last executing test programs: 4m57.869678322s ago: executing program 3 (id=110): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0xf19c55c20bdfbdca) r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'wg2\x00', {0x2}, 0x5}) r2 = syz_pidfd_open(r1, 0x0) r3 = dup(r2) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r3, &(0x7f0000000780)=ANY=[@ANYBLOB='+io +pids \x00io +cpuacct -net -\tpu +cpuset +blkio -blkio -net '], 0x3c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) fdatasync(r4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x50, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000a3c000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000c00)=0xfffffffffffffff8, 0xfffffffffffffffe, 0x2) mmap(&(0x7f0000bbe000/0x3000)=nil, 0x3000, 0x2, 0x4000010, 0xffffffffffffffff, 0xffffc000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r4, 0x5) syz_emit_ethernet(0x22, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) write(r4, &(0x7f0000000880)="8963e561fa88f38e8a5eadd77f4e319399307b9fd7c15d34201179faf29fed8098aee96df87f0109a7a8823a144d82c54982552e9340ec2868e70a9054368a36f6026633606015b8e5dd1b0a994ce0ace4454706acb8834804a52d59d332f2c4ef1cc9b3a7215b59fbdbc35b5b12595f656252cd8d29d3f149f70db3c090c7ce407fcc498037b1f5b177df489e0f4a85451fa0a5d85abb1b4858996b44a02afa1526003ae03dbf39453aa2b21e870f63407d6d87a7d10daace10ecbcf75c548827b60e1dc39d117b3efab4917537ecb758956fd0d4c7a1ec76094051b68a5be5eb6aa26cf1dfb2f5470ba6cf0c90c021c040161bac", 0xf5) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=""/41, 0x4a, 0x29, 0x0, 0x1}, 0x28) 4m56.727951049s ago: executing program 3 (id=129): memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40010000060a010400000000000000000a0000010900010073797a310000000034000480300001800b0001006f626a7265660000200002800900020073797a3200000000080003400000001008000140000000070900020073797a32000000"], 0x168}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x2af5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7fff, @loopback, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000006c0)="f0", 0x1}], 0x1}, 0x40850) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x7, @local, 0x4}}, 0x2, 0x7, 0x8001, 0x2, 0x44, 0x3, 0x3}, &(0x7f0000000140)=0x9c) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 4m56.529042734s ago: executing program 3 (id=130): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00') sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x20000810) 4m56.528159104s ago: executing program 3 (id=131): unshare(0x6a040000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x39a, &(0x7f00000002c0)="$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") sendmsg$sock(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000001c0)="579902df9b75fb36ef04e924b83f541edc38318418e7ca9950111e2056b454357c46261d4d4e34286ca0e5f3d2a21e4103b22db0ae81de38d6c3afc8f919a81322", 0x41}], 0x1}, 0x20008810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x400c110) unshare(0x20000400) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x70bd2b, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x0, 0x768f059e}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088"], 0x7a) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000100)='B', 0x1}], 0x100000000000004b) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0) close(0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) 4m56.10978732s ago: executing program 3 (id=136): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) unshare(0x24020400) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents(r1, &(0x7f0000000040)=""/61, 0x3d) 4m53.276853217s ago: executing program 3 (id=157): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000001fcffffffffffff00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) (async) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000007c0)={0x1f, 0x0, @none, 0x3}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000180)=0x3, 0x4) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 4m52.28111642s ago: executing program 32 (id=157): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000001fcffffffffffff00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) (async) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000007c0)={0x1f, 0x0, @none, 0x3}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000180)=0x3, 0x4) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 3m46.525352208s ago: executing program 1 (id=450): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0xa0041, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000010c0)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000001240)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0xf, 0x4, 0x4, 0x12, 0x0, r1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000001180)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0xf, 0x20000, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, 0x1, 0x70, 0xa, 0x4}}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r3, 0x3, {0x0, 0x1, 0x2}, 0x1}, 0x18) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r2], 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000440)={@val={0x70, 0x8ffd}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) r6 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3f, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9365, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') write$UHID_CREATE2(r8, &(0x7f00000017c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1000, 0xf31f, 0x6, 0x7, 0x80, 0x4, "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"}}, 0x1118) connect$tipc(r6, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffffff, 0x0, 0x20) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000003c0)=ANY=[], 0x1, 0x21d, &(0x7f0000001180)="$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") 3m46.337005694s ago: executing program 1 (id=451): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6040, 0x4002}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xff}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c0000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) capset(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000c40)={0x73622a85, 0x0, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x20000000) 3m46.042074311s ago: executing program 1 (id=452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3f0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) 3m45.98634427s ago: executing program 1 (id=454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x20) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffffc}}, 0x10) ftruncate(r1, 0x81fd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000000500000a28000000000a030004000000000000000a00000708000240000000020900010073797a31722f65000000002c000000030a010100000000000000000a0000070900010073797a310053d82d461d7cb8105c0000000900030073797a32000000001400000011000100"/121], 0x7c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000580)=@ethtool_coalesce={0x0, 0x2, 0x2, 0x7fffffff, 0xfff, 0x6, 0x5, 0xd2, 0xae0c, 0x4, 0x5, 0x3, 0x5, 0x1, 0xfffff801, 0x2, 0x7000000, 0xfffffff9, 0x3, 0x9, 0x9, 0x2, 0x40}}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@nobh}, {@nodiscard}]}, 0x3, 0x45c, &(0x7f0000000940)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x480001, 0x115) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x0, 0x0) ptrace$getregset(0x4204, r5, 0x4, &(0x7f00000001c0)={&(0x7f0000000440)=""/139, 0x8b}) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100005de599697944623400000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000000000140000001100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) io_submit(r2, 0x20000000000000d6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000, 0xa00}]) 3m44.693002664s ago: executing program 1 (id=460): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)={0x40000010}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r7, 0x1, &(0x7f0000000380)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x8, 0x1, r6, 0x0, 0x0, 0xfffffffffffffbff}]) 3m43.856821092s ago: executing program 1 (id=466): fstat(0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x14080, &(0x7f0000000580)={[{@i_version}, {@init_itable}, {@noblock_validity}], [{@dont_measure}, {@fowner_lt}]}, 0x1, 0x71e, &(0x7f0000000f40)="$eJzs3U1rXNUbAPDn3nb+yb+NJoKKLyAVxYqlkya2lK6sC9FNMVBwm4bkJsTc9MbMTG1CF+nKrYii4Ea/gxtXims/gF9BQbTURV1F7rykbzPNVJMMZH4/uNPn3Hub55yZzHkgZ5gTwNA6UT6kEc9HxEwSMd4+n0REpRkdjbjYuu/2rRvz5ZHE9vblP5LmPWU77vk/peMRsRURz0XET5WIU+nDeWsbmytzeZ6tt9uT9dW1ydrG5unl1bmlbCm7euHs2emz589duLB3Y33j/Q+erZ57Z+z7mcXZk1O/fpfExRhrX7t3HHup9ZxUyqfwPu/uR7IBSgbdAf6V8q15pPUuj2diPI40IwDgMNseidgGAIZMov4DwJDp/B2gs7a3X+tgvfz+dkSMdst/tL1mNtpchzx2O7lvZSKJiImD7CiH0tbNiLgyceLh37/koTXbx3VmLzrIvvqxnH8udpt/0p35J7rMP6Odz078R73nv7v5j/SY/2b6zPHei42iZ/6bES8c7ZY/2cmf9Mh/pc/8P9xZ+LvXte1vI17rWn+S+3L1/nzI5OJynp1pPXbPcaJx48NHjf9Yj/xbu4x/rc/xj3328s9bj8j/+iuPfv275S9r4qd95v+k8tYXva6V+Rd6jH+31/+bPvOff+mjzT5vBQAAAAAAAAAAAAAAAAAAAAAAAAAAgEMhjYixSNLqTpym1WprD++n41iaF7X6qcWicXUhmntlT0Ql7XzV8nirnZTtqfb38Xfa0w+034yIpyLi85H/N9vV+SJfGPTgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDt+AP7//810tr/HwA45EYH3QEA4MCp/wAwfNR/ABg+6j8ADB/1HwCGj/oPAMNH/QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADggM1culQe27dv3Zgv2wvXNhorxbXTC1ltpbramK/OF+tr1aWiWMqz6nyxutvPy4tibXo6Gtcn61mtPlnb2JxdLRpX67PLq3NL2WxWOZBRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDjGWseSVqNiLQZp2m1GvFERExEJVlczrMzEfFkRPwyUhkp21OD7jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHaxubKXJ5n6wKBQLATDHpmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIN3d9PvQfcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYp/S2JiPI4Of7q2INX/5fcGWn+GxEff335y+tz9fr6VHn+z53z9a/a56cH0X8AYDedOt2p4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQTW1jc2Uuz7P1fQwGPUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbOPwEAAP//vT/OxQ==") r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) syz_io_uring_setup(0x10d3, 0x0, &(0x7f00000000c0), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x8000000) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x1, 0xb, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff42, 0x0, @perf_config_ext={0x4, 0x100}, 0x204, 0x0, 0x43a1bc78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x7, &(0x7f00000001c0)=[{0x8, 0xc8, 0x6, 0x8}, {0xa, 0xa2, 0x1, 0x1}, {0x8001, 0x0, 0x0, 0x80}, {0x3, 0x40, 0x3, 0x5}, {0x43, 0x5, 0x5, 0xf}, {0x7, 0x3, 0x7, 0x9}, {0x2, 0x3, 0x2, 0x7}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001700)={0x6, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0, @ANYRES8, @ANYRESOCT=r4], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffce4}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000001ac0)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000380)=r7, 0x2) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x8800) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x4, 0x0, 0x9, 0xf4039, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0xfffffffffffffffc, 0x6}, 0x1224, 0x1, 0x43a1bd76, 0x5, 0x9, 0x9, 0x7, 0x0, 0xd8, 0x0, 0x2}, 0xffffffffffffffff, 0x3ffffffffd, 0xffffffffffffffff, 0x8) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r8, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) socket$inet6(0xa, 0x80001, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r9, &(0x7f0000000340)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0, 0x97) 3m43.856281902s ago: executing program 33 (id=466): fstat(0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x14080, &(0x7f0000000580)={[{@i_version}, {@init_itable}, {@noblock_validity}], [{@dont_measure}, {@fowner_lt}]}, 0x1, 0x71e, &(0x7f0000000f40)="$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") r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) syz_io_uring_setup(0x10d3, 0x0, &(0x7f00000000c0), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x8000000) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x1, 0xb, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff42, 0x0, @perf_config_ext={0x4, 0x100}, 0x204, 0x0, 0x43a1bc78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x7, &(0x7f00000001c0)=[{0x8, 0xc8, 0x6, 0x8}, {0xa, 0xa2, 0x1, 0x1}, {0x8001, 0x0, 0x0, 0x80}, {0x3, 0x40, 0x3, 0x5}, {0x43, 0x5, 0x5, 0xf}, {0x7, 0x3, 0x7, 0x9}, {0x2, 0x3, 0x2, 0x7}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001700)={0x6, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0, @ANYRES8, @ANYRESOCT=r4], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffce4}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000001ac0)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000380)=r7, 0x2) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x8800) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x4, 0x0, 0x9, 0xf4039, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0xfffffffffffffffc, 0x6}, 0x1224, 0x1, 0x43a1bd76, 0x5, 0x9, 0x9, 0x7, 0x0, 0xd8, 0x0, 0x2}, 0xffffffffffffffff, 0x3ffffffffd, 0xffffffffffffffff, 0x8) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r8, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) socket$inet6(0xa, 0x80001, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r9, &(0x7f0000000340)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0, 0x97) 6.209364373s ago: executing program 4 (id=2294): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000"], 0x0, 0x56, 0x0, 0x0, 0x400}, 0x28) getgroups(0x1, &(0x7f0000000180)=[0xee00]) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000840)={0x4, 0xf, 0x2, 0xfff2, 0x0, 0x3, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(0xffffffffffffffff, 0x0, 0x400, 0x404, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', r2, r3, 0x1000) setregid(r1, r3) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c757466383d302c696f636861727365743d63703836302c696f636861727365743d6d616363726f617469616e2c756e695f786c6174653d312c747a3d5554432c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d6d697865642c6e6f636173652c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c736d61636b66736465663d757466383d302c64697273796e632c736d61636b66736861743d262c657569643e807d6dc634ae06b292a3825c7626caa45b7a39a81660437a556646a082c54e8cf9c81260f6a760b9f06d5738818ee5a4503b0364b0f4c56abfe2", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") r4 = syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x11, 0x1, 0x0, 0x40, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7, 0x6}, 0x8887, 0x10000, 0x8, 0x1, 0x80d, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) read$ptp(r4, &(0x7f0000000580)=""/215, 0xd7) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 5.382312441s ago: executing program 4 (id=2305): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r0], 0x10b8}, 0xf19c55c20bdfbdca) r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'wg2\x00', {0x2}, 0x5}) r2 = syz_pidfd_open(r1, 0x0) r3 = dup(r2) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r3, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x3c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) fdatasync(r4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x50, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000a3c000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000c00)=0xfffffffffffffff8, 0xfffffffffffffffe, 0x2) mmap(&(0x7f0000bbe000/0x3000)=nil, 0x3000, 0x2, 0x4000010, 0xffffffffffffffff, 0xffffc000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r4, 0x5) syz_emit_ethernet(0x22, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) write(r4, &(0x7f0000000880)="8963e561fa88f38e8a5eadd77f4e319399307b9fd7c15d34201179faf29fed8098aee96df87f0109a7a8823a144d82c54982552e9340ec2868e70a9054368a36f6026633606015b8e5dd1b0a994ce0ace4454706acb8834804a52d59d332f2c4ef1cc9b3a7215b59fbdbc35b5b12595f656252cd8d29d3f149f70db3c090c7ce407fcc498037b1f5b177df489e0f4a85451fa0a5d85abb1b4858996b44a02afa1526003ae03dbf39453aa2b21e870f63407d6d87a7d10daace10ecbcf75c548827b60e1dc39d117b3efab4917537ecb758956fd0d4c7a1ec76094051b68a5be5eb6aa26cf1dfb2f5470ba6cf0c90", 0xee) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=""/41, 0x4a, 0x29, 0x0, 0x1}, 0x28) 4.339686371s ago: executing program 4 (id=2312): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c080)=@newtfilter={0x58c, 0x2c, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x1}, {0x7, 0x3}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0xa3, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x4a5}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_route={{0xa}, {0x544, 0x2, [@TCA_ROUTE4_ACT={0x540, 0x6, [@m_mpls={0x13c, 0x10, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x4, 0xffffffffdffffff8, 0x8, 0x1}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x549a3}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc2690}]}, {0xd9, 0x6, "dc662e546786c45d64ebcab40ac2383538ef652f92fcb62d9cda258a3b822c67d65da800dd3aac3dd53b91e0fd1bc5c795084ed563a32f7c7a5c4ed7b3e62b1c110efa1a48eef4dfd812e3483e43fe9c12ba2570e23d09706094ccfad02533df157945432bccc16c3a9b4b059324b0b4d7c3fab016dc97f3a0b328b5f8a5011a59551c58d3c55b596e8da0c2a5af193174ca0a59c061a69b33699375053aca4411a6e2ca6cb9a07588944cc2b5064103f1d51c20c4fd7e7260bd8936431b7feefd976c90a6cf20c32ebdf1297605effaae4ed0859d"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x13c, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ea, 0x7, 0x1, 0x1, 0x9}, 0x56}}]}, {0xf2, 0x6, "7ef9745625268817a6b953b1d19de46caa3553481bd5f789f44e60604af6215b1b4b6b7ab520ac1ab28a0d87d85f508d67975ce2ffdb49fb60fcec285c4b6d40d6b3d428b8388ebdd5fb6e06822d6f97a9bac551c3f5d6fe3d46b78d8b52a942a483b71a90a23e916ff01baeadd81e5a5390c0e8b86497c857b22e4e31509a66a671d720f3580c1c1c074593ae5e189f56f08655c6b68c8f8c7441286627a2c335b0f326a05ac84e3a08d1673c5b90d6f07e49be81be7dfa1dbb6fba48688d2096797b934ed854c1e6d84404aa95053d045dd80dae6210a642e0b648e16ae4a6ff61ddc4b051cf93c99d430b5b41"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x34, 0x17, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x17c, 0x20, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x71e, 0x3, 0x3, {0xf9, 0x2, 0x200, 0x2, 0xff, 0x7}, {0xd, 0x1, 0xff07, 0x81, 0xc93, 0xb}, 0x2c, 0x0, 0x3504}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0x2, 0xfffffffe, 0x8, {0x7, 0x2, 0x2, 0x1ff, 0x9, 0x2}, {0xe6, 0x0, 0x7f, 0x1, 0x4, 0x6f}, 0xffff0001, 0x832c, 0x9176}}]]}, {0xd6, 0x6, "a77381df58617bb3317beb0940322cb16fbbdcdf01c175630e39fb1b66e438967ecdabe0c998810f0109feac1b23f08efc140354064f944291162e5be8f651f61f506e4b80642c03aa13916410f88606011587b07d0f33e6fffc5885e94b8284ed3c23eeb167f1eb672dc1dc0fdf57c93a7c2bbddb56715e018985b01dbaae4785006d97604cbfc800878e32571147eaf01618a3872262e80989850d28f8f4ee0430901120b632a1dbfdbd594c894521809ad1de9a6b48f86ea25d9261bd5636089b01daf1cd24552ddc62df15ce6092ca81"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x58, 0x6, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x16, 0x6, "a595ec032043d32306f1bea157592c8e65c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x50, 0xc, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x2, 0x6, 0x80000000, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x6c, 0x3, 0x0, 0x0, {{0xd}, {0x4}, {0x39, 0x6, "a67f1819952008b42af7101a5b13483c4bf75b9140b62879f3eb236e496cd743441e0b700f808d68b661200cb396a6b16b5137ea5c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x58c}}, 0xc840) socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x0, 0x84, 0x105}, 0x50) r2 = socket(0xa, 0x5, 0x0) listen(r2, 0x100) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x800d, 0x8, 0x100}}], 0x20, 0x4000000}, 0x8010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x75}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x107}, 0x94) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007000000514ac7f52f79f7836ba63affc44e098e9438cd5beee7156f44e1bb0e8cfb22bbeb97df8dec9b7a58b03de35d1129bee810d407ef1a39317fab295e0ef2444622a14273d31505df58c9b6583abbbbe98d2bb122ef97320237c52d232634f2b6dfc09c8bd92a958e63856dea89198cc09dae089493f83419936ee8e61a912c4acb9b00101e0d6321716d88903a648918a46b87d41ee324ab9b114d56b47cfefeedcff61e7e6f9dd682bbaadce6b3c71a81de61ddaf3263ce6dc63cf957b8ca80"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x6, 0x10}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000400)={r4, 0x5, 0x20, 0xffffffffffffffff, 0x26}, &(0x7f0000000440)=0x18) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xff, 0xff}, {0x1, 0x3, {0x1, 0xf0, 0x1}, {0x1, 0xff}, 0x2, 0xfd}, {0x1, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x1}, 0x1}, {0x2, 0x2, {0x1, 0xf0, 0x1}, {0x2, 0xff, 0x2}, 0x1, 0xfe}, {0x2, 0x1, {0x3, 0xf0, 0x2}, {0x1, 0xff}, 0xfe, 0x1}, {0x1, 0x2, {0x2, 0x1}, {0x0, 0xff, 0x1}, 0xfb, 0xfd}, {0x1, 0x2, {0x0, 0xf0, 0x2}, {0x2, 0xf0}, 0x1, 0xff}], 0xe0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r7, @ANYBLOB="8000200514000100fe88000000000000000000000000000108000f0001"], 0x88}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r5], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x24000054) socket$kcm(0x10, 0x2, 0x10) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r8, 0x40046f01, &(0x7f0000000000)=0xa2) write$UHID_CREATE(r8, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/2, 0x2, 0x80, 0x5, 0xfffffffe, 0x3, 0x733}}, 0x11c) write$UHID_DESTROY(r8, &(0x7f0000000200), 0x4) 3.653126997s ago: executing program 4 (id=2315): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r0], 0x10b8}, 0xf19c55c20bdfbdca) r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'wg2\x00', {0x2}, 0x5}) r2 = syz_pidfd_open(r1, 0x0) r3 = dup(r2) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r3, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x3c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) fdatasync(r4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x50, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000a3c000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000c00)=0xfffffffffffffff8, 0xfffffffffffffffe, 0x2) mmap(&(0x7f0000bbe000/0x3000)=nil, 0x3000, 0x2, 0x4000010, 0xffffffffffffffff, 0xffffc000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r4, 0x5) syz_emit_ethernet(0x22, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) write(r4, &(0x7f0000000880)="8963e561fa88f38e8a5eadd77f4e319399307b9fd7c15d34201179faf29fed8098aee96df87f0109a7a8823a144d82c54982552e9340ec2868e70a9054368a36f6026633606015b8e5dd1b0a994ce0ace4454706acb8834804a52d59d332f2c4ef1cc9b3a7215b59fbdbc35b5b12595f656252cd8d29d3f149f70db3c090c7ce407fcc498037b1f5b177df489e0f4a85451fa0a5d85abb1b4858996b44a02afa1526003ae03dbf39453aa2b21e870f63407d6d87a7d10daace10ecbcf75c548827b60e1dc39d117b3efab4917537ecb758956fd0d4c7a1", 0xd7) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=""/41, 0x4a, 0x29, 0x0, 0x1}, 0x28) 3.650585626s ago: executing program 2 (id=2325): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c080)=@newtfilter={0x58c, 0x2c, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x1}, {0x7, 0x3}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0xa3, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x4a5}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_route={{0xa}, {0x544, 0x2, [@TCA_ROUTE4_ACT={0x540, 0x6, [@m_mpls={0x13c, 0x10, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x4, 0xffffffffdffffff8, 0x8, 0x1}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x549a3}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc2690}]}, {0xd9, 0x6, "dc662e546786c45d64ebcab40ac2383538ef652f92fcb62d9cda258a3b822c67d65da800dd3aac3dd53b91e0fd1bc5c795084ed563a32f7c7a5c4ed7b3e62b1c110efa1a48eef4dfd812e3483e43fe9c12ba2570e23d09706094ccfad02533df157945432bccc16c3a9b4b059324b0b4d7c3fab016dc97f3a0b328b5f8a5011a59551c58d3c55b596e8da0c2a5af193174ca0a59c061a69b33699375053aca4411a6e2ca6cb9a07588944cc2b5064103f1d51c20c4fd7e7260bd8936431b7feefd976c90a6cf20c32ebdf1297605effaae4ed0859d"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x13c, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ea, 0x7, 0x1, 0x1, 0x9}, 0x56}}]}, {0xf2, 0x6, "7ef9745625268817a6b953b1d19de46caa3553481bd5f789f44e60604af6215b1b4b6b7ab520ac1ab28a0d87d85f508d67975ce2ffdb49fb60fcec285c4b6d40d6b3d428b8388ebdd5fb6e06822d6f97a9bac551c3f5d6fe3d46b78d8b52a942a483b71a90a23e916ff01baeadd81e5a5390c0e8b86497c857b22e4e31509a66a671d720f3580c1c1c074593ae5e189f56f08655c6b68c8f8c7441286627a2c335b0f326a05ac84e3a08d1673c5b90d6f07e49be81be7dfa1dbb6fba48688d2096797b934ed854c1e6d84404aa95053d045dd80dae6210a642e0b648e16ae4a6ff61ddc4b051cf93c99d430b5b41"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x34, 0x17, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x17c, 0x20, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x71e, 0x3, 0x3, {0xf9, 0x2, 0x200, 0x2, 0xff, 0x7}, {0xd, 0x1, 0xff07, 0x81, 0xc93, 0xb}, 0x2c, 0x0, 0x3504}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0x2, 0xfffffffe, 0x8, {0x7, 0x2, 0x2, 0x1ff, 0x9, 0x2}, {0xe6, 0x0, 0x7f, 0x1, 0x4, 0x6f}, 0xffff0001, 0x832c, 0x9176}}]]}, {0xd6, 0x6, "a77381df58617bb3317beb0940322cb16fbbdcdf01c175630e39fb1b66e438967ecdabe0c998810f0109feac1b23f08efc140354064f944291162e5be8f651f61f506e4b80642c03aa13916410f88606011587b07d0f33e6fffc5885e94b8284ed3c23eeb167f1eb672dc1dc0fdf57c93a7c2bbddb56715e018985b01dbaae4785006d97604cbfc800878e32571147eaf01618a3872262e80989850d28f8f4ee0430901120b632a1dbfdbd594c894521809ad1de9a6b48f86ea25d9261bd5636089b01daf1cd24552ddc62df15ce6092ca81"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x58, 0x6, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x16, 0x6, "a595ec032043d32306f1bea157592c8e65c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x50, 0xc, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x2, 0x6, 0x80000000, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x6c, 0x3, 0x0, 0x0, {{0xd}, {0x4}, {0x39, 0x6, "a67f1819952008b42af7101a5b13483c4bf75b9140b62879f3eb236e496cd743441e0b700f808d68b661200cb396a6b16b5137ea5c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x58c}}, 0xc840) socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x0, 0x84, 0x105}, 0x50) r2 = socket(0xa, 0x5, 0x0) listen(r2, 0x100) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x800d, 0x8, 0x100}}], 0x20, 0x4000000}, 0x8010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x75}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x107}, 0x94) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007000000514ac7f52f79f7836ba63affc44e098e9438cd5beee7156f44e1bb0e8cfb22bbeb97df8dec9b7a58b03de35d1129bee810d407ef1a39317fab295e0ef2444622a14273d31505df58c9b6583abbbbe98d2bb122ef97320237c52d232634f2b6dfc09c8bd92a958e63856dea89198cc09dae089493f83419936ee8e61a912c4acb9b00101e0d6321716d88903a648918a46b87d41ee324ab9b114d56b47cfefeedcff61e7e6f9dd682bbaadce6b3c71a81de61ddaf3263ce6dc63cf957b8ca80"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x6, 0x10}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000400)={r4, 0x5, 0x20, 0xffffffffffffffff, 0x26}, &(0x7f0000000440)=0x18) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xff, 0xff}, {0x1, 0x3, {0x1, 0xf0, 0x1}, {0x1, 0xff}, 0x2, 0xfd}, {0x1, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x1}, 0x1}, {0x2, 0x2, {0x1, 0xf0, 0x1}, {0x2, 0xff, 0x2}, 0x1, 0xfe}, {0x2, 0x1, {0x3, 0xf0, 0x2}, {0x1, 0xff}, 0xfe, 0x1}, {0x1, 0x2, {0x2, 0x1}, {0x0, 0xff, 0x1}, 0xfb, 0xfd}, {0x1, 0x2, {0x0, 0xf0, 0x2}, {0x2, 0xf0}, 0x1, 0xff}], 0xe0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r7, @ANYBLOB="8000200514000100fe88000000000000000000000000000108000f0001"], 0x88}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r5], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x24000054) socket$kcm(0x10, 0x2, 0x10) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r8, 0x40046f01, &(0x7f0000000000)=0xa2) write$UHID_CREATE(r8, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/2, 0x2, 0x80, 0x5, 0xfffffffe, 0x3, 0x733}}, 0x11c) write$UHID_DESTROY(r8, &(0x7f0000000200), 0x4) 3.256577404s ago: executing program 6 (id=2316): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x4e25, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0xfffe, 0x1, @remote, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e2a, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x24}, 0x40}}}, 0x108) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000000)=0x6, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04001c0012800900010037766c616e000000000c000280060025dde62198a03d320500", @ANYRES32=r10, @ANYBLOB="0500110001000000"], 0x4c}}, 0x8000002) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r7) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) shutdown(r0, 0x1) 3.06901909s ago: executing program 5 (id=2319): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000730a00ff000000003d00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="10000000000000250500000000000000b50000a9a12b82b5a22f2649c5a7cbe9acb3197092b20000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0xc4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") socket(0x10, 0x803, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$tun(r6, &(0x7f00000001c0)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x2c, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x54) 3.01409361s ago: executing program 2 (id=2320): syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd60"], 0x0) 1.717925993s ago: executing program 2 (id=2322): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r0], 0x10b8}, 0xf19c55c20bdfbdca) r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'wg2\x00', {0x2}, 0x5}) r2 = syz_pidfd_open(r1, 0x0) r3 = dup(r2) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r3, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x3c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) fdatasync(r4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x50, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000a3c000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000c00)=0xfffffffffffffff8, 0xfffffffffffffffe, 0x2) mmap(&(0x7f0000bbe000/0x3000)=nil, 0x3000, 0x2, 0x4000010, 0xffffffffffffffff, 0xffffc000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r4, 0x5) syz_emit_ethernet(0x22, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) write(r4, &(0x7f0000000880)="8963e561fa88f38e8a5eadd77f4e319399307b9fd7c15d34201179faf29fed8098aee96df87f0109a7a8823a144d82c54982552e9340ec2868e70a9054368a36f6026633606015b8e5dd1b0a994ce0ace4454706acb8834804a52d59d332f2c4ef1cc9b3a7215b59fbdbc35b5b12595f656252cd8d29d3f149f70db3c090c7ce407fcc498037b1f5b177df489e0f4a85451fa0a5d85abb1b4858996b44a02afa1526003ae03dbf39453aa2b21e870f63407d6d87a7d10daace10ecbcf75c548827b60e1dc39d117b3efab4917537ecb758956fd0d4c7a1ec76094051b68a5be5eb6aa26cf1dfb2f5470ba6cf0c90c021c040", 0xf2) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=""/41, 0x4a, 0x29, 0x0, 0x1}, 0x28) 1.487824411s ago: executing program 5 (id=2323): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c080)=@newtfilter={0x5f4, 0x2c, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x1}, {0x7, 0x3}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0xa3, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x4a5}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_route={{0xa}, {0x5ac, 0x2, [@TCA_ROUTE4_ACT={0x5a8, 0x6, [@m_mpls={0x13c, 0x10, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x4, 0xffffffffdffffff8, 0x8, 0x1}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x549a3}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc2690}]}, {0xd9, 0x6, "dc662e546786c45d64ebcab40ac2383538ef652f92fcb62d9cda258a3b822c67d65da800dd3aac3dd53b91e0fd1bc5c795084ed563a32f7c7a5c4ed7b3e62b1c110efa1a48eef4dfd812e3483e43fe9c12ba2570e23d09706094ccfad02533df157945432bccc16c3a9b4b059324b0b4d7c3fab016dc97f3a0b328b5f8a5011a59551c58d3c55b596e8da0c2a5af193174ca0a59c061a69b33699375053aca4411a6e2ca6cb9a07588944cc2b5064103f1d51c20c4fd7e7260bd8936431b7feefd976c90a6cf20c32ebdf1297605effaae4ed0859d"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x138, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ea, 0x7, 0x1, 0x1, 0x9}, 0x56}}]}, {0xef, 0x6, "7ef9745625268817a6b953b1d19de46caa3553481bd5f789f44e60604af6215b1b4b6b7ab520ac1ab28a0d87d85f508d67975ce2ffdb49fb60fcec285c4b6d40d6b3d428b8388ebdd5fb6e06822d6f97a9bac551c3f5d6fe3d46b78d8b52a942a483b71a90a23e916ff01baeadd81e5a5390c0e8b86497c857b22e4e31509a66a671d720f3580c1c1c074593ae5e189f56f08655c6b68c8f8c7441286627a2c335b0f326a05ac84e3a08d1673c5b90d6f07e49be81be7dfa1dbb6fba48688d2096797b934ed854c1e6d84404aa95053d045dd80dae6210a642e0b648e16ae4a6ff61ddc4b051cf93c99d43"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x38, 0x16, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x2b447}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x34, 0x17, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x17c, 0x20, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x71e, 0x3, 0x3, {0xf9, 0x2, 0x200, 0x2, 0xff, 0x7}, {0xd, 0x1, 0xff07, 0x81, 0xc93, 0xb}, 0x2c, 0x0, 0x3504}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0x2, 0xfffffffe, 0x8, {0x7, 0x2, 0x2, 0x1ff, 0x9, 0x2}, {0xe6, 0x0, 0x7f, 0x1, 0x4, 0x6f}, 0xffff0001, 0x832c, 0x9176}}]]}, {0xd6, 0x6, "a77381df58617bb3317beb0940322cb16fbbdcdf01c175630e39fb1b66e438967ecdabe0c998810f0109feac1b23f08efc140354064f944291162e5be8f651f61f506e4b80642c03aa13916410f88606011587b07d0f33e6fffc5885e94b8284ed3c23eeb167f1eb672dc1dc0fdf57c93a7c2bbddb56715e018985b01dbaae4785006d97604cbfc800878e32571147eaf01618a3872262e80989850d28f8f4ee0430901120b632a1dbfdbd594c894521809ad1de9a6b48f86ea25d9261bd5636089b01daf1cd24552ddc62df15ce6092ca81"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x58, 0x6, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x16, 0x6, "a595ec032043d32306f1bea157592c8e65c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x50, 0xc, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x2, 0x6, 0x80000000, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0xa0, 0x3, 0x0, 0x0, {{0xd}, {0x4}, {0x6d, 0x6, "a67f1819952008b42af7101a5b13483c4bf75b9140b62879f3eb236e496cd743441e0b700f808d68b661200cb396a6b16b5137ea5cd02816f035bb4262a7bfe63fc606cbf13ac6b8388cff55c35391aa48f818907502bed1fb86dffac1d0e15d91795ea70f6e1f0b4f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x5f4}}, 0xc840) socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x0, 0x84, 0x105}, 0x50) r2 = socket(0xa, 0x5, 0x0) listen(r2, 0x100) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x800d, 0x8, 0x100}}], 0x20, 0x4000000}, 0x8010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x75}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x107}, 0x94) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007000000514ac7f52f79f7836ba63affc44e098e9438cd5beee7156f44e1bb0e8cfb22bbeb97df8dec9b7a58b03de35d1129bee810d407ef1a39317fab295e0ef2444622a14273d31505df58c9b6583abbbbe98d2bb122ef97320237c52d232634f2b6dfc09c8bd92a958e63856dea89198cc09dae089493f83419936ee8e61a912c4acb9b00101e0d6321716d88903a648918a46b87d41ee324ab9b114d56b47cfefeedcff61e7e6f9dd682bbaadce6b3c71a81de61ddaf3263ce6dc63cf957b8ca80"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x6, 0x10}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000400)={r4, 0x5, 0x20, 0xffffffffffffffff, 0x26}, &(0x7f0000000440)=0x18) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xff, 0xff}, {0x1, 0x3, {0x1, 0xf0, 0x1}, {0x1, 0xff}, 0x2, 0xfd}, {0x1, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x1}, 0x1}, {0x2, 0x2, {0x1, 0xf0, 0x1}, {0x2, 0xff, 0x2}, 0x1, 0xfe}, {0x2, 0x1, {0x3, 0xf0, 0x2}, {0x1, 0xff}, 0xfe, 0x1}, {0x1, 0x2, {0x2, 0x1}, {0x0, 0xff, 0x1}, 0xfb, 0xfd}, {0x1, 0x2, {0x0, 0xf0, 0x2}, {0x2, 0xf0}, 0x1, 0xff}], 0xe0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r7, @ANYBLOB="8000200514000100fe88000000000000000000000000000108000f0001"], 0x88}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r5], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x24000054) socket$kcm(0x10, 0x2, 0x10) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r8, 0x40046f01, &(0x7f0000000000)=0xa2) write$UHID_CREATE(r8, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/2, 0x2, 0x80, 0x5, 0xfffffffe, 0x3, 0x733}}, 0x11c) write$UHID_DESTROY(r8, &(0x7f0000000200), 0x4) 1.328661252s ago: executing program 4 (id=2324): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 1.223032893s ago: executing program 0 (id=2326): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x24000040) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x100) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x10, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9292, 0x0, 0x43a1bd76, 0x1, 0x9, 0x800, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x4) add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d70300", 0xfe07, 0xfffffffffffffffe) 1.199829938s ago: executing program 4 (id=2327): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r0], 0x10b8}, 0xf19c55c20bdfbdca) r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'wg2\x00', {0x2}, 0x5}) r2 = syz_pidfd_open(r1, 0x0) r3 = dup(r2) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r3, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x3c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) fdatasync(r4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x50, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000a3c000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000c00)=0xfffffffffffffff8, 0xfffffffffffffffe, 0x2) mmap(&(0x7f0000bbe000/0x3000)=nil, 0x3000, 0x2, 0x4000010, 0xffffffffffffffff, 0xffffc000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r4, 0x5) syz_emit_ethernet(0x22, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) write(r4, &(0x7f0000000880)="8963e561fa88f38e8a5eadd77f4e319399307b9fd7c15d34201179faf29fed8098aee96df87f0109a7a8823a144d82c54982552e9340ec2868e70a9054368a36f6026633606015b8e5dd1b0a994ce0ace4454706acb8834804a52d59d332f2c4ef1cc9b3a7215b59fbdbc35b5b12595f656252cd8d29d3f149f70db3c090c7ce407fcc498037b1f5b177df489e0f4a85451fa0a5d85abb1b4858996b44a02afa1526003ae03dbf39453aa2b21e870f63407d6d87a7d10daace10ecbcf75c548827b60e1dc39d117b3efab4917537ecb758956fd0d4c7a1ec76094051b68a5be5eb6aa26cf1dfb2f5470ba6cf0c90", 0xee) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000b040000000200000002000013040000000c000000ff030000230000001000000001000000030000000000a7522d190485aa5582992427c41ff72cfb0e9896a31332efdbacec4ec9c3b23889a66ea415c386e9ff67ed16c023447b812eb27f2217c67e45bf00403bd7d5b3ff9c5d2eaf46d90a2eb18791a5ba8131c6e6548ffff6d99b04d41bc49322b615507e71ea274911b4e66743ea9912d40c643f19657de596724bbc2a8a3148b1f289810ec9f8b760dfbc01c9367e36d88ff49029a204eb732646abf4eca30fb8cc479da934b9c506b14c252b9e89ea0a45934b3ebb5b6ea0f2d47f9b9e4b442eb1e466cea950fec7aed21c8751e179494819e863b49a2dde2ca62c3cd4ac6f719dde943e685adb0fd7bcf972fd148b7304"], &(0x7f0000000080)=""/41, 0x4a, 0x29, 0x0, 0x1}, 0x28) 1.140801778s ago: executing program 0 (id=2328): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0xfffffff7, 0x10100, 0x1}, &(0x7f0000000840)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000002280), 0x2, 0x0) preadv(r4, &(0x7f0000003700)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x50, 0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000100)="0101000071b08326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r6 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x7], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 1.104165581s ago: executing program 5 (id=2329): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xffec}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) (async) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000006, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x8000000000000000, 0xda, 0x4, 0x8000a, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x8, 0xffffffffffffffff, 0x2) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff}) (async) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000200)={0x0, 0x9c93, 0x10, 0x3, 0x35d}, &(0x7f00000006c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r3, 0xe, &(0x7f0000000080)=[{&(0x7f0000001000)=""/4085, 0xff5}], 0x1, 0x8}) (async) io_uring_enter(r4, 0x6e69, 0x0, 0xe, 0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071123b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x100, 0x0, {0x0, 0x0, 0x74, r8, {0x1, 0x4}, {}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4044051}, 0x0) 1.09371846s ago: executing program 0 (id=2330): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x85, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2f, 0x0, &(0x7f00000000c0)="e30080670000ec67838717bd86f063093fbb87dd45fe42904bcee14db4241544716b9ea42231ed9953a3bb017f9c1f", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) timer_gettime(0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(r3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000980)={@void, @void, @eth={@remote, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0xbc, 0x65, 0x0, 0x9, 0x6, 0x0, @multicast1, @remote}, "db0ef03c883b0a037063ac5552e1268f63e7b11b0826bc6605e4f41f97bef9180451b43ada7bdc184bc24e510ef4b84a99d71947b01fe5ea4dfbb1ddd5e6ade557f1496d285cffdd20c1c99b61cc18a562d62eba16da00249498b854adb2765af12bf65e5e527ab7f93a11762bdaf74eb9e6757d809da749b5337171474dcf30079d3c24bb524d52f734902a2f9e5c299341dc3d32f191247767688ffb758e03389e6f129ed38c01"}}}}}, 0xce) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) sendmmsg(r6, &(0x7f0000002b80)=[{{&(0x7f0000000240)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000}, 0x80, &(0x7f0000000740)=[{&(0x7f00000002c0)="b89b585a6a1fa31164f9b95c8f3ec87a34372652c31f422f72556ef50dd6a18019597e46749cb59cc80402c96809ead3547e12f861304cd6b67186c967c860dd913563a43ca2bdbac16d0a64937a09bfc8086d5538bfb3a91a5b54bb64e521bd7cba81d7e6cd60036f24f2a4abf53eb47fce91e1d3ce15b1620786ef3db1e0ef4301d301636f5561b1a59a9a67661f7093", 0x91}, {&(0x7f0000000380)="71d8e77ca0dafa0279cd85455d538a1541963ad7a4571e74cd0713d7feeaac9b457a85d520f7b0c19ea2b741c845a29a7c2087407b07a66dd51eb32d2d1f75c052c3f10b69ae0e74752b9767a483e283a13bfd4df32ef48841b17b01e13f3464ebbede9a0ce81b14f0e8e74019efd52efdcd525f5ecae1eb33a6b13ffeb90399fde96016822cbfcc39df6e9c2167c13686788f77754de8959262b8198688f40f67b46bce56b3ee60f293b05882f186641eccc51aa57d533c198ed161d5bb7e0c46365ebcdb9a907cf5ab2ff38b5988faffdfafcd91229d1495e112d7f1ebdaf5fd7df7dee47bd7660eaa0c8956efc4a82750794e876a00bbf71d581072bc", 0xfe}, {&(0x7f0000000480)="8f8b917259ae2d8e90800886e059135f7732b3a8578e79325b5d520d284c66f9db26d2f629856457e61715b72a0f5a4ec9d1345dfcfadb1fcd42bdf5397afedc5fb83b72f34cdfdf5a99822ef0fe9eec983095e036d24323d901b334ac2ae8f9ae6ba35dc4fd69f9a81dae3ee31f77f38e202dd73ea081d94941a77bf360fda98fd6bf8b14e0d24f95762a512d88ab5b75e63ac389955d28077d047a45f74bcedbfa3107eab336d7f000725fa1802742f2845f20f56962ea8361c883e9f58239f78fac3f495e1330ce1f8afd2e16e82be948c2b595f61fba", 0xd8}, {&(0x7f0000000580)="2bb2ab4c19420f2123ff18abea37622c3070324f92b31ac0e2e7454070f97d600768e825d973262fbf0e34688357fbe946d660fe6b954a4dff7dbd41a7974f4811f33691d212214c0ffd12f25e5319d90d8fff323359de96f6e8cd3059959b96e4480c", 0x63}, {&(0x7f0000000600)="7b333ce3ec388c00bc85bec83bdd6d31c169e00d8db446fecb2dfed6ee7076d415d16fda394c11a91e5e06bec26b7e338610fb7b38cb710d7f1b98ea7e64f17864402488ff3f24908b0aec1d8ddc1d30cf52c73182b5f102c3a349c7eedb6f4c804fe8d2", 0x64}, {&(0x7f0000000680)="bf6f21875cc99886cc29ee5ffb73f4e852f2e2b193066be6208c91473c095a4ad1c37ab75817f34f8c56ed77203491bae10d1e4401c813d28c00cbee756130ff295b47cbece931c4a9b9856f0b95aa0ea251e8b424809a03fd817173d04737d4205100528ecc06f29f8eccad134b4df655b9d0a5c4e2a734c95225e78ff9b3ecd78adba29aed3571", 0x88}], 0x6, &(0x7f0000002d80)=ANY=[@ANYRESHEX=r1], 0x328}}, {{&(0x7f0000000b40)=@ll={0x11, 0x3, r7, 0x1, 0x8, 0x6, @remote}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000bc0)="cbbe1ec272d4a23c1e244919c9fc4461c52e7242b6033a8cadd83db259ab2230c9f7da305104970c005ea6cff3f4ffff9939f2dbe1466eed9bc8c4fbc2434705275735ff6d6793a7da74b8e6666b99127d3a2f15e358be68cc664800a287fed00cd93d67ca1fe283ab6aa4a12d807209c66f32a97ccd01d64142ea71decfebf651dc6188a7f9b042", 0x88}, {&(0x7f0000000c80)="297fa5d1bbccd0430eb50ac3aeea3f0efe37cefb5b1004ff2e8aa9e295ee7d47f92590a5ec5569c3a42ea5a54f73d34078ce36abfd823b1071b15fbf4dc0facad0525bd9face4bfdf980a369b9b581c60ca1e11a18acf9b40f01f24bf72ac454afe7beb0b999815a624110ebf08eacf0edcbbdd33d2597b4c417c4b0594b7d7459657a273929fda037dc17b412749d27c7c8692a469d26c1c7b17af1852a8e3568e7", 0xa2}, {&(0x7f0000000d40)="0049916b78cb81b41aaf3a7329fa96777f44e923e2f356b61f0266f51a14c24397616c673bcc528636be54df407f20c1873ea5653a63de1b8868df3c2316a3e71abf9f3944f9708db86823e212de33a48321ae7464e110ceba0567d33decc02c7a865fae71f6c4652529bae7692555414389e229bb4b3107bc99133ff7655cd7eec1885d608d846c85fb9baf26ea6c58bdf5effaeac9f5347a236907a73e02314ae5a50dbcec4aa1c99c5b6822ba9d3a0b330a1d190535b8a8eacc88bd7dae947cde4411a3c11a70de4832608c505b3dceb43eadccd07c97650392ad3738234a57c946a881785cd3a9", 0xe9}, {&(0x7f0000000e40)="171c1376c4c436d1b4c6a5526450a8a485e621af095aada1fe2396d253efa09ef2676fc8d45982f3c115cad25b61db441510c470a8", 0x35}], 0x4}}, {{&(0x7f0000000ec0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f40)="ab7fd71ddb85e1e6eff9805b6975ef8bf3c61b38e746476ddef4f0f13ddc0571eb5e3817d611ddcdde75fc90bbd2cfac977e00291785f2e784b085cc15059d9ed9dd1021530237d27c729fc58179b3fe6d0499b6c7f63668b02c29537d431130d6299dc83099f432c8f09e6bc7ec9f3677", 0x71}, {&(0x7f0000000fc0)="d69334530eab6e4c066c2ee7bc6cc6db0ef476690b4f42c027ddb420f7b6e80357b8d8be987c0ccfbb865609ee264157f1323cb1a692586d52711fef6aa57b60e3e336a585673af7", 0x48}], 0x2, &(0x7f0000001080)=[{0xd0, 0x112, 0x1000, "b7741d7f5bd42a5d49859ffecea9be6aaf94491ac196a89f875da22108492ebbc304ac06587f4c4ea602e84ee9075dd0c639c7b27325df46dd94fffdc68aa2ec01f7f0ef7d0ed347a08706cb7e0db1c131d55bfa1a1a282e03b64a2f47b7706069bdbf90202126d162126d895c11c899de831188efaffe741b3ed9c88a49f117c099688cd35d2ebc51a074c4bf1021d8d92960943b674c41bdcd6add50284f656d4ceed0ca98fa0cafa7643d77537764034cd8bb5a3cde39d13597c0afda"}, {0x48, 0x107, 0x2bba2c7d, "baf2ed78fd0b59e470b90bf5e069b390c78020da6d5c3ff2dc0489d668425d8bfaa6958c433647a69a12d4ac239ee514808a2b75f6"}, {0x20, 0x165, 0xa, "c8092cd8b9dff0bc88"}, {0xf0, 0x10d, 0xfffffffc, "2533a5b24e05523f969a5b72d3155ef9a875c18ac173a1c89d4254ceb677cc86a8b6d5d9bb52bf556c2d4d0abac7206b251303a03964217f8792ec81fd6ae672d6dd3269c03cb037acb9f4dc26184ddedb67c93f6ed0539ea1d93753344c98d6825bb4b9917c414f19ec88028385290314d8bc441841a34a5260bc28d112e3c184311bec50071fd51c8552d93d085056277f445f5f3a6fe5e069ab302198a8323835b22c91b3f977be57527553c1bcd69f1b40f3a97357b06e6fc906a1520601369054ea45005430d57e1dffa61d83b7d339222bf9777b6312399efc8005eb"}, {0x88, 0x104, 0x2, "cacede2fa40ad39ff2ccf7b9bd8b94c7b7a81f4a20fa5f146a858215f52ef8b26fae10d771dc6a15cab90ded460d9305b368d042d3a64e108a37824878e7be48f8167f2b00fd6c84776093436ae608702dc4f6aa4225c38d2d5c325cfd68cd85df1138d0a46dcfc1bfe58f39877677e91f"}, {0x80, 0x102, 0x3800, "c8448e1fe80a9bd5d39fa20068657ac2529c493306b130863b74335b8f2da581fe62db7281e2fa3324504ae143e3852f8b315e0b34514d58462a1eb2c9367720d3d771b4c6daed73391df6f746d3046bdc5a0cfabe9fb7118f27b4ef43905917bf46813808c31251f96b3fade3cb4f48"}, {0x30, 0x10f, 0x3, "7783139084d9ba4634654a1651af054e1beb8a23e955965f99e1"}, {0x88, 0x20a879d979156894, 0x9, "ecd2271acb86a3bb31f5b36257ea0f111b0f582c769f4c8283bdfb10c27f9655e482e32a5f75956d92ad348ed47a329f026020359295703eb73245c731a0ff234e6351db94c269378cffd61bdea27deae50ee490e811f03b223257839202667234958cc60c114592b2e980fd55c29c2bb3dfce"}], 0x3e8}}, {{&(0x7f0000001480)=@pptp={0x18, 0x2, {0x2, @local}}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001500)="3918bfca973ec17951f2608737fcc991c60185f4c7f47e4de1a6fa2e7d4a0420356637ea52e75a699b362292e8f23706cabe75b1a908fb268649bb78aab0d75046bbf64694fc4124e115a3ff71345cd1fc6112a63d61d9d5f5127e9d5a9a34d26e1e69b23e08f8058ace7a9abce373caf4be9bafe0966caef9e13d84cd181cd7e3cd55b7eb57d79b90e6acd9a35a1d602ad7883b4fa95d84fcb498e73ef9561b648902f4bd4c29a040b2e4fca1c14f5cfe463c991491ed97", 0xb8}, {&(0x7f00000015c0)="6cb0a3f78e67d4a65d634e6d5b3c1967246cf7dd0befe5a24b6a8882acf9352f4928ffffdb3ddc4358c00113940fc1995dbb745f7aa220ccc07a15d48690cf0ddff91e742cc78c805d9d6118a07fd4e0f3b60b1e8e9e4188ed8e8de8039e147f8ee46a59c6f99486650600c522bab067ba130c848c97ac5056ca260a5f16e812c384541ea8ce0f4c949ab3a3d0f925ecbce0102b9aa3e3042a4c452dc8605548ff8f9ed9decf5f3c84271f5b0dfa455d60e13e20635d9f7d75e79056514bb5ed", 0xc0}, {&(0x7f0000001680)="5b939dcb305076bb84dfe817d735caa11d88b33dd94f758b0ee92ab79a9c1d33b334207058c14313bcaf7e68f346cb09489f68917532afb985a1f35b2a681032462816447ba1e42ae39c9de735acf7d48c4d25c66e87e13c227d69fa7cce9759c90425ba6c46079c7e350f51203f5a440e5807b37c90da43be0fa5d1402fb3a0f743a50295612d0dc30814654a407ffc7f94615922f09c55945e67b074df17056e6f693304f1241b8cbe1e7db7fc78ca783d56e2a677a129321ca64cb3ce2c48a11052a3be95e97c108b5d6caaaeef3733ede034952f8239360b2c757c649704c864b363ae9c680dbf7ebac1dd80fc58309f", 0xf2}, {&(0x7f0000001780)="0479a66c3cb3f574daaae55f55ca948ad05d42f9f2886e47d61f9bf92652137dd95871e10a29a48f82e6a2f26343aa836e4bb7b0effeceb70cd07a04b095321695221de9b2c1fd054ee1ffdbb7bed244b43ba8be", 0x54}, {&(0x7f0000001800)="f5e74c83fc3ae7b2f35c3850d9dd7ddb6b03c413ab701a7a7d5adfb9d7b26316d42028b4b9f3dcaef5bbf065217beaa7395e38b15f72e10aa839dc04e4ffc28acee2f102fcf589e19baaf31ba45c23d4d1fae3768ae66907b6853f0ab0d177cfd4e0d7f4115e550b7f6e7aa6c886", 0x6e}, {&(0x7f0000001880)="e0fb78a5b51a9a3a6678b5bd41de3faa6f438bc343301f6339abbd03a15a6b4ba3cd6464fa7a619133919ad9b5df0c69336fb59266a63b503d2a50115d93394fc2ea551e2a3465ba5a043fc926ed1baf87e62e71f6021beb54f767a110da9a31cb2a3e43c8359fa7178dfc42db3015617092113d954747d5d0b47980104547cd47aba958d410d2b73eb57e2ae3f81e5de78d016339573b472b4492f90ac55d9b58d9a7179a0617026a17bc30c2f4551036a5e29b5fadf4c9f3e5eda2026afeb2f253dce8d964", 0xc6}, {&(0x7f0000001980)="cfac149fe4deee04678050c804563c57f262a5d85becf3de14372b1339058380d5d7b742445981c8cf70c4afadd78f97c161881accf49d6c3a", 0x39}, {&(0x7f00000019c0)="18c252860bf9dcd7d7148d21240ad0ad69962a15aa37c463131f6f5e0f3ace6846c68191466fc61706a4abcb9f4df8c5549c512e8825f9", 0x37}], 0x8, &(0x7f0000001a80)}}, {{&(0x7f0000001ac0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @multicast2}, 0x3, 0x0, 0x3, 0x2}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001b40)="2b23fccbcf2951c3076e51ac7af8755b76f0f8f5e43ddd73f73bd123c7ca9fdb49372964d630e521bbded86cf907cded572ecde10ba46d3d8481790c34baf3d3cd6aad83f15bdbf9c65a6684d8f7d99745de0a316215ab95dda1d0220a82", 0x5e}, {&(0x7f0000001bc0)="7e0c7aca9256b85fd69cea2ccf0443370e9b490b7700b173154750d43f62117212c52d62bbd0aeb4351daf5d45dc7be0de292b316f519914eb30a014c520f394d5e50d7d42ec2c75c67f1172c6d2847db1b811cf071a8e3786ede20160610c2f5849e17074acebcbeaecd89f8e422a3462cd0a21913939f771113b34c375493c7b08191aa71b213d047ea12b", 0x8c}], 0x2, &(0x7f0000001cc0)=[{0x50, 0x102, 0x5, "af1e112d6793cb70e4fefa5c92d4a94d69c82816856759a5848efe60c42a78e77bbadfe9ae08c21d2c49320e8eefd08b7421e5b21fbd057d9de3"}, {0xf0, 0x108, 0x1, "363ee35a49b936030c0f4e5e1caad85ff8369c030a559b7e571ed4f76fc8f46b09162d8d26df01168e2ba522e89e69b52cc52d9d51c3b97f10819c57f5f9d1bad1677d8f4ae3744f09fabc3873e2a9ade779ab782ac8977a770170a98b2ee6022777db8dd2f21e165cf39c7feae29368a209cdf80a55464def00cc59a46e15da46234c8208f469c26abf679273e1c016978c1f695ecc61454b642d0f436da16ffe06d9e2395da2e3f2c153c365aea76f646f80553d5aa025a1f7f915180cc24f3b10e08242395dea8dd4a58c591e7c216836fb1137658f41cb59ecaff21493c8"}, {0xf0, 0x1d, 0x40, "3b673b18c8d3045cc859be8bc59e1fabd6aae97216b13212577a3e4312cc1ebc4ae463c46876037e1bfa8d080bff0dcae365ccdbbe235a99ced97fec415f8c26a3eac069c67f0725820a1ddf8986677745b068089176fc560128f49ea1cb6074c3ee019ea728964a715687e28d8d7c3544a89d9d81b5e459fc1b2373733e5bd72d6325bf996d56e5bf3508caac3a946da2f46500c12f88d973d4e79d054ed66843d13e1a1e7e32e7cb136b6974ddd5aee3472022270a9fe596c18832f400994abfa0b37debdee5030d6bccf47d07ad83647a74c863f8446662bb9c8c5216be"}, {0x90, 0x103, 0x413cc7ea, "c45b936e5b7fde2d978f44f3a7da3c2c9743d98792a3d6f298e0fab86267f6c17d2f7d1a702bb062054f0c75e200daac03a29e4d01dc2aa52f5e415a98cf4f858a06ceda5c12cb5733e6e87c16561fdcb44c77930b7b514317c9df27cd394317ba4608e083d36f71889c336fb519abce5a11db982b6388c697"}, {0x48, 0x84, 0x6, "dd8b82df03a75994f1dbec98e01c0795d41eb8eeae97997a914836cb9f21ce2fd6c6fa7cc4c14b96f6515c7d0c0baa92c5eeccda9d2c54f7"}, {0xb0, 0x110, 0x4, "0e7dca40637564301549908cf5089cd382caad2d3b003465a92579a5a2dbf5c66cb8f62c8229e719869766f7e216d230f04fbba9088b8d1e6f62e73c6619b8203bca8cfdd4aa37e056ce742e71166b4d00ee1155ed26a059a786462801a1dccc7a1a585b465ab71440952bc1df8f1fe35a8c661507a1d2a618bbab0f50173a85b2a17bb7825c242a1760ec577d7a0252451d4d0c572279c9633f8b"}], 0x3b8}}, {{&(0x7f0000002080)=@can, 0x80, &(0x7f0000002180)=[{&(0x7f0000002100)="bf018399826f1c9b9c4276e4658c2d40df4aee06e786829d793af9a94b14780415306ba6bf3e607b36aee1099eda91af6493ffa6cffdadf8c5b92eb786c72d84dbda1e6ed9b5608b95aedeec7d87e2a0d41c5dc9", 0x54}], 0x1, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x228}}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002400)="a3956bf825127302b09e897280d85e3515bfe46c0a38d47d4870f5941a268485f518739bbf4b72c758d17cd6907a14", 0x2f}, {&(0x7f0000002440)="f46fbe7c2c4cfb35089b5b264f644e103d83ed7d19efc050538e0eb149496328074973667ed6e037385c6e5ce5c6e8ea4e7bf26df007253b25693372abdff7474df0825a6f9923bbb06499d84b84a6e9bc70071ee75f1a68c4aa36b1b4631188cb9495fcb67edcd7a8ae5d6893ffda262cd2333049", 0x75}], 0x2, &(0x7f0000002500)=[{0x18, 0x107, 0x6, "c6a3ac0bc62aaa2e"}, {0x78, 0x115, 0xfffffffb, "7a50e82977d9f7c321d5cdfe15b2512ab865eb11a9e76bb23bf0b6075e4be4e6a1ed73eb62606b723d54920f43debfbcea783eda900ee6f766f0315e76d07f1721fae09ebefca320e3963038f6c7a4f55df82c915f62c5eb88fd2290afb3d110812c53"}, {0x80, 0x101, 0x5, "2ae03b4c0d022d63a95a8aad9aeef3ab9bff3a2b4f367936f14775b3ac990c810bc82a4bf3f1e1fd3ddf83ab31b905244763da54703c2e754d93bed90873eb0cb027e7f14c680c7e006123276e4010ef17cfdd743a3bfb968f4ea6619e408aab0a61afd107a15997b771aef646bf"}], 0x110}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000007c0)="6c5042150de8c2eaa2e561aa53d6b22058e91275498cc98a787063f4334781096e19dcd3def59228d5bfa44b5a8d14ae3aefbbd8664a9b8258f528418cc1a09994d767cb649f6d9a07c09999fddf144bea740153fb", 0x55}, {&(0x7f0000002680)="d435b955743f17292e59376153c1f3c2bec7845a882a052f1fb57a40210e5eb9b79e4d65a357ac91e475da513fd8b9a4f18115b03bf13e65792c8cc36d6f2ae17ac3013909c34adbfbae5731e879694d58685b24d7c2c2decd475b6cf35d6e23ea379c78770e0bc63d9294a8d372f6e5e0a935cd94da9352de195657b8247a8c0e4946c2573e8cfdeef7f6ec5520ea0b1ea5bf1ff40d79c9d46671b95b72f4", 0x9f}, {&(0x7f0000002740)="c33df9c4ab4b4a045755f9d389d64da433367e7780b96e23f987927321981bdeff8d1b64ca137cd59621e6f49cb69e222e07c5fa22ff2495b00be100d4d7fd8f3290cffeee235ec8be9ffad3d0ad381ed7cf9a5bfced46c21c8420298310d869f3be63cc6a3cbad3b2b51f62ea6d5c453cd73cd45980eed98fe916b7d27c8d525c80110606dcd7ce13e3d321e985e589d17eaef06953358f45c9c4aa8a", 0x9d}, {&(0x7f0000002800)="48b95c669c6da890c200e7ef3895c4348453d56d3e9bc425253029ab9a3e1a577e0d76017b28c9dff042d7a5985ed9f295e75c5eaff83a28f5f41446af4a78efed138d50c40c91b8a9643eb08b6abe6cbf17426e5f87dd8db5f2907503813c569b86c3ea6b71f666c6d37f47faf164204c770e0946d79f072312b3b8db9a40ed125d16bac48dbb9b86a2e21d20bb870e899b8d568f194af60c87695ca84850aba339d0f04516f00593edea64ab069003b479f3aa535e5f8d3d0b33b9acd920232a88f6824d495653411ce64350f251e9580b8d4140a578b56a4203c5c489ade7f14739eba560224870475bc4ad183bb6a3858ffd2c732c1a", 0xf8}, {&(0x7f0000002900)="960b8c6a473425556011c23c47048e558d35028fcfec7b00dd6f0a868464a0446b8f0cca7d89f892ed976df5fb8679f21d6e58069fb206377b319bde44201251355e4ffd2757393e09ef936d147a34cdcdeaa1cb8ea02805ccb63d391d7c16d46991052ebfa6c8db8c495a3635bf9e6bf9c25bea977b734986c838b951d2b931ed6ae5290198c48519d0846a33b0f784a99ebb4475bba638aa0ca3a612f33fc65caa2e04ced1e0d91a537e1140e261a85468c7ee0fca98474ab91a7c61beee5fdea63ba45440ad3e9ff59d", 0xcb}, {&(0x7f0000002a00)="37dfbc8ffa7d5359a900773cbb6c4fdad48f07dc6cd15077746f5755bd7a0ed75037a07c63acdcefb6415bebc9f6d2535147309baba86e4773837e208a3cebb9ddf49c4444aa4216cf80514e578459cb25b7d99e0d6c828d50486b1a29de383a83032fd8ec520755c5cceb6e854684e49c30c499fbab621fc30d3e570969f127f4343aba44d9cea50629a85c2422b2dd3ede57ec56991447fc8fa1395ecefb1d63060cfe5639b2137b361a280e805b66e94a0638ddb268a5f175c4af9217a994a95eca4c43d7bee9f42234120aac5f28c43d34f316ab318848f7fcb69d5b4f7632f0", 0xe2}], 0x6}}], 0x8, 0x0) rmdir(0x0) syz_open_dev$vcsn(&(0x7f0000000180), 0x7, 0x240) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0xac, 0x9, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7ff}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_USERDATA={0x84, 0xd, 0x1, 0x0, "f682846932e18f8986dffce5428cb57baaf0f72c7205fae487f91237f94691c79339b57782a0185c7909cb225fbc06a62938e12b34e0430962dd6766c9c1a80434ed4633b02f41e75b3cb468e8b502d75a188c8bcd6961c48808d3745a0068492d55af1fb73be7dd6721846e2e05e4fa756559894beab6cc4ad21692f0b730e6"}]}], {0x14}}, 0x130}}, 0x0) setsockopt$WPAN_WANTACK(r8, 0x0, 0x0, &(0x7f0000000200)=0x246, 0x3) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r8, 0xf50f, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1.073661486s ago: executing program 0 (id=2331): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000240)=0x4) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) r1 = io_uring_setup(0x44d9, &(0x7f0000000100)={0x0, 0x6fb8, 0x2, 0x2, 0x382}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r3 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)=[0x1], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0xfcf3) r4 = socket(0x28, 0x5, 0x0) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000300)={0x21, @dev={0xac, 0x14, 0x14, 0x15}, 0x4e24, 0x4, 'ovf\x00', 0x2, 0xffffffff, 0x3c}, 0x2c) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) socket(0x28, 0x5, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff07", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x10, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x8dff}}}}}}}, 0x0) 1.020860466s ago: executing program 5 (id=2332): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c080)=@newtfilter={0x3c, 0x2c, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x1}, {0x7, 0x3}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0xa3, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x4a5}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x3c}}, 0xc840) socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x0, 0x84, 0x105}, 0x50) r2 = socket(0xa, 0x5, 0x0) listen(r2, 0x100) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x800d, 0x8, 0x100}}], 0x20, 0x4000000}, 0x8010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x75}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x107}, 0x94) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007000000514ac7f52f79f7836ba63affc44e098e9438cd5beee7156f44e1bb0e8cfb22bbeb97df8dec9b7a58b03de35d1129bee810d407ef1a39317fab295e0ef2444622a14273d31505df58c9b6583abbbbe98d2bb122ef97320237c52d232634f2b6dfc09c8bd92a958e63856dea89198cc09dae089493f83419936ee8e61a912c4acb9b00101e0d6321716d88903a648918a46b87d41ee324ab9b114d56b47cfefeedcff61e7e6f9dd682bbaadce6b3c71a81de61ddaf3263ce6dc63cf957b8ca80"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x6, 0x10}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000400)={r4, 0x5, 0x20, 0xffffffffffffffff, 0x26}, &(0x7f0000000440)=0x18) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xff, 0xff}, {0x1, 0x3, {0x1, 0xf0, 0x1}, {0x1, 0xff}, 0x2, 0xfd}, {0x1, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x1}, 0x1}, {0x2, 0x2, {0x1, 0xf0, 0x1}, {0x2, 0xff, 0x2}, 0x1, 0xfe}, {0x2, 0x1, {0x3, 0xf0, 0x2}, {0x1, 0xff}, 0xfe, 0x1}, {0x1, 0x2, {0x2, 0x1}, {0x0, 0xff, 0x1}, 0xfb, 0xfd}, {0x1, 0x2, {0x0, 0xf0, 0x2}, {0x2, 0xf0}, 0x1, 0xff}], 0xe0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r7, @ANYBLOB="8000200514000100fe88000000000000000000000000000108000f0001"], 0x88}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r5], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x24000054) socket$kcm(0x10, 0x2, 0x10) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r8, 0x40046f01, &(0x7f0000000000)=0xa2) write$UHID_CREATE(r8, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/2, 0x2, 0x80, 0x5, 0xfffffffe, 0x3, 0x733}}, 0x11c) write$UHID_DESTROY(r8, &(0x7f0000000200), 0x4) 1.019920036s ago: executing program 0 (id=2333): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000100)={{}, {0xe, 0x1}, 0x4}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x5, 0x6, 0x7, 0x86, 0x0, 0x8, 0x4a, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x4000c8, 0x100000000000ce8}, 0x0, 0x3, 0x81, 0x2, 0x551, 0x800, 0x400, 0x0, 0x0, 0x0, 0x837}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[], 0x0, 0xe7, 0xfffffffffffffe5b, 0x4}, 0x28) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x8}, 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x29, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r5, &(0x7f0000006940)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000240)}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000440)=""/113, 0x71}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/1, 0x1}], 0x6, &(0x7f0000000680)=""/55, 0x37}, 0x2}, {{&(0x7f00000006c0)=@caif=@dbg, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/16, 0x10}, {&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000000940)=""/137, 0x89}, {&(0x7f0000000a40)=""/65, 0x41}], 0x7, &(0x7f0000000b40)=""/99, 0x63}, 0x4}, {{&(0x7f0000000c40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000006140)=[{&(0x7f0000000cc0)=""/236, 0xec}, {&(0x7f0000000bc0)=""/31, 0x1f}, {&(0x7f0000000dc0)=""/47, 0x2f}, {&(0x7f0000000e00)=""/229, 0xe5}, {&(0x7f0000000f00)=""/137, 0x89}, {&(0x7f0000000fc0)=""/61, 0x3d}, {&(0x7f0000006040)=""/222, 0xde}], 0x7, &(0x7f00000061c0)=""/52, 0x34}, 0x101}, {{&(0x7f0000006200)=@ll, 0x80, &(0x7f0000006440)=[{&(0x7f0000006280)=""/147, 0x93}, {&(0x7f0000006340)=""/241, 0xf1}], 0x2, &(0x7f0000006480)=""/54, 0x36}, 0x8}, {{&(0x7f00000064c0)=@sco={0x1f, @none}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006540)=""/123, 0x7b}], 0x1, &(0x7f0000006600)}, 0xd}, {{&(0x7f0000006640)=@x25, 0x80, &(0x7f00000068c0)=[{&(0x7f00000066c0)=""/205, 0xcd}, {&(0x7f00000067c0)=""/20, 0x14}, {&(0x7f0000006800)=""/61, 0x3d}, {&(0x7f0000006840)=""/78, 0x4e}], 0x4, &(0x7f0000006900)=""/28, 0x1c}, 0x6}], 0x6, 0x100, &(0x7f0000006ac0)={0x0, 0x3938700}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGABS0(r6, 0x80184540, 0x0) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) 755.968007ms ago: executing program 2 (id=2334): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x5, 0x0, 0x2, 0x10004003, 0x7, 0x0, 0x7}}) 720.718451ms ago: executing program 6 (id=2335): syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd60"], 0x0) 719.627821ms ago: executing program 5 (id=2336): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, r1, 0x5, 0x5, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, 0x13, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x49, 0x8, "70c2e082d7b7b0084cc61c562cd03f12cad33ceac420da85a078508653127907602e7d20007e6b17878a7fc037fd39f78dfaba1926cbb490923d746ac24fdd5eaefabe6812"}]}, 0x84}}, 0x4000000) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$VT_RELDISP(r1, 0x5605) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r3], 0x38}}, 0x10) 671.671792ms ago: executing program 2 (id=2337): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x8, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xe00}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 629.804224ms ago: executing program 6 (id=2338): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xc840) socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x0, 0x84, 0x105}, 0x50) r2 = socket(0xa, 0x5, 0x0) listen(r2, 0x100) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x800d, 0x8, 0x100}}], 0x20, 0x4000000}, 0x8010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x75}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x107}, 0x94) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007000000514ac7f52f79f7836ba63affc44e098e9438cd5beee7156f44e1bb0e8cfb22bbeb97df8dec9b7a58b03de35d1129bee810d407ef1a39317fab295e0ef2444622a14273d31505df58c9b6583abbbbe98d2bb122ef97320237c52d232634f2b6dfc09c8bd92a958e63856dea89198cc09dae089493f83419936ee8e61a912c4acb9b00101e0d6321716d88903a648918a46b87d41ee324ab9b114d56b47cfefeedcff61e7e6f9dd682bbaadce6b3c71a81de61ddaf3263ce6dc63cf957b8ca80"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x6, 0x10}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000400)={r4, 0x5, 0x20, 0xffffffffffffffff, 0x26}, &(0x7f0000000440)=0x18) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xff, 0xff}, {0x1, 0x3, {0x1, 0xf0, 0x1}, {0x1, 0xff}, 0x2, 0xfd}, {0x1, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x1}, 0x1}, {0x2, 0x2, {0x1, 0xf0, 0x1}, {0x2, 0xff, 0x2}, 0x1, 0xfe}, {0x2, 0x1, {0x3, 0xf0, 0x2}, {0x1, 0xff}, 0xfe, 0x1}, {0x1, 0x2, {0x2, 0x1}, {0x0, 0xff, 0x1}, 0xfb, 0xfd}, {0x1, 0x2, {0x0, 0xf0, 0x2}, {0x2, 0xf0}, 0x1, 0xff}], 0xe0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r7, @ANYBLOB="8000200514000100fe88000000000000000000000000000108000f0001"], 0x88}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r5], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x24000054) socket$kcm(0x10, 0x2, 0x10) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r8, 0x40046f01, &(0x7f0000000000)=0xa2) write$UHID_CREATE(r8, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/2, 0x2, 0x80, 0x5, 0xfffffffe, 0x3, 0x733}}, 0x11c) write$UHID_DESTROY(r8, &(0x7f0000000200), 0x4) 567.641284ms ago: executing program 2 (id=2339): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000100)={{}, {0xe, 0x1}, 0x4}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x5, 0x6, 0x7, 0x86, 0x0, 0x8, 0x4a, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x4000c8, 0x100000000000ce8}, 0x0, 0x3, 0x81, 0x2, 0x551, 0x800, 0x400, 0x0, 0x0, 0x0, 0x837}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[], 0x0, 0xe7, 0xfffffffffffffe5b, 0x4}, 0x28) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x8}, 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x29, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r5, &(0x7f0000006940)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000240)}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000440)=""/113, 0x71}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/1, 0x1}], 0x6, &(0x7f0000000680)=""/55, 0x37}, 0x2}, {{&(0x7f00000006c0)=@caif=@dbg, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/16, 0x10}, {&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000000940)=""/137, 0x89}, {&(0x7f0000000a40)=""/65, 0x41}], 0x7, &(0x7f0000000b40)=""/99, 0x63}, 0x4}, {{&(0x7f0000000c40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000006140)=[{&(0x7f0000000cc0)=""/236, 0xec}, {&(0x7f0000000bc0)=""/31, 0x1f}, {&(0x7f0000000dc0)=""/47, 0x2f}, {&(0x7f0000000e00)=""/229, 0xe5}, {&(0x7f0000000f00)=""/137, 0x89}, {&(0x7f0000000fc0)=""/61, 0x3d}, {&(0x7f0000006040)=""/222, 0xde}], 0x7, &(0x7f00000061c0)=""/52, 0x34}, 0x101}, {{&(0x7f0000006200)=@ll, 0x80, &(0x7f0000006440)=[{&(0x7f0000006280)=""/147, 0x93}, {&(0x7f0000006340)=""/241, 0xf1}], 0x2, &(0x7f0000006480)=""/54, 0x36}, 0x8}, {{&(0x7f00000064c0)=@sco={0x1f, @none}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006540)=""/123, 0x7b}], 0x1, &(0x7f0000006600)}, 0xd}, {{&(0x7f0000006640)=@x25, 0x80, &(0x7f00000068c0)=[{&(0x7f00000066c0)=""/205, 0xcd}, {&(0x7f00000067c0)=""/20, 0x14}, {&(0x7f0000006800)=""/61, 0x3d}, {&(0x7f0000006840)=""/78, 0x4e}], 0x4, &(0x7f0000006900)=""/28, 0x1c}, 0x6}], 0x6, 0x100, &(0x7f0000006ac0)={0x0, 0x3938700}) gettid() r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) 566.839953ms ago: executing program 5 (id=2340): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000"], 0x0, 0x56, 0x0, 0x0, 0x400}, 0x28) getgroups(0x1, &(0x7f0000000180)=[0xee00]) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000840)={0x4, 0xf, 0x2, 0xfff2, 0x0, 0x3, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(0xffffffffffffffff, 0x0, 0x400, 0x404, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', r2, r3, 0x1000) setregid(r1, r3) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") r6 = syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x11, 0x1, 0x0, 0x40, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7, 0x6}, 0x8887, 0x10000, 0x8, 0x1, 0x80d, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) read$ptp(r6, &(0x7f0000000580)=""/215, 0xd7) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 124.628362ms ago: executing program 0 (id=2341): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c080)=@newtfilter={0x5f4, 0x2c, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x1}, {0x7, 0x3}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0xa3, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x4a5}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_route={{0xa}, {0x5ac, 0x2, [@TCA_ROUTE4_ACT={0x5a8, 0x6, [@m_mpls={0x13c, 0x10, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x4, 0xffffffffdffffff8, 0x8, 0x1}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x549a3}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc2690}]}, {0xd9, 0x6, "dc662e546786c45d64ebcab40ac2383538ef652f92fcb62d9cda258a3b822c67d65da800dd3aac3dd53b91e0fd1bc5c795084ed563a32f7c7a5c4ed7b3e62b1c110efa1a48eef4dfd812e3483e43fe9c12ba2570e23d09706094ccfad02533df157945432bccc16c3a9b4b059324b0b4d7c3fab016dc97f3a0b328b5f8a5011a59551c58d3c55b596e8da0c2a5af193174ca0a59c061a69b33699375053aca4411a6e2ca6cb9a07588944cc2b5064103f1d51c20c4fd7e7260bd8936431b7feefd976c90a6cf20c32ebdf1297605effaae4ed0859d"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x138, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ea, 0x7, 0x1, 0x1, 0x9}, 0x56}}]}, {0xef, 0x6, "7ef9745625268817a6b953b1d19de46caa3553481bd5f789f44e60604af6215b1b4b6b7ab520ac1ab28a0d87d85f508d67975ce2ffdb49fb60fcec285c4b6d40d6b3d428b8388ebdd5fb6e06822d6f97a9bac551c3f5d6fe3d46b78d8b52a942a483b71a90a23e916ff01baeadd81e5a5390c0e8b86497c857b22e4e31509a66a671d720f3580c1c1c074593ae5e189f56f08655c6b68c8f8c7441286627a2c335b0f326a05ac84e3a08d1673c5b90d6f07e49be81be7dfa1dbb6fba48688d2096797b934ed854c1e6d84404aa95053d045dd80dae6210a642e0b648e16ae4a6ff61ddc4b051cf93c99d43"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x38, 0x16, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x2b447}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x34, 0x17, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x17c, 0x20, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x71e, 0x3, 0x3, {0xf9, 0x2, 0x200, 0x2, 0xff, 0x7}, {0xd, 0x1, 0xff07, 0x81, 0xc93, 0xb}, 0x2c, 0x0, 0x3504}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0x2, 0xfffffffe, 0x8, {0x7, 0x2, 0x2, 0x1ff, 0x9, 0x2}, {0xe6, 0x0, 0x7f, 0x1, 0x4, 0x6f}, 0xffff0001, 0x832c, 0x9176}}]]}, {0xd6, 0x6, "a77381df58617bb3317beb0940322cb16fbbdcdf01c175630e39fb1b66e438967ecdabe0c998810f0109feac1b23f08efc140354064f944291162e5be8f651f61f506e4b80642c03aa13916410f88606011587b07d0f33e6fffc5885e94b8284ed3c23eeb167f1eb672dc1dc0fdf57c93a7c2bbddb56715e018985b01dbaae4785006d97604cbfc800878e32571147eaf01618a3872262e80989850d28f8f4ee0430901120b632a1dbfdbd594c894521809ad1de9a6b48f86ea25d9261bd5636089b01daf1cd24552ddc62df15ce6092ca81"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x58, 0x6, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x16, 0x6, "a595ec032043d32306f1bea157592c8e65c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x50, 0xc, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x2, 0x6, 0x80000000, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0xa0, 0x3, 0x0, 0x0, {{0xd}, {0x4}, {0x6d, 0x6, "a67f1819952008b42af7101a5b13483c4bf75b9140b62879f3eb236e496cd743441e0b700f808d68b661200cb396a6b16b5137ea5cd02816f035bb4262a7bfe63fc606cbf13ac6b8388cff55c35391aa48f818907502bed1fb86dffac1d0e15d91795ea70f6e1f0b4f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x5f4}}, 0xc840) socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x0, 0x84, 0x105}, 0x50) r2 = socket(0xa, 0x5, 0x0) listen(r2, 0x100) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x800d, 0x8, 0x100}}], 0x20, 0x4000000}, 0x8010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x75}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x107}, 0x94) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007000000514ac7f52f79f7836ba63affc44e098e9438cd5beee7156f44e1bb0e8cfb22bbeb97df8dec9b7a58b03de35d1129bee810d407ef1a39317fab295e0ef2444622a14273d31505df58c9b6583abbbbe98d2bb122ef97320237c52d232634f2b6dfc09c8bd92a958e63856dea89198cc09dae089493f83419936ee8e61a912c4acb9b00101e0d6321716d88903a648918a46b87d41ee324ab9b114d56b47cfefeedcff61e7e6f9dd682bbaadce6b3c71a81de61ddaf3263ce6dc63cf957b8ca80"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x6, 0x10}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000400)={r4, 0x5, 0x20, 0xffffffffffffffff, 0x26}, &(0x7f0000000440)=0x18) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xff, 0xff}, {0x1, 0x3, {0x1, 0xf0, 0x1}, {0x1, 0xff}, 0x2, 0xfd}, {0x1, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x1}, 0x1}, {0x2, 0x2, {0x1, 0xf0, 0x1}, {0x2, 0xff, 0x2}, 0x1, 0xfe}, {0x2, 0x1, {0x3, 0xf0, 0x2}, {0x1, 0xff}, 0xfe, 0x1}, {0x1, 0x2, {0x2, 0x1}, {0x0, 0xff, 0x1}, 0xfb, 0xfd}, {0x1, 0x2, {0x0, 0xf0, 0x2}, {0x2, 0xf0}, 0x1, 0xff}], 0xe0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r7, @ANYBLOB="8000200514000100fe88000000000000000000000000000108000f0001"], 0x88}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r5], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x24000054) socket$kcm(0x10, 0x2, 0x10) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r8, 0x40046f01, &(0x7f0000000000)=0xa2) write$UHID_CREATE(r8, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/2, 0x2, 0x80, 0x5, 0xfffffffe, 0x3, 0x733}}, 0x11c) write$UHID_DESTROY(r8, &(0x7f0000000200), 0x4) 123.709562ms ago: executing program 6 (id=2342): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) (async, rerun: 64) r1 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@l2tp6={0xa, 0x0, 0x1, @loopback, 0x4, 0x3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) (async) r3 = semget(0x1, 0x4, 0x39c) semop(r3, &(0x7f0000000000)=[{0x3, 0xfe88}], 0x1) (async) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff]) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000004d00), 0x0, 0xf00) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x4, 0x0, 0x0) 616.82µs ago: executing program 6 (id=2343): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f00000000c0)="0500f900"/14, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$OCFS2_IOC_INFO(r0, 0x80106f05, &(0x7f00000046c0)={&(0x7f0000004500)=[&(0x7f0000000040)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000000100)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f0000000080)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000000880)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x7, 0x3}, {0x81, 0xfffffffffffffffe}, {0x80000000, 0xdf}, {0x4, 0x9}, {0xa09, 0x45c938e4}, {0x1ff, 0x1000}, {0x400, 0x800}, {0x3, 0x3}, {0x54f9d9d5, 0x1f}, {0x5, 0x7}, {0xc6, 0x8000000000000001}, {0x6, 0x1}, {0x0, 0x9}, {0x82ce, 0x468}, {0x2, 0x5}, {0x0, 0x987d}, {0x8, 0x5}, {0x100}, {0x4, 0xfffffffffffffffc}, {0x4, 0x100000001}, {0x1, 0x1}, {0x17, 0xfffffffffffffff8}, {0x2, 0x50c}, {0x1, 0x2}, {0xe1, 0x1}, {0xfff, 0x6}, {0x5, 0x4}, {0x0, 0x8}, {0x1, 0x5}, {0x3, 0xffff}, {0x3, 0x99c4}, {0x9, 0x1}, {0x8, 0x7fff}, {0x0, 0x5}, {0x200, 0x3}, {0x5179f14, 0xfff}, {0x3, 0x7fffffff}, {0x8, 0x6}, {0x90a3, 0x8f}, {0x6e1b9acd, 0xfffffffffffffffd}, {0xb, 0x2}, {0x96, 0x9}, {0x8, 0x6}, {0x7a}, {0x8000000000000001, 0x10001}, {0x40, 0x101}, {0xfff}, {0x7fff, 0x368d}, {0x5, 0xffffffffffffffff}, {0xffffffffffffffff, 0xf}, {0x7fffffffffffffff, 0x5}, {0x8}, {0x6, 0x5}, {0x101, 0x4}, {0xce1, 0x9}, {0x7, 0x100000000}, {0x7, 0x8}, {0x4f5d, 0xffffffff}, {0x1d, 0x3}, {0xf, 0x10001}, {0x7f, 0x7fffffff}, {0xa, 0x9}, {0x8, 0x4}, {0x0, 0x5}, {0x6, 0xef5f}, {0x4, 0xf}, {0x2, 0x8000}, {0x7fff, 0x7fffffffffffffff}, {0x5, 0x346}, {0x9, 0x48000}, {0x9, 0x10}, {0xffffffff, 0xfffffffffffffff8}, {0x7, 0x14f42e9b}, {0x1ff, 0x5}, {0x1, 0xee38}, {0x4, 0x6}, {0xe65, 0xb}, {0x0, 0x2}, {0x8000, 0x1}, {0x3, 0x3}, {0x3, 0x6}, {0x8, 0x9}, {0x5, 0x8000000000000001}, {0x0, 0xde39}, {0x3, 0x100}, {0xff, 0x8}, {0x7fff, 0x7fff}, {0x3, 0x3ff}, {0x3, 0xffffffff}, {0x80000001, 0x8}, {0x8}, {0x8, 0x4}, {0x6, 0x4}, {0x5, 0x7}, {0x7, 0x5}, {0x7, 0x8}, {0x6, 0x8}, {0x200000000, 0xcba5}, {0x401, 0x1151}, {0x8, 0xfff}, {0xabd, 0x8}, {0x6, 0x10000}, {0x4, 0xf}, {0x9a6, 0x80}, {0x0, 0x3}, {0x7, 0x4}, {0xcd, 0x4}, {0xf78, 0x7}, {0x6b, 0x7}, {0x0, 0xfffffffffffffe8f}, {0x2, 0x3}, {0xd, 0x101}, {0x7, 0x2}, {0x100, 0x9}, {0x7, 0x5}, {0x7, 0x4}, {0x100000001, 0x1}, {0x1, 0xc}, {0x78a6, 0x2cd13496}, {0x4, 0x7f}, {0x8001, 0x8}, {0x5, 0x58f0000000000}, {0x7, 0x90ff}, {0x8, 0x8}, {0x7, 0x652}, {0x0, 0x7}, {0x781, 0x3}, {0x6, 0x4d5}, {0x8000000000000000, 0x5}, {0x7, 0x2cae}, {0x5c}, {0x1, 0xffff}, {0x3, 0x2}, {0x2, 0x26d}, {0x9, 0x1}, {0x2, 0x4}, {0x8, 0xd}, {0xf, 0x3}, {0x3, 0x401}, {0x38, 0xd}, {0xfffffffffffff5bf, 0x7fff}, {0x2, 0x2}, {0xcb3}, {0x101, 0x3}, {0x81, 0x5}, {0x40, 0x4}, {0x8000000000000001, 0x81}, {0x2000000, 0x5}, {0x3, 0xc1e}, {0xd, 0x9f}, {0x5, 0x1}, {0xffffffffffffff01, 0x4}, {0x3, 0x1}, {0xffffffffffffee41, 0xa9e3}, {0xe76, 0x8000}, {0x8, 0x4}, {0x4, 0x7}, {0x1, 0x800}, {0x9, 0x8}, {}, {0x2}, {0x2, 0x3448}, {0x9, 0x10001}, {0x6d08f9db, 0x3}, {0x66, 0x800000000000}, {0x8, 0x9}, {0x3, 0x895}, {0x7f, 0x1}, {0x3, 0xbc1e}, {0x1, 0x5}, {0x9, 0x6}, {0xb60}, {0x8, 0xffff}, {0x7, 0x4}, {0x2, 0xc}, {0x7f, 0x7}, {0x10000, 0x2}, {0x8ba, 0x80000001}, {0x80000001, 0xfffffffffffeffff}, {0x4, 0x6e0}, {0x9}, {0x4, 0x8}, {0x7}, {0x6, 0x763e}, {0x842e, 0x3}, {0x7, 0x65}, {0xb31, 0x9}, {0x4800000, 0x8001}, {0x101, 0x2}, {0x40, 0x100}, {0xffffffffffff439e, 0x7}, {0x4, 0x7}, {0x80000000, 0x6}, {0x1, 0x1}, {0x8, 0x80000001}, {0x8001, 0x9}, {0x5, 0x7}, {0x100000000, 0x3}, {0x7, 0x3}, {0x117, 0x2}, {0x1, 0x9f02}, {0x0, 0xef6}, {0x7a4, 0xa4d}, {0xb75c, 0x6e59d7d9}, {0x9, 0x62a31f25}, {0x9, 0x1ff}, {0x7}, {0x4, 0xa8}, {0x8, 0x1}, {0x3, 0x4}, {0x2, 0x1}, {0x4, 0x3}, {0x8, 0x6}, {0x8, 0xffffffffffffffff}, {0x0, 0x4}, {0x86a9, 0x800}, {0x6, 0x902}, {0x4, 0x3}, {0x23dfafbd, 0x100}, {0xf9e, 0x78d}, {0x6, 0x3}, {0x26, 0x4}, {0xfffffffffffffffc, 0x2}, {0xffffffffffffffff, 0x63b}, {0x4, 0x9}, {0x1, 0xf9}, {0x7fffffffffffffff, 0x8}, {0x6, 0x4}, {0x0, 0xea2}, {}, {0x8000000000000001, 0xfffffffffffffffa}, {0x5, 0x4}, {0x2, 0x7fff}, {0x0, 0x2}, {0x13, 0xaf}, {0x101, 0xfff}, {0x0, 0x8}, {0x5, 0x7ff}, {0x7, 0x9}, {0xfffffffffffffff7, 0x4}, {0x1, 0x9}, {0x1, 0x2}, {0xd0, 0x50}, {0x3ff, 0x3ff}, {0x9}, {0xffffffff, 0x10}, {0xf6bd, 0x10001}, {0x1, 0x80000}, {0x140, 0x6}, {0x9, 0x401}, {0x3, 0x6}, {0xc19, 0x3}, {0x8, 0x9c2}, {0x27c0, 0x5}, {0x8, 0xfffffffffffffff8}]}, &(0x7f0000000180)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f00000001c0)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000000240)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x20000001}}, &(0x7f0000000280)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f00000002c0)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000000300)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000000}}, &(0x7f0000000340)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000000380)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, &(0x7f0000000400)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000000440)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000000480)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f00000004c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000000680)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x3ff}, &(0x7f0000000500)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000000540)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f00000018c0)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000001940)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000001980)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000000}}, &(0x7f00000019c0)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f0000001a40)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000001a80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x9, 0x6}, {0xe4, 0x9}, {0x8, 0x8}, {0x7b1d6766, 0x33}, {0x385d, 0x50e0}, {0x6, 0x101}, {0x21ef, 0x5}, {0xc, 0x39}, {0x5, 0x40}, {0x7, 0xac}, {0x98, 0x9}, {0x7, 0xff}, {0x7, 0x8000}, {0x3, 0x8}, {0x80000000, 0x1}, {0x2, 0x3}, {0x8, 0x6}, {0x6, 0x5}, {0x7f, 0x7fffffff}, {0x9, 0x1}, {0xdd51, 0x5}, {0x8, 0x28b3}, {0x8, 0xffffffff}, {0x9, 0x7}, {0x6, 0x6}, {0x8, 0xa09}, {0xa, 0x3be08}, {0x100, 0x6b}, {0x8, 0x1}, {0x7, 0x9}, {0x0, 0x1}, {0x4, 0x7}, {0x4, 0x6}, {0xe, 0x9}, {0xf, 0x1}, {0x1ad8, 0x2}, {0x101, 0x100000000}, {0x9, 0x2}, {0x9, 0xffffffffffff7fff}, {0x6376, 0x7fff}, {0x7, 0x7fffffffffffffff}, {0x0, 0x1}, {0x7, 0x8}, {0xd, 0x771}, {0x1000, 0x6}, {0x5358cfdc, 0x5}, {0x5, 0x2}, {0x6, 0x2}, {0x2, 0x7}, {0x10001, 0x19f2}, {0x8, 0x9}, {0xa57}, {0x5, 0x3}, {0x3, 0x400}, {0x7, 0x9}, {0xf601, 0x500}, {0x8, 0x10001}, {0x4, 0x37e5}, {0x211, 0x7}, {0x4, 0x9}, {0xb, 0x1}, {0xffffffffffffff16, 0x4}, {0xa, 0x2}, {0x400000, 0x73}, {0x2, 0xd9f}, {0x8000000000000000, 0x6}, {0x4, 0x1792}, {0xb, 0x3}, {0x5, 0x2}, {0x0, 0x8}, {0x7, 0x1}, {0x4}, {0xffff, 0x6403}, {0x9, 0x4}, {0xd4, 0x6}, {0x58c, 0x28}, {0x401, 0x4}, {0x4, 0x5}, {0xa, 0xe}, {0x8, 0x800}, {0x7, 0xfffffffffffffff7}, {0xfffffffffffffff8, 0x48e3}, {0x0, 0xf}, {0x7738, 0x5}, {0xd, 0x4}, {0x8, 0x5}, {0xfff, 0xffffffffffff8000}, {0x6, 0x1}, {0x8, 0xffffffffa93272fd}, {0x0, 0x2}, {0x8, 0xffffffffffffff14}, {0x7, 0x9}, {0x8, 0x5}, {0x2}, {0x70c8a80f, 0x8a4}, {0x9, 0x3}, {0xffffffff7fffffff, 0x7}, {0x5, 0xf2a}, {0x9, 0x4}, {0x8000, 0x8}, {0x2, 0x2}, {0x660c, 0x4}, {0x4, 0x908}, {0x4, 0x3}, {0x6, 0x81}, {0x6, 0x2}, {0x3ff, 0x7}, {0x1, 0x6}, {0xffffffffffff1c05, 0x1a0000000}, {0x8, 0x3}, {0x7, 0x5}, {0xfffffffffffffffb, 0x7a}, {0x0, 0x440}, {0x100, 0x1}, {0x4, 0x54f}, {0x4, 0x1}, {0x100, 0x1}, {0xc, 0x3}, {0x2}, {0x3, 0xfffffffffffffffa}, {0x5, 0x8000000000000001}, {0x8, 0x8000000000000000}, {0x25, 0x2}, {0xe6, 0x800}, {0x7fffffff, 0xe23a}, {0x87e2, 0x8}, {0x1, 0xffffffffffffffff}, {0x401, 0x8f8}, {0xffffffff, 0x7}, {0x9, 0x7}, {0x100000000, 0x10000}, {0x7fffffffffffffff, 0x5}, {0x3ded, 0x2}, {0x7ff, 0x7fffffff}, {0x4, 0x5fde}, {0xc, 0x6f3}, {0x0, 0xffffffff}, {0x6, 0xd}, {0x7, 0xc}, {0x81, 0x6}, {0x800, 0x3}, {0x5, 0x80}, {0x8000000000000000, 0x2}, {0x4, 0xe544}, {0x0, 0xe}, {0x1, 0x8000000000000000}, {0x7, 0x9}, {0x2, 0x5}, {0x3, 0x2}, {0x1, 0x5}, {0x2, 0x1}, {0x0, 0x3ff}, {0x2, 0xffffffffffffffff}, {0x5, 0xfff}, {0x7, 0x2}, {0x28b7, 0x6}, {0x7, 0x5}, {0x9, 0x9}, {0x5, 0x3e10}, {0x4, 0x2}, {0x6, 0x7}, {0x0, 0x8000000000000000}, {0x2, 0x1}, {0xa9, 0x2}, {0x5, 0xa}, {0x6, 0x200}, {0x857, 0x101}, {0xca80, 0xffffffff}, {0x3, 0xfff}, {0x2, 0x10}, {0xe8fa, 0x1000}, {0x1, 0xa547}, {0x1000, 0xc}, {0x10, 0x87f}, {0x5, 0xfffffffffffffc00}, {0x0, 0x5}, {0x1, 0x8}, {0xffff, 0x7}, {0x8000000000000000, 0x2}, {0xb, 0xffffffffffffaa83}, {0x7fffffffffffffff, 0x80000000}, {0x8001, 0x5}, {0x1828020d, 0x8000000000000000}, {0x800, 0x2}, {0x1, 0xfffffffffffffffd}, {0x9, 0xf03}, {0x0, 0x1}, {0x5, 0x722}, {0x7, 0x64}, {0x5, 0x2}, {0x3ff, 0xf180}, {0x5, 0x3ff}, {0x3711, 0x1}, {0x40fb7d61, 0x1}, {0x1, 0x6}, {0x8, 0x4}, {0x9, 0x80000000}, {0x40, 0x5}, {0x1, 0xf9f}, {0xa0, 0x4}, {0x40000000000, 0x401}, {0x2, 0x3}, {0xffffffffffffff7f, 0x578}, {0x0, 0x8}, {0x3, 0x79c}, {0x5, 0x5}, {0x7, 0xd71}, {0x6, 0x5}, {0x5, 0x3}, {0x5, 0x6}, {0x80000000, 0x7f}, {0x52c, 0xc}, {0x6, 0x3569}, {0x3, 0xdf77}, {0x60, 0x9}, {0x6, 0x4}, {0xff80000000000000, 0x80}, {0xfffffffffffffff9, 0x2}, {0x400000000000, 0x7}, {0x7, 0x4}, {0x7, 0x1}, {0x3, 0xf1e8}, {0x2b, 0x6}, {0x4, 0x4}, {0x0, 0x4}, {0xfffffffffffffffc, 0x1}, {0x7, 0x1800000000000000}, {0x10000, 0x9}, {0x1000, 0x2}, {0x7, 0x6}, {0x6, 0x3}, {0x9, 0xe729}, {0x80000001, 0x2894}, {0xdd, 0x1}, {0x7, 0x3}, {0xa, 0xfffffffffffffff8}, {0x8000000000000001, 0x5}, {0x0, 0xffff}, {0x4, 0x101}, {0x889d, 0x17}, {0x7, 0x4}, {0x0, 0x6}, {0x3ff, 0x7fff}, {0x401, 0xc928}, {0x1, 0x80000000}, {0x2, 0x6}, {0x8, 0x9}, {0xe2, 0x9}, {0x80000001}, {0x5, 0x8}, {0x401, 0x9}, {0xcb, 0x3}, {0x401, 0x6}, {0x9b2, 0xa9}, {0x6, 0x1}]}, &(0x7f0000002ac0)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000002b00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x2}, &(0x7f0000002c40)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000002c80)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000002cc0)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000001}}, &(0x7f0000002d40)=@features={{0x4f32494e, 0x6, 0x10, 0x80000001}}, &(0x7f0000002d80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000002dc0)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000002e40)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000002e80)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000002ec0)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000002f00)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, &(0x7f0000002f40)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000002fc0)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000003000)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000003040)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x2}, &(0x7f0000003180)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f00000031c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x5, 0xfffffffffffffff8}, {0x6, 0x2}, {0x8, 0xffffffffffffff81}, {0x1, 0x8}, {0x80000000, 0x9d}, {0x2, 0x5}, {0x28, 0x9}, {0x3341, 0x7}, {0x4, 0x8}, {0x101, 0x1}, {0x8000, 0x7}, {0xf5, 0x2}, {0x100000000, 0xfffffffffffffb57}, {0x4, 0x400}, {0xbe9b, 0x8}, {0x1b8f0ece, 0x5}, {0x9e, 0x10000}, {0x19e3, 0x400}, {0x0, 0x9b4}, {0x2, 0x10}, {0x0, 0x900}, {0x4, 0x3a}, {0x80, 0x1}, {0x41f7, 0xa}, {0x3a, 0x10001}, {0xfffffffffffffffd, 0x4}, {0x7}, {0xffff, 0x1f}, {0x143, 0x364f}, {0x101, 0x40}, {0xc, 0x4}, {0x0, 0x6}, {0x800, 0x2}, {0x100000001, 0x8}, {0x401, 0x50}, {0x6, 0x9}, {0x3, 0x7}, {0x2, 0xc6f}, {0x80, 0x4}, {0x0, 0x7}, {0x40, 0x3}, {0x8000, 0x6}, {0x850, 0xffffffffffffff7b}, {0x5, 0x200}, {0x5, 0x6}, {0x7b, 0x7fffffff}, {0x8001, 0x8a}, {0xffffffffffffff80}, {0x401, 0x2}, {0x9452, 0x6}, {0x6, 0x4}, {0x4, 0x7}, {0x31c1, 0xf}, {0xc17, 0xffffffff}, {0x5}, {0x8}, {0x5, 0x81}, {0x3, 0x46}, {0x68, 0x8}, {0x2, 0x4}, {0x100, 0x2}, {0x800, 0x8}, {0x7, 0x1}, {0x3d4, 0x1000}, {0x92, 0xf}, {0xfffffffffffffffd, 0x8}, {0x80, 0xc9ed}, {0x4d}, {0x8, 0x82}, {0x81, 0x1}, {0x2, 0x9}, {0x8, 0x3adabe29}, {0x100, 0x7fffffffffffffff}, {0x5, 0x101}, {0x6f3177f, 0x2}, {0xb, 0xd}, {0x1, 0xe}, {0xd, 0x7f}, {0x8000000000000001, 0x9}, {0x9, 0x1000}, {0x5, 0xa1}, {0x4, 0x5}, {0x0, 0x2}, {0x7, 0xd}, {0x4, 0x3}, {0x0, 0x8}, {0xfffffffffffff1dc, 0x5}, {0x40, 0x6}, {0xc7cc, 0xa}, {0xcb3f, 0x3}, {0x8, 0x5}, {0xfff, 0xc2}, {0x3}, {0xfffffffffffffff8, 0x6}, {0xffffffffffffff65, 0x8}, {0x8, 0x9}, {0x3, 0x9}, {0x80, 0x2}, {0x2, 0x4}, {0x80000001, 0x6d}, {0x4, 0xfb}, {0x7, 0x2}, {0x1, 0x2}, {0x4c1, 0x8}, {0x10000, 0x3}, {0x5, 0x80000001}, {}, {0xf4, 0x4}, {0xa, 0x6}, {0xffffffff, 0x9}, {0x8000000000000001, 0x13}, {0x4cdf, 0x5}, {0x5, 0x5}, {0x100, 0x1}, {0xfffffffffffffff8, 0x2}, {0x6, 0x7fff}, {0x1000, 0x1}, {0x95, 0x9}, {0x10, 0x5}, {0x8, 0x2beff671}, {0x2, 0xe}, {0x3ff, 0x4}, {0x8, 0x4311}, {0x19b, 0x6}, {0xfffffffffffffff9, 0x1}, {0x8, 0x9}, {0x1, 0x9}, {0x7fffffff, 0x4}, {0xab25, 0x9}, {0x7f, 0x678}, {0x2, 0xfffffffffffffffa}, {0x0, 0x401}, {0x8, 0x1}, {0x5, 0x67b2}, {0x1ff, 0x908}, {0xf, 0xcf}, {0x9, 0x5}, {0xfc1}, {0xfff, 0x9}, {0x0, 0x6}, {0x1}, {0x7fffffff, 0xac}, {0x1, 0x8}, {0xffffffffffff7fff, 0x9}, {0x1, 0x9}, {0x2, 0x10}, {0xfffffffffffffff8, 0xc}, {0xfffffffffffffff8, 0xff}, {0x34813c7, 0x8}, {0x7fffffff, 0x8}, {0x1668, 0xb0}, {0xfffffffffffffc3b, 0x8}, {0x5, 0x6}, {0x2, 0x3}, {0xfff, 0x2}, {0x4, 0x76b}, {0x9, 0x8}, {0x9, 0x8}, {0x5, 0x29cb}, {0x1, 0xffff}, {0x70000000000, 0x3ff}, {0x0, 0x7f}, {0x0, 0x40}, {0xffffffffffffffff, 0x4}, {0x40, 0x7}, {0x3, 0x8}, {0x401, 0xa}, {0x2e367ca0, 0x1}, {0x1, 0x9}, {0x100, 0x1ff}, {0x0, 0x6}, {0x9, 0x7}, {0x9, 0x2385}, {0x29, 0x5}, {0x1, 0x7}, {0xf4, 0x7b}, {0x2, 0x6}, {0x0, 0x100}, {0x9, 0x9}, {0x6, 0x7}, {0x3, 0xffffffffffffffff}, {0x9, 0x6d}, {0x8, 0x1}, {0x7f, 0xab}, {0x10a5, 0x1}, {0xd6, 0x9}, {0x2, 0xffffffffffffffff}, {0xea, 0x6}, {0x8, 0x4}, {0x3, 0x6}, {0x3ff, 0xc5b2}, {0x2, 0x1}, {0xeb7, 0x8}, {0x80000000, 0x61}, {0x9}, {0x2, 0xf}, {0xfffffffffffffffa, 0x3}, {}, {0x6, 0xa804}, {0x101, 0xbb2}, {0x62ea, 0x5}, {0x4}, {0x9, 0x8}, {0x10, 0x200}, {0x5, 0xfffffffffffffff8}, {0xf, 0x4}, {0xe, 0xed8}, {0x3e93, 0x3}, {0x1, 0x4956}, {0x59bc, 0x3}, {0x6, 0x7f}, {0x7, 0x8}, {0x6}, {0xfffffffffffffafc, 0x8}, {0x0, 0x1}, {0x3, 0x7f}, {0x7fff, 0xf}, {0x80000000, 0x1}, {0x4, 0x1ff}, {0x7f}, {0x81, 0x71062d29}, {0x4000000, 0x1}, {0x100, 0x6}, {0xfff, 0xff}, {0xb92, 0x8}, {0x1, 0xeb}, {0xfffffffffffffffd, 0x5}, {0x8, 0x6}, {0x8d7}, {0x0, 0x7fff}, {0x100000000, 0x9}, {0x0, 0xde3}, {0x1, 0x8}, {0x200, 0x1000}, {0x86, 0x3}, {0x10000, 0x80000000}, {0x1ff, 0x400}, {0xad, 0x10000}, {0xc, 0x920}, {0x8, 0x1}, {0x9, 0x1000}, {0x7fff, 0x8}, {0x4, 0x3}, {0x8000000000000000, 0x6}, {0x7, 0xe}, {0x9, 0x2}, {0x4bb8, 0x10000}, {0xe3, 0xfffffffffffffffa}, {0x4, 0x6}, {0x5, 0x1f}, {0x4, 0xe3}, {0x1000, 0x400}, {0x5, 0x50000000}, {0x3, 0x7fff}, {0x1, 0x22}]}, &(0x7f0000004200)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000004280)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f00000042c0)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000004300)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f0000004340)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x7ff}, &(0x7f0000004480)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f00000044c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}], 0x32}) setsockopt$sock_int(r4, 0x1, 0x26, &(0x7f0000000200)=0x202, 0x4) 0s ago: executing program 6 (id=2344): syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r0, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) kernel console output (not intermixed with test programs): [ 285.507751][ T9799] loop0: detected capacity change from 0 to 1024 [ 285.519370][ T9789] FAT-fs (loop6): Directory bread(block 72) failed [ 285.521833][ T9799] EXT4-fs: Ignoring removed mblk_io_submit option [ 285.540814][ T9789] FAT-fs (loop6): Directory bread(block 73) failed [ 285.555924][ T9799] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.693503][ T9799] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 285.704817][ T9799] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz.0.1722: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 285.724318][ T9799] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 285.724558][ T9799] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1722: couldn't read orphan inode 11 (err -117) [ 285.733825][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 285.733845][ C0] EXT4-fs (loop0): initial error at time 1773187012: ext4_ext_check_inode:521: inode 11 [ 285.733876][ C0] EXT4-fs (loop0): last error at time 1773187012: ext4_ext_check_inode:521: inode 11 [ 285.771311][ T9799] loop0: lost filesystem error report for type 5 error -117 [ 285.772356][ T9799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.805008][ T9803] loop6: detected capacity change from 0 to 512 [ 285.869161][ T3405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.913312][ T3524] lo speed is unknown, defaulting to 1000 [ 286.112694][ T9818] loop5: detected capacity change from 0 to 512 [ 286.241390][ T9818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.347062][ T9818] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.371988][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.467447][ T4062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.753112][ T9844] siw: device registration error -23 [ 286.763239][ T9842] lo speed is unknown, defaulting to 1000 [ 286.787666][ T9846] loop2: detected capacity change from 0 to 256 [ 286.851312][ T9846] FAT-fs (loop2): Directory bread(block 64) failed [ 286.857931][ T9846] FAT-fs (loop2): Directory bread(block 65) failed [ 286.880768][ T9846] FAT-fs (loop2): Directory bread(block 66) failed [ 286.887314][ T9846] FAT-fs (loop2): Directory bread(block 67) failed [ 286.895517][ T9847] siw: device registration error -23 [ 286.919050][ T3405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.927250][ T3523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.945600][ T9846] FAT-fs (loop2): Directory bread(block 68) failed [ 286.958953][ T9846] FAT-fs (loop2): Directory bread(block 69) failed [ 286.973093][ T9846] FAT-fs (loop2): Directory bread(block 70) failed [ 287.001971][ T9846] FAT-fs (loop2): Directory bread(block 71) failed [ 287.008523][ T9846] FAT-fs (loop2): Directory bread(block 72) failed [ 287.028982][ T9846] FAT-fs (loop2): Directory bread(block 73) failed [ 287.400758][ T9859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1739'. [ 287.455776][ T3405] hid-generic 0080:0005:FFFFFFFE.0046: unknown main item tag 0x0 [ 287.473229][ T3405] hid-generic 0080:0005:FFFFFFFE.0046: unknown main item tag 0x0 [ 287.505721][ T3405] hid-generic 0080:0005:FFFFFFFE.0046: hidraw0: HID v0.03 Device [syz0] on syz1 [ 287.625533][ T9857] Set syz1 is full, maxelem 65536 reached [ 287.925138][ T9860] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1739'. [ 287.952770][ T3405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.981588][ T9868] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1742'. [ 288.030907][ T9876] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1746'. [ 288.044700][ T9868] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1742'. [ 288.227950][ T9868] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1742'. [ 288.261052][ T9888] loop6: detected capacity change from 0 to 256 [ 288.273747][ T9885] lo speed is unknown, defaulting to 1000 [ 288.334291][ T9888] FAT-fs (loop6): Directory bread(block 64) failed [ 288.350989][ T9888] FAT-fs (loop6): Directory bread(block 65) failed [ 288.360911][ T9895] siw: device registration error -23 [ 288.395693][ T9888] FAT-fs (loop6): Directory bread(block 66) failed [ 288.402542][ T9897] netlink: 'syz.2.1753': attribute type 6 has an invalid length. [ 288.418382][ T9888] FAT-fs (loop6): Directory bread(block 67) failed [ 288.447515][ T9888] FAT-fs (loop6): Directory bread(block 68) failed [ 288.452010][ T9899] FAULT_INJECTION: forcing a failure. [ 288.452010][ T9899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.465238][ T9888] FAT-fs (loop6): Directory bread(block 69) failed [ 288.482913][ T9888] FAT-fs (loop6): Directory bread(block 70) failed [ 288.499098][ T9888] FAT-fs (loop6): Directory bread(block 71) failed [ 288.506360][ T9888] FAT-fs (loop6): Directory bread(block 72) failed [ 288.526344][ T9899] CPU: 1 UID: 0 PID: 9899 Comm: syz.2.1754 Not tainted syzkaller #0 PREEMPT(full) [ 288.526368][ T9899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 288.526378][ T9899] Call Trace: [ 288.526384][ T9899] [ 288.526391][ T9899] __dump_stack+0x1d/0x30 [ 288.526416][ T9899] dump_stack_lvl+0x95/0xd0 [ 288.526468][ T9899] dump_stack+0x15/0x1b [ 288.526486][ T9899] should_fail_ex+0x263/0x280 [ 288.526525][ T9899] should_fail+0xb/0x20 [ 288.526542][ T9899] should_fail_usercopy+0x1a/0x20 [ 288.526566][ T9899] _copy_from_user+0x1c/0xb0 [ 288.526632][ T9899] ___sys_sendmsg+0xc1/0x1e0 [ 288.526695][ T9899] __x64_sys_sendmsg+0xd4/0x160 [ 288.526726][ T9899] x64_sys_call+0x194c/0x3020 [ 288.526750][ T9899] do_syscall_64+0x12c/0x370 [ 288.526806][ T9899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.526825][ T9899] RIP: 0033:0x7f2075ffc799 [ 288.526839][ T9899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.526858][ T9899] RSP: 002b:00007f2074a4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.526878][ T9899] RAX: ffffffffffffffda RBX: 00007f2076275fa0 RCX: 00007f2075ffc799 [ 288.526957][ T9899] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 288.526969][ T9899] RBP: 00007f2074a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 288.526981][ T9899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.526994][ T9899] R13: 00007f2076276038 R14: 00007f2076275fa0 R15: 00007ffcf43cb728 [ 288.527092][ T9899] [ 288.693993][ T9888] FAT-fs (loop6): Directory bread(block 73) failed [ 288.754589][ T28] audit: type=1400 audit(1773187015.893:18229): avc: denied { map } for pid=9902 comm="syz.4.1757" path="socket:[25294]" dev="sockfs" ino=25294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 288.998168][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.202771][ T9923] loop6: detected capacity change from 0 to 512 [ 289.210904][ T9923] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 289.546298][ T9923] EXT4-fs (loop6): 1 truncate cleaned up [ 289.573097][ T9923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.635718][ T9940] 9p: Bad value for 'rfdno' [ 289.648192][ T9936] lo speed is unknown, defaulting to 1000 [ 289.678243][ T9943] loop0: detected capacity change from 0 to 512 [ 289.696301][ T9943] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 289.708484][ T28] audit: type=1400 audit(1773187016.853:18230): avc: denied { connect } for pid=9935 comm="syz.0.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 289.741254][ T9943] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 289.753867][ T28] audit: type=1400 audit(1773187016.873:18231): avc: denied { create } for pid=9935 comm="syz.0.1765" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 289.754762][ T28] audit: type=1400 audit(1773187016.873:18232): avc: denied { mounton } for pid=9935 comm="syz.0.1765" path="/337/file2" dev="tmpfs" ino=1807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 289.851251][ T9943] EXT4-fs (loop0): group descriptors corrupted! [ 289.956549][ T3367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.985043][ T9936] loop0: detected capacity change from 0 to 164 [ 289.994004][ T9936] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=82 [ 290.029139][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.134825][ T28] audit: type=1400 audit(1773187017.313:18233): avc: denied { rmdir } for pid=3312 comm="syz-executor" name="file2" dev="tmpfs" ino=1807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 290.202942][ T9960] netlink: 'syz.5.1774': attribute type 21 has an invalid length. [ 290.380059][ T9960] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1774'. [ 290.418023][ T5371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.511470][ T9973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1775'. [ 290.530481][ T9974] siw: device registration error -23 [ 290.534591][ T9947] lo speed is unknown, defaulting to 1000 [ 290.560015][ T9968] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1775'. [ 290.669885][ T9972] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1777'. [ 290.688296][ T3367] hid-generic 0080:0005:FFFFFFFE.0047: unknown main item tag 0x0 [ 290.697781][ T3367] hid-generic 0080:0005:FFFFFFFE.0047: unknown main item tag 0x0 [ 290.728376][ T3367] hid-generic 0080:0005:FFFFFFFE.0047: hidraw0: HID v0.03 Device [syz0] on syz1 [ 290.839384][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.867105][ T9989] lo speed is unknown, defaulting to 1000 [ 290.971201][ T9965] Set syz1 is full, maxelem 65536 reached [ 291.019886][ T9993] loop2: detected capacity change from 0 to 1024 [ 291.046130][ T9993] EXT4-fs: Ignoring removed mblk_io_submit option [ 291.069253][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.079480][ T9993] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 291.088246][ T9993] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 291.116505][ T9993] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.1783: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 291.135510][ T9993] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 291.138906][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 291.146610][ T9999] netlink: 'syz.0.1785': attribute type 9 has an invalid length. [ 291.148051][ C1] EXT4-fs (loop2): initial error at time 1773187018: ext4_ext_check_inode:521: inode 11 [ 291.171937][ C1] EXT4-fs (loop2): last error at time 1773187018: ext4_ext_check_inode:521: inode 11 [ 291.181583][ T9993] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1783: couldn't read orphan inode 11 (err -117) [ 291.195217][ T9993] loop2: lost filesystem error report for type 5 error -117 [ 291.195698][ T9993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.195800][ T9975] Set syz1 is full, maxelem 65536 reached [ 291.254033][T10001] 8021q: VLANs not supported on wg2 [ 291.274764][T10001] loop0: detected capacity change from 0 to 512 [ 291.293163][T10001] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 291.321792][T10001] EXT4-fs (loop0): 1 truncate cleaned up [ 291.328003][T10001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.359967][T10005] syzkaller0: entered promiscuous mode [ 291.365490][T10005] syzkaller0: entered allmulticast mode [ 291.373197][ T28] audit: type=1326 audit(1773187018.553:18234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.5.1787" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e6a2dc799 code=0x0 [ 291.424453][ T28] audit: type=1400 audit(1773187018.603:18235): avc: denied { connect } for pid=10004 comm="syz.5.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 291.589252][T10019] lo speed is unknown, defaulting to 1000 [ 291.663046][T10025] netlink: 'syz.6.1795': attribute type 7 has an invalid length. [ 291.719354][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.788171][T10036] loop6: detected capacity change from 0 to 1024 [ 291.815731][T10036] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.833056][T10042] 9p: Bad value for 'rfdno' [ 291.860438][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.910987][T10047] siw: device registration error -23 [ 291.944357][T10052] 9p: Bad value for 'wfdno' [ 291.997230][T10056] lo speed is unknown, defaulting to 1000 [ 292.109214][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.231622][T10065] loop5: detected capacity change from 0 to 8192 [ 292.335009][T10069] 9p: Bad value for 'rfdno' [ 292.444090][T10076] x_tables: duplicate underflow at hook 1 [ 292.590293][ T5371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.660341][T10083] lo speed is unknown, defaulting to 1000 [ 292.712871][ T28] audit: type=1400 audit(1773187019.893:18236): avc: denied { search } for pid=10086 comm="syz.6.1819" name="/" dev="configfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 292.759242][T10089] loop6: detected capacity change from 0 to 128 [ 292.768292][T10089] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 292.781186][T10089] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 292.827567][ T309] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 292.852164][T10100] 9p: Bad value for 'rfdno' [ 292.890433][T10107] FAULT_INJECTION: forcing a failure. [ 292.890433][T10107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.903836][T10107] CPU: 0 UID: 0 PID: 10107 Comm: syz.6.1826 Not tainted syzkaller #0 PREEMPT(full) [ 292.903862][T10107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 292.903881][T10107] Call Trace: [ 292.903888][T10107] [ 292.903896][T10107] __dump_stack+0x1d/0x30 [ 292.903919][T10107] dump_stack_lvl+0x95/0xd0 [ 292.903958][T10107] dump_stack+0x15/0x1b [ 292.903978][T10107] should_fail_ex+0x263/0x280 [ 292.904002][T10107] should_fail+0xb/0x20 [ 292.904090][T10107] should_fail_usercopy+0x1a/0x20 [ 292.904115][T10107] _copy_to_user+0x20/0xa0 [ 292.904143][T10107] simple_read_from_buffer+0xb5/0x130 [ 292.904198][T10107] proc_fail_nth_read+0x10e/0x150 [ 292.904227][T10107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 292.904255][T10107] vfs_read+0x1ab/0x7f0 [ 292.904329][T10107] ? __rcu_read_unlock+0x4e/0x70 [ 292.904348][T10107] ? __fget_files+0x184/0x1c0 [ 292.904430][T10107] ? mutex_lock+0x57/0x90 [ 292.904459][T10107] ksys_read+0xdc/0x1a0 [ 292.904493][T10107] __x64_sys_read+0x40/0x50 [ 292.904554][T10107] x64_sys_call+0x2886/0x3020 [ 292.904582][T10107] do_syscall_64+0x12c/0x370 [ 292.904603][T10107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.904683][T10107] RIP: 0033:0x7f0f3acacfce [ 292.904699][T10107] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 292.904716][T10107] RSP: 002b:00007f0f3973efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 292.904734][T10107] RAX: ffffffffffffffda RBX: 00007f0f3973f6c0 RCX: 00007f0f3acacfce [ 292.904747][T10107] RDX: 000000000000000f RSI: 00007f0f3973f0a0 RDI: 0000000000000004 [ 292.904765][T10107] RBP: 00007f0f3973f090 R08: 0000000000000000 R09: 0000000000000000 [ 292.904777][T10107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.904789][T10107] R13: 00007f0f3af66038 R14: 00007f0f3af65fa0 R15: 00007ffd49926f88 [ 292.904806][T10107] [ 293.098524][ T3367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.149068][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.202329][T10121] lo speed is unknown, defaulting to 1000 [ 293.261094][T10123] lo speed is unknown, defaulting to 1000 [ 293.332254][T10132] 9p: Bad value for 'rfdno' [ 293.472353][ T28] audit: type=1400 audit(1773187020.653:18237): avc: denied { setopt } for pid=10150 comm="syz.5.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 293.650656][T10166] __nla_validate_parse: 3 callbacks suppressed [ 293.650672][T10166] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1848'. [ 293.668872][T10166] netlink: 'syz.5.1848': attribute type 8 has an invalid length. [ 293.694288][T10164] loop0: detected capacity change from 0 to 1024 [ 293.701854][T10164] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 293.721304][T10168] lo speed is unknown, defaulting to 1000 [ 293.741231][T10170] 9p: Bad value for 'rfdno' [ 293.750818][T10164] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 2: comm syz.0.1847: lblock 2 mapped to illegal pblock 2 (length 1) [ 293.775002][T10164] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 293.775158][T10164] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 293.784231][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 293.784248][ C1] EXT4-fs (loop0): initial error at time 1773187020: ext4_map_blocks:776: inode 3: block 2 [ 293.784309][ C1] EXT4-fs (loop0): last error at time 1773187020: ext4_map_blocks:776: inode 3: block 2 [ 293.848364][T10164] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 48: comm syz.0.1847: lblock 0 mapped to illegal pblock 48 (length 1) [ 293.905230][T10174] lo speed is unknown, defaulting to 1000 [ 293.911164][T10164] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 293.911295][T10164] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 293.938957][T10164] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.1847: Failed to acquire dquot type 0 [ 293.952263][T10177] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1852'. [ 293.963611][T10164] loop0: lost filesystem error report for type 5 error -117 [ 293.963732][T10164] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 293.969331][T10177] netlink: 'syz.5.1852': attribute type 8 has an invalid length. [ 293.988654][T10164] loop0: lost filesystem error report for type 5 error -117 [ 293.988824][T10164] EXT4-fs error (device loop0): ext4_evict_inode:255: inode #11: comm syz.0.1847: mark_inode_dirty error [ 294.016474][ T23] hid-generic 0080:0005:FFFFFFFE.0048: unknown main item tag 0x0 [ 294.025940][ T23] hid-generic 0080:0005:FFFFFFFE.0048: unknown main item tag 0x0 [ 294.037211][ T23] hid-generic 0080:0005:FFFFFFFE.0048: hidraw0: HID v0.03 Device [syz0] on syz1 [ 294.045326][T10164] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 294.054050][T10181] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1854'. [ 294.055437][T10164] EXT4-fs warning (device loop0): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 294.097268][T10164] EXT4-fs (loop0): 1 orphan inode deleted [ 294.104169][T10182] fido_id[10182]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 294.120665][T10164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.136108][ T7801] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 294.155239][ T7801] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:11: Failed to release dquot type 0 [ 294.192070][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.279525][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.289238][ T3312] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 294.291812][T10198] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1857'. [ 294.302883][ T3312] loop0: lost filesystem error report for type 5 error -117 [ 294.315268][T10198] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1857'. [ 294.332482][ T3312] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 294.334335][ T3572] hid-generic 0080:0005:FFFFFFFE.0049: unknown main item tag 0x0 [ 294.350475][ T3572] hid-generic 0080:0005:FFFFFFFE.0049: unknown main item tag 0x0 [ 294.352188][ T3312] loop0: lost filesystem error report for type 5 error -117 [ 294.358697][ T3312] EXT4-fs error (device loop0): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 294.359206][T10199] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1859'. [ 294.366346][ T3312] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 294.386544][ T3572] hid-generic 0080:0005:FFFFFFFE.0049: hidraw0: HID v0.03 Device [syz0] on syz1 [ 294.423796][T10200] fido_id[10200]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 294.464511][T10199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1859'. [ 294.482882][ T23] hid-generic 0080:0005:FFFFFFFE.004A: unknown main item tag 0x0 [ 294.515602][ T23] hid-generic 0080:0005:FFFFFFFE.004A: unknown main item tag 0x0 [ 294.536896][ T23] hid-generic 0080:0005:FFFFFFFE.004A: hidraw0: HID v0.03 Device [syz0] on syz1 [ 294.619252][T10212] lo speed is unknown, defaulting to 1000 [ 294.657912][T10192] Set syz1 is full, maxelem 65536 reached [ 294.720707][T10189] Set syz1 is full, maxelem 65536 reached [ 294.743195][T10219] 9p: Bad value for 'rfdno' [ 294.780285][T10223] loop6: detected capacity change from 0 to 4096 [ 294.787076][T10224] FAULT_INJECTION: forcing a failure. [ 294.787076][T10224] name failslab, interval 1, probability 0, space 0, times 0 [ 294.799908][T10224] CPU: 0 UID: 0 PID: 10224 Comm: syz.2.1865 Not tainted syzkaller #0 PREEMPT(full) [ 294.799957][T10224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 294.799968][T10224] Call Trace: [ 294.799973][T10224] [ 294.799980][T10224] __dump_stack+0x1d/0x30 [ 294.800007][T10224] dump_stack_lvl+0x95/0xd0 [ 294.800027][T10224] dump_stack+0x15/0x1b [ 294.800120][T10224] should_fail_ex+0x263/0x280 [ 294.800143][T10224] ? refill_pi_state_cache+0x5f/0xe0 [ 294.800172][T10224] should_failslab+0x8c/0xb0 [ 294.800215][T10224] __kmalloc_cache_noprof+0x5f/0x410 [ 294.800238][T10224] refill_pi_state_cache+0x5f/0xe0 [ 294.800317][T10224] futex_requeue+0x107/0x13f0 [ 294.800337][T10224] ? kstrtouint_from_user+0xa8/0xf0 [ 294.800360][T10224] do_futex+0x2ec/0x380 [ 294.800467][T10224] __se_sys_futex+0x2f6/0x370 [ 294.800504][T10224] ? mutex_unlock+0x4e/0x90 [ 294.800541][T10224] __x64_sys_futex+0x78/0x90 [ 294.800568][T10224] x64_sys_call+0x24ab/0x3020 [ 294.800593][T10224] do_syscall_64+0x12c/0x370 [ 294.800656][T10224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.800718][T10224] RIP: 0033:0x7f2075ffc799 [ 294.800732][T10224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.800748][T10224] RSP: 002b:00007f2074a2e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 294.800830][T10224] RAX: ffffffffffffffda RBX: 00007f2076276090 RCX: 00007f2075ffc799 [ 294.800844][T10224] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc [ 294.800894][T10224] RBP: 00007f2074a2e090 R08: 0000200000048000 R09: 0000000000000000 [ 294.800909][T10224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.800921][T10224] R13: 00007f2076276128 R14: 00007f2076276090 R15: 00007ffcf43cb728 [ 294.800941][T10224] [ 294.801642][T10221] loop5: detected capacity change from 0 to 128 [ 294.867493][T10223] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.005852][T10221] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.006135][T10223] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.1868: corrupted inode contents [ 295.029922][T10223] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #15: comm syz.6.1868: mark_inode_dirty error [ 295.041533][T10221] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.053166][T10223] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.1868: corrupted inode contents [ 295.065531][T10223] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.1868: mark_inode_dirty error [ 295.077224][T10223] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.1868: corrupted inode contents [ 295.089285][T10223] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.1868: mark_inode_dirty error [ 295.100881][T10223] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.1868: corrupted inode contents [ 295.113919][T10223] EXT4-fs error (device loop6): ext4_truncate:4587: inode #15: comm syz.6.1868: mark_inode_dirty error [ 295.125258][T10223] EXT4-fs error (device loop6) in ext4_setattr:5983: Corrupt filesystem [ 295.160622][ T4062] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 295.182135][ T5371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.208057][T10238] xt_recent: hitcount (4194304) is larger than allowed maximum (65535) [ 295.223836][T10238] loop6: detected capacity change from 0 to 2048 [ 295.230519][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.249847][T10238] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #2: comm syz.6.1871: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2053(2053) [ 295.268287][T10238] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 295.268929][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 295.278245][T10238] EXT4-fs (loop6): Remounting filesystem read-only [ 295.284378][ C1] EXT4-fs (loop6): initial error at time 1773187022: ext4_ext_check_inode:521: inode 2 [ 295.284411][ C1] EXT4-fs (loop6): last error at time 1773187022: ext4_ext_check_inode:521 [ 295.291312][T10238] EXT4-fs (loop6): get root inode failed [ 295.300527][ C1] : inode 2 [ 295.318853][T10238] EXT4-fs (loop6): mount failed [ 295.522966][T10250] lo speed is unknown, defaulting to 1000 [ 296.061577][T10264] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1876'. [ 296.109310][ T3572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.128402][T10267] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1877'. [ 296.138966][T10262] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1876'. [ 296.148245][T10266] 9p: Bad value for 'rfdno' [ 296.159242][ T3572] hid-generic 0080:0005:FFFFFFFE.004B: unknown main item tag 0x0 [ 296.172062][ T3572] hid-generic 0080:0005:FFFFFFFE.004B: unknown main item tag 0x0 [ 296.195314][ T3572] hid-generic 0080:0005:FFFFFFFE.004B: hidraw0: HID v0.03 Device [syz0] on syz1 [ 296.203394][T10269] loop5: detected capacity change from 0 to 1024 [ 296.215224][T10269] EXT4-fs: Ignoring removed mblk_io_submit option [ 296.228061][T10270] fido_id[10270]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 296.252689][T10269] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 296.269247][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.274793][T10269] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 296.289009][T10269] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz.5.1879: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 296.308961][T10269] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 296.309143][T10269] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1879: couldn't read orphan inode 11 (err -117) [ 296.330069][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 296.330090][ C1] EXT4-fs (loop5): initial error at time 1773187023: ext4_ext_check_inode:521: inode 11 [ 296.330129][ C1] EXT4-fs (loop5): last error at time 1773187023: ext4_ext_check_inode:521: inode 11 [ 296.356753][T10269] loop5: lost filesystem error report for type 5 error -117 [ 296.357332][T10269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.473961][T10263] Set syz1 is full, maxelem 65536 reached [ 296.525745][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 296.525759][ T28] audit: type=1400 audit(1773187023.703:18238): avc: denied { ioctl } for pid=10285 comm="syz.4.1884" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27067 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 296.567100][T10259] Set syz1 is full, maxelem 65536 reached [ 296.589721][ T7801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.781781][T10311] siw: device registration error -23 [ 297.304800][ T4062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.319230][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.363157][T10320] FAULT_INJECTION: forcing a failure. [ 297.363157][T10320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.388519][T10320] CPU: 0 UID: 0 PID: 10320 Comm: syz.5.1896 Not tainted syzkaller #0 PREEMPT(full) [ 297.388547][T10320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.388557][T10320] Call Trace: [ 297.388564][T10320] [ 297.388573][T10320] __dump_stack+0x1d/0x30 [ 297.388645][T10320] dump_stack_lvl+0x95/0xd0 [ 297.388666][T10320] dump_stack+0x15/0x1b [ 297.388683][T10320] should_fail_ex+0x263/0x280 [ 297.388727][T10320] should_fail+0xb/0x20 [ 297.388744][T10320] should_fail_usercopy+0x1a/0x20 [ 297.388764][T10320] _copy_to_iter+0x251/0xea0 [ 297.388851][T10320] ? traverse+0x379/0x3a0 [ 297.388923][T10320] seq_read_iter+0x1d5/0x940 [ 297.388998][T10320] ? _parse_integer_limit+0x170/0x190 [ 297.389019][T10320] seq_read+0x279/0x2c0 [ 297.389087][T10320] ? __pfx_seq_read+0x10/0x10 [ 297.389135][T10320] proc_reg_read+0x128/0x1c0 [ 297.389155][T10320] ? __pfx_proc_reg_read+0x10/0x10 [ 297.389174][T10320] vfs_readv+0x432/0x6e0 [ 297.389260][T10320] ? __pfx_proc_reg_read+0x10/0x10 [ 297.389286][T10320] __x64_sys_preadv+0xfd/0x1c0 [ 297.389314][T10320] x64_sys_call+0x2915/0x3020 [ 297.389338][T10320] do_syscall_64+0x12c/0x370 [ 297.389394][T10320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.389413][T10320] RIP: 0033:0x7f6e6a2dc799 [ 297.389469][T10320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.389485][T10320] RSP: 002b:00007f6e68d37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 297.389503][T10320] RAX: ffffffffffffffda RBX: 00007f6e6a555fa0 RCX: 00007f6e6a2dc799 [ 297.389515][T10320] RDX: 0000000000000003 RSI: 00002000000007c0 RDI: 0000000000000003 [ 297.389526][T10320] RBP: 00007f6e68d37090 R08: 0000000080000001 R09: 0000000000000000 [ 297.389538][T10320] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 297.389565][T10320] R13: 00007f6e6a556038 R14: 00007f6e6a555fa0 R15: 00007ffcdccb8e78 [ 297.389582][T10320] [ 297.809327][ T28] audit: type=1326 audit(1773187024.983:18239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10341 comm="syz.4.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf1a4c799 code=0x7ffc0000 [ 297.916955][ T28] audit: type=1326 audit(1773187024.983:18240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10341 comm="syz.4.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf1a4c799 code=0x7ffc0000 [ 297.950731][ T28] audit: type=1326 audit(1773187024.983:18241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10341 comm="syz.4.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf1a4c799 code=0x7ffc0000 [ 297.985813][ T28] audit: type=1326 audit(1773187024.983:18242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10341 comm="syz.4.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf1a4c799 code=0x7ffc0000 [ 298.012702][ T28] audit: type=1326 audit(1773187024.983:18243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10341 comm="syz.4.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fcdf1a4c799 code=0x7ffc0000 [ 298.037601][ T28] audit: type=1326 audit(1773187024.983:18244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10341 comm="syz.4.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf1a4c799 code=0x7ffc0000 [ 298.069408][ T28] audit: type=1326 audit(1773187024.983:18245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10341 comm="syz.4.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf1a4c799 code=0x7ffc0000 [ 298.093337][ T28] audit: type=1326 audit(1773187024.983:18246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10341 comm="syz.4.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf1a4c799 code=0x7ffc0000 [ 298.127290][ T28] audit: type=1326 audit(1773187024.983:18247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10341 comm="syz.4.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf1a4c799 code=0x7ffc0000 [ 298.251501][T10358] loop0: detected capacity change from 0 to 1764 [ 298.985930][ T3524] IPVS: starting estimator thread 0... [ 299.109097][T10364] IPVS: using max 2544 ests per chain, 127200 per kthread [ 299.564259][ T3385] net_ratelimit: 4 callbacks suppressed [ 299.564274][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.656482][T10386] __nla_validate_parse: 8 callbacks suppressed [ 299.656500][T10386] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1919'. [ 299.672197][T10388] 8021q: VLANs not supported on wg2 [ 299.680459][T10388] loop0: detected capacity change from 0 to 512 [ 299.691142][T10388] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 299.707872][T10388] EXT4-fs (loop0): 1 truncate cleaned up [ 299.714193][T10388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.801340][T10408] loop2: detected capacity change from 0 to 256 [ 300.871150][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.388959][T10408] FAT-fs (loop2): Directory bread(block 64) failed [ 301.395624][T10408] FAT-fs (loop2): Directory bread(block 65) failed [ 301.402239][T10408] FAT-fs (loop2): Directory bread(block 66) failed [ 301.408762][T10408] FAT-fs (loop2): Directory bread(block 67) failed [ 301.415431][T10408] FAT-fs (loop2): Directory bread(block 68) failed [ 301.421949][T10408] FAT-fs (loop2): Directory bread(block 69) failed [ 301.428715][T10408] FAT-fs (loop2): Directory bread(block 70) failed [ 301.435381][T10408] FAT-fs (loop2): Directory bread(block 71) failed [ 301.441946][T10408] FAT-fs (loop2): Directory bread(block 72) failed [ 301.448604][T10408] FAT-fs (loop2): Directory bread(block 73) failed [ 301.567649][T10408] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 302.462605][T10416] loop5: detected capacity change from 0 to 256 [ 302.860887][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.877848][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.886122][ T3524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.922688][T10417] netlink: 'syz.6.1929': attribute type 39 has an invalid length. [ 303.599481][T10416] FAT-fs (loop5): Directory bread(block 64) failed [ 303.606066][T10416] FAT-fs (loop5): Directory bread(block 65) failed [ 303.612795][T10416] FAT-fs (loop5): Directory bread(block 66) failed [ 303.619407][T10416] FAT-fs (loop5): Directory bread(block 67) failed [ 303.626010][T10416] FAT-fs (loop5): Directory bread(block 68) failed [ 303.632541][T10416] FAT-fs (loop5): Directory bread(block 69) failed [ 303.639415][T10416] FAT-fs (loop5): Directory bread(block 70) failed [ 303.646009][T10416] FAT-fs (loop5): Directory bread(block 71) failed [ 303.652644][T10416] FAT-fs (loop5): Directory bread(block 72) failed [ 303.659198][T10416] FAT-fs (loop5): Directory bread(block 73) failed [ 303.711936][T10421] FAULT_INJECTION: forcing a failure. [ 303.711936][T10421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.872136][T10421] CPU: 1 UID: 0 PID: 10421 Comm: syz.2.1930 Not tainted syzkaller #0 PREEMPT(full) [ 303.872162][T10421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 303.872182][T10421] Call Trace: [ 303.872242][T10421] [ 303.872250][T10421] __dump_stack+0x1d/0x30 [ 303.872274][T10421] dump_stack_lvl+0x95/0xd0 [ 303.872297][T10421] dump_stack+0x15/0x1b [ 303.872317][T10421] should_fail_ex+0x263/0x280 [ 303.872408][T10421] should_fail+0xb/0x20 [ 303.872430][T10421] should_fail_usercopy+0x1a/0x20 [ 303.872454][T10421] _copy_to_user+0x20/0xa0 [ 303.872479][T10421] simple_read_from_buffer+0xb5/0x130 [ 303.872535][T10421] proc_fail_nth_read+0x10e/0x150 [ 303.872567][T10421] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.872591][T10421] vfs_read+0x1ab/0x7f0 [ 303.872698][T10421] ? __rcu_read_unlock+0x4e/0x70 [ 303.872720][T10421] ? __fget_files+0x184/0x1c0 [ 303.872746][T10421] ? mutex_lock+0x57/0x90 [ 303.872819][T10421] ksys_read+0xdc/0x1a0 [ 303.872851][T10421] __x64_sys_read+0x40/0x50 [ 303.872868][T10421] x64_sys_call+0x2886/0x3020 [ 303.873008][T10421] do_syscall_64+0x12c/0x370 [ 303.873030][T10421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.873049][T10421] RIP: 0033:0x7f2075fbcfce [ 303.873086][T10421] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 303.873108][T10421] RSP: 002b:00007f2074a2dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 303.873125][T10421] RAX: ffffffffffffffda RBX: 00007f2074a2e6c0 RCX: 00007f2075fbcfce [ 303.873139][T10421] RDX: 000000000000000f RSI: 00007f2074a2e0a0 RDI: 0000000000000004 [ 303.873220][T10421] RBP: 00007f2074a2e090 R08: 0000000000000000 R09: 0000000000000000 [ 303.873235][T10421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.873267][T10421] R13: 00007f2076276128 R14: 00007f2076276090 R15: 00007ffcf43cb728 [ 303.873287][T10421] [ 304.106216][T10424] loop6: detected capacity change from 0 to 4096 [ 304.111870][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.142597][T10424] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.160338][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.175859][T10424] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.239482][T10417] hsr_slave_1 (unregistering): left promiscuous mode [ 304.304128][T10416] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 304.345877][T10438] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1931'. [ 304.364415][T10438] netlink: 'syz.0.1931': attribute type 8 has an invalid length. [ 304.381790][ T3523] hid-generic 0080:0005:FFFFFFFE.004C: unknown main item tag 0x0 [ 304.399021][ T3523] hid-generic 0080:0005:FFFFFFFE.004C: unknown main item tag 0x0 [ 304.459136][ T3523] hid-generic 0080:0005:FFFFFFFE.004C: hidraw0: HID v0.03 Device [syz0] on syz1 [ 304.502871][T10440] fido_id[10440]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 304.591809][T10433] Set syz1 is full, maxelem 65536 reached [ 304.723474][T10446] lo speed is unknown, defaulting to 1000 [ 304.748215][T10449] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10449 comm=syz.6.1935 [ 304.797941][T10453] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1939'. [ 304.850871][T10455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.859740][T10455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.886637][T10455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1940'. [ 304.920961][T10455] loop0: detected capacity change from 0 to 512 [ 304.934356][T10455] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 304.948191][T10455] EXT4-fs (loop0): 1 truncate cleaned up [ 304.955975][T10455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.999336][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.018858][T10461] 8021q: VLANs not supported on wg2 [ 305.026910][T10461] loop0: detected capacity change from 0 to 512 [ 305.042087][T10461] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 305.053302][T10461] EXT4-fs (loop0): 1 truncate cleaned up [ 305.059595][T10461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.151636][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.381313][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.402581][T10473] loop0: detected capacity change from 0 to 1024 [ 305.419929][T10473] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 305.431776][T10473] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 2: comm syz.0.1944: lblock 2 mapped to illegal pblock 2 (length 1) [ 305.446238][T10473] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 305.446333][T10473] __quota_error: 914 callbacks suppressed [ 305.446364][T10473] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 305.455439][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 305.455458][ C1] EXT4-fs (loop0): initial error at time 1773187032: ext4_map_blocks:776: inode 3: block 2 [ 305.455508][ C1] EXT4-fs (loop0): last error at time 1773187032: ext4_map_blocks:776: inode 3: block 2 [ 305.495620][T10473] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 48: comm syz.0.1944: lblock 0 mapped to illegal pblock 48 (length 1) [ 305.509778][T10473] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 305.519744][T10473] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 305.537615][T10473] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.1944: Failed to acquire dquot type 0 [ 305.549217][T10473] loop0: lost filesystem error report for type 5 error -117 [ 305.550600][T10473] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 305.571367][T10473] loop0: lost filesystem error report for type 5 error -117 [ 305.571564][T10473] EXT4-fs error (device loop0): ext4_evict_inode:255: inode #11: comm syz.0.1944: mark_inode_dirty error [ 305.590198][T10473] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 305.590382][T10473] EXT4-fs warning (device loop0): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 305.622114][T10473] EXT4-fs (loop0): 1 orphan inode deleted [ 305.657060][T10477] loop6: detected capacity change from 0 to 8192 [ 305.663637][ T41] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 305.680510][ T41] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 305.680667][ T41] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 305.681139][T10483] xt_CONNSECMARK: invalid mode: 0 [ 305.690663][T10477] msdos: Unknown parameter 'n"s' [ 305.711504][ T41] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 0 [ 305.718533][T10482] xt_CONNSECMARK: invalid mode: 0 [ 305.728356][T10473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.740458][ T41] loop0: lost filesystem error report for type 5 error -117 [ 305.762261][T10482] xt_hashlimit: size too large, truncated to 1048576 [ 305.870526][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.872445][T10484] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1947'. [ 305.891528][ T3312] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 305.907096][T10494] lo speed is unknown, defaulting to 1000 [ 305.917927][ T3312] loop0: lost filesystem error report for type 5 error -117 [ 305.918055][ T3312] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 305.932816][T10490] netlink: 'syz.5.1947': attribute type 8 has an invalid length. [ 305.946794][ T3312] loop0: lost filesystem error report for type 5 error -117 [ 305.949074][ T3312] EXT4-fs error (device loop0): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 305.969557][ T3523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.987884][ T3312] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 306.000326][ T3523] hid-generic 0080:0005:FFFFFFFE.004D: unknown main item tag 0x0 [ 306.042755][ T3523] hid-generic 0080:0005:FFFFFFFE.004D: unknown main item tag 0x0 [ 306.059374][ T3523] hid-generic 0080:0005:FFFFFFFE.004D: hidraw0: HID v0.03 Device [syz0] on syz1 [ 306.133163][T10480] Set syz1 is full, maxelem 65536 reached [ 306.191503][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.210525][T10510] netlink: 'syz.2.1955': attribute type 10 has an invalid length. [ 306.248988][T10510] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1955'. [ 306.270672][T10510] team0: entered promiscuous mode [ 306.275817][T10510] team0: entered allmulticast mode [ 306.615175][T10510] bridge0: port 1(team0) entered blocking state [ 306.616755][T10519] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1959'. [ 306.633064][T10505] fido_id[10505]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 306.653374][T10510] bridge0: port 1(team0) entered disabled state [ 307.006199][T10533] lo speed is unknown, defaulting to 1000 [ 307.042781][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1963'. [ 307.155639][T10546] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1963'. [ 307.173467][T10546] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1963'. [ 307.200598][ T3523] hid-generic 0080:0005:FFFFFFFE.004E: unknown main item tag 0x0 [ 307.209475][T10543] netlink: 'syz.4.1964': attribute type 1 has an invalid length. [ 307.214838][ T3523] hid-generic 0080:0005:FFFFFFFE.004E: unknown main item tag 0x0 [ 307.231541][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.236132][ T3523] hid-generic 0080:0005:FFFFFFFE.004E: hidraw0: HID v0.03 Device [syz0] on syz1 [ 307.271177][T10543] netlink: 'syz.4.1964': attribute type 2 has an invalid length. [ 307.283939][T10552] fido_id[10552]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 307.310137][T10543] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1964'. [ 307.394437][T10556] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1968'. [ 307.666992][T10535] Set syz1 is full, maxelem 65536 reached [ 307.924872][T10551] Set syz1 is full, maxelem 65536 reached [ 308.172938][T10579] lo speed is unknown, defaulting to 1000 [ 308.389691][T10589] lo speed is unknown, defaulting to 1000 [ 309.484612][T10619] lo speed is unknown, defaulting to 1000 [ 309.681175][ T28] audit: type=1326 audit(1773187036.863:19162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10620 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35451ac799 code=0x7ffc0000 [ 309.706037][T10623] FAULT_INJECTION: forcing a failure. [ 309.706037][T10623] name failslab, interval 1, probability 0, space 0, times 0 [ 309.735011][T10623] CPU: 0 UID: 0 PID: 10623 Comm: syz.0.1990 Not tainted syzkaller #0 PREEMPT(full) [ 309.735037][T10623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 309.735049][T10623] Call Trace: [ 309.735132][T10623] [ 309.735190][T10623] __dump_stack+0x1d/0x30 [ 309.735214][T10623] dump_stack_lvl+0x95/0xd0 [ 309.735234][T10623] dump_stack+0x15/0x1b [ 309.735254][T10623] should_fail_ex+0x263/0x280 [ 309.735317][T10623] should_failslab+0x8c/0xb0 [ 309.735336][T10623] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 309.735360][T10623] ? sidtab_sid2str_get+0xa0/0x130 [ 309.735381][T10623] kmemdup_noprof+0x2b/0x70 [ 309.735478][T10623] sidtab_sid2str_get+0xa0/0x130 [ 309.735497][T10623] security_sid_to_context_core+0x1eb/0x2e0 [ 309.735517][T10623] security_sid_to_context+0x27/0x40 [ 309.735621][T10623] selinux_lsmprop_to_secctx+0x67/0xf0 [ 309.735642][T10623] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 309.735700][T10623] audit_log_subj_ctx+0xa4/0x3e0 [ 309.735721][T10623] ? skb_put+0xa9/0xf0 [ 309.735743][T10623] audit_log_task_context+0x48/0x70 [ 309.735763][T10623] audit_log_task+0xf3/0x250 [ 309.735830][T10623] audit_seccomp+0x60/0x100 [ 309.735854][T10623] ? __seccomp_filter+0x8db/0x1350 [ 309.735922][T10623] __seccomp_filter+0x8ec/0x1350 [ 309.735945][T10623] ? __rcu_read_unlock+0x4e/0x70 [ 309.735963][T10623] ? __fget_files+0x184/0x1c0 [ 309.735985][T10623] ? mutex_lock+0x57/0x90 [ 309.736026][T10623] ? mutex_unlock+0x4e/0x90 [ 309.736108][T10623] __secure_computing+0x81/0x150 [ 309.736130][T10623] do_syscall_64+0xd3/0x370 [ 309.736248][T10623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.736268][T10623] RIP: 0033:0x7f35451ac799 [ 309.736282][T10623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.736299][T10623] RSP: 002b:00007f3543bff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 309.736317][T10623] RAX: ffffffffffffffda RBX: 00007f3545425fa0 RCX: 00007f35451ac799 [ 309.736330][T10623] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 309.736401][T10623] RBP: 00007f3543bff090 R08: 0000000000000000 R09: 0000000000000000 [ 309.736412][T10623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.736423][T10623] R13: 00007f3545426038 R14: 00007f3545425fa0 R15: 00007ffd24aba198 [ 309.736439][T10623] [ 309.971766][T10623] audit: error in audit_log_subj_ctx [ 309.977576][ T28] audit: type=1326 audit(1773187036.893:19163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10620 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f354516cfce code=0x7ffc0000 [ 310.009484][ T28] audit: type=1326 audit(1773187036.893:19164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10620 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f354516cfce code=0x7ffc0000 [ 310.033115][ T28] audit: type=1326 audit(1773187036.893:19165): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10620 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f35451ac799 code=0x7ffc0000 [ 310.060643][T10631] __nla_validate_parse: 1 callbacks suppressed [ 310.060659][T10631] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1994'. [ 310.078516][ T28] audit: type=1326 audit(1773187037.153:19166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10620 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f354516cfce code=0x7ffc0000 [ 310.105187][ T28] audit: type=1326 audit(1773187037.153:19167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10620 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f354516cfce code=0x7ffc0000 [ 310.136461][T10644] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 310.151066][T10643] lo speed is unknown, defaulting to 1000 [ 310.284482][T10652] 8021q: VLANs not supported on wg2 [ 310.307932][T10658] FAULT_INJECTION: forcing a failure. [ 310.307932][T10658] name failslab, interval 1, probability 0, space 0, times 0 [ 310.325700][T10652] loop2: detected capacity change from 0 to 512 [ 310.335550][T10658] CPU: 1 UID: 0 PID: 10658 Comm: syz.0.2004 Not tainted syzkaller #0 PREEMPT(full) [ 310.335574][T10658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 310.335586][T10658] Call Trace: [ 310.335592][T10658] [ 310.335599][T10658] __dump_stack+0x1d/0x30 [ 310.335642][T10658] dump_stack_lvl+0x95/0xd0 [ 310.335667][T10658] dump_stack+0x15/0x1b [ 310.335688][T10658] should_fail_ex+0x263/0x280 [ 310.335708][T10658] should_failslab+0x8c/0xb0 [ 310.335789][T10658] __kmalloc_noprof+0xb8/0x4e0 [ 310.335809][T10658] ? sock_kmalloc+0x85/0xc0 [ 310.335832][T10658] sock_kmalloc+0x85/0xc0 [ 310.335914][T10658] ____sys_sendmsg+0xf9/0x5b0 [ 310.335963][T10658] ___sys_sendmsg+0x195/0x1e0 [ 310.336042][T10658] __x64_sys_sendmsg+0xd4/0x160 [ 310.336072][T10658] x64_sys_call+0x194c/0x3020 [ 310.336231][T10658] do_syscall_64+0x12c/0x370 [ 310.336254][T10658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.336277][T10658] RIP: 0033:0x7f35451ac799 [ 310.336291][T10658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.336353][T10658] RSP: 002b:00007f3543bff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.336409][T10658] RAX: ffffffffffffffda RBX: 00007f3545425fa0 RCX: 00007f35451ac799 [ 310.336423][T10658] RDX: 0000000000000000 RSI: 0000200000001b00 RDI: 0000000000000004 [ 310.336436][T10658] RBP: 00007f3543bff090 R08: 0000000000000000 R09: 0000000000000000 [ 310.336448][T10658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.336462][T10658] R13: 00007f3545426038 R14: 00007f3545425fa0 R15: 00007ffd24aba198 [ 310.336509][T10658] [ 310.338012][T10652] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 310.349235][T10659] lo speed is unknown, defaulting to 1000 [ 310.423655][T10652] EXT4-fs (loop2): 1 truncate cleaned up [ 310.473704][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 310.473717][ T28] audit: type=1326 audit(1773187037.653:19171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10663 comm="syz.6.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3acec799 code=0x7ffc0000 [ 310.489307][T10652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.531077][ T28] audit: type=1326 audit(1773187037.653:19172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10663 comm="syz.6.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3acec799 code=0x7ffc0000 [ 310.532378][ T3385] net_ratelimit: 4 callbacks suppressed [ 310.532412][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.556340][ T28] audit: type=1326 audit(1773187037.653:19173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10663 comm="syz.6.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3acec799 code=0x7ffc0000 [ 310.645383][ T28] audit: type=1326 audit(1773187037.653:19174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10663 comm="syz.6.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3acec799 code=0x7ffc0000 [ 310.645411][ T28] audit: type=1326 audit(1773187037.653:19175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10663 comm="syz.6.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f0f3acec799 code=0x7ffc0000 [ 310.645436][ T28] audit: type=1326 audit(1773187037.653:19176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10663 comm="syz.6.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3acec799 code=0x7ffc0000 [ 310.645468][ T28] audit: type=1326 audit(1773187037.653:19177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10663 comm="syz.6.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3acec799 code=0x7ffc0000 [ 310.645489][ T28] audit: type=1326 audit(1773187037.653:19178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10663 comm="syz.6.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3acec799 code=0x7ffc0000 [ 310.645544][ T28] audit: type=1326 audit(1773187037.653:19179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10663 comm="syz.6.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3acec799 code=0x7ffc0000 [ 310.645563][ T28] audit: type=1326 audit(1773187037.653:19180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10663 comm="syz.6.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f0f3acec799 code=0x7ffc0000 [ 310.793365][T10680] loop6: detected capacity change from 0 to 1024 [ 310.807426][T10682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2012'. [ 310.889120][T10680] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 310.889185][T10680] System zones: 0-1, 3-8 [ 310.991113][T10680] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 311.003459][T10680] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.060255][T10690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.068530][T10690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.081501][T10690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.094105][T10690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.102366][T10690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.111199][T10690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.119619][T10690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.127905][T10690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.139667][T10690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.199607][T10697] xt_hashlimit: invalid interval [ 311.227916][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.253749][T10702] loop5: detected capacity change from 0 to 128 [ 311.262861][T10702] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 311.281224][T10702] ext4 filesystem being mounted at /370/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 311.326590][T10706] lo speed is unknown, defaulting to 1000 [ 311.334594][ T4062] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 311.398839][T10713] loop5: detected capacity change from 0 to 4096 [ 311.409454][ T3523] hid-generic 0080:0006:FFFFFFFE.004F: unknown main item tag 0x0 [ 311.418631][ T3523] hid-generic 0080:0006:FFFFFFFE.004F: unknown main item tag 0x0 [ 311.428120][T10713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.443284][ T3523] hid-generic 0080:0006:FFFFFFFE.004F: hidraw0: HID v0.03 Device [syz1] on syz1 [ 311.483143][T10721] fido_id[10721]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 311.748949][T10731] lo speed is unknown, defaulting to 1000 [ 312.090695][ T5371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 312.137920][T10740] loop6: detected capacity change from 0 to 128 [ 312.159010][T10740] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 312.181434][T10740] ext4 filesystem being mounted at /313/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.225887][ T4062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.262560][T10743] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2031'. [ 312.277227][T10743] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2031'. [ 312.346069][ T5371] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 312.451732][T10749] netlink: 4092 bytes leftover after parsing attributes in process `syz.0.2035'. [ 312.660316][T10766] lo speed is unknown, defaulting to 1000 [ 312.955221][T10784] 9p: Bad value for 'rfdno' [ 312.979346][T10784] lo speed is unknown, defaulting to 1000 [ 312.997125][T10728] sctp: [Deprecated]: syz.2.2028 (pid 10728) Use of int in maxseg socket option. [ 312.997125][T10728] Use struct sctp_assoc_value instead [ 313.050700][T10784] loop6: detected capacity change from 0 to 512 [ 313.093273][T10784] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 313.118282][T10784] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 313.129441][T10784] EXT4-fs (loop6): group descriptors corrupted! [ 313.376563][T10811] lo speed is unknown, defaulting to 1000 [ 313.482751][T10817] loop6: detected capacity change from 0 to 512 [ 313.492240][T10817] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 313.515044][T10817] EXT4-fs (loop6): 1 truncate cleaned up [ 313.521483][T10817] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.747850][T10823] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2059'. [ 313.757034][T10823] netlink: 'syz.5.2059': attribute type 8 has an invalid length. [ 313.771912][ T3367] hid-generic 0080:0005:FFFFFFFE.0050: unknown main item tag 0x0 [ 313.783343][ T3367] hid-generic 0080:0005:FFFFFFFE.0050: unknown main item tag 0x0 [ 313.801189][ T3367] hid-generic 0080:0005:FFFFFFFE.0050: hidraw0: HID v0.03 Device [syz0] on syz1 [ 313.842152][T10832] fido_id[10832]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 313.942262][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2063'. [ 314.013085][ T5371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.056986][T10840] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2063'. [ 314.086958][T10837] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2063'. [ 314.105799][ T3385] hid-generic 0080:0005:FFFFFFFE.0051: unknown main item tag 0x0 [ 314.114617][ T3385] hid-generic 0080:0005:FFFFFFFE.0051: unknown main item tag 0x0 [ 314.126326][ T3385] hid-generic 0080:0005:FFFFFFFE.0051: hidraw0: HID v0.03 Device [syz0] on syz1 [ 314.301102][T10847] loop2: detected capacity change from 0 to 1024 [ 314.330885][T10847] EXT4-fs: Ignoring removed mblk_io_submit option [ 314.344973][T10847] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 314.372190][T10849] lo speed is unknown, defaulting to 1000 [ 314.389208][T10847] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 314.409193][T10847] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.2066: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 314.428210][T10847] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 314.428321][T10847] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2066: couldn't read orphan inode 11 (err -117) [ 314.437546][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 314.437567][ C0] EXT4-fs (loop2): initial error at time 1773187041: ext4_ext_check_inode:521: inode 11 [ 314.437599][ C0] EXT4-fs (loop2): last error at time 1773187041: ext4_ext_check_inode:521: inode 11 [ 314.478188][T10847] loop2: lost filesystem error report for type 5 error -117 [ 314.479484][T10847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.531688][T10847] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2066'. [ 314.579580][T10862] loop5: detected capacity change from 0 to 128 [ 314.607820][T10862] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 314.621962][T10862] ext4 filesystem being mounted at /383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 314.655600][T10862] FAULT_INJECTION: forcing a failure. [ 314.655600][T10862] name failslab, interval 1, probability 0, space 0, times 0 [ 314.668335][T10862] CPU: 0 UID: 0 PID: 10862 Comm: syz.5.2070 Not tainted syzkaller #0 PREEMPT(full) [ 314.668362][T10862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 314.668432][T10862] Call Trace: [ 314.668438][T10862] [ 314.668446][T10862] __dump_stack+0x1d/0x30 [ 314.668527][T10862] dump_stack_lvl+0x95/0xd0 [ 314.668570][T10862] dump_stack+0x15/0x1b [ 314.668593][T10862] should_fail_ex+0x263/0x280 [ 314.668617][T10862] should_failslab+0x8c/0xb0 [ 314.668637][T10862] __kmalloc_noprof+0xb8/0x4e0 [ 314.668662][T10862] ? ext4_find_extent+0x17a/0x790 [ 314.668690][T10862] ext4_find_extent+0x17a/0x790 [ 314.668718][T10862] ext4_ext_map_blocks+0x10d/0x2fb0 [ 314.668745][T10862] ? put_dec_trunc8+0x119/0x140 [ 314.668852][T10862] ? xas_load+0x413/0x430 [ 314.668885][T10862] ? xas_load+0x413/0x430 [ 314.668993][T10862] ? __rcu_read_unlock+0x4e/0x70 [ 314.669015][T10862] ? xa_load+0xb1/0xe0 [ 314.669037][T10862] ext4_map_query_blocks+0xb2/0x550 [ 314.669128][T10862] ? ext4_es_lookup_extent+0x3ae/0x570 [ 314.669159][T10862] ext4_map_blocks+0x306/0x970 [ 314.669254][T10862] ext4_getblk+0x128/0x530 [ 314.669273][T10862] ext4_bread+0x28/0x110 [ 314.669345][T10862] __ext4_read_dirblock+0x85/0x540 [ 314.669362][T10862] htree_dirblock_to_tree+0xaa/0x620 [ 314.669415][T10862] ext4_htree_fill_tree+0x458/0xa60 [ 314.669429][T10862] ? path_openat+0x1b01/0x2050 [ 314.669449][T10862] ? inode_query_iversion+0xb9/0x110 [ 314.669481][T10862] ext4_readdir+0x1915/0x1f80 [ 314.669512][T10862] ? __rcu_read_unlock+0x4e/0x70 [ 314.669602][T10862] ? avc_policy_seqno+0x15/0x30 [ 314.669617][T10862] ? selinux_file_permission+0x1f2/0x690 [ 314.669630][T10862] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 314.669648][T10862] iterate_dir+0x114/0x330 [ 314.669725][T10862] __se_sys_getdents+0xd2/0x220 [ 314.669741][T10862] ? __pfx_filldir+0x10/0x10 [ 314.669759][T10862] __x64_sys_getdents+0x43/0x50 [ 314.669839][T10862] x64_sys_call+0xea8/0x3020 [ 314.669854][T10862] do_syscall_64+0x12c/0x370 [ 314.669866][T10862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.669901][T10862] RIP: 0033:0x7f6e6a2dc799 [ 314.669912][T10862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.669922][T10862] RSP: 002b:00007f6e68d37028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 314.669954][T10862] RAX: ffffffffffffffda RBX: 00007f6e6a555fa0 RCX: 00007f6e6a2dc799 [ 314.670029][T10862] RDX: 000000000000003d RSI: 0000200000000040 RDI: 0000000000000004 [ 314.670036][T10862] RBP: 00007f6e68d37090 R08: 0000000000000000 R09: 0000000000000000 [ 314.670043][T10862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.670050][T10862] R13: 00007f6e6a556038 R14: 00007f6e6a555fa0 R15: 00007ffcdccb8e78 [ 314.670061][T10862] [ 314.946924][T10862] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.5.2070: error -12 reading directory block [ 314.974680][ T4062] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 315.041463][T10875] 8021q: VLANs not supported on wg2 [ 315.101469][T10877] __nla_validate_parse: 1 callbacks suppressed [ 315.101487][T10877] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2073'. [ 315.131312][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.152125][T10882] netlink: 'syz.5.2073': attribute type 8 has an invalid length. [ 315.181391][ T3423] hid-generic 0080:0005:FFFFFFFE.0052: unknown main item tag 0x0 [ 315.202904][ T3423] hid-generic 0080:0005:FFFFFFFE.0052: unknown main item tag 0x0 [ 315.230007][ T3423] hid-generic 0080:0005:FFFFFFFE.0052: hidraw0: HID v0.03 Device [syz0] on syz1 [ 315.282613][T10884] fido_id[10884]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 315.321905][T10887] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2077'. [ 315.349309][T10888] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 315.522687][T10892] lo speed is unknown, defaulting to 1000 [ 315.551446][ T3367] net_ratelimit: 55 callbacks suppressed [ 315.551459][ T3367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.588754][T10901] netlink: 'syz.0.2081': attribute type 3 has an invalid length. [ 315.603367][T10901] netlink: 'syz.0.2081': attribute type 3 has an invalid length. [ 315.618963][T10901] netlink: 'syz.0.2081': attribute type 3 has an invalid length. [ 315.626745][T10901] netlink: 'syz.0.2081': attribute type 3 has an invalid length. [ 315.636034][T10901] netlink: 'syz.0.2081': attribute type 3 has an invalid length. [ 315.647227][T10903] loop5: detected capacity change from 0 to 1024 [ 315.659016][T10901] netlink: 'syz.0.2081': attribute type 3 has an invalid length. [ 315.665750][T10903] EXT4-fs: Ignoring removed oldalloc option [ 315.680666][T10901] netlink: 'syz.0.2081': attribute type 3 has an invalid length. [ 315.684115][T10903] EXT4-fs: Ignoring removed bh option [ 315.695968][T10901] netlink: 'syz.0.2081': attribute type 3 has an invalid length. [ 315.715519][T10903] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.735933][T10908] FAULT_INJECTION: forcing a failure. [ 315.735933][T10908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.749089][T10908] CPU: 0 UID: 0 PID: 10908 Comm: syz.0.2083 Not tainted syzkaller #0 PREEMPT(full) [ 315.749113][T10908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.749126][T10908] Call Trace: [ 315.749190][T10908] [ 315.749245][T10908] __dump_stack+0x1d/0x30 [ 315.749273][T10908] dump_stack_lvl+0x95/0xd0 [ 315.749299][T10908] dump_stack+0x15/0x1b [ 315.749341][T10908] should_fail_ex+0x263/0x280 [ 315.749383][T10908] should_fail+0xb/0x20 [ 315.749400][T10908] should_fail_usercopy+0x1a/0x20 [ 315.749420][T10908] _copy_from_user+0x1c/0xb0 [ 315.749446][T10908] ___sys_sendmsg+0xc1/0x1e0 [ 315.749549][T10908] __x64_sys_sendmsg+0xd4/0x160 [ 315.749580][T10908] x64_sys_call+0x194c/0x3020 [ 315.749607][T10908] do_syscall_64+0x12c/0x370 [ 315.749646][T10908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.749666][T10908] RIP: 0033:0x7f35451ac799 [ 315.749681][T10908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.749775][T10908] RSP: 002b:00007f3543bff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.749854][T10908] RAX: ffffffffffffffda RBX: 00007f3545425fa0 RCX: 00007f35451ac799 [ 315.749866][T10908] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 315.749877][T10908] RBP: 00007f3543bff090 R08: 0000000000000000 R09: 0000000000000000 [ 315.749888][T10908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.749899][T10908] R13: 00007f3545426038 R14: 00007f3545425fa0 R15: 00007ffd24aba198 [ 315.749975][T10908] [ 315.780557][T10911] atomic_op ffff8881105a0d28 conn xmit_atomic 0000000000000000 [ 315.950596][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.984093][T10924] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2089'. [ 315.998610][T10925] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 316.109074][T10932] 9p: Bad value for 'rfdno' [ 316.283854][T10936] loop2: detected capacity change from 0 to 512 [ 316.433863][T10936] EXT4-fs (loop2): 1 orphan inode deleted [ 316.439910][T10936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.442688][T10936] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.449901][T10936] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 316.449901][T10936] program syz.2.2090 not setting count and/or reply_len properly [ 316.472345][ T57] __quota_error: 72 callbacks suppressed [ 316.472366][ T57] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 316.472394][ T57] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 1 [ 317.147643][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.264638][T10950] lo speed is unknown, defaulting to 1000 [ 317.467954][T10956] loop6: detected capacity change from 0 to 512 [ 317.493132][T10956] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 317.495835][T10956] EXT4-fs (loop6): 1 truncate cleaned up [ 317.496251][T10956] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.509623][T10959] 8021q: VLANs not supported on wg2 [ 317.527725][T10959] loop0: detected capacity change from 0 to 512 [ 317.535530][T10959] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 317.537691][T10959] EXT4-fs (loop0): 1 truncate cleaned up [ 317.538133][T10959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.677737][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.822882][ T4062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.892461][T10981] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2103'. [ 317.930181][T10984] lo speed is unknown, defaulting to 1000 [ 318.115370][ T5371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.127088][T10992] No such timeout policy "syz0" [ 318.165520][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2106'. [ 318.196825][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.330959][T11002] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2106'. [ 318.351294][T11002] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2106'. [ 318.362065][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.437172][T10996] Set syz1 is full, maxelem 65536 reached [ 318.474240][ T3523] hid-generic 0080:0005:FFFFFFFE.0053: unknown main item tag 0x0 [ 318.483823][ T3523] hid-generic 0080:0005:FFFFFFFE.0053: unknown main item tag 0x0 [ 318.496232][ T3523] hid-generic 0080:0005:FFFFFFFE.0053: hidraw0: HID v0.03 Device [syz0] on syz1 [ 318.681140][T11008] fido_id[11008]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 318.805125][T11015] loop0: detected capacity change from 0 to 256 [ 318.947739][T11015] FAT-fs (loop0): Directory bread(block 64) failed [ 318.954439][T11015] FAT-fs (loop0): Directory bread(block 65) failed [ 318.961234][T11015] FAT-fs (loop0): Directory bread(block 66) failed [ 318.968025][T11015] FAT-fs (loop0): Directory bread(block 67) failed [ 318.974719][T11015] FAT-fs (loop0): Directory bread(block 68) failed [ 318.981343][T11015] FAT-fs (loop0): Directory bread(block 69) failed [ 318.987858][T11015] FAT-fs (loop0): Directory bread(block 70) failed [ 318.994585][T11015] FAT-fs (loop0): Directory bread(block 71) failed [ 319.001228][T11015] FAT-fs (loop0): Directory bread(block 72) failed [ 319.007752][T11015] FAT-fs (loop0): Directory bread(block 73) failed [ 319.051902][T11015] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 319.144238][T11017] lo speed is unknown, defaulting to 1000 [ 319.163707][T11020] 8021q: VLANs not supported on wg2 [ 319.186443][T11020] loop2: detected capacity change from 0 to 512 [ 319.229194][ T3523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.243315][T11020] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 319.316620][T11020] EXT4-fs (loop2): 1 truncate cleaned up [ 319.331452][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.335514][T11020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.401959][ T28] audit: type=1400 audit(1773187046.583:19253): avc: denied { getopt } for pid=11028 comm="syz.4.2119" lport=4121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 319.629618][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.881253][T11044] program syz.5.2122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.353342][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.369263][T11050] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2125'. [ 320.401627][T11050] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2125'. [ 320.430886][ T3523] hid-generic 0080:0005:FFFFFFFE.0054: unknown main item tag 0x0 [ 320.438665][ T3523] hid-generic 0080:0005:FFFFFFFE.0054: unknown main item tag 0x0 [ 320.447287][ T3523] hid-generic 0080:0005:FFFFFFFE.0054: hidraw0: HID v0.03 Device [syz0] on syz1 [ 320.475891][T11053] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2126'. [ 320.478762][T11051] fido_id[11051]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 320.586462][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.605256][T11048] Set syz1 is full, maxelem 65536 reached [ 320.781893][T11063] loop5: detected capacity change from 0 to 256 [ 320.820329][T11063] FAT-fs (loop5): Directory bread(block 64) failed [ 320.826903][T11063] FAT-fs (loop5): Directory bread(block 65) failed [ 320.833608][T11063] FAT-fs (loop5): Directory bread(block 66) failed [ 320.840193][T11063] FAT-fs (loop5): Directory bread(block 67) failed [ 320.846873][T11063] FAT-fs (loop5): Directory bread(block 68) failed [ 320.853571][T11063] FAT-fs (loop5): Directory bread(block 69) failed [ 320.860168][T11063] FAT-fs (loop5): Directory bread(block 70) failed [ 320.866741][T11063] FAT-fs (loop5): Directory bread(block 71) failed [ 320.873548][T11063] FAT-fs (loop5): Directory bread(block 72) failed [ 320.880236][T11063] FAT-fs (loop5): Directory bread(block 73) failed [ 321.594626][ T3523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.636416][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.802341][T11068] lo speed is unknown, defaulting to 1000 [ 322.756501][T11071] lo speed is unknown, defaulting to 1000 [ 322.953776][T11063] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 323.623134][ T28] audit: type=1400 audit(1773187050.493:19254): avc: denied { listen } for pid=11058 comm="syz.2.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 323.712659][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.265964][ T28] audit: type=1400 audit(1773187051.443:19255): avc: denied { mount } for pid=11084 comm="syz.0.2136" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 324.299680][T11088] loop2: detected capacity change from 0 to 128 [ 324.317606][ T28] audit: type=1400 audit(1773187051.493:19256): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 324.349220][T11088] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 324.357154][T11088] System zones: 1-3, 19-19, 35-36 [ 324.371263][T11088] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 324.384862][T11092] 8021q: VLANs not supported on wg2 [ 324.385029][T11088] ext4 filesystem being mounted at /430/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 324.426347][T11088] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 1803188595 (only 1 groups) [ 324.448492][T11092] loop0: detected capacity change from 0 to 512 [ 324.478917][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 324.479847][T11092] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 324.517170][T11092] EXT4-fs (loop0): 1 truncate cleaned up [ 324.542250][T11092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.670519][ T3367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.751715][ T1711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.761016][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.839706][ T28] audit: type=1400 audit(1773187052.003:19257): avc: denied { lock } for pid=11101 comm="syz.4.2140" path="socket:[29661]" dev="sockfs" ino=29661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 325.151195][T11119] loop5: detected capacity change from 0 to 256 [ 325.324764][T11119] FAT-fs (loop5): Directory bread(block 64) failed [ 325.331484][T11119] FAT-fs (loop5): Directory bread(block 65) failed [ 325.338080][T11119] FAT-fs (loop5): Directory bread(block 66) failed [ 325.344728][T11119] FAT-fs (loop5): Directory bread(block 67) failed [ 325.351401][T11119] FAT-fs (loop5): Directory bread(block 68) failed [ 325.358076][T11119] FAT-fs (loop5): Directory bread(block 69) failed [ 325.364700][T11119] FAT-fs (loop5): Directory bread(block 70) failed [ 325.371545][T11119] FAT-fs (loop5): Directory bread(block 71) failed [ 325.378088][T11119] FAT-fs (loop5): Directory bread(block 72) failed [ 325.384689][T11119] FAT-fs (loop5): Directory bread(block 73) failed [ 325.436846][T11119] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 325.496821][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.631834][T11126] loop6: detected capacity change from 0 to 512 [ 325.713767][T11126] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 325.792739][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.876554][T11126] EXT4-fs (loop6): 1 truncate cleaned up [ 325.900191][T11126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.985490][T11137] loop0: detected capacity change from 0 to 1024 [ 326.262540][T11137] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 326.285393][T11149] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2150'. [ 326.392214][T11137] System zones: 0-1, 3-8 [ 326.425821][T11150] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2150'. [ 326.471430][T11137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 326.691166][T11137] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.848145][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.905592][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 326.984804][T11147] Set syz1 is full, maxelem 65536 reached [ 327.137092][T11167] 8021q: VLANs not supported on wg2 [ 327.145175][T11167] loop0: detected capacity change from 0 to 512 [ 327.152639][T11167] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 327.177774][T11167] EXT4-fs (loop0): 1 truncate cleaned up [ 327.184528][T11167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.184956][ T5371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.284791][T11182] loop6: detected capacity change from 0 to 1024 [ 327.297892][T11182] EXT4-fs: Ignoring removed mblk_io_submit option [ 327.305014][T11182] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 327.313842][T11182] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 327.326859][T11182] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.2162: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 327.351155][T11182] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 327.351400][T11182] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2162: couldn't read orphan inode 11 (err -117) [ 327.360692][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 327.360710][ C1] EXT4-fs (loop6): initial error at time 1773187054: ext4_ext_check_inode:521: inode 11 [ 327.360759][ C1] EXT4-fs (loop6): last error at time 1773187054: ext4_ext_check_inode:521: inode 11 [ 327.429194][T11182] loop6: lost filesystem error report for type 5 error -117 [ 327.429921][T11182] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.560493][T11195] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2164'. [ 327.582553][T11195] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2164'. [ 327.628688][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.640501][T11192] Set syz1 is full, maxelem 65536 reached [ 327.654566][T11199] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2165'. [ 327.663780][T11199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2165'. [ 327.719047][ T3524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.873000][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.015635][T11194] Set syz1 is full, maxelem 65536 reached [ 328.055841][T11220] lo speed is unknown, defaulting to 1000 [ 328.097147][T11225] syz_tun: entered promiscuous mode [ 328.106790][T11225] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 328.137555][T11224] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 328.153508][T11229] 8021q: VLANs not supported on wg2 [ 328.161748][T11229] loop5: detected capacity change from 0 to 512 [ 328.170066][ T5371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.186113][T11229] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 328.205373][T11229] EXT4-fs (loop5): 1 truncate cleaned up [ 328.222109][T11229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.251679][T11235] loop6: detected capacity change from 0 to 512 [ 328.276857][T11235] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 328.309718][T11235] EXT4-fs (loop6): 1 truncate cleaned up [ 328.317180][T11235] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.353022][T11240] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2178'. [ 328.362439][T11240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2178'. [ 328.372796][ T3367] hid-generic 0080:0005:FFFFFFFE.0055: unknown main item tag 0x0 [ 328.380690][ T3367] hid-generic 0080:0005:FFFFFFFE.0055: unknown main item tag 0x0 [ 328.389610][ T3367] hid-generic 0080:0005:FFFFFFFE.0055: hidraw0: HID v0.03 Device [syz0] on syz1 [ 328.515036][T11233] Set syz1 is full, maxelem 65536 reached [ 328.916638][T11263] bond0: (slave team0): Releasing backup interface [ 328.926084][T11263] team0: left promiscuous mode [ 329.073696][ T5371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.138792][T11265] lo speed is unknown, defaulting to 1000 [ 329.273061][ T4062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.591192][T11271] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2190'. [ 329.668519][T11272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2190'. [ 329.751254][ T3367] hid-generic 0080:0005:FFFFFFFE.0056: unknown main item tag 0x0 [ 329.795197][ T3367] hid-generic 0080:0005:FFFFFFFE.0056: unknown main item tag 0x0 [ 329.928153][T11278] validate_nla: 39 callbacks suppressed [ 329.928472][T11278] netlink: 'syz.6.2188': attribute type 1 has an invalid length. [ 329.954295][ T3367] hid-generic 0080:0005:FFFFFFFE.0056: hidraw0: HID v0.03 Device [syz0] on syz1 [ 329.995755][T11279] loop5: detected capacity change from 0 to 256 [ 330.074487][T11277] lo speed is unknown, defaulting to 1000 [ 330.172303][T11279] FAT-fs (loop5): Directory bread(block 64) failed [ 330.183128][T11278] bond3: entered promiscuous mode [ 330.242709][T11279] FAT-fs (loop5): Directory bread(block 65) failed [ 330.254274][T11278] 8021q: adding VLAN 0 to HW filter on device bond3 [ 330.303456][T11279] FAT-fs (loop5): Directory bread(block 66) failed [ 330.372294][T11279] FAT-fs (loop5): Directory bread(block 67) failed [ 330.456612][T11279] FAT-fs (loop5): Directory bread(block 68) failed [ 330.501707][T11279] FAT-fs (loop5): Directory bread(block 69) failed [ 330.509926][T11279] FAT-fs (loop5): Directory bread(block 70) failed [ 330.522077][T11279] FAT-fs (loop5): Directory bread(block 71) failed [ 330.543551][T11279] FAT-fs (loop5): Directory bread(block 72) failed [ 330.588347][T11279] FAT-fs (loop5): Directory bread(block 73) failed [ 330.743990][T11305] 8021q: VLANs not supported on wg2 [ 330.751913][T11305] loop2: detected capacity change from 0 to 512 [ 330.759171][T11305] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 330.845563][T11310] loop6: detected capacity change from 0 to 256 [ 330.870308][T11305] EXT4-fs (loop2): 1 truncate cleaned up [ 330.899870][T11310] FAT-fs (loop6): Directory bread(block 64) failed [ 330.906496][T11310] FAT-fs (loop6): Directory bread(block 65) failed [ 330.913166][T11310] FAT-fs (loop6): Directory bread(block 66) failed [ 330.919714][T11310] FAT-fs (loop6): Directory bread(block 67) failed [ 330.926292][T11310] FAT-fs (loop6): Directory bread(block 68) failed [ 330.932942][T11310] FAT-fs (loop6): Directory bread(block 69) failed [ 330.939494][T11310] FAT-fs (loop6): Directory bread(block 70) failed [ 330.946057][T11310] FAT-fs (loop6): Directory bread(block 71) failed [ 330.952600][T11310] FAT-fs (loop6): Directory bread(block 72) failed [ 330.959226][T11310] FAT-fs (loop6): Directory bread(block 73) failed [ 331.025548][T11305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.738545][ T3385] net_ratelimit: 5 callbacks suppressed [ 331.738562][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.789180][T11310] bond0: (slave team0): Releasing backup interface [ 331.799888][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.836727][T11310] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 331.903268][ T905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.912373][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.942112][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.072323][T11316] lo speed is unknown, defaulting to 1000 [ 332.129757][ T28] audit: type=1400 audit(1773187059.313:19258): avc: denied { create } for pid=11322 comm="syz.5.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 332.271078][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.933592][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.319583][T11350] loop2: detected capacity change from 0 to 1024 [ 333.326236][T11350] EXT4-fs: Ignoring removed mblk_io_submit option [ 333.333527][T11350] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 333.342278][T11350] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 333.353510][T11350] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.2212: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 333.372225][T11350] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 333.372378][T11350] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2212: couldn't read orphan inode 11 (err -117) [ 333.381541][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 333.381565][ C1] EXT4-fs (loop2): initial error at time 1773187060: ext4_ext_check_inode:521: inode 11 [ 333.381589][ C1] EXT4-fs (loop2): last error at time 1773187060: ext4_ext_check_inode:521: inode 11 [ 333.422210][T11350] loop2: lost filesystem error report for type 5 error -117 [ 333.422686][T11350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.450692][T11350] __nla_validate_parse: 3 callbacks suppressed [ 333.450705][T11350] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2212'. [ 333.576234][T11361] 8021q: VLANs not supported on wg2 [ 333.882715][T11373] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2218'. [ 333.909098][T11373] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2218'. [ 333.939671][ T3572] hid-generic 0080:0005:FFFFFFFE.0057: unknown main item tag 0x0 [ 333.951817][ T3572] hid-generic 0080:0005:FFFFFFFE.0057: unknown main item tag 0x0 [ 333.961003][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.971328][ T3572] hid-generic 0080:0005:FFFFFFFE.0057: hidraw0: HID v0.03 Device [syz0] on syz1 [ 334.014652][T11374] fido_id[11374]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 334.147089][T11384] lo speed is unknown, defaulting to 1000 [ 334.181138][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.289408][T11387] loop2: detected capacity change from 0 to 256 [ 334.312619][T11387] FAT-fs (loop2): Directory bread(block 64) failed [ 334.319181][T11387] FAT-fs (loop2): Directory bread(block 65) failed [ 334.325769][T11387] FAT-fs (loop2): Directory bread(block 66) failed [ 334.332302][T11387] FAT-fs (loop2): Directory bread(block 67) failed [ 334.338904][T11387] FAT-fs (loop2): Directory bread(block 68) failed [ 334.345505][T11387] FAT-fs (loop2): Directory bread(block 69) failed [ 334.352165][T11387] FAT-fs (loop2): Directory bread(block 70) failed [ 334.358667][T11387] FAT-fs (loop2): Directory bread(block 71) failed [ 334.365183][T11387] FAT-fs (loop2): Directory bread(block 72) failed [ 334.371688][T11387] FAT-fs (loop2): Directory bread(block 73) failed [ 334.390561][T11387] bridge0: port 1(team0) entered disabled state [ 334.408997][T11387] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 334.990219][ T3572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.021572][T11407] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2229'. [ 335.030761][T11407] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2229'. [ 335.066177][T11412] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2230'. [ 335.075824][T11412] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2230'. [ 335.086563][ T3385] hid-generic 0080:0005:FFFFFFFE.0058: unknown main item tag 0x0 [ 335.094979][ T3385] hid-generic 0080:0005:FFFFFFFE.0058: unknown main item tag 0x0 [ 335.103607][ T3385] hid-generic 0080:0005:FFFFFFFE.0058: hidraw0: HID v0.03 Device [syz0] on syz1 [ 335.130876][T11417] fido_id[11417]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 335.210770][T11423] loop6: detected capacity change from 0 to 512 [ 335.226208][T11423] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 335.248555][T11423] EXT4-fs (loop6): 1 truncate cleaned up [ 335.259977][T11425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2234'. [ 335.270987][T11423] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.372625][T11434] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2235'. [ 335.381839][T11434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2235'. [ 335.440862][ T3385] hid-generic 0080:0005:FFFFFFFE.0059: unknown main item tag 0x0 [ 335.448652][ T3385] hid-generic 0080:0005:FFFFFFFE.0059: unknown main item tag 0x0 [ 335.466737][ T3385] hid-generic 0080:0005:FFFFFFFE.0059: hidraw0: HID v0.03 Device [syz0] on syz1 [ 335.578290][ T3385] hid-generic 0080:0005:FFFFFFFE.005A: unknown main item tag 0x0 [ 335.593410][ T3385] hid-generic 0080:0005:FFFFFFFE.005A: unknown main item tag 0x0 [ 335.601843][T11447] loop0: detected capacity change from 0 to 256 [ 335.614588][T11447] FAT-fs (loop0): Directory bread(block 64) failed [ 335.621150][T11447] FAT-fs (loop0): Directory bread(block 65) failed [ 335.627661][T11447] FAT-fs (loop0): Directory bread(block 66) failed [ 335.634250][T11447] FAT-fs (loop0): Directory bread(block 67) failed [ 335.640813][T11447] FAT-fs (loop0): Directory bread(block 68) failed [ 335.647316][T11447] FAT-fs (loop0): Directory bread(block 69) failed [ 335.653856][T11447] FAT-fs (loop0): Directory bread(block 70) failed [ 335.660363][T11447] FAT-fs (loop0): Directory bread(block 71) failed [ 335.666907][T11447] FAT-fs (loop0): Directory bread(block 72) failed [ 335.673406][T11447] FAT-fs (loop0): Directory bread(block 73) failed [ 335.721371][T11452] loop2: detected capacity change from 0 to 1024 [ 335.739812][ T3385] hid-generic 0080:0005:FFFFFFFE.005A: hidraw0: HID v0.03 Device [syz0] on syz1 [ 335.771015][T11452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.792071][T11453] fido_id[11453]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 335.967182][ T5371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.976809][ T28] audit: type=1400 audit(1773187063.143:19259): avc: denied { setattr } for pid=11451 comm="syz.2.2240" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 336.030873][ T3524] hid-generic 0080:0005:FFFFFFFE.005B: unknown main item tag 0x0 [ 336.040154][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.049528][ T3524] hid-generic 0080:0005:FFFFFFFE.005B: unknown main item tag 0x0 [ 336.050465][T11459] loop6: detected capacity change from 0 to 8 [ 336.057933][ T3524] hid-generic 0080:0005:FFFFFFFE.005B: hidraw0: HID v0.03 Device [syz0] on syz1 [ 336.105485][ T28] audit: type=1400 audit(1773187063.283:19260): avc: denied { getopt } for pid=11458 comm="syz.5.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 336.165466][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.176135][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.184393][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.195044][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.202933][ T5392] loop6: unable to read partition table [ 336.239528][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.250221][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.405417][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.416092][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.427520][ T5392] loop6: unable to read partition table [ 336.496569][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.507243][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.517201][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.527821][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.546401][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.557030][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.565518][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.576143][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.584483][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.595136][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.604016][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.614644][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.631760][T11459] loop6: unable to read partition table [ 337.233619][ T3396] net_ratelimit: 6 callbacks suppressed [ 337.233633][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.280087][T11460] loop6: unable to read partition table [ 337.296827][T11460] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 337.591005][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.599997][ T3523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.613303][T11459] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 338.071145][T11488] loop2: detected capacity change from 0 to 512 [ 338.751681][T11488] EXT4-fs (loop2): 1 orphan inode deleted [ 338.758256][T11488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.771031][ T7802] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 338.781691][T11488] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.812221][ T7802] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:12: Failed to release dquot type 1 [ 338.867997][T11494] 8021q: VLANs not supported on wg2 [ 338.973712][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.982051][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.056178][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.084845][T11502] __nla_validate_parse: 4 callbacks suppressed [ 339.084862][T11502] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.2253'. [ 339.107851][T11501] loop5: detected capacity change from 0 to 1024 [ 339.139562][T11501] EXT4-fs: Ignoring removed mblk_io_submit option [ 339.165983][T11501] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 339.167184][T11508] lo speed is unknown, defaulting to 1000 [ 339.195836][T11501] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 339.236428][T11501] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz.5.2254: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 339.278993][T11501] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 339.286866][T11501] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2254: couldn't read orphan inode 11 (err -117) [ 339.296053][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 339.296074][ C1] EXT4-fs (loop5): initial error at time 1773187066: ext4_ext_check_inode:521: inode 11 [ 339.296112][ C1] EXT4-fs (loop5): last error at time 1773187066: ext4_ext_check_inode:521: inode 11 [ 339.335991][T11501] loop5: lost filesystem error report for type 5 error -117 [ 339.336637][T11501] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.423178][T11501] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2254'. [ 339.429560][T11520] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2259'. [ 339.469216][T11520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2259'. [ 339.513924][T11522] loop6: detected capacity change from 0 to 4096 [ 339.549204][T11522] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.720945][T11515] Set syz1 is full, maxelem 65536 reached [ 340.067678][T11534] loop2: detected capacity change from 0 to 512 [ 340.179411][T11534] EXT4-fs (loop2): 1 orphan inode deleted [ 340.192392][T11534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.206871][ T57] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 340.217747][T11534] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.250439][ T57] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 1 [ 340.863995][T11522] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2261'. [ 340.920069][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.933584][ T4062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.973364][T11546] geneve3: entered promiscuous mode [ 341.003964][ T4261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.279668][T11564] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2272'. [ 341.332039][ T5371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.360759][T11567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2272'. [ 341.389970][ T7802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.527760][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.631078][T11586] loop5: detected capacity change from 0 to 256 [ 341.646042][T11586] FAT-fs (loop5): Directory bread(block 64) failed [ 341.652674][T11586] FAT-fs (loop5): Directory bread(block 65) failed [ 341.659215][T11586] FAT-fs (loop5): Directory bread(block 66) failed [ 341.665797][T11586] FAT-fs (loop5): Directory bread(block 67) failed [ 341.672322][T11586] FAT-fs (loop5): Directory bread(block 68) failed [ 341.678897][T11586] FAT-fs (loop5): Directory bread(block 69) failed [ 341.685405][T11586] FAT-fs (loop5): Directory bread(block 70) failed [ 341.691935][T11586] FAT-fs (loop5): Directory bread(block 71) failed [ 341.698439][T11586] FAT-fs (loop5): Directory bread(block 72) failed [ 341.704952][T11586] FAT-fs (loop5): Directory bread(block 73) failed [ 341.739182][T11586] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 341.765429][T11574] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2278'. [ 341.808119][T11574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2278'. [ 342.241987][T11578] net_ratelimit: 2 callbacks suppressed [ 342.242005][T11578] Set syz1 is full, maxelem 65536 reached [ 342.528356][ T3523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.009149][T11625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2289'. [ 344.070883][T11623] FAULT_INJECTION: forcing a failure. [ 344.070883][T11623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.083958][T11623] CPU: 0 UID: 0 PID: 11623 Comm: syz.6.2291 Not tainted syzkaller #0 PREEMPT(full) [ 344.084081][T11623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 344.084092][T11623] Call Trace: [ 344.084098][T11623] [ 344.084105][T11623] __dump_stack+0x1d/0x30 [ 344.084128][T11623] dump_stack_lvl+0x95/0xd0 [ 344.084204][T11623] dump_stack+0x15/0x1b [ 344.084226][T11623] should_fail_ex+0x263/0x280 [ 344.084251][T11623] should_fail+0xb/0x20 [ 344.084286][T11623] should_fail_usercopy+0x1a/0x20 [ 344.084308][T11623] _copy_from_user+0x1c/0xb0 [ 344.084334][T11623] __sys_bpf+0x183/0x7e0 [ 344.084361][T11623] __x64_sys_bpf+0x41/0x50 [ 344.084578][T11623] x64_sys_call+0x10cb/0x3020 [ 344.084687][T11623] do_syscall_64+0x12c/0x370 [ 344.084705][T11623] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 344.084783][T11623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.084805][T11623] RIP: 0033:0x7f0f3acec799 [ 344.084841][T11623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.084860][T11623] RSP: 002b:00007f0f396fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.084880][T11623] RAX: ffffffffffffffda RBX: 00007f0f3af66180 RCX: 00007f0f3acec799 [ 344.084892][T11623] RDX: 0000000000000048 RSI: 0000200000003940 RDI: 0000000000000000 [ 344.084904][T11623] RBP: 00007f0f396fd090 R08: 0000000000000000 R09: 0000000000000000 [ 344.084915][T11623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.084927][T11623] R13: 00007f0f3af66218 R14: 00007f0f3af66180 R15: 00007ffd49926f88 [ 344.085015][T11623] [ 344.251963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.260117][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.606347][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.908965][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.095705][T11624] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2289'. [ 345.217944][T11613] Set syz1 is full, maxelem 65536 reached [ 345.296704][ T28] audit: type=1400 audit(1773187072.473:19261): avc: denied { ioctl } for pid=11637 comm="syz.6.2296" path="socket:[32226]" dev="sockfs" ino=32226 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 345.375185][T11636] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 345.491581][T11650] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2300'. [ 345.500756][T11650] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2300'. [ 345.511025][ T3423] hid-generic 0080:0005:FFFFFFFE.005C: unknown main item tag 0x0 [ 345.518822][ T3423] hid-generic 0080:0005:FFFFFFFE.005C: unknown main item tag 0x0 [ 345.529685][ T3423] hid-generic 0080:0005:FFFFFFFE.005C: hidraw0: HID v0.03 Device [syz0] on syz1 [ 345.549626][ T3523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.555694][T11652] fido_id[11652]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 345.633587][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.715765][T11659] lo speed is unknown, defaulting to 1000 [ 345.999715][T11664] 8021q: VLANs not supported on wg2 [ 346.290196][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2306'. [ 346.323673][T11673] loop2: detected capacity change from 0 to 512 [ 346.334726][T11673] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 346.363840][T11673] EXT4-fs (loop2): 1 truncate cleaned up [ 346.400834][T11673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.601917][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.728947][T11688] loop6: detected capacity change from 0 to 512 [ 346.797105][T11688] EXT4-fs (loop6): 1 orphan inode deleted [ 346.808596][T11688] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.827590][T11688] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.954939][T11692] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2311'. [ 347.009552][T11693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2311'. [ 347.045131][ T3396] hid-generic 0080:0005:FFFFFFFE.005D: unknown main item tag 0x0 [ 347.071216][ T3396] hid-generic 0080:0005:FFFFFFFE.005D: unknown main item tag 0x0 [ 347.150704][ T3396] hid-generic 0080:0005:FFFFFFFE.005D: hidraw0: HID v0.03 Device [syz0] on syz1 [ 347.275581][T11696] fido_id[11696]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 347.289815][T11698] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2312'. [ 347.469771][T11703] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2312'. [ 347.580022][ T41] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 347.595603][ T41] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 1 [ 347.687260][T11695] net_ratelimit: 2 callbacks suppressed [ 347.687277][T11695] Set syz1 is full, maxelem 65536 reached [ 347.745673][T11707] 8021q: VLANs not supported on wg2 [ 347.858205][T11709] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2325'. [ 347.892198][T11709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2325'. [ 347.940214][ T3385] hid-generic 0080:0005:FFFFFFFE.005E: unknown main item tag 0x0 [ 347.958339][ T3385] hid-generic 0080:0005:FFFFFFFE.005E: unknown main item tag 0x0 [ 347.983530][ T3385] hid-generic 0080:0005:FFFFFFFE.005E: hidraw0: HID v0.03 Device [syz0] on syz1 [ 348.026770][T11711] fido_id[11711]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 348.095665][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.104992][ T5371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.310714][T11706] Set syz1 is full, maxelem 65536 reached [ 348.509258][T11727] loop5: detected capacity change from 0 to 512 [ 348.585487][T11727] EXT4-fs (loop5): 1 orphan inode deleted [ 348.597423][T11727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.612228][T11727] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.632995][T11727] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 348.632995][T11727] program syz.5.2319 not setting count and/or reply_len properly [ 348.658935][ T57] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 348.727554][ T57] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 1 [ 349.149016][ T3523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.366241][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.422819][T11732] bond0 (unregistering): Released all slaves [ 349.441115][T11730] netlink: zone id is out of range [ 349.466338][T11730] netlink: zone id is out of range [ 349.485830][T11730] netlink: zone id is out of range [ 349.618451][T11730] netlink: set zone limit has 8 unknown bytes [ 349.680199][T11739] 8021q: VLANs not supported on wg2 [ 349.697844][T11739] loop2: detected capacity change from 0 to 512 [ 349.747612][T11739] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 349.788631][T11739] EXT4-fs (loop2): 1 truncate cleaned up [ 349.845380][T11739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.889992][ T4062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.090762][T11741] Set syz1 is full, maxelem 65536 reached [ 350.155727][T11746] __nla_validate_parse: 6 callbacks suppressed [ 350.155742][T11746] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2323'. [ 350.172651][T11746] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2323'. [ 350.184030][ T3385] hid-generic 0080:0005:FFFFFFFE.005F: unknown main item tag 0x0 [ 350.194153][ T3385] hid-generic 0080:0005:FFFFFFFE.005F: unknown main item tag 0x0 [ 350.202049][T11754] 8021q: VLANs not supported on wg2 [ 350.210463][ T3385] hid-generic 0080:0005:FFFFFFFE.005F: hidraw0: HID v0.03 Device [syz0] on syz1 [ 350.432681][T11780] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2332'. [ 350.479289][T11780] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2332'. [ 350.619543][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.677076][T11785] netlink: 'syz.5.2336': attribute type 10 has an invalid length. [ 350.685443][T11785] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2336'. [ 350.694751][T11785] team0: entered promiscuous mode [ 350.705871][T11785] team0: entered allmulticast mode [ 350.715198][T11785] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.954086][T11798] loop5: detected capacity change from 0 to 256 [ 350.966577][T11798] FAT-fs (loop5): Directory bread(block 64) failed [ 350.973162][T11798] FAT-fs (loop5): Directory bread(block 65) failed [ 350.975655][T11801] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2338'. [ 350.979705][T11798] FAT-fs (loop5): Directory bread(block 66) failed [ 350.995251][T11798] FAT-fs (loop5): Directory bread(block 67) failed [ 351.001836][T11798] FAT-fs (loop5): Directory bread(block 68) failed [ 351.008341][T11798] FAT-fs (loop5): Directory bread(block 69) failed [ 351.014885][T11798] FAT-fs (loop5): Directory bread(block 70) failed [ 351.021425][T11798] FAT-fs (loop5): Directory bread(block 71) failed [ 351.027933][T11798] FAT-fs (loop5): Directory bread(block 72) failed [ 351.034453][T11798] FAT-fs (loop5): Directory bread(block 73) failed [ 351.125032][T11799] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2338'. [ 351.310110][T11804] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2341'. [ 351.360467][T11804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2341'. [ 351.388961][ C1] ================================================================== [ 351.397087][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 351.404327][ C1] [ 351.406649][ C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 0: [ 351.414711][ C1] wq_worker_tick+0x60/0x230 [ 351.419323][ C1] sched_tick+0xda/0x210 [ 351.423577][ C1] update_process_times+0x15e/0x190 [ 351.428779][ C1] tick_nohz_handler+0x275/0x3d0 [ 351.433711][ C1] __hrtimer_run_queues+0x218/0x4f0 [ 351.438900][ C1] hrtimer_interrupt+0x269/0x810 [ 351.443834][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 351.449723][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 351.455350][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 351.461583][ C1] crng_make_state+0xc1/0x200 [ 351.466256][ C1] _get_random_bytes+0x85/0x1b0 [ 351.471096][ C1] get_random_bytes+0x1d/0x30 [ 351.475765][ C1] nsim_dev_trap_report_work+0x482/0x630 [ 351.481386][ C1] process_scheduled_works+0x4de/0x9e0 [ 351.486838][ C1] worker_thread+0x581/0x770 [ 351.491420][ C1] kthread+0x22a/0x280 [ 351.495494][ C1] ret_from_fork+0x150/0x360 [ 351.500077][ C1] ret_from_fork_asm+0x1a/0x30 [ 351.504833][ C1] [ 351.507139][ C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 1: [ 351.515186][ C1] wq_worker_tick+0x60/0x230 [ 351.519774][ C1] sched_tick+0xda/0x210 [ 351.524004][ C1] update_process_times+0x15e/0x190 [ 351.529197][ C1] tick_nohz_handler+0x275/0x3d0 [ 351.534124][ C1] __hrtimer_run_queues+0x218/0x4f0 [ 351.539306][ C1] hrtimer_interrupt+0x269/0x810 [ 351.544230][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 351.550112][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 351.555737][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 351.561706][ C1] kcsan_setup_watchpoint+0x404/0x410 [ 351.567072][ C1] nsim_dev_trap_report_work+0x159/0x630 [ 351.572687][ C1] process_scheduled_works+0x4de/0x9e0 [ 351.578136][ C1] worker_thread+0x581/0x770 [ 351.582719][ C1] kthread+0x22a/0x280 [ 351.586773][ C1] ret_from_fork+0x150/0x360 [ 351.591360][ C1] ret_from_fork_asm+0x1a/0x30 [ 351.596120][ C1] [ 351.598428][ C1] value changed: 0x00000000002f4d60 -> 0x00000000002f7470 [ 351.605514][ C1] [ 351.607819][ C1] Reported by Kernel Concurrency Sanitizer on: [ 351.613950][ C1] CPU: 1 UID: 0 PID: 41 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 351.623218][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 351.633267][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 351.640018][ C1] ================================================================== [ 352.908997][ C0] net_ratelimit: 9 callbacks suppressed [ 352.909008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.711404][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.749095][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.229316][ T3524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.791331][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.831213][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.869174][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.029759][ T1711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.269076][ T3523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.909130][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.951596][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.989375][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.319291][ T3523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog