7): Directory bread(block 199918) failed [ 460.632765][T19339] FAT-fs (loop7): Directory bread(block 199919) failed [ 460.632873][T19339] FAT-fs (loop7): Directory bread(block 199920) failed [ 460.632936][T19339] FAT-fs (loop7): Directory bread(block 199921) failed [ 460.633004][T19339] FAT-fs (loop7): Directory bread(block 199922) failed [ 460.633085][T19339] FAT-fs (loop7): Directory bread(block 199923) failed [ 460.640846][T19362] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.645594][T19362] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, [ 460.677969][T19375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3517'. [ 460.682783][T19362] block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 460.719183][T19362] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 2 with error 28 [ 460.719214][T19362] EXT4-fs (loop8): This should not happen!! Data will be lost [ 460.719214][T19362] [ 460.719228][T19362] EXT4-fs (loop8): Total free blocks count 0 [ 460.719239][T19362] EXT4-fs (loop8): Free/Dirty block details [ 460.719250][T19362] EXT4-fs (loop8): free_blocks=65280 [ 460.719284][T19362] EXT4-fs (loop8): dirty_blocks=31 [ 460.719295][T19362] EXT4-fs (loop8): Block reservation details [ 460.719316][T19362] EXT4-fs (loop8): i_reserved_data_blocks=31 [ 460.719435][T19362] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 460.833572][T19375] loop4: detected capacity change from 0 to 512 [ 460.942451][T19339] FAT-fs (loop7): FAT read failed (blocknr 128) [ 460.988678][T19375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.001460][T19375] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.029160][T19370] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 461.044300][T19370] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 2 with error 28 [ 461.062382][T19370] EXT4-fs (loop4): This should not happen!! Data will be lost [ 461.062382][T19370] [ 461.088490][T19370] EXT4-fs (loop4): Total free blocks count 0 [ 461.116983][T19370] EXT4-fs (loop4): Free/Dirty block details [ 461.123231][T19370] EXT4-fs (loop4): free_blocks=65280 [ 461.128610][T19370] EXT4-fs (loop4): dirty_blocks=31 [ 461.142540][T19370] EXT4-fs (loop4): Block reservation details [ 461.148642][T19370] EXT4-fs (loop4): i_reserved_data_blocks=31 [ 461.155107][T19370] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 461.206622][T19408] loop7: detected capacity change from 0 to 512 [ 461.238211][T19411] loop2: detected capacity change from 0 to 2048 [ 461.264437][T19411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.291772][T19408] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 461.313167][T19408] EXT4-fs error (device loop7): __ext4_fill_super:5563: inode #2: comm syz.7.3520: iget: bad i_size value: 7809641402504209772 [ 461.347947][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 461.347962][ T28] audit: type=1400 audit(1772800547.858:2339): avc: denied { name_connect } for pid=19409 comm="syz.2.3521" dest=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 461.377408][T19408] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 461.379542][T19408] EXT4-fs (loop7): get root inode failed [ 461.388622][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 461.388640][ C0] EXT4-fs (loop7): last error at time 1772800547: __ext4_fill_super:5563: inode 2 [ 461.414824][T19423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3521'. [ 461.427716][ T28] audit: type=1400 audit(1772800547.958:2340): avc: denied { name_connect } for pid=19409 comm="syz.2.3521" dest=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1 [ 461.450140][T19408] EXT4-fs (loop7): mount failed [ 461.595978][T19440] loop8: detected capacity change from 0 to 1024 [ 461.609571][T19440] EXT4-fs: Ignoring removed oldalloc option [ 461.630882][T19440] EXT4-fs: Ignoring removed bh option [ 461.648327][T19440] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.692796][T19440] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3525'. [ 461.773266][T14470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.867698][T19473] loop6: detected capacity change from 0 to 128 [ 461.897616][T19473] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3533'. [ 462.059597][T19490] netlink: 'syz.4.3530': attribute type 32 has an invalid length. [ 462.087661][T19489] lo speed is unknown, defaulting to 1000 [ 462.117558][T19489] ip6_vti0 speed is unknown, defaulting to 1000 [ 462.135795][T19491] tipc: Started in network mode [ 462.186712][T19491] tipc: Node identity da9e79a37041, cluster identity 4711 [ 462.241557][T19491] tipc: Enabled bearer , priority 0 [ 462.358235][T16630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.386536][T19495] syzkaller0: entered promiscuous mode [ 462.409135][T19495] syzkaller0: entered allmulticast mode [ 462.416340][T19504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3537'. [ 462.430889][T19509] netlink: 164 bytes leftover after parsing attributes in process `syz.7.3538'. [ 462.434325][T19495] tipc: Resetting bearer [ 462.446909][T19489] xfrm0 speed is unknown, defaulting to 1000 [ 462.448211][T19504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3537'. [ 462.492822][T19487] tipc: Resetting bearer [ 462.510242][T19487] tipc: Disabling bearer [ 462.516211][ T28] audit: type=1326 audit(1772800549.029:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19502 comm="syz.2.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca52c799 code=0x7ffc0000 [ 462.553875][ T28] audit: type=1326 audit(1772800549.029:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19502 comm="syz.2.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fa1ca52c799 code=0x7ffc0000 [ 462.587436][ T28] audit: type=1326 audit(1772800549.029:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19502 comm="syz.2.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca52c799 code=0x7ffc0000 [ 462.593511][T19523] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 462.629220][ T28] audit: type=1326 audit(1772800549.029:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19502 comm="syz.2.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa1ca52c799 code=0x7ffc0000 [ 462.653902][ T28] audit: type=1326 audit(1772800549.029:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19502 comm="syz.2.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca52c799 code=0x7ffc0000 [ 462.677547][ T28] audit: type=1326 audit(1772800549.029:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19502 comm="syz.2.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa1ca52c799 code=0x7ffc0000 [ 462.701387][ T28] audit: type=1326 audit(1772800549.029:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19502 comm="syz.2.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca52c799 code=0x7ffc0000 [ 462.736354][T19523] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.902212][ T28] audit: type=1326 audit(1772800549.029:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19502 comm="syz.2.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1ca52c799 code=0x7ffc0000 [ 463.341695][T19539] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3543'. [ 463.351391][T19539] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3543'. [ 463.360944][T19539] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3543'. [ 464.443421][T16630] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 464.654212][T19566] FAULT_INJECTION: forcing a failure. [ 464.654212][T19566] name failslab, interval 1, probability 0, space 0, times 0 [ 464.694045][T19557] set_capacity_and_notify: 1 callbacks suppressed [ 464.694063][T19557] loop2: detected capacity change from 0 to 256 [ 464.734362][T19557] FAT-fs (loop2): Directory bread(block 64) failed [ 464.740965][T19557] FAT-fs (loop2): Directory bread(block 65) failed [ 464.747735][T19557] FAT-fs (loop2): Directory bread(block 66) failed [ 464.752859][T19566] CPU: 0 UID: 0 PID: 19566 Comm: syz.4.3548 Tainted: G W syzkaller #0 PREEMPT(full) [ 464.752897][T19566] Tainted: [W]=WARN [ 464.752910][T19566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 464.752973][T19566] Call Trace: [ 464.752980][T19566] [ 464.752988][T19566] __dump_stack+0x1d/0x30 [ 464.753015][T19566] dump_stack_lvl+0x95/0xd0 [ 464.753070][T19566] dump_stack+0x15/0x1b [ 464.753091][T19566] should_fail_ex+0x263/0x280 [ 464.753115][T19566] should_failslab+0x8c/0xb0 [ 464.753136][T19566] kmem_cache_alloc_noprof+0x66/0x400 [ 464.753172][T19566] ? skb_clone+0x151/0x1f0 [ 464.753199][T19566] skb_clone+0x151/0x1f0 [ 464.753225][T19566] __netlink_deliver_tap+0x2c9/0x500 [ 464.753255][T19566] netlink_unicast+0x66b/0x690 [ 464.753341][T19566] netlink_sendmsg+0x5c8/0x6f0 [ 464.753369][T19566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.753408][T19566] ____sys_sendmsg+0x563/0x5b0 [ 464.753437][T19566] ___sys_sendmsg+0x195/0x1e0 [ 464.753471][T19566] __x64_sys_sendmsg+0xd4/0x160 [ 464.753572][T19566] x64_sys_call+0x194c/0x3020 [ 464.753620][T19566] do_syscall_64+0x12c/0x370 [ 464.753642][T19566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.753663][T19566] RIP: 0033:0x7fa1664dc799 [ 464.753680][T19566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.753734][T19566] RSP: 002b:00007fa164f37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.753754][T19566] RAX: ffffffffffffffda RBX: 00007fa166755fa0 RCX: 00007fa1664dc799 [ 464.753819][T19566] RDX: 0000000004008840 RSI: 0000200000000000 RDI: 0000000000000003 [ 464.753833][T19566] RBP: 00007fa164f37090 R08: 0000000000000000 R09: 0000000000000000 [ 464.753846][T19566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.753859][T19566] R13: 00007fa166756038 R14: 00007fa166755fa0 R15: 00007ffd06f83498 [ 464.753878][T19566] [ 464.753982][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3548'. [ 464.754296][T19557] FAT-fs (loop2): Directory bread(block 67) failed [ 464.769299][T19569] loop8: detected capacity change from 0 to 512 [ 464.779246][T19557] FAT-fs (loop2): Directory bread(block 68) failed [ 464.779266][T19557] FAT-fs (loop2): Directory bread(block 69) failed [ 464.779288][T19557] FAT-fs (loop2): Directory bread(block 70) failed [ 464.779305][T19557] FAT-fs (loop2): Directory bread(block 71) failed [ 464.779349][T19557] FAT-fs (loop2): Directory bread(block 72) failed [ 464.779367][T19557] FAT-fs (loop2): Directory bread(block 73) failed [ 464.819697][T19566] netlink: 'syz.4.3548': attribute type 30 has an invalid length. [ 464.974825][T19569] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 465.051485][T10427] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.060249][T10433] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.079763][T10433] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.093051][T19569] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 465.112980][T10433] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.117840][T19569] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3549: bg 0: block 248: padding at end of block bitmap is not set [ 465.136189][T19569] loop8: lost filesystem error report for type 5 error -117 [ 465.136417][T19569] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.3549: Failed to acquire dquot type 1 [ 465.143876][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 465.143907][ C1] EXT4-fs (loop8): last error at time 1772800551: ext4_validate_block_bitmap:441 [ 465.171309][T19569] loop8: lost filesystem error report for type 5 error -117 [ 465.171871][T19569] EXT4-fs (loop8): 1 truncate cleaned up [ 465.189254][T19569] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 465.318312][T19580] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.3549: Failed to acquire dquot type 1 [ 465.420666][T14470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 465.605756][T19603] loop8: detected capacity change from 0 to 1024 [ 465.645419][T19603] EXT4-fs: inline encryption not supported [ 465.722912][T19586] loop7: detected capacity change from 0 to 1024 [ 465.782191][T19603] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.801771][T19586] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 465.815868][T19601] loop2: detected capacity change from 0 to 2048 [ 465.949681][T19586] System zones: 0-1, 3-36 [ 466.083613][T19614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3559'. [ 466.102366][T19586] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.3550: bad orphan inode 134217728 [ 466.131464][T19586] loop7: lost filesystem error report for type 5 error -117 [ 466.141407][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 466.155249][ C1] EXT4-fs (loop7): initial error at time 1772803368: ext4_orphan_get:1417 [ 466.163797][ C1] EXT4-fs (loop7): last error at time 1772803368: ext4_orphan_get:1417 [ 466.198036][T19586] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.571535][T19614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.638183][T19614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.699496][T14470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.724137][T19623] xt_TCPMSS: Only works on TCP SYN packets [ 466.757239][T19625] loop8: detected capacity change from 0 to 512 [ 466.775301][T19625] FAT-fs (loop8): Directory bread(block 199916) failed [ 466.792712][T19625] FAT-fs (loop8): Directory bread(block 199917) failed [ 466.800059][T19625] FAT-fs (loop8): Directory bread(block 199918) failed [ 466.807860][T18663] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.818657][T19625] FAT-fs (loop8): Directory bread(block 199919) failed [ 466.842820][T19625] FAT-fs (loop8): Directory bread(block 199920) failed [ 466.870227][T19625] FAT-fs (loop8): Directory bread(block 199921) failed [ 466.877436][T19625] FAT-fs (loop8): Directory bread(block 199922) failed [ 466.884648][T19625] FAT-fs (loop8): Directory bread(block 199923) failed [ 466.920127][T19625] FAT-fs (loop8): FAT read failed (blocknr 128) [ 466.936977][T19632] __nla_validate_parse: 1 callbacks suppressed [ 466.936994][T19632] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3564'. [ 466.957695][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 466.957711][ T28] audit: type=1400 audit(1772803369.484:2353): avc: denied { mounton } for pid=19628 comm="syz.7.3562" path="/32/file0" dev="tmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 467.185101][ T28] audit: type=1326 audit(1772803369.714:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19641 comm="syz.8.3567" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff70856c799 code=0x0 [ 467.367260][T19646] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3569'. [ 467.395822][T19650] lo speed is unknown, defaulting to 1000 [ 467.402407][T19650] ip6_vti0 speed is unknown, defaulting to 1000 [ 467.457677][T19646] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 467.477184][T19650] xfrm0 speed is unknown, defaulting to 1000 [ 467.501117][T19654] loop7: detected capacity change from 0 to 512 [ 467.570967][T19654] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.622041][T19654] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.750737][T19646] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 467.791806][T19661] loop4: detected capacity change from 0 to 2048 [ 467.831427][T19646] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 2 with error 28 [ 467.854943][T19646] EXT4-fs (loop7): This should not happen!! Data will be lost [ 467.854943][T19646] [ 467.866338][T19646] EXT4-fs (loop7): Total free blocks count 0 [ 467.873102][T19646] EXT4-fs (loop7): Free/Dirty block details [ 467.880850][T19646] EXT4-fs (loop7): free_blocks=65280 [ 467.886357][T19646] EXT4-fs (loop7): dirty_blocks=31 [ 467.891694][T19646] EXT4-fs (loop7): Block reservation details [ 467.897840][T19646] EXT4-fs (loop7): i_reserved_data_blocks=31 [ 467.944901][ T28] audit: type=1400 audit(1772803370.474:2355): avc: denied { write } for pid=19666 comm="syz.4.3574" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 467.981670][T19646] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 468.058517][ T28] audit: type=1400 audit(1772803370.574:2356): avc: denied { map } for pid=19666 comm="syz.4.3574" path="socket:[58065]" dev="sockfs" ino=58065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 468.119128][T19674] loop4: detected capacity change from 0 to 512 [ 468.133069][T19674] FAT-fs (loop4): Directory bread(block 199916) failed [ 468.187599][T19674] FAT-fs (loop4): Directory bread(block 199917) failed [ 468.236332][T19674] FAT-fs (loop4): Directory bread(block 199918) failed [ 468.269370][T19674] FAT-fs (loop4): Directory bread(block 199919) failed [ 468.320038][T19674] FAT-fs (loop4): Directory bread(block 199920) failed [ 468.332952][T19674] FAT-fs (loop4): Directory bread(block 199921) failed [ 468.340177][T19674] FAT-fs (loop4): Directory bread(block 199922) failed [ 468.350329][T19674] FAT-fs (loop4): Directory bread(block 199923) failed [ 468.522337][T19686] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3581'. [ 468.726428][T19674] FAT-fs (loop4): FAT read failed (blocknr 128) [ 468.734685][T14902] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 468.780264][T14902] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 469.023385][T19689] loop7: detected capacity change from 0 to 4096 [ 469.053116][T19689] EXT4-fs: Ignoring removed mblk_io_submit option [ 469.091672][T19689] EXT4-fs: test_dummy_encryption option not supported [ 469.285093][T19696] lo speed is unknown, defaulting to 1000 [ 469.291210][T19696] ip6_vti0 speed is unknown, defaulting to 1000 [ 469.431865][T19705] EXT4-fs: inline encryption not supported [ 469.466882][T19696] xfrm0 speed is unknown, defaulting to 1000 [ 469.541960][T19711] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 469.553755][T19711] EXT4-fs (loop7): group descriptors corrupted! [ 469.742618][T19705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.836410][T19724] set_capacity_and_notify: 2 callbacks suppressed [ 469.837191][T19724] loop7: detected capacity change from 0 to 512 [ 469.968563][T19724] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 470.026844][T19727] loop6: detected capacity change from 0 to 512 [ 470.034750][T19727] FAT-fs (loop6): Directory bread(block 199916) failed [ 470.042903][T19727] FAT-fs (loop6): Directory bread(block 199917) failed [ 470.050833][T19724] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 470.067474][T19727] FAT-fs (loop6): Directory bread(block 199918) failed [ 470.083578][T19727] FAT-fs (loop6): Directory bread(block 199919) failed [ 470.093200][T19724] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 470.121361][T19727] FAT-fs (loop6): Directory bread(block 199920) failed [ 470.352007][T19724] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.3593: Failed to acquire dquot type 1 [ 470.383709][T19727] FAT-fs (loop6): Directory bread(block 199921) failed [ 470.390847][T19727] FAT-fs (loop6): Directory bread(block 199922) failed [ 470.421400][T19724] loop7: lost filesystem error report for type 5 error -5 [ 470.431386][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 470.445215][ C1] EXT4-fs (loop7): last error at time 1772803372: ext4_acquire_dquot:7001 [ 470.454356][T19724] EXT4-fs (loop7): 1 truncate cleaned up [ 470.460424][T19724] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 470.477795][T19727] FAT-fs (loop6): Directory bread(block 199923) failed [ 470.558899][T18663] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 470.575582][T19727] FAT-fs (loop6): FAT read failed (blocknr 128) [ 470.619057][T19735] loop8: detected capacity change from 0 to 4096 [ 470.668814][T19735] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 470.678050][T16468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.792311][T19740] netlink: 'syz.7.3596': attribute type 1 has an invalid length. [ 470.800496][T19740] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19740 comm=syz.7.3596 [ 470.813811][T19740] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3596'. [ 470.973973][T19754] netlink: 'syz.7.3603': attribute type 32 has an invalid length. [ 471.107098][T19756] loop7: detected capacity change from 0 to 4096 [ 471.132324][T19756] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 471.327537][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3605'. [ 471.340707][T19763] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 471.353186][T19763] loop2: detected capacity change from 0 to 512 [ 471.419560][T19764] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3604'. [ 471.811136][T19763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.859175][T19763] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.872627][T19771] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3606'. [ 471.953495][T19763] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 471.990975][T19773] loop7: detected capacity change from 0 to 4096 [ 471.995600][T19763] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 2 with error 28 [ 472.009686][T19763] EXT4-fs (loop2): This should not happen!! Data will be lost [ 472.009686][T19763] [ 472.020380][T19763] EXT4-fs (loop2): Total free blocks count 0 [ 472.027501][T19763] EXT4-fs (loop2): Free/Dirty block details [ 472.037646][T19773] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 472.066712][T19763] EXT4-fs (loop2): free_blocks=65280 [ 472.084570][T19763] EXT4-fs (loop2): dirty_blocks=31 [ 472.117143][T19763] EXT4-fs (loop2): Block reservation details [ 472.157417][T19763] EXT4-fs (loop2): i_reserved_data_blocks=31 [ 472.164807][T19763] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 472.336091][T10434] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.362084][T19799] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3615'. [ 472.395606][T19783] lo speed is unknown, defaulting to 1000 [ 472.403685][T19799] vlan0: entered promiscuous mode [ 472.421790][T19783] ip6_vti0 speed is unknown, defaulting to 1000 [ 472.513997][T19783] xfrm0 speed is unknown, defaulting to 1000 [ 472.576392][T19803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3617'. [ 472.665687][T19805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3619'. [ 472.700286][T19805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3619'. [ 472.731052][T19807] loop2: detected capacity change from 0 to 4096 [ 472.738709][T14899] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 472.748201][T14899] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 472.748928][T10434] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.758638][T19807] EXT4-fs: Ignoring removed mblk_io_submit option [ 472.781803][T19805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3619'. [ 472.801626][T19805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3619'. [ 472.814029][T19807] EXT4-fs: test_dummy_encryption option not supported [ 472.869764][T19805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3619'. [ 472.881464][T19805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3619'. [ 472.891522][T10434] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.969118][T19817] loop2: detected capacity change from 0 to 512 [ 472.971434][T10434] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.009207][T19783] chnl_net:caif_netlink_parms(): no params data found [ 473.028391][T19817] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 473.050501][T19817] EXT4-fs (loop2): orphan cleanup on readonly fs [ 473.069753][T19817] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.3621: inode #15: comm syz.2.3621: iget: illegal inode # [ 473.093333][T19817] loop2: lost filesystem error report for type 5 error -117 [ 473.093517][T19817] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3621: couldn't read orphan inode 15 (err -117) [ 473.113613][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 473.113635][ C1] EXT4-fs (loop2): initial error at time 1772803375: ext4_orphan_get:1391 [ 473.113657][ C1] EXT4-fs (loop2): last error at time 1772803375: ext4_orphan_get:1391 [ 473.133943][T10434] bridge_slave_1: left allmulticast mode [ 473.151432][T10434] bridge_slave_1: left promiscuous mode [ 473.157230][T10434] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.180723][T19817] loop2: lost filesystem error report for type 5 error -117 [ 473.184543][T19817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 473.214285][T10434] bridge_slave_0: left allmulticast mode [ 473.220246][T10434] bridge_slave_0: left promiscuous mode [ 473.226180][T10434] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.262034][T16630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.294536][T19831] loop2: detected capacity change from 0 to 7 [ 473.300924][T19831] loop2: [ 473.464444][T19839] loop2: detected capacity change from 0 to 4096 [ 473.491488][T19839] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 473.551975][T10434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.573166][T10434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.592718][T10434] bond0 (unregistering): Released all slaves [ 473.623687][T19783] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.643774][T19783] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.669674][T19849] FAULT_INJECTION: forcing a failure. [ 473.669674][T19849] name failslab, interval 1, probability 0, space 0, times 0 [ 473.687888][T19783] bridge_slave_0: entered allmulticast mode [ 473.695507][T19783] bridge_slave_0: entered promiscuous mode [ 473.702670][T19783] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.709725][T19783] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.717279][T19783] bridge_slave_1: entered allmulticast mode [ 473.724251][T19783] bridge_slave_1: entered promiscuous mode [ 473.731032][T19849] CPU: 0 UID: 0 PID: 19849 Comm: syz.6.3632 Tainted: G W syzkaller #0 PREEMPT(full) [ 473.731065][T19849] Tainted: [W]=WARN [ 473.731073][T19849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.731151][T19849] Call Trace: [ 473.731158][T19849] [ 473.731166][T19849] __dump_stack+0x1d/0x30 [ 473.731192][T19849] dump_stack_lvl+0x95/0xd0 [ 473.731297][T19849] dump_stack+0x15/0x1b [ 473.731321][T19849] should_fail_ex+0x263/0x280 [ 473.731342][T19849] ? vga_arb_read+0x4f/0x3d0 [ 473.731393][T19849] should_failslab+0x8c/0xb0 [ 473.731415][T19849] __kmalloc_cache_noprof+0x5f/0x410 [ 473.731441][T19849] vga_arb_read+0x4f/0x3d0 [ 473.731465][T19849] ? __pfx_vga_arb_read+0x10/0x10 [ 473.731516][T19849] vfs_readv+0x432/0x6e0 [ 473.731543][T19849] __x64_sys_preadv+0xfd/0x1c0 [ 473.731562][T19849] x64_sys_call+0x2915/0x3020 [ 473.731587][T19849] do_syscall_64+0x12c/0x370 [ 473.731608][T19849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.731672][T19849] RIP: 0033:0x7fe80f43c799 [ 473.731689][T19849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.731705][T19849] RSP: 002b:00007fe80de8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 473.731765][T19849] RAX: ffffffffffffffda RBX: 00007fe80f6b5fa0 RCX: 00007fe80f43c799 [ 473.731779][T19849] RDX: 0000000000000001 RSI: 0000200000007dc0 RDI: 0000000000000003 [ 473.731791][T19849] RBP: 00007fe80de8f090 R08: 0000000000000001 R09: 0000000000000000 [ 473.731804][T19849] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 473.731816][T19849] R13: 00007fe80f6b6038 R14: 00007fe80f6b5fa0 R15: 00007ffefe6d6c98 [ 473.731836][T19849] [ 473.856361][T19827] lo speed is unknown, defaulting to 1000 [ 473.880836][T19783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.927249][T19859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3629'. [ 474.093934][ T3406] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 474.129988][ T3406] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 474.359848][T19783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.380181][T19783] team0: Port device team_slave_0 added [ 474.387070][T19783] team0: Port device team_slave_1 added [ 474.421566][T19827] ip6_vti0 speed is unknown, defaulting to 1000 [ 474.479688][T19783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.490135][T19783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.529761][T19783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.541571][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.559704][T19783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.565061][T19861] EXT4-fs: Ignoring removed mblk_io_submit option [ 474.573538][T19783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.599664][T19783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.614483][T19827] xfrm0 speed is unknown, defaulting to 1000 [ 474.621835][T19861] EXT4-fs: test_dummy_encryption option not supported [ 474.681435][T19783] hsr_slave_0: entered promiscuous mode [ 474.694550][T19783] hsr_slave_1: entered promiscuous mode [ 474.700751][T19783] debugfs: 'hsr0' already exists in 'hsr' [ 474.706692][T19783] Cannot create hsr debugfs directory [ 474.712557][T13589] loop2: p4 < > [ 474.719021][T19871] loop2: p4 < > [ 474.727701][ T28] audit: type=1400 audit(1772803377.254:2357): avc: denied { write } for pid=19870 comm="syz.2.3635" name="loop2p4" dev="devtmpfs" ino=3053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 474.868643][T10434] hsr_slave_0: left promiscuous mode [ 474.876760][T10434] hsr_slave_1: left promiscuous mode [ 474.884284][T10434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.901416][T10434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.911913][T10434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.919298][T10434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.936188][T10434] veth1_macvtap: left promiscuous mode [ 474.951387][T10434] veth0_macvtap: left promiscuous mode [ 474.957210][T10434] veth1_vlan: left promiscuous mode [ 474.975454][T10434] veth0_vlan: left promiscuous mode [ 475.121811][T19884] netlink: 'syz.6.3636': attribute type 39 has an invalid length. [ 475.137748][T10434] team0 (unregistering): Port device team_slave_1 removed [ 475.148059][T10434] team0 (unregistering): Port device team_slave_0 removed [ 475.257466][T19881] bond1: entered promiscuous mode [ 475.271538][T19893] set_capacity_and_notify: 3 callbacks suppressed [ 475.271553][T19893] loop4: detected capacity change from 0 to 512 [ 475.306642][T19893] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 475.337171][T19887] syzkaller0: entered promiscuous mode [ 475.343749][T19887] syzkaller0: entered allmulticast mode [ 475.350637][T19893] EXT4-fs (loop4): 1 truncate cleaned up [ 475.356964][T19893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.472796][T16468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.484747][T19911] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3639'. [ 475.516934][T19915] loop2: detected capacity change from 0 to 512 [ 475.546238][T19911] ip6gre1: entered promiscuous mode [ 475.577312][T19918] loop4: detected capacity change from 0 to 512 [ 475.584262][T19915] EXT4-fs: Ignoring removed nomblk_io_submit option [ 475.591084][T19911] ip6gre1: entered allmulticast mode [ 475.623820][T19915] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.3641: corrupted inode contents [ 475.641171][T19827] chnl_net:caif_netlink_parms(): no params data found [ 475.648134][T19915] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 475.649651][T19915] EXT4-fs (loop2): Remounting filesystem read-only [ 475.658860][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 475.658879][ C0] EXT4-fs (loop2): initial error at time 1772803378: ext4_do_update_inode:5569: inode 15 [ 475.658918][ C0] EXT4-fs (loop2): last error at time 1772803378: ext4_do_update_inode:5569: inode 15 [ 475.691615][T19915] EXT4-fs (loop2): 1 orphan inode deleted [ 475.694403][T19918] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 475.698273][T19915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.735632][T19918] System zones: 0-2, 18-18, 34-34 [ 475.742325][T19918] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 475.763403][T19918] EXT4-fs (loop4): Remounting filesystem read-only [ 475.780399][T19918] EXT4-fs (loop4): 1 truncate cleaned up [ 475.786114][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 475.786144][ C1] EXT4-fs (loop4): initial error at time 1772803378: ext4_mb_generate_buddy:1315 [ 475.786172][ C1] EXT4-fs (loop4): last error at time 1772803378: ext4_mb_generate_buddy:1315 [ 475.792854][T10409] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 475.816686][T19827] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.826759][T19918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.831750][T19827] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.850375][T19827] bridge_slave_0: entered allmulticast mode [ 475.857005][T19827] bridge_slave_0: entered promiscuous mode [ 475.864089][T19783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 475.871848][T10409] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 475.871925][T16630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.882636][T10409] Quota error (device loop4): write_blk: dquota write failed [ 475.901086][T19783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 475.908089][T10409] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 475.908293][T19918] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.918164][T10409] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 475.939378][T19827] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.946748][T19827] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.954188][T19918] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.967507][T19827] bridge_slave_1: entered allmulticast mode [ 475.973967][T10409] Quota error (device loop4): write_blk: dquota write failed [ 475.982246][T19827] bridge_slave_1: entered promiscuous mode [ 475.991564][T10409] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 476.009983][T19827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.019089][T10409] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 476.028823][T19783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 476.036454][T10409] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 476.046615][T10409] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 476.067333][T19942] loop2: detected capacity change from 0 to 1024 [ 476.069193][T19827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.084018][T10409] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 476.097368][T19942] EXT4-fs: inline encryption not supported [ 476.108412][T19783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 476.127985][T19942] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 476.138395][T19827] team0: Port device team_slave_0 added [ 476.158224][T19827] team0: Port device team_slave_1 added [ 476.165967][ T3486] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 476.176412][ T3486] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 476.200899][T19942] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 2: comm syz.2.3643: lblock 2 mapped to illegal pblock 2 (length 1) [ 476.229276][T19942] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 476.229394][T19942] EXT4-fs (loop2): Remounting filesystem read-only [ 476.238559][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 476.238581][ C1] EXT4-fs (loop2): initial error at time 1772803378: ext4_map_blocks:776: inode 3: block 2 [ 476.238632][ C1] EXT4-fs (loop2): last error at time 1772803378: ext4_map_blocks:776: inode 3: block 2 [ 476.245563][T19961] loop4: detected capacity change from 0 to 1024 [ 476.251878][T19942] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 476.266428][T19827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.271697][T19942] EXT4-fs (loop2): 1 orphan inode deleted [ 476.282357][T19827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.288126][T19942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.302770][T19827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.348742][T19961] EXT4-fs: Ignoring removed bh option [ 476.357539][T19947] loop6: detected capacity change from 0 to 4096 [ 476.368859][T19947] EXT4-fs: Ignoring removed mblk_io_submit option [ 476.371063][T19827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.381626][T19947] EXT4-fs: test_dummy_encryption option not supported [ 476.382975][T19942] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.390284][T19961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.402606][T19827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.436141][T19827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.483282][T19961] EXT4-fs error (device loop4): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.4.3645: path /127/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 476.508785][T19961] EXT4-fs (loop4): Remounting filesystem read-only [ 476.549069][T16468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.558849][T19975] loop2: detected capacity change from 0 to 1024 [ 476.567094][T19975] EXT4-fs: inline encryption not supported [ 476.593182][T19975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.609096][T19827] hsr_slave_0: entered promiscuous mode [ 476.616575][T19827] hsr_slave_1: entered promiscuous mode [ 476.623014][T19827] debugfs: 'hsr0' already exists in 'hsr' [ 476.641108][T19827] Cannot create hsr debugfs directory [ 476.674490][T19783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.684588][ T10] IPVS: starting estimator thread 0... [ 476.686320][T19981] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 476.731769][T19783] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.778833][T10409] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.786065][T10409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.794831][T19985] IPVS: using max 2544 ests per chain, 127200 per kthread [ 476.811749][T10409] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.818915][T10409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.883742][T19783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 476.897080][T19783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 477.257195][T19783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.674592][T20088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3649'. [ 477.716310][T19783] veth0_vlan: entered promiscuous mode [ 477.733575][T19783] veth1_vlan: entered promiscuous mode [ 477.754765][T20093] loop4: detected capacity change from 0 to 512 [ 477.789750][T19783] veth0_macvtap: entered promiscuous mode [ 477.813139][T19783] veth1_macvtap: entered promiscuous mode [ 477.834956][T20093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.835720][T19827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 477.863134][T19783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.871566][T20093] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.883769][T19783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.891075][T19827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 477.898795][T16630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.928857][T19827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 477.936170][T20088] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 477.961614][T20088] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 2 with error 28 [ 477.980171][T20088] EXT4-fs (loop4): This should not happen!! Data will be lost [ 477.980171][T20088] [ 477.993875][T19827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 478.003007][T20088] EXT4-fs (loop4): Total free blocks count 0 [ 478.009064][T20088] EXT4-fs (loop4): Free/Dirty block details [ 478.016861][T20088] EXT4-fs (loop4): free_blocks=65280 [ 478.023584][T10426] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.036013][T10426] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.045083][T20088] EXT4-fs (loop4): dirty_blocks=31 [ 478.050290][T20088] EXT4-fs (loop4): Block reservation details [ 478.056661][T20088] EXT4-fs (loop4): i_reserved_data_blocks=31 [ 478.068338][T20088] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 478.082205][T10426] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.101114][T10426] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.364851][T19827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.432796][T20137] loop2: detected capacity change from 0 to 1764 [ 478.440119][T20137] iso9660: Unknown parameter 'OZ#¤Òá¢ÇuÔ W£ƒ0x0000000000000000' [ 478.526265][ T3374] IPVS: starting estimator thread 0... [ 478.637281][T19827] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.750782][T10429] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.757897][T10429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.765773][T20141] IPVS: using max 2496 ests per chain, 124800 per kthread [ 479.789521][T10430] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.796632][T10430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.873271][T19827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 480.042895][T14899] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 480.075860][T14899] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 480.114685][T20175] loop4: detected capacity change from 0 to 4096 [ 480.149540][T20175] EXT4-fs: Ignoring removed mblk_io_submit option [ 480.166527][T20175] EXT4-fs: test_dummy_encryption option not supported [ 480.171948][T19827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.218579][T20191] lo speed is unknown, defaulting to 1000 [ 480.241971][T20191] ip6_vti0 speed is unknown, defaulting to 1000 [ 480.337081][T20200] loop4: detected capacity change from 0 to 4096 [ 480.372475][T20200] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 480.438152][T19827] veth0_vlan: entered promiscuous mode [ 480.542271][T19827] veth1_vlan: entered promiscuous mode [ 480.556861][T19827] veth0_macvtap: entered promiscuous mode [ 480.564568][T19827] veth1_macvtap: entered promiscuous mode [ 480.591369][T20191] xfrm0 speed is unknown, defaulting to 1000 [ 480.603104][T19827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.686672][T20215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3661'. [ 480.804674][T19827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.887211][T10430] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.004676][T10429] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.030570][T10429] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.039447][T10429] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.051004][T10429] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.065080][T10430] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.085635][T20195] loop0: detected capacity change from 0 to 1024 [ 481.169331][T10430] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.188657][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 481.188672][ T28] audit: type=1400 audit(1772803383.714:2358): avc: denied { read } for pid=20190 comm="syz.0.3660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 481.263342][T10430] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.447141][T10430] bridge_slave_1: left allmulticast mode [ 481.491423][T10430] bridge_slave_1: left promiscuous mode [ 481.497119][T10430] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.519200][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3667'. [ 481.539442][T20263] netlink: 'syz.3.3667': attribute type 30 has an invalid length. [ 481.553936][T10430] bridge_slave_0: left allmulticast mode [ 481.571554][T10430] bridge_slave_0: left promiscuous mode [ 481.577320][T10430] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.706409][T10429] smc: removing ib device syz1 [ 481.735733][T20261] loop0: detected capacity change from 0 to 32768 [ 481.788443][T20261] loop0: p1 p3 < > [ 481.810209][T10430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.850180][ T3486] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 481.880792][T13588] udevd[13588]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 481.901924][T13589] udevd[13589]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 481.912425][T10430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.924985][T10430] bond0 (unregistering): Released all slaves [ 481.942397][T20277] loop4: detected capacity change from 0 to 4096 [ 481.945338][ T3486] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 481.964684][T20277] EXT4-fs: Ignoring removed mblk_io_submit option [ 481.993479][T10438] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.008272][T20277] EXT4-fs: test_dummy_encryption option not supported [ 482.011267][T10438] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.031534][ T35] xfrm0 speed is unknown, defaulting to 1000 [ 482.040035][T20227] lo speed is unknown, defaulting to 1000 [ 482.057081][ T35] syz1: Port: 1 Link DOWN [ 482.083242][T10438] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.110260][T10440] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.132053][T20227] ip6_vti0 speed is unknown, defaulting to 1000 [ 482.381584][T20301] loop3: detected capacity change from 0 to 1024 [ 482.401845][T20301] EXT4-fs: inline encryption not supported [ 482.461021][T20301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.511066][T20315] loop6: detected capacity change from 0 to 512 [ 482.533645][T20315] EXT4-fs (loop6): unsupported inode size: 143 [ 482.559597][T20315] EXT4-fs (loop6): blocksize: 1024 [ 482.658630][T19827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.697047][T20333] netlink: 'syz.0.3678': attribute type 1 has an invalid length. [ 482.737959][T20227] chnl_net:caif_netlink_parms(): no params data found [ 482.815560][T20337] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 482.815796][T14899] IPVS: starting estimator thread 0... [ 482.848534][T20348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3682'. [ 482.886798][T20348] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 482.916165][T20350] IPVS: using max 2688 ests per chain, 134400 per kthread [ 482.947762][T20358] loop0: detected capacity change from 0 to 512 [ 482.995273][T10430] hsr_slave_0: left promiscuous mode [ 483.044694][T20358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.065139][T10430] hsr_slave_1: left promiscuous mode [ 483.070819][T10430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.080665][T10430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.088793][T10430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.099431][T10430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.108758][T20358] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.124558][T10430] veth1_macvtap: left promiscuous mode [ 483.125082][T20348] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 483.130075][T10430] veth0_macvtap: left promiscuous mode [ 483.130129][T10430] veth1_vlan: left promiscuous mode [ 483.147039][T20348] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 2 with error 28 [ 483.168321][T20348] EXT4-fs (loop0): This should not happen!! Data will be lost [ 483.168321][T20348] [ 483.220586][T20348] EXT4-fs (loop0): Total free blocks count 0 [ 483.235449][T20348] EXT4-fs (loop0): Free/Dirty block details [ 483.255023][T20348] EXT4-fs (loop0): free_blocks=65280 [ 483.261543][T20348] EXT4-fs (loop0): dirty_blocks=31 [ 483.278542][T10430] team0 (unregistering): Port device team_slave_1 removed [ 483.286271][T20348] EXT4-fs (loop0): Block reservation details [ 483.295249][T20348] EXT4-fs (loop0): i_reserved_data_blocks=31 [ 483.303880][T10430] team0 (unregistering): Port device team_slave_0 removed [ 483.333747][T20348] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 483.384750][T20362] lo speed is unknown, defaulting to 1000 [ 483.392142][T20372] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 483.413035][T20362] ip6_vti0 speed is unknown, defaulting to 1000 [ 483.528403][T20227] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.539949][T20409] FAULT_INJECTION: forcing a failure. [ 483.539949][T20409] name failslab, interval 1, probability 0, space 0, times 0 [ 483.545513][T20227] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.552968][T20409] CPU: 0 UID: 0 PID: 20409 Comm: syz.6.3689 Tainted: G W syzkaller #0 PREEMPT(full) [ 483.553063][T20409] Tainted: [W]=WARN [ 483.553069][T20409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 483.553081][T20409] Call Trace: [ 483.553089][T20409] [ 483.553096][T20409] __dump_stack+0x1d/0x30 [ 483.553136][T20409] dump_stack_lvl+0x95/0xd0 [ 483.553158][T20409] dump_stack+0x15/0x1b [ 483.553179][T20409] should_fail_ex+0x263/0x280 [ 483.553211][T20409] should_failslab+0x8c/0xb0 [ 483.553233][T20409] kmem_cache_alloc_noprof+0x66/0x400 [ 483.553330][T20409] ? skb_clone+0x151/0x1f0 [ 483.553357][T20409] skb_clone+0x151/0x1f0 [ 483.553383][T20409] __netlink_deliver_tap+0x2c9/0x500 [ 483.553528][T20409] netlink_unicast+0x66b/0x690 [ 483.553554][T20409] netlink_sendmsg+0x5c8/0x6f0 [ 483.553582][T20409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.553610][T20409] ____sys_sendmsg+0x563/0x5b0 [ 483.553720][T20409] ___sys_sendmsg+0x195/0x1e0 [ 483.553754][T20409] __x64_sys_sendmsg+0xd4/0x160 [ 483.553796][T20409] x64_sys_call+0x194c/0x3020 [ 483.553822][T20409] do_syscall_64+0x12c/0x370 [ 483.553842][T20409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.553923][T20409] RIP: 0033:0x7fe80f43c799 [ 483.553938][T20409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.553956][T20409] RSP: 002b:00007fe80de8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.553976][T20409] RAX: ffffffffffffffda RBX: 00007fe80f6b5fa0 RCX: 00007fe80f43c799 [ 483.553991][T20409] RDX: 0000000004008840 RSI: 0000200000000000 RDI: 0000000000000003 [ 483.554029][T20409] RBP: 00007fe80de8f090 R08: 0000000000000000 R09: 0000000000000000 [ 483.554042][T20409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.554054][T20409] R13: 00007fe80f6b6038 R14: 00007fe80f6b5fa0 R15: 00007ffefe6d6c98 [ 483.554095][T20409] [ 483.554121][T20409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3689'. [ 483.566071][T20227] bridge_slave_0: entered allmulticast mode [ 483.571710][T20409] netlink: 'syz.6.3689': attribute type 30 has an invalid length. [ 483.576088][T20227] bridge_slave_0: entered promiscuous mode [ 483.783515][T20227] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.790635][T20227] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.797850][T20227] bridge_slave_1: entered allmulticast mode [ 483.804243][T20227] bridge_slave_1: entered promiscuous mode [ 483.828251][T10426] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.847367][T10426] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.887872][T20227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.925443][T20426] netlink: 'syz.4.3691': attribute type 21 has an invalid length. [ 483.933421][T20426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3691'. [ 483.942686][T10426] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.962170][ T3374] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 483.975132][ T3374] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 483.984893][T10426] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.022253][T20424] loop6: detected capacity change from 0 to 4096 [ 484.024178][T20227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.040292][T20424] EXT4-fs: Ignoring removed mblk_io_submit option [ 484.068110][T20424] EXT4-fs: test_dummy_encryption option not supported [ 484.100897][T10430] IPVS: stop unused estimator thread 0... [ 484.115354][T20227] team0: Port device team_slave_0 added [ 484.146547][T20227] team0: Port device team_slave_1 added [ 484.183333][T20227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.190296][T20227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.272453][T20453] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3695'. [ 484.281351][T20227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.302371][T20227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.321123][T20458] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 484.348980][T20227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.397594][T20227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.564268][T20227] hsr_slave_0: entered promiscuous mode [ 484.572752][T20489] IPv6: NLM_F_CREATE should be specified when creating new route [ 484.594159][T20227] hsr_slave_1: entered promiscuous mode [ 484.622018][T20227] debugfs: 'hsr0' already exists in 'hsr' [ 484.648126][T20227] Cannot create hsr debugfs directory [ 484.721712][T20500] loop6: detected capacity change from 0 to 4096 [ 484.778782][T20500] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 484.887129][T20500] loop6: detected capacity change from 0 to 256 [ 485.165977][T20537] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3698'. [ 485.608684][T20540] loop4: detected capacity change from 0 to 4096 [ 485.619350][ T28] audit: type=1400 audit(1772803388.144:2359): avc: denied { getopt } for pid=20561 comm="syz.6.3700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 485.668063][T20567] loop3: detected capacity change from 0 to 512 [ 485.677914][T20540] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 485.691740][T20567] EXT4-fs: dax option not supported [ 485.747164][T20567] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3701'. [ 485.773025][T20540] loop4: detected capacity change from 0 to 256 [ 485.944569][T20227] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 485.998477][T20227] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 486.072879][T20607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3699'. [ 486.385480][T20585] loop3: detected capacity change from 0 to 4096 [ 486.483019][T20227] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 486.523629][T20227] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 486.546395][T20581] loop6: detected capacity change from 0 to 2048 [ 486.585516][T20585] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 486.637749][ T28] audit: type=1400 audit(1772803389.154:2360): avc: denied { map } for pid=20616 comm="syz.4.3704" path="socket:[61499]" dev="sockfs" ino=61499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 486.733461][T20585] loop3: detected capacity change from 0 to 256 [ 486.744624][T20227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.794558][T20227] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.913924][T10432] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.921102][T10432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.998139][T20227] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 487.039482][T20657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3703'. [ 487.054316][T20227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 487.326067][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.333245][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.352476][T20662] xt_TCPMSS: Only works on TCP SYN packets [ 487.568279][ T3515] IPVS: starting estimator thread 0... [ 487.579585][T20227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.587239][T20669] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 487.654830][T20681] loop4: detected capacity change from 0 to 4096 [ 487.678739][T20685] IPVS: using max 2736 ests per chain, 136800 per kthread [ 487.711663][T20681] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 487.954555][T20227] veth0_vlan: entered promiscuous mode [ 488.023687][T20732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3711'. [ 488.390271][T20227] veth1_vlan: entered promiscuous mode [ 488.472810][T20741] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3718'. [ 488.529152][T20227] veth0_macvtap: entered promiscuous mode [ 488.602269][T20781] loop4: detected capacity change from 0 to 512 [ 488.615997][T20783] loop6: detected capacity change from 0 to 512 [ 488.638941][T20227] veth1_macvtap: entered promiscuous mode [ 488.646381][T20781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.685851][T20783] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.713755][T20791] loop3: detected capacity change from 0 to 1024 [ 488.716214][T20227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.740670][T20227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.748591][T20783] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.750040][T20791] EXT4-fs: Ignoring removed bh option [ 488.768012][T16468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.785498][T20739] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 488.835458][T10406] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.847053][T20791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 488.861659][T10403] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.870522][T10428] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.895264][T20739] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 2 with error 28 [ 488.932909][ T28] audit: type=1400 audit(1772803391.464:2361): avc: denied { map } for pid=20790 comm="syz.3.3721" path="/12/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 488.935106][T10428] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.975698][T20739] EXT4-fs (loop6): This should not happen!! Data will be lost [ 488.975698][T20739] [ 489.001162][T19827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 489.015195][T20739] EXT4-fs (loop6): Total free blocks count 0 [ 489.021213][T20739] EXT4-fs (loop6): Free/Dirty block details [ 489.030656][T20739] EXT4-fs (loop6): free_blocks=65280 [ 489.073660][T20739] EXT4-fs (loop6): dirty_blocks=31 [ 489.078920][T20739] EXT4-fs (loop6): Block reservation details [ 489.089808][T20812] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 489.104429][T20812] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 489.131397][T20739] EXT4-fs (loop6): i_reserved_data_blocks=31 [ 489.157840][T20739] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 489.219677][T20828] netlink: 'syz.3.3724': attribute type 4 has an invalid length. [ 489.303399][T20816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3662'. [ 489.360421][T20826] FAT-fs (loop0): Directory bread(block 199916) failed [ 489.392628][T20816] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 489.419964][T20826] FAT-fs (loop0): Directory bread(block 199917) failed [ 489.453897][T20826] FAT-fs (loop0): Directory bread(block 199918) failed [ 489.465287][T20829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.480918][T20826] FAT-fs (loop0): Directory bread(block 199919) failed [ 489.532392][T20826] FAT-fs (loop0): Directory bread(block 199920) failed [ 489.539720][T20826] FAT-fs (loop0): Directory bread(block 199921) failed [ 489.567411][T20829] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.588449][T20826] FAT-fs (loop0): Directory bread(block 199922) failed [ 489.642137][T20826] FAT-fs (loop0): Directory bread(block 199923) failed [ 490.217396][T20826] FAT-fs (loop0): FAT read failed (blocknr 128) [ 490.685811][ T28] audit: type=1400 audit(1772803393.214:2362): avc: denied { listen } for pid=20871 comm="syz.6.3729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 490.805534][T20227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.856015][T20884] set_capacity_and_notify: 3 callbacks suppressed [ 490.856030][T20884] loop6: detected capacity change from 0 to 512 [ 490.879658][T20886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3733'. [ 490.956955][T20884] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 490.989148][T20884] EXT4-fs (loop6): 1 truncate cleaned up [ 491.015133][T20884] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.119750][T18513] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.313190][T20917] FAULT_INJECTION: forcing a failure. [ 491.313190][T20917] name failslab, interval 1, probability 0, space 0, times 0 [ 491.401726][T20917] CPU: 0 UID: 0 PID: 20917 Comm: syz.6.3735 Tainted: G W syzkaller #0 PREEMPT(full) [ 491.401769][T20917] Tainted: [W]=WARN [ 491.401853][T20917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.401865][T20917] Call Trace: [ 491.401871][T20917] [ 491.401879][T20917] __dump_stack+0x1d/0x30 [ 491.401907][T20917] dump_stack_lvl+0x95/0xd0 [ 491.401951][T20917] dump_stack+0x15/0x1b [ 491.402061][T20917] should_fail_ex+0x263/0x280 [ 491.402086][T20917] ? alloc_super+0x3d/0x580 [ 491.402113][T20917] should_failslab+0x8c/0xb0 [ 491.402131][T20917] __kmalloc_cache_noprof+0x5f/0x410 [ 491.402218][T20917] alloc_super+0x3d/0x580 [ 491.402242][T20917] sget_fc+0x24e/0x6e0 [ 491.402266][T20917] ? __pfx_set_anon_super_fc+0x10/0x10 [ 491.402345][T20917] ? __pfx_shmem_fill_super+0x10/0x10 [ 491.402372][T20917] get_tree_nodev+0x2a/0x100 [ 491.402441][T20917] shmem_get_tree+0x1c/0x30 [ 491.402466][T20917] vfs_get_tree+0x57/0x1d0 [ 491.402485][T20917] do_new_mount+0x288/0x8d0 [ 491.402508][T20917] ? security_capable+0x7b/0x90 [ 491.402596][T20917] path_mount+0x4d0/0xbc0 [ 491.402620][T20917] __se_sys_mount+0x28c/0x2e0 [ 491.402643][T20917] ? fput+0x8f/0xc0 [ 491.402669][T20917] __x64_sys_mount+0x67/0x80 [ 491.402762][T20917] x64_sys_call+0x2d61/0x3020 [ 491.402787][T20917] do_syscall_64+0x12c/0x370 [ 491.402854][T20917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.402878][T20917] RIP: 0033:0x7fe80f43c799 [ 491.402893][T20917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.402957][T20917] RSP: 002b:00007fe80de8f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 491.402979][T20917] RAX: ffffffffffffffda RBX: 00007fe80f6b5fa0 RCX: 00007fe80f43c799 [ 491.402995][T20917] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 491.403010][T20917] RBP: 00007fe80de8f090 R08: 00002000000000c0 R09: 0000000000000000 [ 491.403025][T20917] R10: 0000000000004480 R11: 0000000000000246 R12: 0000000000000002 [ 491.403037][T20917] R13: 00007fe80f6b6038 R14: 00007fe80f6b5fa0 R15: 00007ffefe6d6c98 [ 491.403062][T20917] [ 491.676816][T20924] loop4: detected capacity change from 0 to 4096 [ 491.721725][T20924] EXT4-fs: Ignoring removed mblk_io_submit option [ 491.729365][T20924] EXT4-fs: test_dummy_encryption option not supported [ 491.737587][T20925] loop0: detected capacity change from 0 to 1024 [ 491.793441][T20946] loop2: detected capacity change from 0 to 1024 [ 491.804579][T20925] EXT4-fs: dax option not supported [ 491.830145][T20946] EXT4-fs: inline encryption not supported [ 491.864828][ T28] audit: type=1400 audit(1772803394.394:2363): avc: denied { append } for pid=20953 comm="syz.3.3745" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 491.866656][T20946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.889379][T20950] lo speed is unknown, defaulting to 1000 [ 491.936525][T20950] ip6_vti0 speed is unknown, defaulting to 1000 [ 492.041193][T20962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3747'. [ 492.051986][T20925] loop0: detected capacity change from 0 to 512 [ 492.059673][T20964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3746'. [ 492.123208][T20925] EXT4-fs (loop0): 1 orphan inode deleted [ 492.135178][T20967] FAULT_INJECTION: forcing a failure. [ 492.135178][T20967] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 492.148484][T20967] CPU: 0 UID: 0 PID: 20967 Comm: syz.2.3744 Tainted: G W syzkaller #0 PREEMPT(full) [ 492.148519][T20967] Tainted: [W]=WARN [ 492.148527][T20967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.148540][T20967] Call Trace: [ 492.148588][T20967] [ 492.148597][T20967] __dump_stack+0x1d/0x30 [ 492.148625][T20967] dump_stack_lvl+0x95/0xd0 [ 492.148696][T20967] dump_stack+0x15/0x1b [ 492.148719][T20967] should_fail_ex+0x263/0x280 [ 492.148745][T20967] should_fail_alloc_page+0xf2/0x100 [ 492.148768][T20967] __alloc_frozen_pages_noprof+0x108/0x360 [ 492.148816][T20967] alloc_pages_mpol+0xb3/0x260 [ 492.148847][T20967] alloc_pages_noprof+0x8f/0x130 [ 492.148874][T20967] get_zeroed_page_noprof+0x1a/0x40 [ 492.148961][T20967] machine_kexec_prepare+0x4d4/0xb10 [ 492.148989][T20967] ? __pfx_alloc_pgt_page+0x10/0x10 [ 492.149019][T20967] do_kexec_load+0x3fe/0x530 [ 492.149093][T20967] __se_sys_kexec_load+0x134/0x160 [ 492.149115][T20967] __x64_sys_kexec_load+0x55/0x70 [ 492.149136][T20967] x64_sys_call+0x16c0/0x3020 [ 492.149291][T20967] do_syscall_64+0x12c/0x370 [ 492.149322][T20967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.149347][T20967] RIP: 0033:0x7f31a324c799 [ 492.149363][T20967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.149383][T20967] RSP: 002b:00007f31a1c65028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 492.149438][T20967] RAX: ffffffffffffffda RBX: 00007f31a34c6180 RCX: 00007f31a324c799 [ 492.149451][T20967] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 492.149462][T20967] RBP: 00007f31a1c65090 R08: 0000000000000000 R09: 0000000000000000 [ 492.149474][T20967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 492.149511][T20967] R13: 00007f31a34c6218 R14: 00007f31a34c6180 R15: 00007fff36afbe48 [ 492.149528][T20967] [ 492.381777][T20969] loop4: detected capacity change from 0 to 512 [ 492.431068][T20925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.468070][T20969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.483498][T20969] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.494496][T20971] loop3: detected capacity change from 0 to 2048 [ 492.526748][T19783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.570196][T10439] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 492.614155][T10439] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 492.650969][T10439] EXT4-fs (loop4): This should not happen!! Data will be lost [ 492.650969][T10439] [ 492.663616][T10439] EXT4-fs (loop4): Total free blocks count 0 [ 492.685298][T10439] EXT4-fs (loop4): Free/Dirty block details [ 492.694690][T20980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.703290][T10439] EXT4-fs (loop4): free_blocks=65280 [ 492.703357][T10439] EXT4-fs (loop4): dirty_blocks=31 [ 492.703370][T10439] EXT4-fs (loop4): Block reservation details [ 492.703382][T10439] EXT4-fs (loop4): i_reserved_data_blocks=31 [ 492.730043][T16468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.730082][ T3411] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 492.731740][T20980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.741708][T20227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.747593][ T3411] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 492.791481][T20982] loop6: detected capacity change from 0 to 4096 [ 492.798694][T20982] EXT4-fs: Ignoring removed mblk_io_submit option [ 492.822652][T20986] syzkaller0: entered promiscuous mode [ 492.828379][T20986] syzkaller0: entered allmulticast mode [ 492.853177][T20982] EXT4-fs: test_dummy_encryption option not supported [ 493.003313][T21000] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3757'. [ 493.614223][ T28] audit: type=1400 audit(1772803396.144:2364): avc: denied { bind } for pid=21006 comm="syz.6.3759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 493.635826][T21007] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 493.648975][T21007] SELinux: failed to load policy [ 493.706486][T21009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24592 sclass=netlink_route_socket pid=21009 comm=syz.6.3760 [ 493.791271][T21012] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3761'. [ 493.800987][T21012] vlan0: entered promiscuous mode [ 493.845857][T21015] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3762'. [ 493.864758][T21016] syzkaller0: entered promiscuous mode [ 493.879478][T21016] syzkaller0: entered allmulticast mode [ 493.963190][T21022] loop0: detected capacity change from 0 to 128 [ 494.427858][T21042] loop2: detected capacity change from 0 to 7 [ 494.458809][T21042] loop2: [ 494.545143][T21044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 494.607096][T21044] ext4 filesystem being mounted at /21/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.705091][T21063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3774'. [ 494.714041][T21063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3774'. [ 494.746527][T19827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 494.867709][T21072] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 494.909351][T21076] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 495.933186][T21083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3781'. [ 496.053423][T21088] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 3, id = 0 [ 496.218628][T21093] set_capacity_and_notify: 5 callbacks suppressed [ 496.218667][T21093] loop2: detected capacity change from 0 to 1024 [ 496.242071][T21093] EXT4-fs: inline encryption not supported [ 497.299031][T21093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.024377][T21115] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3790'. [ 498.446586][T21125] loop6: detected capacity change from 0 to 4096 [ 498.465432][T21125] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 498.966670][T20227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.174808][T21133] loop2: detected capacity change from 0 to 512 [ 499.221255][T21136] netlink: 'syz.0.3797': attribute type 10 has an invalid length. [ 499.241712][T21133] EXT4-fs (loop2): 1 truncate cleaned up [ 499.268478][T21138] loop0: detected capacity change from 0 to 128 [ 499.278348][T21133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.291941][T21136] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 499.372998][T21133] tipc: Failed to remove unknown binding: 66,0,0/0:1490627613/1490627615 [ 499.382124][T21133] tipc: Failed to remove unknown binding: 66,0,0/0:1490627613/1490627614 [ 499.447278][T21149] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3802'. [ 499.482696][T20227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.580752][T21156] lo speed is unknown, defaulting to 1000 [ 499.595820][T21156] ip6_vti0 speed is unknown, defaulting to 1000 [ 499.604923][T21163] loop0: detected capacity change from 0 to 512 [ 499.631465][T21163] EXT4-fs: Ignoring removed nobh option [ 499.650765][T21163] EXT4-fs: Ignoring removed bh option [ 499.677664][T21163] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 499.722496][T21163] EXT4-fs (loop0): 1 truncate cleaned up [ 499.728789][T21163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.793565][T21173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3811'. [ 499.971985][T21178] tipc: Started in network mode [ 499.979089][T21178] tipc: Node identity 9af6b6154cce, cluster identity 4711 [ 499.998774][T21178] tipc: Enabled bearer , priority 10 [ 500.036526][T19783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.085568][ T28] audit: type=1400 audit(1772803402.614:2365): avc: denied { map } for pid=21179 comm="syz.0.3813" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 500.119527][T21178] syzkaller0: entered promiscuous mode [ 500.125160][T21178] syzkaller0: entered allmulticast mode [ 500.132280][T21178] tipc: Resetting bearer [ 500.181582][T21177] tipc: Resetting bearer [ 500.198144][T21177] tipc: Disabling bearer [ 500.343478][T21187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3815'. [ 500.741378][ T28] audit: type=1400 audit(1772803403.254:2366): avc: denied { connect } for pid=21207 comm="syz.4.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 501.214380][T21213] loop2: detected capacity change from 0 to 128 [ 501.243128][T21213] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 501.282043][T21213] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.411991][T20227] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 501.603844][ T28] audit: type=1400 audit(1772803404.134:2367): avc: denied { append } for pid=21225 comm="syz.2.3828" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 501.679272][T21229] loop3: detected capacity change from 0 to 1024 [ 501.687386][T21229] EXT4-fs: inline encryption not supported [ 501.693585][T21229] EXT4-fs: Ignoring removed nobh option [ 501.708785][T21230] lo speed is unknown, defaulting to 1000 [ 501.714850][T21229] EXT4-fs: Ignoring removed nobh option [ 501.721016][T21230] ip6_vti0 speed is unknown, defaulting to 1000 [ 501.741750][T21229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.843066][T19827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.863739][T21239] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 502.093651][T21248] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3836'. [ 502.286594][T21250] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3838'. [ 502.426744][T21253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3839'. [ 502.450297][T21256] loop6: detected capacity change from 0 to 512 [ 502.472601][T21256] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.507582][T18513] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.647849][T21264] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3842'. [ 502.845267][T21278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3846'. [ 503.009931][T21294] loop4: detected capacity change from 0 to 512 [ 503.059478][ T28] audit: type=1400 audit(1772805965.581:2368): avc: denied { map } for pid=21293 comm="syz.2.3849" path="/dev/full" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 503.089043][T21294] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 503.114373][ T28] audit: type=1400 audit(1772805965.581:2369): avc: denied { execute } for pid=21293 comm="syz.2.3849" path="/dev/full" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 503.142355][T21294] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 503.171547][T21294] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 503.182909][T21294] System zones: 0-2, 18-18, 34-35 [ 503.188699][T21294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 503.201498][T21294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.314574][T21280] loop3: detected capacity change from 0 to 4096 [ 503.375443][T21280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.489614][T21320] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3850'. [ 503.536743][T21320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3850'. [ 503.591686][T19827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.739802][T21330] lo speed is unknown, defaulting to 1000 [ 503.763505][T21330] ip6_vti0 speed is unknown, defaulting to 1000 [ 503.953028][T21338] loop4: detected capacity change from 0 to 512 [ 503.993664][T21338] FAT-fs (loop4): Directory bread(block 199916) failed [ 504.001078][T21338] FAT-fs (loop4): Directory bread(block 199917) failed [ 504.008895][T21338] FAT-fs (loop4): Directory bread(block 199918) failed [ 504.074216][T21338] FAT-fs (loop4): Directory bread(block 199919) failed [ 504.096014][T21338] FAT-fs (loop4): Directory bread(block 199920) failed [ 504.126300][T21338] FAT-fs (loop4): Directory bread(block 199921) failed [ 504.135167][T21347] loop2: detected capacity change from 0 to 512 [ 504.214791][T21347] FAT-fs (loop2): Directory bread(block 199916) failed [ 504.243741][T21338] FAT-fs (loop4): Directory bread(block 199922) failed [ 504.250966][T21338] FAT-fs (loop4): Directory bread(block 199923) failed [ 504.258600][T21347] FAT-fs (loop2): Directory bread(block 199917) failed [ 504.266021][T21347] FAT-fs (loop2): Directory bread(block 199918) failed [ 504.283993][T21347] FAT-fs (loop2): Directory bread(block 199919) failed [ 504.318137][T21347] FAT-fs (loop2): Directory bread(block 199920) failed [ 504.338437][T21347] FAT-fs (loop2): Directory bread(block 199921) failed [ 504.379755][T21347] FAT-fs (loop2): Directory bread(block 199922) failed [ 504.408026][T21347] FAT-fs (loop2): Directory bread(block 199923) failed [ 504.636612][T21364] loop4: detected capacity change from 0 to 512 [ 504.692699][T21364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.854255][T21364] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.948124][T21347] FAT-fs (loop2): FAT read failed (blocknr 128) [ 505.271972][T16468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.401172][T21387] loop3: detected capacity change from 0 to 512 [ 505.411419][T21387] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 505.438852][T21387] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 505.447017][T21387] System zones: 1-2, 4-12, 8-8 [ 505.455299][T21387] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3865: iget: bad i_size value: 38620345925642 [ 505.469167][T21387] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 505.471107][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 505.486778][ C0] EXT4-fs (loop3): initial error at time 1772805968: ext4_orphan_get:1391: inode 15 [ 505.496391][ C0] EXT4-fs (loop3): last error at time 1772805968: ext4_orphan_get:1391: inode 15 [ 505.513101][T21387] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3865: couldn't read orphan inode 15 (err -117) [ 505.525336][T21387] loop3: lost filesystem error report for type 5 error -117 [ 505.530616][T21393] loop2: detected capacity change from 0 to 4096 [ 505.544685][T21387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.557777][T21393] EXT4-fs: Ignoring removed mblk_io_submit option [ 505.564372][T21393] EXT4-fs: test_dummy_encryption option not supported [ 505.637604][T19827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.782660][T21415] xt_connbytes: Forcing CT accounting to be enabled [ 508.263860][T21404] __nla_validate_parse: 7 callbacks suppressed [ 508.263952][T21404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3872'. [ 508.279760][T21404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3872'. [ 508.373173][T21415] loop4: detected capacity change from 0 to 512 [ 508.452867][T21415] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 508.474023][ T28] audit: type=1400 audit(1772805970.992:2370): avc: denied { connect } for pid=21421 comm="syz.2.3876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 508.504071][T21415] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.3875: iget: bad i_size value: 12154757448730 [ 508.511194][ T28] audit: type=1400 audit(1772805970.992:2371): avc: denied { getopt } for pid=21421 comm="syz.2.3876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 508.560878][T21415] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 508.570726][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 508.575712][T21415] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3875: couldn't read orphan inode 13 (err -117) [ 508.579985][ C0] EXT4-fs (loop4): initial error at time 1772805971: ext4_orphan_get:1391: inode 13 [ 508.607719][ C0] EXT4-fs (loop4): last error at time 1772805971: ext4_orphan_get:1391: inode 13 [ 508.617610][T21415] loop4: lost filesystem error report for type 5 error -117 [ 508.618322][T21415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.624825][T21431] loop0: detected capacity change from 0 to 4096 [ 508.648430][T21415] EXT4-fs warning (device loop4): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 508.659031][T21415] EXT4-fs warning (device loop4): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 508.667881][T21431] EXT4-fs: Ignoring removed mblk_io_submit option [ 508.759911][T21431] EXT4-fs: test_dummy_encryption option not supported [ 508.867133][T16468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.190444][T21441] loop6: detected capacity change from 0 to 512 [ 509.221181][T21441] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 509.247415][T21441] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 509.258216][T21445] loop4: detected capacity change from 0 to 512 [ 509.270670][T21441] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 509.304750][T21441] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.3884: Failed to acquire dquot type 1 [ 509.316262][T21441] loop6: lost filesystem error report for type 5 error -5 [ 509.316971][T21441] EXT4-fs (loop6): 1 truncate cleaned up [ 509.324156][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 509.324186][ C1] EXT4-fs (loop6): last error at time 1772805971: ext4_acquire_dquot:7001 [ 509.345942][T21441] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 509.381852][ T28] audit: type=1401 audit(1772805971.902:2372): op=fscreate invalid_context="0x0000000000000006" [ 509.394551][T18513] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 509.449378][T21454] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 509.500002][T21457] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 509.651409][T21472] loop3: detected capacity change from 0 to 4096 [ 509.683123][T21472] EXT4-fs: Ignoring removed mblk_io_submit option [ 509.701554][T21472] EXT4-fs: test_dummy_encryption option not supported [ 510.498570][T21542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3895'. [ 510.579423][T21550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3897'. [ 510.602679][T21559] loop4: detected capacity change from 0 to 512 [ 510.625528][T21559] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 510.652301][T21559] EXT4-fs (loop4): 1 truncate cleaned up [ 510.671898][T21550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3897'. [ 510.684653][T21559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.698456][T21558] syzkaller0: entered promiscuous mode [ 510.707278][T21558] syzkaller0: entered allmulticast mode [ 510.742118][T21558] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21558 comm=syz.2.3895 [ 510.776489][T21550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3897'. [ 510.813194][T21550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3897'. [ 510.860908][T21586] FAULT_INJECTION: forcing a failure. [ 510.860908][T21586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.875671][T21586] CPU: 1 UID: 0 PID: 21586 Comm: syz.2.3900 Tainted: G W syzkaller #0 PREEMPT(full) [ 510.875705][T21586] Tainted: [W]=WARN [ 510.875740][T21586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 510.875826][T21586] Call Trace: [ 510.875832][T21586] [ 510.875840][T21586] __dump_stack+0x1d/0x30 [ 510.875863][T21586] dump_stack_lvl+0x95/0xd0 [ 510.875883][T21586] dump_stack+0x15/0x1b [ 510.875897][T21550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3897'. [ 510.875903][T21586] should_fail_ex+0x263/0x280 [ 510.876002][T21586] should_fail+0xb/0x20 [ 510.876022][T21586] should_fail_usercopy+0x1a/0x20 [ 510.876047][T21586] _copy_to_user+0x20/0xa0 [ 510.876111][T21586] simple_read_from_buffer+0xb5/0x130 [ 510.876135][T21586] proc_fail_nth_read+0x10e/0x150 [ 510.876165][T21586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 510.876247][T21586] vfs_read+0x1ab/0x7f0 [ 510.876357][T21586] ? __rcu_read_unlock+0x4e/0x70 [ 510.876379][T21586] ? __fget_files+0x184/0x1c0 [ 510.876465][T21586] ? mutex_lock+0x57/0x90 [ 510.876491][T21586] ksys_read+0xdc/0x1a0 [ 510.876521][T21586] __x64_sys_read+0x40/0x50 [ 510.876600][T21586] x64_sys_call+0x2886/0x3020 [ 510.876626][T21586] do_syscall_64+0x12c/0x370 [ 510.876705][T21586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.876728][T21586] RIP: 0033:0x7f31a320cfce [ 510.876744][T21586] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 510.876761][T21586] RSP: 002b:00007f31a1ca6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 510.876782][T21586] RAX: ffffffffffffffda RBX: 00007f31a1ca76c0 RCX: 00007f31a320cfce [ 510.876820][T21586] RDX: 000000000000000f RSI: 00007f31a1ca70a0 RDI: 0000000000000004 [ 510.876856][T21586] RBP: 00007f31a1ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 510.876869][T21586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.876881][T21586] R13: 00007f31a34c6038 R14: 00007f31a34c5fa0 R15: 00007fff36afbe48 [ 510.876900][T21586] [ 510.904832][T16468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.912069][T21550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3897'. [ 511.058909][T21592] lo speed is unknown, defaulting to 1000 [ 511.136277][T21592] ip6_vti0 speed is unknown, defaulting to 1000 [ 511.239329][T21590] lo speed is unknown, defaulting to 1000 [ 511.304132][T21604] cgroup: No subsys list or none specified [ 511.336624][T21604] xt_hashlimit: size too large, truncated to 1048576 [ 511.736058][T21590] ip6_vti0 speed is unknown, defaulting to 1000 [ 511.742596][ T28] audit: type=1400 audit(1772805973.832:2373): avc: denied { mounton } for pid=21587 comm="syz.2.3902" path="/42/file0" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 513.309041][T21618] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 513.327541][T21616] loop4: detected capacity change from 0 to 4096 [ 513.414376][T21616] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 513.828021][T21632] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3906'. [ 514.498634][T21720] FAULT_INJECTION: forcing a failure. [ 514.498634][T21720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.511989][T21721] loop2: detected capacity change from 0 to 4096 [ 514.522018][T21721] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 514.556515][T21707] loop4: detected capacity change from 0 to 128 [ 514.577989][T21720] CPU: 1 UID: 0 PID: 21720 Comm: syz.0.3912 Tainted: G W syzkaller #0 PREEMPT(full) [ 514.578020][T21720] Tainted: [W]=WARN [ 514.578028][T21720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 514.578081][T21720] Call Trace: [ 514.578088][T21720] [ 514.578094][T21720] __dump_stack+0x1d/0x30 [ 514.578118][T21720] dump_stack_lvl+0x95/0xd0 [ 514.578139][T21720] dump_stack+0x15/0x1b [ 514.578189][T21720] should_fail_ex+0x263/0x280 [ 514.578211][T21720] should_fail+0xb/0x20 [ 514.578249][T21720] should_fail_usercopy+0x1a/0x20 [ 514.578275][T21720] _copy_from_user+0x1c/0xb0 [ 514.578346][T21720] restore_altstack+0x4b/0x300 [ 514.578382][T21720] ? _raw_spin_unlock_irq+0x9/0x30 [ 514.578407][T21720] ? __set_current_blocked+0x284/0x2e0 [ 514.578440][T21720] __ia32_sys_rt_sigreturn+0xdb/0x350 [ 514.578495][T21720] ? arch_do_signal_or_restart+0x2c2/0x450 [ 514.578603][T21720] ? exit_to_user_mode_loop+0xef/0x6f0 [ 514.578625][T21720] ? __rcu_read_unlock+0x4e/0x70 [ 514.578648][T21720] x64_sys_call+0x2823/0x3020 [ 514.578676][T21720] do_syscall_64+0x12c/0x370 [ 514.578697][T21720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.578774][T21720] RIP: 0033:0x7fd18690db19 [ 514.578788][T21720] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 514.578804][T21720] RSP: 002b:00007fd1853c6a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 514.578839][T21720] RAX: ffffffffffffffda RBX: 00007fd186be5fa0 RCX: 00007fd18690db19 [ 514.578851][T21720] RDX: 00007fd1853c6a80 RSI: 00007fd1853c6bb0 RDI: 0000000000000021 [ 514.578863][T21720] RBP: 00007fd1853c7090 R08: 0000000000000000 R09: 0000000000000000 [ 514.578879][T21720] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 514.578934][T21720] R13: 00007fd186be6038 R14: 00007fd186be5fa0 R15: 00007ffd5f5e0c58 [ 514.578952][T21720] [ 514.892218][T21707] 9pnet_virtio: no channels available for device syz [ 514.912391][T21707] netlink: 'syz.4.3911': attribute type 10 has an invalid length. [ 514.924040][ T28] audit: type=1400 audit(1772805977.422:2374): avc: denied { mounton } for pid=21706 comm="syz.4.3911" path="/194/file1/file1" dev="loop4" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 514.987416][T21745] loop0: detected capacity change from 0 to 1024 [ 515.000408][T21745] EXT4-fs: inline encryption not supported [ 515.027868][T21748] loop6: detected capacity change from 0 to 1024 [ 515.045163][T21748] EXT4-fs: inline encryption not supported [ 515.052023][T21721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3913'. [ 515.052546][T21745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.071744][T21748] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.122124][T21707] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 515.329672][T21757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3918'. [ 515.532883][T21770] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3920'. [ 516.061512][ T28] audit: type=1326 audit(1772805978.583:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21779 comm="syz.2.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a324c799 code=0x7ffc0000 [ 516.089477][T21782] loop3: detected capacity change from 0 to 256 [ 516.106184][T21780] loop2: detected capacity change from 0 to 1024 [ 516.132175][T21780] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 516.149453][ T28] audit: type=1326 audit(1772805978.583:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21779 comm="syz.2.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a324c799 code=0x7ffc0000 [ 516.211476][T21780] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 516.230291][T21780] EXT4-fs (loop2): orphan cleanup on readonly fs [ 516.239183][ T28] audit: type=1326 audit(1772805978.583:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21779 comm="syz.2.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a324c799 code=0x7ffc0000 [ 516.291456][ T28] audit: type=1326 audit(1772805978.583:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21779 comm="syz.2.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a324c799 code=0x7ffc0000 [ 516.321406][ T28] audit: type=1326 audit(1772805978.583:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21779 comm="syz.2.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31a324c799 code=0x7ffc0000 [ 516.345079][T21780] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz.2.3924: Invalid inode table block 0 in block_group 0 [ 516.357807][T21780] loop2: lost filesystem error report for type 5 error -117 [ 516.357935][ T28] audit: type=1326 audit(1772805978.593:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21779 comm="syz.2.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a324c799 code=0x7ffc0000 [ 516.365335][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 516.365355][ C1] EXT4-fs (loop2): initial error at time 1772805978: __ext4_get_inode_loc:4782 [ 516.365375][ C1] EXT4-fs (loop2): last error at time 1772805978: __ext4_get_inode_loc:4782 [ 516.411748][T21780] EXT4-fs (loop2): Remounting filesystem read-only [ 516.416230][T21787] loop3: detected capacity change from 0 to 128 [ 516.429946][T21787] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 516.452616][ T28] audit: type=1326 audit(1772805978.593:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21779 comm="syz.2.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a324c799 code=0x7ffc0000 [ 516.469846][T21780] Quota error (device loop2): write_blk: dquota write failed [ 516.476869][ T28] audit: type=1326 audit(1772805978.593:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21779 comm="syz.2.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a324c799 code=0x7ffc0000 [ 516.507952][T21780] EXT4-fs (loop2): 1 truncate cleaned up [ 516.525333][T21780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 516.525413][T10430] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 516.555849][T21767] Set syz1 is full, maxelem 65536 reached [ 516.602909][T21789] loop3: detected capacity change from 0 to 128 [ 516.673910][T21789] 9pnet_virtio: no channels available for device syz [ 516.710878][T21795] loop4: detected capacity change from 0 to 128 [ 516.718946][T21789] netlink: 'syz.3.3928': attribute type 10 has an invalid length. [ 516.734394][T18513] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.770857][T21795] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 516.792691][T21795] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.845707][T16468] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 516.861202][T21789] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 516.943653][T20227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.980587][T19783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.021802][T21813] loop0: detected capacity change from 0 to 4096 [ 517.038405][T21813] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 517.047712][T21809] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 517.073224][T21811] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 517.119889][T21817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3939'. [ 517.298285][T14899] hid-generic 0009:0800:0004.003A: unknown main item tag 0x0 [ 517.314189][T14899] hid-generic 0009:0800:0004.003A: unknown main item tag 0x0 [ 517.329682][T14899] hid-generic 0009:0800:0004.003A: unknown main item tag 0x0 [ 517.340105][T21825] xt_addrtype: ipv6 does not support BROADCAST matching [ 517.358244][T14899] hid-generic 0009:0800:0004.003A: unknown main item tag 0x0 [ 518.312925][T14899] hid-generic 0009:0800:0004.003A: unknown main item tag 0x0 [ 518.320792][T14899] hid-generic 0009:0800:0004.003A: unknown main item tag 0x0 [ 518.328197][T14899] hid-generic 0009:0800:0004.003A: unknown main item tag 0x0 [ 518.335942][T14899] hid-generic 0009:0800:0004.003A: unknown main item tag 0x0 [ 518.346216][T14899] hid-generic 0009:0800:0004.003A: unknown main item tag 0x0 [ 518.623363][T21827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3936'. [ 519.284014][T21829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3937'. [ 519.323494][T14899] hid-generic 0009:0800:0004.003A: unknown main item tag 0x0 [ 519.334666][T14899] hid-generic 0009:0800:0004.003A: hidraw0: HID v0.02 Device [syz0] on syz1 [ 519.587266][T21832] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3938'. [ 519.661654][T21836] fido_id[21836]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 519.762099][T21841] SET target dimension over the limit! [ 519.820639][T21845] set_capacity_and_notify: 3 callbacks suppressed [ 519.820651][T21845] loop2: detected capacity change from 0 to 512 [ 519.930702][T21845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.083514][T21859] loop3: detected capacity change from 0 to 512 [ 520.099830][T21859] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 520.217167][T20227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.698758][T21864] loop0: detected capacity change from 0 to 2048 [ 520.773588][T13588] loop0: p1 < > p4 [ 520.780056][T13588] loop0: p4 size 8388608 extends beyond EOD, truncated [ 520.922909][T21864] loop0: p1 < > p4 [ 520.931957][T21864] loop0: p4 size 8388608 extends beyond EOD, truncated [ 520.968434][ T3005] loop0: p1 < > p4 [ 520.969134][ T3005] loop0: p4 size 8388608 extends beyond EOD, truncated [ 521.042540][T13589] udevd[13589]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 521.044312][T13588] udevd[13588]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 521.071277][T13589] udevd[13589]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 521.072712][T13588] udevd[13588]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 521.281774][T21883] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3959'. [ 521.364774][T21885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21885 comm=syz.2.3960 [ 521.643382][T21892] loop2: detected capacity change from 0 to 1024 [ 521.684781][T21892] EXT4-fs: Ignoring removed orlov option [ 521.760375][T21892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.916815][T21901] xt_TCPMSS: Only works on TCP SYN packets [ 521.925112][ T28] kauditd_printk_skb: 165 callbacks suppressed [ 521.925127][ T28] audit: type=1400 audit(1772808544.449:2547): avc: denied { create } for pid=21891 comm="syz.2.3963" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 521.998927][T21896] loop3: detected capacity change from 0 to 2048 [ 522.009100][ T28] audit: type=1400 audit(1772808544.449:2548): avc: denied { setattr } for pid=21891 comm="syz.2.3963" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 522.335510][T21930] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3976'. [ 522.597529][T21935] loop3: detected capacity change from 0 to 256 [ 522.843710][T21941] FAULT_INJECTION: forcing a failure. [ 522.843710][T21941] name failslab, interval 1, probability 0, space 0, times 0 [ 522.922396][T21941] CPU: 1 UID: 0 PID: 21941 Comm: syz.4.3979 Tainted: G W syzkaller #0 PREEMPT(full) [ 522.922431][T21941] Tainted: [W]=WARN [ 522.922438][T21941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 522.922499][T21941] Call Trace: [ 522.922507][T21941] [ 522.922516][T21941] __dump_stack+0x1d/0x30 [ 522.922541][T21941] dump_stack_lvl+0x95/0xd0 [ 522.922637][T21941] dump_stack+0x15/0x1b [ 522.922719][T21941] should_fail_ex+0x263/0x280 [ 522.922794][T21941] ? shrinker_alloc+0x3b/0x650 [ 522.922825][T21941] should_failslab+0x8c/0xb0 [ 522.922847][T21941] __kmalloc_cache_noprof+0x5f/0x410 [ 522.922930][T21941] ? pcpu_alloc_noprof+0xab2/0x1030 [ 522.922954][T21941] shrinker_alloc+0x3b/0x650 [ 522.923040][T21941] ? rcu_sync_init+0x32/0x40 [ 522.923065][T21941] alloc_super+0x41a/0x580 [ 522.923091][T21941] sget_fc+0x24e/0x6e0 [ 522.923117][T21941] ? __pfx_set_anon_super_fc+0x10/0x10 [ 522.923148][T21941] ? __pfx_shmem_fill_super+0x10/0x10 [ 522.923217][T21941] get_tree_nodev+0x2a/0x100 [ 522.923244][T21941] shmem_get_tree+0x1c/0x30 [ 522.923301][T21941] vfs_get_tree+0x57/0x1d0 [ 522.923316][T21941] do_new_mount+0x288/0x8d0 [ 522.923337][T21941] ? security_capable+0x7b/0x90 [ 522.923386][T21941] path_mount+0x4d0/0xbc0 [ 522.923407][T21941] __se_sys_mount+0x28c/0x2e0 [ 522.923425][T21941] ? fput+0x8f/0xc0 [ 522.923446][T21941] __x64_sys_mount+0x67/0x80 [ 522.923496][T21941] x64_sys_call+0x2d61/0x3020 [ 522.923523][T21941] do_syscall_64+0x12c/0x370 [ 522.923546][T21941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.923618][T21941] RIP: 0033:0x7fa1664dc799 [ 522.923633][T21941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.923649][T21941] RSP: 002b:00007fa164f37028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 522.923667][T21941] RAX: ffffffffffffffda RBX: 00007fa166755fa0 RCX: 00007fa1664dc799 [ 522.923705][T21941] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 522.923719][T21941] RBP: 00007fa164f37090 R08: 00002000000000c0 R09: 0000000000000000 [ 522.923734][T21941] R10: 0000000000004480 R11: 0000000000000246 R12: 0000000000000002 [ 522.923747][T21941] R13: 00007fa166756038 R14: 00007fa166755fa0 R15: 00007ffd06f83498 [ 522.923765][T21941] [ 523.188489][ T28] audit: type=1326 audit(1772808545.699:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21942 comm="syz.3.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86dd70c799 code=0x7ffc0000 [ 523.319176][ T28] audit: type=1326 audit(1772808545.699:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21942 comm="syz.3.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86dd70c799 code=0x7ffc0000 [ 523.328751][T21952] netlink: 324 bytes leftover after parsing attributes in process `syz.3.3983'. [ 523.342864][ T28] audit: type=1326 audit(1772808545.699:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21942 comm="syz.3.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86dd70c799 code=0x7ffc0000 [ 523.342892][ T28] audit: type=1326 audit(1772808545.699:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21942 comm="syz.3.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86dd70c799 code=0x7ffc0000 [ 523.342915][ T28] audit: type=1326 audit(1772808545.699:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21942 comm="syz.3.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f86dd70c799 code=0x7ffc0000 [ 523.343039][ T28] audit: type=1326 audit(1772808545.699:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21942 comm="syz.3.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86dd70c799 code=0x7ffc0000 [ 523.343064][ T28] audit: type=1326 audit(1772808545.699:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21942 comm="syz.3.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86dd70c799 code=0x7ffc0000 [ 523.343146][ T28] audit: type=1326 audit(1772808545.699:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21942 comm="syz.3.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86dd70c799 code=0x7ffc0000 [ 523.495236][T20227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.531104][T20227] ================================================================== [ 523.539214][T20227] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 523.546780][T20227] [ 523.549098][T20227] read-write to 0xffff888237d26668 of 1 bytes by task 21953 on cpu 1: [ 523.557232][T20227] folio_add_lru+0xa4/0x1e0 [ 523.561819][T20227] shmem_get_folio_gfp+0x7b0/0xd60 [ 523.566918][T20227] shmem_fault+0xf6/0x250 [ 523.571237][T20227] __do_fault+0xbc/0x200 [ 523.575462][T20227] handle_mm_fault+0x11d7/0x3020 [ 523.580391][T20227] __get_user_pages+0x1023/0x1ea0 [ 523.585410][T20227] __mm_populate+0x242/0x390 [ 523.589994][T20227] vm_mmap_pgoff+0x23b/0x2d0 [ 523.594582][T20227] ksys_mmap_pgoff+0xc1/0x310 [ 523.599250][T20227] x64_sys_call+0x14df/0x3020 [ 523.603926][T20227] do_syscall_64+0x12c/0x370 [ 523.608935][T20227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.614818][T20227] [ 523.617212][T20227] read to 0xffff888237d26668 of 1 bytes by task 20227 on cpu 0: [ 523.624910][T20227] __lru_add_drain_all+0x17e/0x450 [ 523.630016][T20227] lru_add_drain_all+0x10/0x20 [ 523.634789][T20227] invalidate_bdev+0x47/0x70 [ 523.639365][T20227] ext4_put_super+0x624/0x7d0 [ 523.644035][T20227] generic_shutdown_super+0xee/0x220 [ 523.649314][T20227] kill_block_super+0x2a/0x70 [ 523.653991][T20227] ext4_kill_sb+0x42/0x80 [ 523.658304][T20227] deactivate_locked_super+0x75/0x1c0 [ 523.663676][T20227] deactivate_super+0x97/0xa0 [ 523.668345][T20227] cleanup_mnt+0x2bb/0x330 [ 523.672780][T20227] __cleanup_mnt+0x19/0x20 [ 523.677194][T20227] task_work_run+0x130/0x1a0 [ 523.681778][T20227] exit_to_user_mode_loop+0x1f4/0x6f0 [ 523.687175][T20227] do_syscall_64+0x249/0x370 [ 523.691754][T20227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.697728][T20227] [ 523.700035][T20227] value changed: 0x1a -> 0x1c [ 523.704783][T20227] [ 523.707090][T20227] Reported by Kernel Concurrency Sanitizer on: [ 523.713227][T20227] CPU: 0 UID: 0 PID: 20227 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 523.724324][T20227] Tainted: [W]=WARN [ 523.728110][T20227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 523.738148][T20227] ================================================================== [ 523.770058][T21957] syzkaller0: entered promiscuous mode [ 523.778039][T21957] syzkaller0: entered allmulticast mode [ 523.941375][T21965] bridge_slave_1: left allmulticast mode [ 523.947641][T21965] bridge_slave_1: left promiscuous mode [ 523.953759][T21965] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.972297][T21965] bridge_slave_0: left allmulticast mode [ 523.978275][T21965] bridge_slave_0: left promiscuous mode [ 523.984439][T21965] bridge0: port 1(bridge_slave_0) entered disabled state