last executing test programs: 14m51.941987391s ago: executing program 32 (id=132): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x7348, 0x0) r1 = bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@tracing={0x0, 0x9}}, 0x20) fstat(r0, &(0x7f0000000100)) geteuid() getresgid(&(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) getgroups(0x6, &(0x7f0000000240)=[0xee01, 0x0, 0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) setgroups(0x4, &(0x7f0000000580)=[r7, r6, r5, r3]) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x2000, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a00)={0x0, 0x0}) sendmsg$unix(r11, &(0x7f0000001b00)={&(0x7f00000005c0)=@file={0x0, './file0/../file0\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="2db457a859894f566eed1535b0332a2081bd1f91e9af2caa7eb3f4c3701b0ea9021000cd462f1b2f46986b29da101e035f44f4847359f7c1060795a137dab56f0f72516ed589d9d708e61948fd58f95d541d383759913ab66f33b306033dd97f4156b43a560f1bb0fe7f695a58af2c4a8eca0f3641aa85d3a591cfe87e5d6b2fb33ed3558a20049dcd8a422f464eceb01d563a0308dc88aa1b7cfe6e27589fb2ca7c24dc66706969318ab66a3b824a26a1133833ee0275356449d11b0ecd403d8dd4c9cf3e1c9aa6", 0xc8}, {&(0x7f0000001740)="df0560b8409abead93b8ac9634450e20281244b4414313453a468aac1545d64469", 0x21}, {&(0x7f0000001780)="f000438dd33f5ef03817992012458a9cbe902ffecb35257516b6b5531a1c684764a3d69b40b354de1cf62affc010767c00a33e77d681a0dc81a03229b10834d0ccbe5bf28feb6dae9ff586f7b2bc5124f84f4b24b792bd9e3232246747b8b3f318254701dad2921d50e19b70911b84afed188411fffdfe699f831360f6394ba8298032c16415cc79357b42ae938650bc2a23640a0651815b41a72ddc1bdd28af2dd0f1eb4e1da60fb00dac87adbad37b14738c17fff11bce3d8b", 0xba}, {&(0x7f0000001840)="e4c1f63a21d97e782453ea", 0xb}, {&(0x7f0000001880)="d47ab500572540eecd21d317551679c821134484b9a7c18c72521520732fc0f3cc5c76730ff5fe30e3c1424d1eb27542804da6df008f9d130556addd89dec91f27d92132ed9f6ea0d0d592b45c912ed2789d21bd321f5d6cbe3a5b5c990c4e8b24f9ab3eae54b742da3bfc9981b2d7f87ddf75833e1b684e6ca6702db09bfe3cb9aabc7c28957972fc04feda62e293808ab56f969978f01b43d2ed4a141826f3262827487c20cc7def5a6421e98c3ef7d121c445a431aa3715", 0xb9}, {&(0x7f0000001940)="a9e75278d6d11248f5aa398000079431fbbfcde66c89a4a4531c6e18e87d60494261493dcf13f69398bf", 0x2a}], 0x7, &(0x7f0000001a80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r10, r10, r10]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff, r2}}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r10, r10]}}], 0x60, 0x800}, 0x4004050) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@multicast2, @in=@broadcast}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000540)=0xe8) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000100050000000000040002000000000008000400", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r8, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r9, @ANYBLOB="100000000000000020000100000000a8"], 0x4c, 0x1) 14m50.280887029s ago: executing program 33 (id=140): r0 = socket(0x40000000015, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe60}, 0x2101) (fail_nth: 3) 14m47.250092796s ago: executing program 34 (id=151): io_setup(0x10, &(0x7f0000000100)=0x0) io_pgetevents(r0, 0x10001, 0x6, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000440)={&(0x7f00000002c0), 0x8}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_submit(r0, 0x4, &(0x7f0000000800)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000280)="53ad19bcba9d66b3044d7ef02346f163f86aa21f453fbea345031d805745da3c7fd80e7f41e5067bbcc06c93ce42a83acc99ba9f16", 0x35, 0x8, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0xe0, r1, &(0x7f00000004c0)="fb113fc19a5288625f80d08b79d8515a0435ce9ab52297d6dff91106343b8a11cba44f48ab89a308cd31a6cd5061037cef4678ef253da313919439ae978a0b0b5362318ac243389ae6de3574d232a192f6641fb91bfe77ecccf5e5d8b8bf9de2d293d5b2222bea52f62f20cd2da6849bfc386e4419efd3cc3f35414dca588b6dd8fd", 0x82, 0x1, 0x0, 0x1}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0x0, r1, &(0x7f0000000640)="14f5ca8589fd61373f83089471418ac47e70fb11fe649e17c7d8a3415864bee2babf35fa9302efb731aa9e01fd4e2fc31792967bf49966a70f07f328ffe8ae231eaab828d3300ab491389e59d5dc297dfb84dd4afed2e2d4d21b4c05a3c062b66f8b7da702bc6c2f603eb52357c26e2abe572d8a358bd6bec257ed23b15797525e26656fb36a48b45a9b9b7dd91991c6c8de579839423d8569c53945c889da4cdc3d7e91a8c6b74083de846c15e65c", 0xaf, 0x7fff, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x9, r1, &(0x7f0000000740)="998bef923d1452fe1b4d97c13d0e380433ee0ba6311f887fa2c9f9c05191e40e3ece6342ebea0659b8e5bcae1cbae185664213b40051b449854375770f2bf6f775fd1cc3aea179bedd62baad08ab24396b2dc4e9759c29e078c2b4bdae19c8c0d3cd1e700cec49f60860de28f6cf", 0x6e, 0x4, 0x0, 0x0, r1}]) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="7194", 0x2}], 0x1, 0x80000000, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file1\x00', 0x42, 0x146) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000240), &(0x7f0000000340)=@v3, 0x14, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$inet6(0x10, 0x3, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x8800, 0x0, 0x20}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x80) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @loopback}]}, &(0x7f0000000000)=0x10) r4 = io_uring_setup(0x672c, &(0x7f0000000040)={0x0, 0xaae7, 0xc000, 0x0, 0xc1, 0x0, r2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14m37.248430938s ago: executing program 35 (id=193): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000780)={[{@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@nodiscard}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@noload}, {@block_validity}]}, 0xfa, 0x481, &(0x7f0000003380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x1, 0x4, 0xb, 0x400000000040}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = getpgrp(0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x3, 0xfd, 0x0, 0x7, 0x98639, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x20, 0x0, 0x6251, 0xffbffffd, 0x0, 0x0, 0x2ff, 0x0, 0xffffffffffffffff}, r5, 0xfffffeffffffffff, 0xffffffffffffffff, 0x3) r6 = syz_clone(0x80020100, &(0x7f0000000000)="cf262e8c7cc72a0a253e2417a66a61828d3738f28f854b7cd62c5d17964b528ede856057278543d04ba0645ff059ed447bca06d63c61c0ca40a0c258ee32987cae0db61910792f295dac4ba5c4d148f8a428488136c80bde27d64850fdbe5a489346ae3ee62954acc288ed7e98b5f692a20cef", 0x73, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000680)="09629f0224beababef94689de487776ed35b13d0180edb7f8fbd4ef1fd68958ec67d63b565177493cbd95a636f6571857386ca5daa411d3d0291dea26e358b967569b9c9b63a8ecb48947406d5648069afe9f96c06c6c1782c570f78c4cca238ea4570a490cc52") setpgid(r5, r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000e9681a6a80d46bc500000000009d8143024dcddf75e2c641000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x8b0, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x884, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1c79, 0x3, 0x2, 0x7, 0xff, 0x8, 0x1, 0x1, 0x2d0, 0x2, 0x1, 0xb, 0x6, 0x0, 0x2, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x6, 0x1, 0x5, 0xc4, 0xa117, 0x8, 0xab, 0xfffffffa, 0x1, 0x0, 0x4, 0x1fc0000, 0x4, 0x200, 0x80, 0x1, 0x1, 0x0, 0x4, 0x7, 0x2, 0x1, 0x610, 0x2, 0xb, 0xfb, 0x4, 0xa29, 0x7f, 0x82, 0x200, 0x44, 0x2, 0x1, 0x2, 0x101, 0x10005, 0xdd, 0x5, 0x8, 0x431d3ae0, 0xc03, 0x9, 0x5, 0x9349, 0x6, 0x100, 0x5, 0x1, 0x1, 0x8, 0x401, 0x3, 0x6, 0x5, 0x6, 0x19e, 0x2, 0x2, 0xf, 0xc00000, 0x4003ff, 0x7, 0x3326ea0a, 0x8007, 0x80000001, 0x25, 0x1, 0x8, 0x8001, 0x9, 0x6, 0x54773818, 0x8, 0x8001, 0x6, 0x7f, 0x373, 0x4, 0x4, 0x80, 0xc000000, 0x7ff, 0x6138, 0x49e, 0x3ff, 0x8, 0x0, 0x3, 0x0, 0x2, 0x10000, 0x3, 0x2, 0x9, 0x1, 0x7fffffff, 0x101, 0x3, 0xc42, 0x4, 0x7, 0x401, 0x2, 0x0, 0x4, 0x80000001, 0x8000, 0x5, 0x2fb, 0x5907, 0x8, 0x81, 0x7, 0x4, 0xffff7ffc, 0xffff0001, 0x2, 0xffff, 0x8, 0x2396, 0x8000, 0xfffffffc, 0x5, 0x1, 0xfff, 0x91e0000, 0x4, 0x3, 0xfae, 0x40, 0x900, 0x6, 0x0, 0x2, 0x6, 0x6, 0xdc, 0x9, 0x7ff, 0xfffffff7, 0x4, 0x2, 0x30, 0xff, 0x3, 0x80, 0x6, 0x7, 0x9, 0x4, 0x0, 0x5, 0x4342, 0xfa52, 0x4, 0x7fff, 0x7, 0x381, 0xfffffff2, 0xfffffff6, 0x100, 0x8, 0xf73, 0x80000001, 0x0, 0x5, 0xe, 0x0, 0x3, 0xfffffc01, 0x2, 0xe, 0x4, 0x4, 0xf5f, 0x2, 0x0, 0x6, 0x1, 0x9, 0x80, 0x2, 0x0, 0x0, 0xfb, 0x3, 0x8, 0x0, 0x80000001, 0x5, 0x0, 0xb, 0x3159, 0x6, 0xfffffff7, 0xe4f7, 0x6, 0xffffffff, 0xfffffffc, 0x8, 0x9, 0x1c15, 0xa098, 0x0, 0x0, 0x6, 0xb, 0x6, 0x2, 0x80000001, 0x9, 0xfffffed0, 0x2, 0x7, 0x56, 0x2, 0x4, 0x7, 0x2009, 0xb, 0x6, 0x4, 0x1, 0x3, 0x7, 0x9, 0x7, 0xe, 0x0, 0x1, 0x9, 0x1, 0x0, 0x40, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x8, 0xffffffff, 0xffff0d7b, 0x6, 0x3, 0xc79, 0x74100000, 0x800, 0x7, 0xfffffffd, 0x76e8, 0x4, 0x0, 0x9, 0xb046, 0x7, 0x101, 0x8, 0x0, 0x6, 0x3ff, 0xfffffffe, 0x0, 0x7f, 0x3, 0x7c68080b, 0x4, 0x9, 0x3, 0x80000001, 0x0, 0xa, 0x7, 0x2, 0x4, 0x62f1, 0x2, 0x995, 0x1, 0xf, 0xb, 0x7f, 0x9, 0x7, 0x4, 0x6, 0xc39, 0x6, 0x7, 0x2, 0x5, 0x4b0f, 0x3ff, 0x3, 0x93, 0x5, 0x2, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x9, 0xffffffff, 0x4, 0x9, 0xa2c, 0xda0b, 0x7, 0x40, 0x9, 0xefa8, 0x1, 0xe6, 0x0, 0xe, 0x2, 0x4, 0x6, 0xfffffff9, 0x40000004, 0x8, 0x4, 0x0, 0xea, 0xbed1, 0x10001, 0x8, 0x7fff, 0x3, 0x4, 0x0, 0x9, 0x5dac, 0xdb, 0x1, 0x8, 0x9, 0x2, 0x2000, 0xfc000000, 0xfffffff9, 0x3, 0x4, 0x0, 0x0, 0x4, 0xfffffffc, 0xfffffff9, 0x5, 0x3, 0xe2000, 0x6, 0x8001, 0xa, 0x6, 0x5, 0x0, 0xef83, 0x8, 0x6, 0x3ff, 0x0, 0x5, 0x10000, 0xf6, 0x7, 0x3, 0x3ff, 0x5, 0xaf7e, 0x5, 0x7ff, 0xeab9, 0x3, 0x8, 0x525, 0x9, 0x0, 0x3, 0x401, 0x9, 0x6, 0x8, 0x1, 0x8, 0x7, 0xfffffffb, 0x7, 0x80000001, 0xfffffffd, 0x4, 0x8fb3, 0x7fffffff, 0xfffffff9, 0x800, 0x2, 0x7fff, 0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x82, 0xff, 0x6, 0x3, 0x46, 0x1, 0x958, 0x3, 0x80000001, 0x7, 0x9, 0x5, 0xfffffffa, 0x0, 0x5, 0x4d4, 0x9, 0x8, 0x75968511, 0x0, 0x46cc, 0x8, 0x6, 0x40, 0x9, 0x8, 0x4, 0x7054, 0x3, 0x3, 0x1, 0x70, 0x9, 0x9, 0x9, 0x400, 0x3dc1, 0x0, 0xe6a2, 0x8, 0x6, 0x8, 0x6, 0x0, 0xff, 0x2, 0x6, 0x80000000, 0x0, 0xd42700, 0x8001, 0x8, 0x8000, 0x9, 0x4, 0x6302, 0x1eeacb39, 0xe, 0x2, 0x5, 0xd9a, 0x9, 0x0, 0x8, 0x3, 0x2, 0x0, 0x100, 0x3ff, 0x5, 0x3ff, 0x40, 0x7ffffffe, 0xff, 0x5, 0x6, 0x1000, 0x37, 0x81, 0x7fffffff, 0x9, 0x5ca, 0x5, 0x5d6a, 0x2, 0x3, 0x6, 0x81, 0x10000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x7f, 0x4, 0x9, {0x3, 0x1, 0x4, 0x17f, 0x0, 0x1ff}, {0x6, 0x0, 0xff, 0x7, 0x5, 0xffffffff}, 0x9, 0xe90, 0x6db5cd0}}]}]}}]}, 0x8b0}}, 0x2404c084) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000200)=0x8080, 0x4) 12m20.795974114s ago: executing program 36 (id=1877): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004c40)=[{{0x0, 0x0, 0x0}, 0x200003}], 0x1, 0x12140, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@broadcast, @random="eb63712ee475", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @local}, {0x0, 0xe21, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x2, 0x0, @void}}}}}}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x7bf2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000080)={r5, @in={{0x2, 0x4e24, @multicast2}}, [0x966e110, 0x0, 0x2, 0x3, 0x800, 0xfffffffffffffff9, 0x6, 0x10001, 0x7, 0xbb, 0x55ec29f8, 0x1ff, 0x1, 0x1, 0x5]}, &(0x7f0000000180)=0x100) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) 10m48.319845967s ago: executing program 37 (id=2825): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000140)={0x9, 0x5, 0xd, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0x0, 0x2}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x88) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x9) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000180)=r5) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000000"], 0xffdd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 10m40.726335056s ago: executing program 6 (id=2913): socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, 0x0) mq_getsetattr(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, 0x0, 0x6, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 10m40.455283291s ago: executing program 6 (id=2915): io_setup(0x4, &(0x7f0000000000)) r0 = io_uring_setup(0x6263, &(0x7f0000000040)={0x0, 0xfc73, 0x800, 0x3, 0xb0}) writev(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)="00a33b81e2fbafd05da64462c3a3574ff7da21e66d", 0x15}, {&(0x7f0000000100)="286d9d942fb66c55d2b74c6cb884862c45062f324434ed36ea4503c2296e2b400ed082fffd5bb6ffc1c2428ed8946b894c9bcd8bcb80289234da9d91039deaa3ba6596635f56b9ca1633dbfc1c80d6373a77f661a5b9a0b4cf9675cc4ca740a195cc758cdd0138fdfd38d761d8f54e8b977b574f6c69c99f930f6d876868e29a8e3867ab1ad7ce2f0c6c71d1f016d0ad4e25ba0986d75e649378e23518b8c166c5b3cd279bc72e0f30d9f3eee2f743602e9976658ee271e01b14df6c939a56e731bf26364c0f23e8e8edc396b75b", 0xce}, {&(0x7f0000000200)="c3d835ff4c58d21ee96899f6dd9928a5a4168ae85d82a1bee2cfdd64907251f4e013f9dfc88a1630226b34882d984766d5ff3b27a7bfb63b8c1576a216b49a59a2936fb0329e96c632e2c88c5753ba2df4ce8d318f8523d78f1c5ff2d07fb6461a3d3050c522015eb6e14d31574fece3cf2a095d37448e0dcbc28fbb35b8596dffa6dc4620a19f44e418896193811cc5e63844f46f43bcdf9cd86dab074ab0c770253607682635d56e81b5bcdfcffda56ff46d1029e0a72fa52a01dd7036028e6a9b27f6cefc8166bb922a7f", 0xcc}, {&(0x7f0000000300)="b6c07872c976f0d965d4af471cad61b862a2fb6c5638e67bc508ba0d916948a9dcd04b9364cc97f9317b47ad131130bbed69a6c12d02846e7187c837d2aa010d874b7881973514b8df9811ece077a2c454340f0697", 0x55}, {&(0x7f0000000380)="e08b77f5881eedd60611a23b50ab768890967c689222db54c422af12797677384e4fb1fe37209eb2cc0477cfd2cc762a483135202263", 0x36}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="a4926410a7588efcec8e9464b9db0c8141bbda22a59937c448e128ad932832edacb5873c682fb22fa59b04e0c60a94d593b37574569151d00de8bfc622f4197d78e2", 0x42}], 0x7) pread64(r0, &(0x7f0000000500)=""/72, 0x48, 0x8) r1 = syz_io_uring_setup(0x400c, &(0x7f0000000580)={0x0, 0x21fe, 0x40, 0x1, 0x381, 0x0, r0}, &(0x7f0000000600)=0x0, &(0x7f0000000640), &(0x7f0000000680)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x100010, r0, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x110, r0, 0x10000000) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000006c0), 0x40, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000740)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffff7fffffff, &(0x7f0000000700)=[r0, r0, r5, r0], 0x4, 0x0, 0x1, {0x0, r6}}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x11, r5, 0xf2f85000) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x202850, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@access_user}, {@cache_loose}, {@access_uid={'access', 0x3d, 0xee00}}, {@aname={'aname', 0x3d, '\x00'}}, {@privport}, {@cachetag={'cachetag', 0x3d, '\x00'}}], [{@fowner_lt={'fowner<', r7}}, {@hash}]}}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_enter(r0, 0x2689, 0x5838, 0x1, &(0x7f0000000a00)={[0x8]}, 0x8) preadv(r0, &(0x7f0000000e40)=[{&(0x7f0000000a40)=""/14, 0xe}, {&(0x7f0000000a80)=""/180, 0xb4}, {&(0x7f0000000b40)=""/73, 0x49}, {&(0x7f0000000bc0)=""/124, 0x7c}, {&(0x7f0000000c40)=""/235, 0xeb}, {&(0x7f0000000d40)=""/89, 0x59}, {&(0x7f0000000dc0)=""/114, 0x72}], 0x7, 0x5, 0x0) munmap(&(0x7f0000ff9000/0x5000)=nil, 0x5000) syz_usb_connect(0x4, 0x39b, &(0x7f0000000ec0)={{0x12, 0x1, 0x200, 0xc5, 0xf, 0xf4, 0x8, 0x403, 0xbcda, 0x29be, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x389, 0x3, 0x5, 0xe9, 0x50, 0xe2, "", [{{0x9, 0x4, 0x6, 0x1, 0x9, 0xf, 0x6f, 0x93, 0x1, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xa00, 0x1000, 0x3, 0x9}, @as_header={0x7, 0x24, 0x1, 0x5, 0x6, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0x7f, 0x4, "3fbb7b", '`'}]}], [{{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x9, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf8, 0x4}]}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0xfa, 0x9, 0x5}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x81, 0x1, 0x2}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0xb7, 0x8, 0x2}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xf, 0x8, 0xe4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xff}, @generic={0x62, 0x21, "75b9a31b18c66de928c4588b9195a463101928e62152f0d1a4d37c4aecdb48d8092ec67a306ccaccf9e4d508744f83a99c724676b114714238085638ce4dbb27de3bd34e109301230d3fa58ec0ef05153e6a89874dcd1d752e94908f3868cb3b"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x81, 0x6, 0x26, [@generic={0x6, 0x10, "c597cab3"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x0, 0x7, 0x9c, 0x9}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x10, 0xf, 0x9, [@generic={0xb1, 0x5, "071a29c89609dafec98555c1186c8e567cbc167e2962c8964854f34be72749a6c3136b91279d585d577b37cb34878e00ed825f74eb16dea1de60d4eebaf4afefe35102848f2d6c860154b816b2f9313ffc0672d06d207759304297e0e3acf7b9af67cafc34daeeab25406c8fcd511fc3a789ed1e63014adbaf6edfef8e775ec42519fee0b54853393454b12b7c5c9e69c728b66d50db6b24a138163843682ef6fd0fb5baa80a0278ac89a85e5feb86"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x65, 0x1000}]}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x0, 0x98, 0xfb}}]}}, {{0x9, 0x4, 0x8c, 0x1, 0x0, 0xff, 0xff, 0xff, 0xe}}, {{0x9, 0x4, 0xe7, 0xf, 0x6, 0x83, 0xf9, 0x86, 0x3, [@generic={0x1c, 0x11, "b8573d99e6bc646711b3c151328431a38b737a4775681d38efdf"}], [{{0x9, 0x5, 0xb, 0x0, 0x20, 0x40, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x1}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x1, 0x40, 0x2, [@generic={0x20, 0xd, "4a239dcc8012b26bd963390dfe232ca63078c003014d950184d1eeec70c4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc7, 0x7}]}}, {{0x9, 0x5, 0x4, 0xc, 0x400, 0x5, 0x0, 0xe}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0x2, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x10, 0xf, 0x3}, @generic={0x82, 0x33, "f5d27e7dea555f81d756b0d135b21cd46399e9d2c91b58da5c3725314aaad360e7880deae63936ad5fab375f47daad758589aa0d02bd431f6edcdb7e64de6268ec92084fb0cb256bd387715b39601aa1cbcabcb2f77387a40f2729c377aecc3c65e299c0453bc218cbb1a460bd270e6cd5f1131c440421f7ad4a304fda9db777"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x69, 0xe4, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x1}]}}, {{0x9, 0x5, 0x7, 0x8, 0x7df, 0xff, 0x8, 0x34, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd0, 0x400}, @generic={0xb2, 0x22, "792717790735444dbc0ae382483374189009451888ff6e74699d09b0b03ab416e1fc394aa316d89b24c0eb8e870dab10d0c8cc34391d9a943bfe7dc299354357339067d6386925e463ca23782d3125153933710c0d2ff2b9dd7171164809f62ab277f9005e3032cd66b8c5b92840cbb436f1f542a4821a88a0a3ecc4eaa2d5162f01575cb25acd60d3d26dd8e8007fc9e38bbff71af34ec698007a9ee6503d6e07919469bd5276688d4cc3b9b7252fa9"}]}}]}}]}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001280)={0xa, 0x6, 0x110, 0x4, 0x4, 0xc, 0xff, 0x80}, 0x168, &(0x7f00000012c0)={0x5, 0xf, 0x168, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0xd, 0xf, 0x1ff, [0xff3f00, 0x3fc0, 0x3f30, 0xf, 0xc000, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x1, 0x600}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "9bb56fe63c1e558cf8cd363b66de8bac"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x5, 0x81, 0x77, 0x8}, @generic={0x102, 0x10, 0x1, "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"}, @ssp_cap={0x14, 0x10, 0xa, 0x80, 0x2, 0x0, 0xf000, 0x7f, [0xc000, 0x0]}]}, 0x8, [{0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x1c65}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x2409}}, {0x9b, &(0x7f00000014c0)=@string={0x9b, 0x3, "06b3b9fad7af32faa021892beeb69cc6db083ad677dd99f4806c536a6c9027ecc2811d5138b8378b9836d9045f41432e7f31dc5496557766bd06cdefbc1281e1661832b3dfcae6b9b2916f8f726b7f2c7bdd7588b8e4d94232e2e03f952b65f9daf6dffc993768c766edfe5bd8c4298a6d251c38da870a4d39dbb67287bf614fd7923f352d549ee77bee7225a748465f8eac1ee28b29ccdab9"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x3801}}, {0x46, &(0x7f0000001640)=@string={0x46, 0x3, "571d818ef98b3ca1db88ce82817760bec44dd39491c6800199cbd1bdfd5c04fd8bafe0a6f63b817eae7599d2a6ee537f318d8758eb5e624b41ac32475e2e3926bdda9361"}}, {0x15, &(0x7f00000016c0)=@string={0x15, 0x3, "6684c2f429eb2af75865f2f4a7cc7ab4b5d655"}}]}) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000001780)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x4b3, 0x3108, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x10, 0x5, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x2, 0xfe, {0x9, 0x21, 0x3, 0x92, 0x1, {0x22, 0x2b9}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x9, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x1, 0xe5, 0xa3}}]}}}]}}]}}, &(0x7f0000001a80)={0xa, &(0x7f00000017c0)={0xa, 0x6, 0x300, 0x8, 0xf6, 0x19, 0x20, 0x5}, 0x79, &(0x7f0000001800)={0x5, 0xf, 0x79, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x28, 0x8, 0x9, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "35e81e409215aa4c23ff9cc8fab3609b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x9, 0x64, 0xc000}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0xf, 0xb}, @ssp_cap={0x24, 0x10, 0xa, 0x40, 0x6, 0x1, 0x1e0f, 0x2, [0xc000, 0xc00f, 0x0, 0xff3ff0, 0xc000, 0xffff0f]}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x8, 0xf, 0x3, [0xc030, 0xc017, 0xc0, 0xff3f0f, 0xc000, 0xf0]}]}, 0x8, [{0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x1004}}, {0x1b, &(0x7f0000001940)=@string={0x1b, 0x3, "43e436f88a10f78a89611868e6702146ef2aa7d729b190af71"}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x1c09}}]}) mount$9p_rdma(&(0x7f0000001b00), &(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80), 0x202e, &(0x7f0000001bc0)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@uname={'uname', 0x3d, '\'/'}}, {@timeout={'timeout', 0x3d, 0xa}}, {@common=@aname={'aname', 0x3d, '(:,&'}}, {@timeout={'timeout', 0x3d, 0x6}}, {@common=@cache_mmap}, {@common=@msize={'msize', 0x3d, 0x4}}, {@common=@access_any}], [{@seclabel}, {@dont_measure}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@smackfsroot}, {@appraise_type}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfshat={'smackfshat', 0x3d, 'c/+'}}]}}) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x3f7, 0x800, 0x70bd2d, 0x25dfdbfb, {0x1, 0x7, '.', './file0'}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}}, 0x40000) openat$cgroup(r5, &(0x7f0000001e00)='syz1\x00', 0x200002, 0x0) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000001e40)={0x1, 0x5}, 0x2) fsetxattr$security_capability(r1, &(0x7f0000001e80), &(0x7f0000001ec0)=@v1={0x1000000, [{0x2, 0x9}]}, 0xc, 0x1) ioctl$F2FS_IOC_DECOMPRESS_FILE(r8, 0xf517, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001f00), 0x3, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000001f40)={{r9}, 0x8, 0x8481, 0x8001}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) quotactl_fd$Q_GETQUOTA(r8, 0xffffffff80000702, r7, &(0x7f0000001f80)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000002000), 0x20000, 0x0) 10m39.734147992s ago: executing program 6 (id=2927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x84}}, 0xe040) 10m39.587653247s ago: executing program 6 (id=2931): perf_event_open(0x0, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) rmdir(&(0x7f0000000140)='./bus\x00') lseek(r0, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) getresuid(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x102260, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000100)=0x9, 0x2a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x410200, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x1, 0x5, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}]}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 10m39.353161506s ago: executing program 6 (id=2934): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6003000000082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa02000001000000006a9edfc638b7ded5c3af6e2415cf05e7df3546b5ba19eafad92cf2926848d4a481dfe0e6f151408bcdc5bd16a5a2f7b0398d61684ec4f081f081b56d4f3216d4fc31438516dac84900e3324e7970944eef72144d147fbb58229e72bdb846998a6b4a369ed33cef9c940a9600714a7f431ffe41e931545cc384782320f1f508128e80cc8cc92d91f4eec2"], 0x0) 10m39.144992881s ago: executing program 6 (id=2937): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netlink\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0xf9fdffff, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 10m39.074928112s ago: executing program 38 (id=2937): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netlink\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0xf9fdffff, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 9m55.452208167s ago: executing program 3 (id=3240): openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x0, 0x9, 0x2, 0x80000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000840)='./file0\x00', 0x5210, &(0x7f0000000900)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0xdd, 0x2e9, &(0x7f0000000a40)="$eJzs3EFPE1sYxvEX2ktLudDe5OYm10R9oxvdTKB+AG0MJMYmGqREXZgMMtWmY0tmGkyNkW6MWz8HcenORP0CbIwb9+6ICdENC+OYzrTQQoGhUlvh/0tgTufMM3OAA3kPSc/67ZePinnXyJsVGY6rDIvUZFMkVW81DDWOw357RFrV5OLYt0+nb925ez2TzU7Pqs5k5i6lVXXi7NvHT1+de18Zm3898SYma6l76xvpz2v/rf2//mPuYcHVgqulckVNXSiXK+aCbeliwS0aqjdty3QtLZRcy2n2xxoPXFqqqllaHE8sOZbrqlmqatGqaqWsFaeq5gOzUFLDMHQ8ISdbNMQ1udXZWTOzZ7cXOegGscOOCj012umk42RqnTtzq79hTAAAYMDsX/8Htf7e9X92Pjgecf0vsrv+9/vzdjl8/R+mAD4WOhZ9e6i1vTqg/sex4DgZM9H4/RVpXdNR/wMAAAAAAAAAAAAAAAAAAAAA8CfY9Lyk53nJ5rH5ERORuIg0X/d7nOiNQ//8rY3658v9HDOOTssb9+Ii9ovl3HIuOAb9mbwUxBZLJiUp3/350BC0Z65lpydV/bS8s1ca+ZXlXMTfHMLPN6U65c/8M6WB9vxfkmh9flqS8m/n56c75kfkwvmWvCFJ+XBfymLLoj+vt/PPplSv3sjuyI/61wEAAAAAcBwYuiW1c/3u9xvB4n53f5DP5MVbEbHicsD/B3atz6Ny6sTs0AMAAAAAQH+51SdF07Ytp4tGTER+IW4v/B2Mocv4oDYi0n5GooMwsCsiMgDDaGuMBtMv3piLHa4ZinY5Rev3DM5oN/EvW/FQKS/ENdH6TB+U73yIRj//KgEAAADohe2i/xChj897OCIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6esPuBiciI+Juifd3eRi4ubrV5o33iLY+L9OWLBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbEzwAAAP//assUVA==") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x80800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) unshare(0x22020600) r0 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) syz_io_uring_setup(0x3409, &(0x7f0000000080)={0x0, 0x63a7, 0x20c, 0xfffffffd, 0xa0}, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x800900, 0x0, 0x4, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8004) 9m55.169292514s ago: executing program 3 (id=3245): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7fffffffffffffff, 0x80000000}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000400)=0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000004c0)={r7, @in6={{0xa, 0x4e23, 0xb239, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x3}}}, 0x84) r8 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x10, 0xa0002f5}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES16=r5, @ANYRES32=r9, @ANYRESOCT=r4, @ANYBLOB='$\x00\x00\x00', @ANYBLOB="0800060017"], 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m54.816129893s ago: executing program 3 (id=3246): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000265400000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0xfc6474254eb87aca}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x30, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000005, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 9m54.813058323s ago: executing program 3 (id=3247): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0xc010128e, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x2e21719c5481a03e) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x10000000000002, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="170000000000000000000000070000004406fc5cad8c5755b7810000004000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141412ac1e000100000000"], 0x38}, 0x4000004) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000700)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x200000001, 0x0, 0x111, 0xa}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m54.563815325s ago: executing program 3 (id=3250): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x400, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000280)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0/../file0/file0', [{0x20, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0'}, {0x20, 'P]@,%\''}, {0x20, ']k/@'}, {0x20, '//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'}, {0x20, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0'}, {0x20, '/:{'}, {0x20, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0'}, {0x20, '//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'}], 0xa, "717e094fdc0a301dac5fbae70b3c4919dcd93bd9409f3f3130f1d482838987924a994b3e1934cf75ea7f56d71a02aad1ab9a6e1189f45129242a188b8975b696654e2f19be193ad72c5d9f81f388b0824757f9f69ebf0bac1d3ef28a948f9f51aec115f01ac20aca3f3211b0d2a0855281687694232362f1320be544222036d44d4f27e786836ef02dd2101ca9cfa42408290dcb8d469503b543e04508407767b2f4876daf0395c3568234f72dd4adef47393255b588ab850de11a8f29eba25a205cdb50ea7e7d603d769ee6ad009c452c2ca9fb5b7af5a70113ea9b5a814d5183fbd0e99ccf27"}, 0x4f2) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0'}, 0xb) pwrite64(r0, &(0x7f0000000040)="aa09e01909ed2f", 0x7, 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x50082, 0x0, 0x24}, 0x18) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', 0x1, 0x5) execveat(r2, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x400) 9m53.668262045s ago: executing program 3 (id=3260): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) syz_extract_tcp_res(0x0, 0x9, 0x6) r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) syz_io_uring_setup(0x35bd, &(0x7f0000000240)={0x0, 0x8d23, 0x40, 0x2, 0x115, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 9m48.935500797s ago: executing program 0 (id=3295): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x3f9, 0x4, 0x70bd2b, 0x25dfdbfb, {0x1}}, 0x18}, 0x1, 0x0, 0x40000000, 0x20000080}, 0x800) 9m48.918500059s ago: executing program 0 (id=3296): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={0x0, 0x0, 0xfffffffffffffe3d}, 0x28) 9m48.67598227s ago: executing program 0 (id=3298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (fail_nth: 7) 9m48.252254761s ago: executing program 0 (id=3299): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) fstat(r1, &(0x7f0000002300)) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0), 0x3, 0x56d, &(0x7f0000000c00)="$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") prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0800000002000400000000000000000093f7beaae32a9fd5b5bbb0d85f94f06f0e8353578fd9ca4a5c314ef20aaadbd6aa6d4859e509776a4fb18b77d3d0ffd0e70beafe3771b4eb80283e2f86006c76f530f4358171599a6d4fee320cf21e591b4e8a161bb7aeaee57ad5c8b80430a91cf2"], 0x0) 9m48.183923482s ago: executing program 0 (id=3301): r0 = socket$packet(0x11, 0x3, 0x300) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000640)='./file0\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x448441, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) dup(0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = shmget(0x3, 0x2000, 0x101c, &(0x7f00005af000/0x2000)=nil) shmctl$IPC_RMID(r6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) close(0xffffffffffffffff) r7 = socket$key(0xf, 0x3, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d660600000000000000", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',\x00']) vmsplice(r8, &(0x7f0000000180)=[{&(0x7f0000000100)="b4", 0x1}], 0x1, 0x2) sendmsg$key(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x2, 0xb, 0x9, 0x7, 0x3, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_x_nat_t_type={0x1, 0x14, 0x2}]}, 0x18}}, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f0000000100)="ec196455dffc8101552a9e8246fa327bdd018af4c4f18e7dce21f658f27b807f44518830f271895fc69f447ea0421dd6e8e15d983ad135851c34f6a4cc49ceff2c") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 9m48.106774165s ago: executing program 0 (id=3303): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r5, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a\x00\x00', @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000011c0)=ANY=[], 0xfffffdea}, 0x1, 0x0, 0x0, 0x801}, 0x4) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'macsec0\x00'}) 9m48.056292384s ago: executing program 39 (id=3303): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r5, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a\x00\x00', @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000011c0)=ANY=[], 0xfffffdea}, 0x1, 0x0, 0x0, 0x801}, 0x4) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'macsec0\x00'}) 9m38.68595331s ago: executing program 40 (id=3260): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) syz_extract_tcp_res(0x0, 0x9, 0x6) r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) syz_io_uring_setup(0x35bd, &(0x7f0000000240)={0x0, 0x8d23, 0x40, 0x2, 0x115, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 9m25.443592344s ago: executing program 5 (id=3439): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) close(0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7a, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x1d, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2dc, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x2b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5e, 0x5, "3b8a024a6fff52ee99e0f11d698290e9c743f859468fc58403d14d676c0926efeeaa54719d6240dbd1dfb4b53b4c9bf264c0ceafd88ddd39a0b6d228ad5bd40b1f2fc03a24386debbd4e1d2c7014c95c193a38786c5e7ad6dc65"}, @ETHTOOL_A_BITSET_VALUE={0x77, 0x4, "f7992c745428f4b3ce3546a5f860be54e1f6ffe219cd85703b76e9363e3ac75b1bc566bc4c8f9b3dfb9dfa033a4ee19f7a44910abb8d9b70508bafe0bc3ab2096ac674bf943c198799e02bf71fafbb23390f2ab3c0fe54c8e9a5ba9eb4a36f69a4a37071f07209808992b1da875723e68bb067"}, @ETHTOOL_A_BITSET_VALUE={0x59, 0x4, "74b79f29c9963916f57ef3ac5fb089325359b885ae2734d4b9847d64be95cf60b76128b90ff32d2ba2c0b3c74a4f33e955a70be89f36863bb4bdbe9b9549d32210d793a939c966964d245e8769986124dc0a89a013"}, @ETHTOOL_A_BITSET_VALUE={0x79, 0x4, "33bcbf5621fb5856a31f83f4473ea79eda7728f00c4e4a5116836d43737eb49d83c82973b07d1b43cf2dacf42040646bf144a0e9b2f6284dba3b11153b7cb3b60cedcb5dbe5c325281acbc92a5a0d7861d1166916dcffd796c4940073f286eaac7da956a08d9070c42d02f03576e4d0e46994ad594"}, @ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext4\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\$/@\xf8:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff001}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*^\\[:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*.\xa1+\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'tls'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x85}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']@%-\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}]}]}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) perf_event_open(&(0x7f0000000f00)={0x2, 0x80, 0x61, 0x0, 0x0, 0x0, 0x0, 0x8, 0x41008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed6, 0x2, @perf_config_ext={0x0, 0x2}, 0x4580, 0x0, 0x800002, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$eJzs3F9oVNkZAPDvTv4YE9ukrS1V+pBiaQNqYpKpoWChgVIKlWLVh9L2JZg/hk6MNVGMpbSVQvWhD4W+tbT42qfQCqXtw+7Kwj7sg8uu7JOssPuy6xIiq/uyIrPcOzNqzCQxJuayzu8HZ+ac4x3PN3Pynblz4N4AGlZ3+pBE7IiIGxHRWWkuPaC78nR5cP5kWpIol48tJtlxZwfnT9YOrb2uI30oRLRFxLWLSez9w/JxZ+Yu/HKkVBo7U233zU6d7puZu7B/cmpkYmxi7FRxYGDoYLFYLA5t2nvtu3N+ouOlw/3/PXF76pvf/t/RJL6Xve944n1slu7oXvpZVjUnEb2bPVjOvvxYPWnOMRCe2m9Lc9ubIuJLEbEny//OaIrK5D348y8+6owPP1nptf//9d8/2MpYgc1XLndmZQV3ysALqxDpuX9S6K2csseOKBR6eyvn8DujvVCanpndOz599tRo5TdCV7QUxidLYweqvxW6oiVJ2/1Z/VF74In2YER8ISIuNW3P2r0npkujW7vUAVU7It75969OtHaskP+pm015Rwk8D2n+j/+l6Xdp/Z48h4aS5v8/7039KOQ/NBz5D41L/kPjkv/QuOQ/NC75D41L/kPjkv/QuOQ/NK5a/j+8DldFRaXhKnmvQwDA1iuXk8j7GmQgHyv/NMh7ZQKet/a7zXH8sXahep+OQrV8PSK7I1haH4yI1ohoiogHUbm/X5KeQ+QYP/Bstp354628YwAAAAAAAAAAAAAAAADWdnZw/mStbNWYo69t1UisZGG4coFnOu+Xq6XyL83ZNZ8RbdGSXSeaZNeB1iTV60I3YvF6RHeUFm/+6+qf0hLVv8MN/rd8Rsy/m3cE5Km1mHcE5Gn3T/KOgDxdv5R3BOTprYW8IyBPR4/lHQF5+vHBvCMgT39dzDsCXh6OiH319v8K8ZXsuS17fHL/pyMi2xfaiCOvR3TH6P3H+5bv/xRub3AYVrEwHHEoIi4v2/8r1A7paqq2Ppc2oiUZnyyNHYiIz0dET7RsS9v9q4zx/vSb5+r1H/tbOv8/763t/6UlHb+2F1iN43bztqWvGx2ZHdno+6Zi4fcRu5vrzX8t39uyvd72u4Vl+79d1ee07FxljBvtX9tTr//ccDr/r/SsPv88T+UrEd+qm//Jw2PSWt/s1Om+mbkL+yenRibGJsZOFQcGhg4Wi8XiUF+2HvTVVoXl3vvqP75Tr/+N++n8H7pq/vOT5n/76vOfrf+Pbg68/jF++Oo3dtXr/80P0vm/9fGzrP+tyfEswNZq3/mR2dkz/RGtyeHl/QPrj/lFVfs8ap9XOv89e+p//38xe66t/81L1v/13Cf2Pz878v16sVzszb7/98n//KTzP7pG/idL8n/9le/OvD1Xb+xdV9L5v/bTtfO/mAXTU+1x/re2p52gvOMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACARvJpAAAA//+F6yev") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) get_mempolicy(0x0, &(0x7f0000000080), 0x4, &(0x7f0000ffb000/0x4000)=nil, 0xa) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x7ffd, 0xe) socket$kcm(0xa, 0x1, 0x106) r6 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) 9m24.077384333s ago: executing program 5 (id=3443): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x10e200, 0x10004, 0x7, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x90, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r7 = socket$unix(0x1, 0x5, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0xc0182101, &(0x7f00000008c0)={0x0, 0x7ffffffff7ffffff, 0x3}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0x6, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004884) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) 9m23.353518334s ago: executing program 5 (id=3447): connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) (async) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x20000}) (async) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x3, 0x1, 0x1, 0x8}]}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc1}, 0x94) 9m22.161167874s ago: executing program 5 (id=3450): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000780)={[{@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@nodiscard}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@noload}, {@block_validity}]}, 0xfa, 0x481, &(0x7f0000003380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x1, 0x4, 0xb, 0x400000000040}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = getpgrp(0x0) r7 = syz_clone(0x80020100, &(0x7f0000000000)="cf262e8c7cc72a0a253e2417a66a61828d3738f28f854b7cd62c5d17964b528ede856057278543d04ba0645ff059ed447bca06d63c61c0ca40a0c258ee32987cae0db61910792f295dac4ba5c4d148f8a428488136c80bde27d64850fdbe5a489346ae3ee62954acc288ed7e98b5f692a20cef", 0x73, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000680)="09629f0224beababef94689de487776ed35b13d0180edb7f8fbd4ef1fd68958ec67d63b565177493cbd95a636f6571857386ca5daa411d3d0291dea26e358b967569b9c9b63a8ecb48947406d5648069afe9f96c06c6c1782c570f78c4cca238ea4570a490cc52") setpgid(r6, r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000e9681a6a80d46bc500000000009d8143024dcddf75e2c641000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r10 = socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000200)=0x8080, 0x4) 9m19.924943457s ago: executing program 5 (id=3457): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(0x0, 0x12e) setrlimit(0x7, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$inet6(0xa, 0x1, 0x5) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x1ff, 0x0, 0x6, 0x4, 0xffffffffffffffff, 0x1ff, '\x00', r4, r1, 0x0, 0x4, 0x3, 0x8}, 0x50) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r6 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'bond_slave_1\x00'}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000200), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 9m16.541793373s ago: executing program 5 (id=3477): getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_open_dev$sg(0x0, 0x0, 0x40100) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca02}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r0, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) 9m16.507378279s ago: executing program 41 (id=3477): getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_open_dev$sg(0x0, 0x0, 0x40100) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca02}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r0, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0) 8m37.547129533s ago: executing program 2 (id=3785): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={r2, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 8m37.365875233s ago: executing program 2 (id=3790): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf6e, 0x3, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1240, 0x0) read(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x26e1, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[], 0xcfa4) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20048814}, 0x20040880) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_io_uring_setup(0x63af, &(0x7f0000000180)={0x0, 0x100577, 0x1f, 0x2, 0x43}, 0x0, 0x0, 0x0) semop(0x0, 0x0, 0x1f4) 8m36.42970525s ago: executing program 2 (id=3796): open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0xa, 0x148, 0x0, 0x10, 0x300, 0x2a8, 0x2a8, 0x300, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0x1, {0xc9e5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x2, 0x6, 0x0, 0x3, 0x1], 0x3, 0x3}, {0x2, [0x0, 0x8, 0x1, 0x5, 0x7, 0x7], 0x2, 0x5}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x278) 8m36.331951446s ago: executing program 2 (id=3797): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000780)={[{@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@nodiscard}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@noload}, {@block_validity}]}, 0xfa, 0x481, &(0x7f0000003380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x1, 0x4, 0xb, 0x400000000040}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = getpgrp(0x0) r7 = syz_clone(0x80020100, &(0x7f0000000000)="cf262e8c7cc72a0a253e2417a66a61828d3738f28f854b7cd62c5d17964b528ede856057278543d04ba0645ff059ed447bca06d63c61c0ca40a0c258ee32987cae0db61910792f295dac4ba5c4d148f8a428488136c80bde27d64850fdbe5a489346ae3ee62954acc288ed7e98b5f692a20cef", 0x73, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000680)="09629f0224beababef94689de487776ed35b13d0180edb7f8fbd4ef1fd68958ec67d63b565177493cbd95a636f6571857386ca5daa411d3d0291dea26e358b967569b9c9b63a8ecb48947406d5648069afe9f96c06c6c1782c570f78c4cca238ea4570a490cc52") setpgid(r6, r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000e9681a6a80d46bc500000000009d8143024dcddf75e2c641000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r10 = socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000200)=0x8080, 0x4) 8m33.872072187s ago: executing program 2 (id=3801): socket(0x10, 0x3, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1022000, 0x1000}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000300000000070000000900010073797a310000000044030000090a030000000000000009000700000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000d0400128008"], 0x38c}, 0x1, 0x0, 0x0, 0x2400c055}, 0x0) semget$private(0x0, 0x6, 0x0) statx(0xffffffffffffffff, 0xfffffffffffffffd, 0x1000, 0x400, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56149, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 8m31.732061925s ago: executing program 2 (id=3805): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x22, &(0x7f0000000040)=0x8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair(0x1e, 0x4, 0x6, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) ioctl$BLKSECTGET(r5, 0x1267, &(0x7f00000003c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="080057000000fc000800570006004a000000"], 0x34}}, 0x4000054) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, {0xa, 0x4e20, 0xd57, @remote, 0x1000}, 0x0, {[0x10001, 0x0, 0x59, 0xfffffe00, 0x2, 0x5, 0x80000001, 0x2]}}, 0x5c) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0xc2b, 0xf60e}, 0x8020, 0x0, 0x43a1bd76, 0x1, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) unshare(0x22020600) setresuid(0x0, 0xee00, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$packet_int(r11, 0x107, 0x8, 0x0, 0x0) fcntl$setpipe(r10, 0x407, 0x8001a0) r12 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000006a00)={0x2c, r12, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2e}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048050}, 0x48804) 8m31.731089646s ago: executing program 42 (id=3805): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x22, &(0x7f0000000040)=0x8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair(0x1e, 0x4, 0x6, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) ioctl$BLKSECTGET(r5, 0x1267, &(0x7f00000003c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="080057000000fc000800570006004a000000"], 0x34}}, 0x4000054) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, {0xa, 0x4e20, 0xd57, @remote, 0x1000}, 0x0, {[0x10001, 0x0, 0x59, 0xfffffe00, 0x2, 0x5, 0x80000001, 0x2]}}, 0x5c) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0xc2b, 0xf60e}, 0x8020, 0x0, 0x43a1bd76, 0x1, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) unshare(0x22020600) setresuid(0x0, 0xee00, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$packet_int(r11, 0x107, 0x8, 0x0, 0x0) fcntl$setpipe(r10, 0x407, 0x8001a0) r12 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000006a00)={0x2c, r12, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2e}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048050}, 0x48804) 10.097491979s ago: executing program 1 (id=6907): fstat(0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x8, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0xc000) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x3, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd7000000000000000000", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9.666721301s ago: executing program 1 (id=6908): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf6e, 0x3, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1240, 0x0) read(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x26e1, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[], 0xcfa4) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r6 = syz_io_uring_setup(0x63af, &(0x7f0000000180)={0x0, 0x100577, 0x1f, 0x2, 0x43}, 0x0, 0x0, 0x0) semop(0x0, 0x0, 0x1f4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0x1a, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x0, 0x5858, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2beea, 0xffffffffffffffff, 0x9, &(0x7f0000000880)=[0x1, 0xffffffffffffffff, 0x1, r2, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r6], &(0x7f0000000940)=[{0x0, 0x4, 0xe, 0x5}, {0x1, 0x3, 0x7, 0xa}, {0x2, 0x5, 0xf, 0x1}, {0x0, 0x5, 0x6, 0x6}, {0x5, 0x2, 0x4, 0x9}, {0x3, 0x3, 0x9, 0x6}, {0x3, 0x2, 0x6, 0x6}, {0x0, 0x5, 0x2, 0xb}, {0x0, 0x2, 0xd, 0x6}], 0x10, 0x1}, 0x94) 8.697111452s ago: executing program 1 (id=6914): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048814}, 0x20000001) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RGETLOCK(r6, &(0x7f0000000280)=ANY=[], 0x9cad0d3c) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)}, 0xc1) 7.80972061s ago: executing program 9 (id=6917): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) close(0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7a, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000340), 0x0, 0x0, 0x1d, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2d8, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x2b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5e, 0x5, "3b8a024a6fff52ee99e0f11d698290e9c743f859468fc58403d14d676c0926efeeaa54719d6240dbd1dfb4b53b4c9bf264c0ceafd88ddd39a0b6d228ad5bd40b1f2fc03a24386debbd4e1d2c7014c95c193a38786c5e7ad6dc65"}, @ETHTOOL_A_BITSET_VALUE={0x77, 0x4, "f7992c745428f4b3ce3546a5f860be54e1f6ffe219cd85703b76e9363e3ac75b1bc566bc4c8f9b3dfb9dfa033a4ee19f7a44910abb8d9b70508bafe0bc3ab2096ac674bf943c198799e02bf71fafbb23390f2ab3c0fe54c8e9a5ba9eb4a36f69a4a37071f07209808992b1da875723e68bb067"}, @ETHTOOL_A_BITSET_VALUE={0x59, 0x4, "74b79f29c9963916f57ef3ac5fb089325359b885ae2734d4b9847d64be95cf60b76128b90ff32d2ba2c0b3c74a4f33e955a70be89f36863bb4bdbe9b9549d32210d793a939c966964d245e8769986124dc0a89a013"}, @ETHTOOL_A_BITSET_VALUE={0x79, 0x4, "33bcbf5621fb5856a31f83f4473ea79eda7728f00c4e4a5116836d43737eb49d83c82973b07d1b43cf2dacf42040646bf144a0e9b2f6284dba3b11153b7cb3b60cedcb5dbe5c325281acbc92a5a0d7861d1166916dcffd796c4940073f286eaac7da956a08d9070c42d02f03576e4d0e46994ad594"}, @ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext4\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\$/@\xf8:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff001}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*^\\[:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*.\xa1+\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'tls'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x85}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']@%-\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}]}]}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_WOL_MODES={0x4}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) perf_event_open(&(0x7f0000000f00)={0x2, 0x80, 0x61, 0x0, 0x0, 0x0, 0x0, 0x8, 0x41008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed6, 0x2, @perf_config_ext={0x0, 0x2}, 0x4580, 0x0, 0x800002, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$eJzs3F9oVNkZAPDvTv4YE9ukrS1V+pBiaQNqYpKpoWChgVIKlWLVh9L2JZg/hk6MNVGMpbSVQvWhD4W+tbT42qfQCqXtw+7Kwj7sg8uu7JOssPuy6xIiq/uyIrPcOzNqzCQxJuayzu8HZ+ac4x3PN3Pynblz4N4AGlZ3+pBE7IiIGxHRWWkuPaC78nR5cP5kWpIol48tJtlxZwfnT9YOrb2uI30oRLRFxLWLSez9w/JxZ+Yu/HKkVBo7U233zU6d7puZu7B/cmpkYmxi7FRxYGDoYLFYLA5t2nvtu3N+ouOlw/3/PXF76pvf/t/RJL6Xve944n1slu7oXvpZVjUnEb2bPVjOvvxYPWnOMRCe2m9Lc9ubIuJLEbEny//OaIrK5D348y8+6owPP1nptf//9d8/2MpYgc1XLndmZQV3ysALqxDpuX9S6K2csseOKBR6eyvn8DujvVCanpndOz599tRo5TdCV7QUxidLYweqvxW6oiVJ2/1Z/VF74In2YER8ISIuNW3P2r0npkujW7vUAVU7It75969OtHaskP+pm015Rwk8D2n+j/+l6Xdp/Z48h4aS5v8/7039KOQ/NBz5D41L/kPjkv/QuOQ/NC75D41L/kPjkv/QuOQ/NK5a/j+8DldFRaXhKnmvQwDA1iuXk8j7GmQgHyv/NMh7ZQKet/a7zXH8sXahep+OQrV8PSK7I1haH4yI1ohoiogHUbm/X5KeQ+QYP/Bstp354628YwAAAAAAAAAAAAAAAADWdnZw/mStbNWYo69t1UisZGG4coFnOu+Xq6XyL83ZNZ8RbdGSXSeaZNeB1iTV60I3YvF6RHeUFm/+6+qf0hLVv8MN/rd8Rsy/m3cE5Km1mHcE5Gn3T/KOgDxdv5R3BOTprYW8IyBPR4/lHQF5+vHBvCMgT39dzDsCXh6OiH319v8K8ZXsuS17fHL/pyMi2xfaiCOvR3TH6P3H+5bv/xRub3AYVrEwHHEoIi4v2/8r1A7paqq2Ppc2oiUZnyyNHYiIz0dET7RsS9v9q4zx/vSb5+r1H/tbOv8/763t/6UlHb+2F1iN43bztqWvGx2ZHdno+6Zi4fcRu5vrzX8t39uyvd72u4Vl+79d1ee07FxljBvtX9tTr//ccDr/r/SsPv88T+UrEd+qm//Jw2PSWt/s1Om+mbkL+yenRibGJsZOFQcGhg4Wi8XiUF+2HvTVVoXl3vvqP75Tr/+N++n8H7pq/vOT5n/76vOfrf+Pbg68/jF++Oo3dtXr/80P0vm/9fGzrP+tyfEswNZq3/mR2dkz/RGtyeHl/QPrj/lFVfs8ap9XOv89e+p//38xe66t/81L1v/13Cf2Pz878v16sVzszb7/98n//KTzP7pG/idL8n/9le/OvD1Xb+xdV9L5v/bTtfO/mAXTU+1x/re2p52gvOMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACARvJpAAAA//+F6yev") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x7ffd, 0xe) socket$kcm(0xa, 0x1, 0x106) r7 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r7, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) 7.171660436s ago: executing program 1 (id=6919): fstat(0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x8, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0xc000) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x3, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd7000000000000000000", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.812862985s ago: executing program 1 (id=6921): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000780)={[{@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@nodiscard}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@noload}, {@block_validity}]}, 0xfa, 0x481, &(0x7f0000003380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x1, 0x4, 0xb, 0x400000000040}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = getpgrp(0x0) r7 = syz_clone(0x80020100, &(0x7f0000000000)="cf262e8c7cc72a0a253e2417a66a61828d3738f28f854b7cd62c5d17964b528ede856057278543d04ba0645ff059ed447bca06d63c61c0ca40a0c258ee32987cae0db61910792f295dac4ba5c4d148f8a428488136c80bde27d64850fdbe5a489346ae3ee62954acc288ed7e98b5f692a20cef", 0x73, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000680)="09629f0224beababef94689de487776ed35b13d0180edb7f8fbd4ef1fd68958ec67d63b565177493cbd95a636f6571857386ca5daa411d3d0291dea26e358b967569b9c9b63a8ecb48947406d5648069afe9f96c06c6c1782c570f78c4cca238ea4570a490cc52") setpgid(r6, r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000e9681a6a80d46bc500000000009d8143024dcddf75e2c641000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r10 = socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000200)=0x8080, 0x4) 5.927962513s ago: executing program 9 (id=6925): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf6e, 0x3, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1240, 0x0) read(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x26e1, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[], 0xcfa4) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_io_uring_setup(0x63af, &(0x7f0000000180)={0x0, 0x100577, 0x1f, 0x2, 0x43}, 0x0, 0x0, 0x0) semop(0x0, 0x0, 0x1f4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0x1a, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x0, 0x5858, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2beea, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000940)=[{0x0, 0x4, 0xe, 0x5}, {0x1, 0x3, 0x7, 0xa}, {0x2, 0x5, 0xf, 0x1}, {0x0, 0x5, 0x6, 0x6}, {0x5, 0x2, 0x4, 0x9}, {0x3, 0x3, 0x9, 0x6}, {0x3, 0x2, 0x6, 0x6}, {0x0, 0x5, 0x2, 0xb}, {0x0, 0x2, 0xd, 0x6}], 0x10, 0x1}, 0x94) 5.732112405s ago: executing program 4 (id=6926): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000740)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, 0xc) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000b"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x24004090) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x0, 0x3}, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 4.915305751s ago: executing program 4 (id=6927): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7a, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0x1d, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) perf_event_open(&(0x7f0000000f00)={0x2, 0x80, 0x61, 0x0, 0x0, 0x0, 0x0, 0x8, 0x41008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed6, 0x2, @perf_config_ext={0x0, 0x2}, 0x4580, 0x0, 0x800002, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) get_mempolicy(0x0, &(0x7f0000000080), 0x4, &(0x7f0000ffb000/0x4000)=nil, 0xa) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7ffd, 0xe) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) 4.807732139s ago: executing program 9 (id=6928): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FIONCLEX(r0, 0x5450) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x5}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) 4.507582189s ago: executing program 7 (id=6929): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f00000005c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0x6, {0xc, 0x6, "fdcd53", 0x200, 0x2c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@hopopts={0x2b}], "81d7a040d5c56b1e"}}}}}}}, 0x0) set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) socket$kcm(0x10, 0x400000002, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000000101010100000000000000000a001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008000100", @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="10f2192d002dbd7000030822a2c36f89029547c5659d6fa1b0e80e6a2bfdee942ba0ee4a0795375a16690688710e4cad6738e6e882fa061399541bdf9345af417839cb52816402855e250916151d1a2d9e6a1862a0f314d2ab5f729cecd652d6549f6f904810e40ce353da77461937216117400df25855eb2d5b58bf9bab8a801efc1b83131c72e5fbdf029251ec6f1602d3b28c", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x40001) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x12) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000200300480012800e00010069703665727370616e0000003400028006000200080000000400120014000700fc00000000000000000000000000000108000d000100000008000c00feffffff08000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x84}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) set_mempolicy(0x1, &(0x7f0000000080)=0x6, 0xe76) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010003000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0600f3ff0300000008000200"], 0x38}}, 0x0) 3.186925839s ago: executing program 7 (id=6930): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048814}, 0x20000001) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RGETLOCK(r6, &(0x7f0000000280)=ANY=[], 0x9cad0d3c) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)}, 0xc1) 2.968917975s ago: executing program 4 (id=6931): socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x80000100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ptrace$getregset(0x4205, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100, 0x80}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newsa={0x138, 0x10, 0x1, 0x70bd2b, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8881}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f000000000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb, &(0x7f0000000240)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8b32, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) r8 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) getpeername$packet(r5, 0x0, &(0x7f0000000040)) 2.707053409s ago: executing program 8 (id=6933): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000740)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, 0xc) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d30800"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x24004090) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x0, 0x3}, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 2.04013414s ago: executing program 7 (id=6934): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 2.034256771s ago: executing program 4 (id=6935): socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x80000100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ptrace$getregset(0x4205, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100, 0x80}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newsa={0x138, 0x10, 0x1, 0x70bd2b, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8881}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3801000018000100feffffff00010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/212], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb, &(0x7f0000000240)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8b32, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) r8 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) getpeername$packet(r5, 0x0, &(0x7f0000000040)) 1.894597304s ago: executing program 9 (id=6936): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) close(0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7a, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000340), 0x0, 0x0, 0x1d, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2d8, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x2b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5e, 0x5, "3b8a024a6fff52ee99e0f11d698290e9c743f859468fc58403d14d676c0926efeeaa54719d6240dbd1dfb4b53b4c9bf264c0ceafd88ddd39a0b6d228ad5bd40b1f2fc03a24386debbd4e1d2c7014c95c193a38786c5e7ad6dc65"}, @ETHTOOL_A_BITSET_VALUE={0x77, 0x4, "f7992c745428f4b3ce3546a5f860be54e1f6ffe219cd85703b76e9363e3ac75b1bc566bc4c8f9b3dfb9dfa033a4ee19f7a44910abb8d9b70508bafe0bc3ab2096ac674bf943c198799e02bf71fafbb23390f2ab3c0fe54c8e9a5ba9eb4a36f69a4a37071f07209808992b1da875723e68bb067"}, @ETHTOOL_A_BITSET_VALUE={0x59, 0x4, "74b79f29c9963916f57ef3ac5fb089325359b885ae2734d4b9847d64be95cf60b76128b90ff32d2ba2c0b3c74a4f33e955a70be89f36863bb4bdbe9b9549d32210d793a939c966964d245e8769986124dc0a89a013"}, @ETHTOOL_A_BITSET_VALUE={0x79, 0x4, "33bcbf5621fb5856a31f83f4473ea79eda7728f00c4e4a5116836d43737eb49d83c82973b07d1b43cf2dacf42040646bf144a0e9b2f6284dba3b11153b7cb3b60cedcb5dbe5c325281acbc92a5a0d7861d1166916dcffd796c4940073f286eaac7da956a08d9070c42d02f03576e4d0e46994ad594"}, @ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext4\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\$/@\xf8:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff001}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*^\\[:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*.\xa1+\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'tls'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x85}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']@%-\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}]}]}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_WOL_MODES={0x4}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) perf_event_open(&(0x7f0000000f00)={0x2, 0x80, 0x61, 0x0, 0x0, 0x0, 0x0, 0x8, 0x41008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed6, 0x2, @perf_config_ext={0x0, 0x2}, 0x4580, 0x0, 0x800002, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x7ffd, 0xe) socket$kcm(0xa, 0x1, 0x106) r7 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r7, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) 1.792209901s ago: executing program 8 (id=6937): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x4, 0x8000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040844) r1 = fsopen(&(0x7f0000000380)='configfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540), 0x0) close(r1) 1.765000686s ago: executing program 7 (id=6938): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) close(0x3) 1.716143014s ago: executing program 8 (id=6939): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x401, 0xfffffffb}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0xfffffffc}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x2}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.25976386s ago: executing program 8 (id=6940): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000700)=0x14) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000000340)=""/43, 0x111e000, 0x800, 0x8, 0x2}, 0x20) r6 = syz_io_uring_setup(0xa82, &(0x7f0000000180)={0x0, 0x89e6, 0x4000, 0x2, 0x20}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f00000002c0)=[@ioring_restriction_register_op={0x0, 0x4}, @ioring_restriction_register_op={0x0, 0x16}, @ioring_restriction_sqe_op={0x1, 0xa}, @ioring_restriction_sqe_flags_allowed={0x2, 0x4}, @ioring_restriction_register_op={0x0, 0x6}], 0x5) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f00000007c0)={@val={0x0, 0x9e7}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0xfffe, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, {0x300, 0x600, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x32) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x5, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001", @ANYBLOB="a9957c839830fde55bc59e8e080e2451afaf98d3bba3c3e609d39cbd513250d1a6bd56dea6cf619c3604efa822761f7e16ef3d530f25597ca5b0c3a19ee4ade09f545e919df25226ab0ed624f0e478da181d1b02f384bdacf8f1afade3dc9ad53496fa39dda5b4572b9571a90d7e56d6bd256452b17143b112e565991270764608c5ae13c694e61fcdd709e3c5b07f437d142b990e98f7341f20404eaa1c18968915b06a7254c6d3dfcfd3fd77a78f50e3", @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYRES16=r7], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x0, 0x0, 0x0}) 1.054589384s ago: executing program 8 (id=6941): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'batadv0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x4, 0x5, 0xe, 0x9, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x4, 0x1, 0x3, 0xa, 0x0, 0xfffffffffffffff8, 0x4}], &(0x7f0000000100)='GPL\x00', 0xa, 0x30, &(0x7f0000000140)=""/48, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xd, 0xc608, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) syz_open_dev$usbfs(&(0x7f0000000240), 0x81, 0x0) 1.004702032s ago: executing program 9 (id=6942): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7a, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0x1d, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) get_mempolicy(0x0, &(0x7f0000000080), 0x4, &(0x7f0000ffb000/0x4000)=nil, 0xa) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7ffd, 0xe) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) 972.465328ms ago: executing program 4 (id=6943): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FIONCLEX(r0, 0x5450) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x3, 0x800) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000340)=""/138, 0x8a}], 0x2) r2 = syz_io_uring_setup(0x4b6, 0x0, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x100, 0xe, 0x8001, 0x5, 0x10}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000380)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x8a}}], 0x18}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f00000011c0)=0x9, 0x8, 0x0) r7 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x58) 911.129577ms ago: executing program 7 (id=6944): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048814}, 0x20000001) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RGETLOCK(r7, &(0x7f0000000280)=ANY=[], 0x9cad0d3c) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)}, 0xc1) 629.046955ms ago: executing program 8 (id=6945): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x8) close(r0) write$selinux_load(0xffffffffffffffff, 0x0, 0x65) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0xdd5}, 0x0, 0x7, 0x10000, 0xd, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, 0x0, &(0x7f0000000140)) getresgid(&(0x7f00000001c0), &(0x7f0000000340), &(0x7f0000000380)=0x0) r8 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) process_mrelease(r8, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0x0, r7}}, './file0\x00'}) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.469939ms ago: executing program 7 (id=6946): socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x80000100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ptrace$getregset(0x4205, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100, 0x80}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newsa={0x138, 0x10, 0x1, 0x70bd2b, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8881}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f000000000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb, &(0x7f0000000240)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8b32, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) r8 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) getpeername$packet(r5, 0x0, &(0x7f0000000040)) 1.65235ms ago: executing program 4 (id=6956): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0003009}) epoll_pwait2(r3, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="ff0700007000fedbdf2509"], 0x2c}}, 0x64000) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x108}, 0x804) 463.74µs ago: executing program 1 (id=6947): socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x80000100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ptrace$getregset(0x4205, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100, 0x80}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newsa={0x138, 0x10, 0x1, 0x70bd2b, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8881}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb, &(0x7f0000000240)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8b32, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) 0s ago: executing program 9 (id=6948): socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x80000100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ptrace$getregset(0x4205, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100, 0x80}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newsa={0x138, 0x10, 0x1, 0x70bd2b, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8881}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3801000018000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/212], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb, &(0x7f0000000240)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8b32, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) r8 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) getpeername$packet(r5, 0x0, &(0x7f0000000040)) kernel console output (not intermixed with test programs): .129212][T26225] netlink: 500 bytes leftover after parsing attributes in process `syz.9.6291'. [ 840.166388][T26227] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6294'. [ 840.225974][T26235] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6294'. [ 840.235609][T26234] blktrace: Concurrent blktraces are not allowed on loop2 [ 840.402643][T26248] 9p: Bad value for 'rfdno' [ 840.645470][T26258] loop9: detected capacity change from 0 to 2048 [ 840.675571][T26258] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 840.748114][T26258] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6304: bg 0: block 234: padding at end of block bitmap is not set [ 840.763032][T26258] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1200 with error 28 [ 840.783037][T26258] EXT4-fs (loop9): This should not happen!! Data will be lost [ 840.783037][T26258] [ 840.793000][T26258] EXT4-fs (loop9): Total free blocks count 0 [ 840.799373][T26258] EXT4-fs (loop9): Free/Dirty block details [ 840.805438][T26258] EXT4-fs (loop9): free_blocks=0 [ 840.810453][T26258] EXT4-fs (loop9): dirty_blocks=1216 [ 840.819219][T26258] EXT4-fs (loop9): Block reservation details [ 840.836344][T26258] EXT4-fs (loop9): i_reserved_data_blocks=76 [ 841.022790][T21054] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 841.053982][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.097569][ T28] audit: type=1326 audit(840.591:14241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26268 comm="syz.9.6305" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd84d10c819 code=0x0 [ 841.181418][T26271] netlink: 'syz.4.6306': attribute type 29 has an invalid length. [ 841.190551][T26271] netlink: 'syz.4.6306': attribute type 29 has an invalid length. [ 841.268871][T26272] loop9: detected capacity change from 0 to 512 [ 841.794833][T26292] __nla_validate_parse: 4 callbacks suppressed [ 841.794849][T26292] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6314'. [ 841.811730][ T28] audit: type=1326 audit(841.251:14242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26278 comm="syz.8.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8220dbc819 code=0x7ffc0000 [ 841.834993][ T28] audit: type=1326 audit(841.251:14243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26278 comm="syz.8.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8220dbc819 code=0x7ffc0000 [ 841.858036][ T28] audit: type=1326 audit(841.251:14244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26278 comm="syz.8.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f8220dbc819 code=0x7ffc0000 [ 841.881119][ T28] audit: type=1326 audit(841.251:14245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26278 comm="syz.8.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8220dbc819 code=0x7ffc0000 [ 841.924529][ T28] audit: type=1326 audit(841.251:14246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26278 comm="syz.8.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8220dbc819 code=0x7ffc0000 [ 841.959614][ T28] audit: type=1326 audit(841.251:14247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26278 comm="syz.8.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8220dbc819 code=0x7ffc0000 [ 842.008155][ T28] audit: type=1326 audit(841.251:14248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26278 comm="syz.8.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8220dbc819 code=0x7ffc0000 [ 842.032752][ T28] audit: type=1326 audit(841.251:14249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26278 comm="syz.8.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f8220dbc819 code=0x7ffc0000 [ 842.643068][ T6452] kernel write not supported for file /input/event2 (pid: 6452 comm: kworker/0:12) [ 842.663190][T26314] netlink: 'syz.8.6319': attribute type 1 has an invalid length. [ 842.671703][T26314] vxcan0: entered promiscuous mode [ 842.677848][T26314] vxcan0: entered allmulticast mode [ 842.683843][T26313] netlink: 'syz.4.6321': attribute type 1 has an invalid length. [ 842.753189][T26317] bond1: entered promiscuous mode [ 842.762654][T26317] bond1: entered allmulticast mode [ 842.805870][T26317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 842.867898][T26313] bridge1: entered promiscuous mode [ 842.873478][T26313] bridge1: entered allmulticast mode [ 842.879913][T26313] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 842.888617][ T5118] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 842.912232][T26332] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6325'. [ 842.967978][T26332] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.975246][T26332] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.134715][ T30] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 843.421525][T26347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6326'. [ 843.495097][T26332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.506630][T26332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.592406][T26347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6326'. [ 843.615909][T26335] netlink: 'syz.8.6325': attribute type 29 has an invalid length. [ 843.624340][T26339] netlink: 'syz.8.6325': attribute type 29 has an invalid length. [ 843.632537][ T5116] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.671060][T26358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6326'. [ 843.706760][ T5116] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.726131][ T5116] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.749766][T26365] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6333'. [ 843.762748][ T5116] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.785825][T26365] loop4: detected capacity change from 0 to 2048 [ 843.824082][T26365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 843.867799][ T5113] bridge_slave_1: left allmulticast mode [ 843.882840][ T5113] bridge_slave_1: left promiscuous mode [ 843.904956][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.926712][T26365] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6333: bg 0: block 234: padding at end of block bitmap is not set [ 843.949477][ T5113] bridge_slave_0: left allmulticast mode [ 844.045401][ T5113] bridge_slave_0: left promiscuous mode [ 844.051358][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.060173][T26365] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 422 with error 28 [ 844.101819][T26365] EXT4-fs (loop4): This should not happen!! Data will be lost [ 844.101819][T26365] [ 844.111813][T26365] EXT4-fs (loop4): Total free blocks count 0 [ 844.118114][T26365] EXT4-fs (loop4): Free/Dirty block details [ 844.124526][T26365] EXT4-fs (loop4): free_blocks=0 [ 844.129606][T26365] EXT4-fs (loop4): dirty_blocks=432 [ 844.135255][T26365] EXT4-fs (loop4): Block reservation details [ 844.141254][T26365] EXT4-fs (loop4): i_reserved_data_blocks=27 [ 844.142870][T26343] SELinux: failure in sel_netif_sid_slow(), invalid network interface (97) [ 844.253486][T26392] loop8: detected capacity change from 0 to 512 [ 844.320776][T26392] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 844.679370][ T5113] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 844.859674][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 844.859720][ T28] audit: type=1326 audit(844.241:14264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26396 comm="syz.1.6341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468fe8c819 code=0x7ffc0000 [ 844.892724][ T28] audit: type=1326 audit(844.241:14265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26396 comm="syz.1.6341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468fe8c819 code=0x7ffc0000 [ 844.936758][T25963] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.950965][ T5113] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 844.976520][ T28] audit: type=1326 audit(844.241:14266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26396 comm="syz.1.6341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468fe8c819 code=0x7ffc0000 [ 845.214752][ T28] audit: type=1326 audit(844.241:14267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26396 comm="syz.1.6341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468fe8c819 code=0x7ffc0000 [ 845.248741][ T28] audit: type=1326 audit(844.241:14268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26396 comm="syz.1.6341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f468fe8c819 code=0x7ffc0000 [ 845.409941][ T28] audit: type=1326 audit(844.241:14269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26396 comm="syz.1.6341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468fe8c819 code=0x7ffc0000 [ 845.418424][T24416] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 845.653987][T26343] SELinux: failure in sel_netif_sid_slow(), invalid network interface (97) [ 845.786026][T24416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.796339][ T28] audit: type=1326 audit(844.241:14270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26396 comm="syz.1.6341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468fe8c819 code=0x7ffc0000 [ 845.824025][ T28] audit: type=1326 audit(844.251:14271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26396 comm="syz.1.6341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468fe8c819 code=0x7ffc0000 [ 845.847244][ T28] audit: type=1326 audit(844.251:14272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26396 comm="syz.1.6341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468fe8c819 code=0x7ffc0000 [ 845.894872][T26419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6344'. [ 845.905482][ T28] audit: type=1326 audit(844.251:14273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26396 comm="syz.1.6341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f468fe8c819 code=0x7ffc0000 [ 845.986997][T26402] loop1: detected capacity change from 0 to 512 [ 846.041527][T26402] EXT4-fs (loop1): 1 orphan inode deleted [ 846.047834][T26402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 846.063487][ T5113] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 846.074311][T26427] x_tables: unsorted entry at hook 2 [ 846.080073][ T5113] bridge4 (unregistering): left promiscuous mode [ 846.087117][ T5113] bridge4 (unregistering): left allmulticast mode [ 846.144535][ T5113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 846.154103][ T5113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 846.163528][ T5113] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 846.172347][ T5113] bond0 (unregistering): Released all slaves [ 846.180495][ T5113] bond1 (unregistering): Released all slaves [ 846.189480][ T5113] bond2 (unregistering): Released all slaves [ 846.198385][ T5113] bond3 (unregistering): Released all slaves [ 846.207695][ T5113] bond4 (unregistering): (slave lo): Releasing backup interface [ 846.216270][ T5113] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 846.227484][ T5113] bond4 (unregistering): Released all slaves [ 846.236543][ T5113] bond5 (unregistering): Released all slaves [ 846.268194][T26410] netlink: 'syz.9.6342': attribute type 29 has an invalid length. [ 846.286075][T25684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.300710][T25716] lo speed is unknown, defaulting to 1000 [ 846.322105][T25716] syz2: Port: 1 Link DOWN [ 846.400169][T26436] loop9: detected capacity change from 0 to 128 [ 846.408634][T26446] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6354'. [ 846.437911][T26446] loop1: detected capacity change from 0 to 2048 [ 846.473451][T26446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 846.553328][T26436] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6350'. [ 846.581214][ T5113] hsr_slave_0: left promiscuous mode [ 846.587303][ T5113] hsr_slave_1: left promiscuous mode [ 846.588323][T26457] FAULT_INJECTION: forcing a failure. [ 846.588323][T26457] name failslab, interval 1, probability 0, space 0, times 0 [ 846.691958][T26459] loop4: detected capacity change from 0 to 512 [ 846.711422][ T5113] hsr0: left allmulticast mode [ 846.779204][T26459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 847.038723][ T5113] hsr0: left promiscuous mode [ 847.074567][T26461] syz.9.6350: attempt to access beyond end of device [ 847.074567][T26461] loop9: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 847.082911][T26457] CPU: 0 UID: 0 PID: 26457 Comm: syz.8.6357 Tainted: G W syzkaller #0 PREEMPT(full) [ 847.083009][T26457] Tainted: [W]=WARN [ 847.083085][T26457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 847.083139][T26457] Call Trace: [ 847.083167][T26457] [ 847.083230][T26457] __dump_stack+0x1d/0x30 [ 847.083329][T26457] dump_stack_lvl+0x95/0xd0 [ 847.083402][T26457] dump_stack+0x15/0x1b [ 847.083473][T26457] should_fail_ex+0x263/0x280 [ 847.083571][T26457] should_failslab+0x8c/0xb0 [ 847.083662][T26457] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 847.083744][T26457] ? __alloc_skb+0x2d6/0x690 [ 847.083828][T26457] __alloc_skb+0x2d6/0x690 [ 847.083901][T26457] ? __alloc_skb+0x200/0x690 [ 847.084031][T26457] netlink_ack+0xfd/0x500 [ 847.084078][T26457] netlink_rcv_skb+0x192/0x220 [ 847.084203][T26457] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 847.084283][T26457] nfnetlink_rcv+0x167/0x1720 [ 847.084356][T26457] ? try_charge_memcg+0x215/0xa10 [ 847.084472][T26457] ? __rcu_read_unlock+0x4e/0x70 [ 847.084555][T26457] ? css_rstat_updated+0xbb/0x280 [ 847.084630][T26457] ? __account_obj_stock+0x2d6/0x350 [ 847.084731][T26457] ? refill_obj_stock+0x23c/0x3f0 [ 847.084816][T26457] ? obj_cgroup_charge_account+0xba/0x1a0 [ 847.084903][T26457] ? should_fail_ex+0x30/0x280 [ 847.085081][T26457] ? __rcu_read_unlock+0x4e/0x70 [ 847.085153][T26457] ? avc_has_perm_noaudit+0xab/0x130 [ 847.085273][T26457] ? _raw_spin_lock_bh+0x56/0xb0 [ 847.085358][T26457] ? _raw_spin_unlock_bh+0x18/0x20 [ 847.085457][T26457] ? selinux_nlmsg_lookup+0x99/0x890 [ 847.085536][T26457] ? __rcu_read_unlock+0x33/0x70 [ 847.085659][T26457] ? __netlink_lookup+0x276/0x2b0 [ 847.085809][T26457] netlink_unicast+0x5c0/0x690 [ 847.085917][T26457] netlink_sendmsg+0x5c8/0x6f0 [ 847.086099][T26457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 847.086190][T26457] ____sys_sendmsg+0x563/0x5b0 [ 847.086367][T26457] ___sys_sendmsg+0x195/0x1e0 [ 847.086503][T26457] __x64_sys_sendmsg+0xd4/0x160 [ 847.086612][T26457] x64_sys_call+0x194c/0x3020 [ 847.086691][T26457] do_syscall_64+0x12c/0x3b0 [ 847.086756][T26457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.086878][T26457] RIP: 0033:0x7f8220dbc819 [ 847.086925][T26457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.087032][T26457] RSP: 002b:00007f821f80f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 847.087090][T26457] RAX: ffffffffffffffda RBX: 00007f8221035fa0 RCX: 00007f8220dbc819 [ 847.087128][T26457] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 847.087167][T26457] RBP: 00007f821f80f090 R08: 0000000000000000 R09: 0000000000000000 [ 847.087265][T26457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.087313][T26457] R13: 00007f8221036038 R14: 00007f8221035fa0 R15: 00007ffec8b2c1e8 [ 847.087378][T26457] [ 847.265488][T26446] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6354: bg 0: block 234: padding at end of block bitmap is not set [ 847.347749][T26461] syz.9.6350: attempt to access beyond end of device [ 847.347749][T26461] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 847.412739][T26446] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 924 with error 28 [ 847.425472][T26446] EXT4-fs (loop1): This should not happen!! Data will be lost [ 847.425472][T26446] [ 847.435348][T26446] EXT4-fs (loop1): Total free blocks count 0 [ 847.441489][T26446] EXT4-fs (loop1): Free/Dirty block details [ 847.450826][T26467] loop8: detected capacity change from 0 to 128 [ 847.472573][T26461] syz.9.6350: attempt to access beyond end of device [ 847.472573][T26461] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 847.494585][T26446] EXT4-fs (loop1): free_blocks=0 [ 847.515486][ T5113] pim6reg (unregistering): left allmulticast mode [ 847.526728][T26472] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6361'. [ 847.532467][T26446] EXT4-fs (loop1): dirty_blocks=928 [ 847.538353][T24416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.542402][T26461] syz.9.6350: attempt to access beyond end of device [ 847.542402][T26461] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 847.572536][T26446] EXT4-fs (loop1): Block reservation details [ 847.578550][T26446] EXT4-fs (loop1): i_reserved_data_blocks=58 [ 847.588713][T26461] syz.9.6350: attempt to access beyond end of device [ 847.588713][T26461] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 847.607952][T26461] syz.9.6350: attempt to access beyond end of device [ 847.607952][T26461] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 847.621944][T26461] syz.9.6350: attempt to access beyond end of device [ 847.621944][T26461] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 847.648330][T26461] syz.9.6350: attempt to access beyond end of device [ 847.648330][T26461] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 847.696938][T26461] syz.9.6350: attempt to access beyond end of device [ 847.696938][T26461] loop9: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 847.776141][T26461] syz.9.6350: attempt to access beyond end of device [ 847.776141][T26461] loop9: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 847.790481][ T5113] team0 (unregistering): Port device team_slave_1 removed [ 847.850153][ T5113] team0 (unregistering): Port device team_slave_0 removed [ 847.897187][T25684] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 847.920198][T25684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.064923][T26493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12316 sclass=netlink_route_socket pid=26493 comm=syz.1.6362 [ 848.237541][T26494] loop1: detected capacity change from 0 to 512 [ 848.247079][T26488] netlink: 'syz.4.6360': attribute type 29 has an invalid length. [ 848.255256][T26490] netlink: 'syz.4.6360': attribute type 29 has an invalid length. [ 848.263651][T26494] EXT4-fs: Ignoring removed bh option [ 848.302994][T26494] EXT4-fs: Ignoring removed nomblk_io_submit option [ 848.317985][T26494] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 848.334904][T26494] EXT4-fs (loop1): 1 truncate cleaned up [ 848.340967][T26494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 848.535664][ T5113] IPVS: stop unused estimator thread 0... [ 848.543453][T25684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.590028][T26534] xt_hashlimit: size too large, truncated to 1048576 [ 848.668623][T26539] bond1: option all_slaves_active: invalid value (5) [ 848.691872][T26539] bond1 (unregistering): Released all slaves [ 848.733834][T26551] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6372'. [ 848.802382][T26562] loop9: detected capacity change from 0 to 2048 [ 848.809958][T26561] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6373'. [ 848.830060][T26561] loop8: detected capacity change from 0 to 2048 [ 848.855753][T26561] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 848.983969][T26562] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 849.119505][T26570] loop1: detected capacity change from 0 to 512 [ 849.156132][T26561] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6373: bg 0: block 234: padding at end of block bitmap is not set [ 849.172823][T26551] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6372: bg 0: block 234: padding at end of block bitmap is not set [ 849.226780][T26570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 849.487124][T26551] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 118 with error 28 [ 849.506624][T26561] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 750 with error 28 [ 849.530577][T26561] EXT4-fs (loop8): This should not happen!! Data will be lost [ 849.530577][T26561] [ 849.549155][T26551] EXT4-fs (loop9): This should not happen!! Data will be lost [ 849.549155][T26551] [ 849.567235][T26561] EXT4-fs (loop8): Total free blocks count 0 [ 849.573447][T26551] EXT4-fs (loop9): Total free blocks count 0 [ 849.592482][T26551] EXT4-fs (loop9): Free/Dirty block details [ 849.598404][T26551] EXT4-fs (loop9): free_blocks=0 [ 849.603553][T26561] EXT4-fs (loop8): Free/Dirty block details [ 849.609607][T26561] EXT4-fs (loop8): free_blocks=0 [ 849.621122][T26551] EXT4-fs (loop9): dirty_blocks=128 [ 849.626621][T26561] EXT4-fs (loop8): dirty_blocks=752 [ 849.632037][T26561] EXT4-fs (loop8): Block reservation details [ 849.687077][T26551] EXT4-fs (loop9): Block reservation details [ 849.693397][T26551] EXT4-fs (loop9): i_reserved_data_blocks=8 [ 849.699376][T26561] EXT4-fs (loop8): i_reserved_data_blocks=47 [ 849.752775][T25684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.785726][T21054] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 849.816197][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.911628][T26583] loop4: detected capacity change from 0 to 512 [ 850.079448][T26583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 850.864599][T24416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.914867][T25963] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 850.938649][T25963] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.013242][T26600] loop4: detected capacity change from 0 to 128 [ 851.028506][T26593] loop9: detected capacity change from 0 to 256 [ 851.041455][T26600] FAT-fs (loop4): bogus number of reserved sectors [ 851.043264][T26593] FAT-fs (loop9): Directory bread(block 1285) failed [ 851.056421][T26593] FAT-fs (loop9): Directory bread(block 1286) failed [ 851.064042][T26593] FAT-fs (loop9): Directory bread(block 1287) failed [ 851.071768][T26593] FAT-fs (loop9): Directory bread(block 1288) failed [ 851.080515][T26600] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 851.116669][T26600] FAT-fs (loop4): Can't find a valid FAT filesystem [ 851.190116][T26602] loop8: detected capacity change from 0 to 512 [ 851.210213][T26610] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6386'. [ 851.219361][T26602] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 851.246082][T26602] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 851.269383][T26602] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6380'. [ 851.273179][T26610] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6386'. [ 851.291602][T26619] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6381'. [ 851.301750][T26602] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6380'. [ 851.322262][T26619] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6381'. [ 851.343690][T25963] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.387556][T26624] loop8: detected capacity change from 0 to 512 [ 851.402008][T26624] FAT-fs (loop8): Directory bread(block 199916) failed [ 851.408936][T26624] FAT-fs (loop8): Directory bread(block 199917) failed [ 851.424658][T26624] FAT-fs (loop8): Directory bread(block 199918) failed [ 851.431760][T26624] FAT-fs (loop8): Directory bread(block 199919) failed [ 851.439164][T26624] FAT-fs (loop8): Directory bread(block 199920) failed [ 851.449516][T26624] FAT-fs (loop8): Directory bread(block 199921) failed [ 851.456454][T26624] FAT-fs (loop8): Directory bread(block 199922) failed [ 851.463390][T26624] FAT-fs (loop8): Directory bread(block 199923) failed [ 851.471043][T26624] FAT-fs (loop8): Directory bread(block 199916) failed [ 851.479034][T26624] FAT-fs (loop8): Directory bread(block 199917) failed [ 851.716697][T26654] loop9: detected capacity change from 0 to 512 [ 851.728281][T26654] loop9: detected capacity change from 0 to 128 [ 851.739584][T26654] TCP: TCP_TX_DELAY enabled [ 851.769472][ T28] kauditd_printk_skb: 211 callbacks suppressed [ 851.769507][ T28] audit: type=1400 audit(851.261:14485): avc: denied { ioctl } for pid=26653 comm="syz.9.6397" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 851.966972][T26656] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 852.239380][T26663] syzkaller0: entered promiscuous mode [ 852.245111][T26663] syzkaller0: entered allmulticast mode [ 852.312834][ T28] audit: type=1400 audit(851.811:14486): avc: denied { setopt } for pid=26672 comm="syz.1.6403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 852.333067][T26674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=26674 comm=syz.1.6403 [ 852.377049][T26673] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6402'. [ 852.387516][ T28] audit: type=1326 audit(851.881:14487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26669 comm="syz.7.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae611c819 code=0x7ffc0000 [ 852.458181][ T28] audit: type=1326 audit(851.881:14488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26669 comm="syz.7.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7feae611c819 code=0x7ffc0000 [ 852.484237][ T28] audit: type=1326 audit(851.881:14489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26669 comm="syz.7.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feae611c582 code=0x7ffc0000 [ 852.515614][T25963] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.536082][ T28] audit: type=1326 audit(851.881:14490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26669 comm="syz.7.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feae60dd04e code=0x7ffc0000 [ 852.538423][T26673] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 852.560073][ T28] audit: type=1326 audit(851.881:14491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26669 comm="syz.7.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7feae611c647 code=0x7ffc0000 [ 852.593932][ T28] audit: type=1326 audit(851.911:14492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26669 comm="syz.7.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feae60dd04e code=0x7ffc0000 [ 852.616977][ T28] audit: type=1326 audit(851.911:14493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26669 comm="syz.7.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7feae60dd04e code=0x7ffc0000 [ 852.643680][ T28] audit: type=1326 audit(851.911:14494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26669 comm="syz.7.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae611c819 code=0x7ffc0000 [ 852.726822][T26673] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6402: bg 0: block 234: padding at end of block bitmap is not set [ 852.749022][T26673] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 724 with error 28 [ 852.761662][T26673] EXT4-fs (loop9): This should not happen!! Data will be lost [ 852.761662][T26673] [ 852.771429][T26673] EXT4-fs (loop9): Total free blocks count 0 [ 852.777604][T26673] EXT4-fs (loop9): Free/Dirty block details [ 852.783691][T26673] EXT4-fs (loop9): free_blocks=0 [ 852.788731][T26673] EXT4-fs (loop9): dirty_blocks=736 [ 852.794000][T26673] EXT4-fs (loop9): Block reservation details [ 852.800705][T26673] EXT4-fs (loop9): i_reserved_data_blocks=46 [ 852.926317][T21054] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 852.941925][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.979201][T26698] netlink: 'syz.9.6409': attribute type 1 has an invalid length. [ 853.055077][T26700] hub 8-0:1.0: USB hub found [ 853.059866][T26700] hub 8-0:1.0: 8 ports detected [ 853.120953][T26704] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6412'. [ 853.145372][T26704] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 853.217374][T26710] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6414'. [ 853.236863][T26704] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6412: bg 0: block 234: padding at end of block bitmap is not set [ 853.279742][T26713] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6415'. [ 853.313528][T26713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 853.337710][T26704] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1236 with error 28 [ 853.357074][T26704] EXT4-fs (loop9): This should not happen!! Data will be lost [ 853.357074][T26704] [ 853.379847][T26704] EXT4-fs (loop9): Total free blocks count 0 [ 853.396560][T26704] EXT4-fs (loop9): Free/Dirty block details [ 853.406862][T26704] EXT4-fs (loop9): free_blocks=0 [ 853.416397][T26713] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6415: bg 0: block 234: padding at end of block bitmap is not set [ 853.430850][T26704] EXT4-fs (loop9): dirty_blocks=1248 [ 853.436298][T26704] EXT4-fs (loop9): Block reservation details [ 853.442540][T26704] EXT4-fs (loop9): i_reserved_data_blocks=78 [ 853.474828][T26713] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 874 with error 28 [ 853.489611][T26713] EXT4-fs (loop1): This should not happen!! Data will be lost [ 853.489611][T26713] [ 853.533646][T26713] EXT4-fs (loop1): Total free blocks count 0 [ 853.539844][T26713] EXT4-fs (loop1): Free/Dirty block details [ 853.546737][T26713] EXT4-fs (loop1): free_blocks=0 [ 853.562610][T26713] EXT4-fs (loop1): dirty_blocks=880 [ 853.571025][T26713] EXT4-fs (loop1): Block reservation details [ 853.579080][T26713] EXT4-fs (loop1): i_reserved_data_blocks=55 [ 853.599357][T21054] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 853.650807][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.813538][T26747] set_capacity_and_notify: 4 callbacks suppressed [ 853.813555][T26747] loop8: detected capacity change from 0 to 1024 [ 853.826848][T26748] netlink: 'syz.4.6423': attribute type 4 has an invalid length. [ 853.867550][T26747] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 853.885924][T25684] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 853.905707][T26727] netlink: 'syz.7.6420': attribute type 29 has an invalid length. [ 853.906575][T25684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.927996][T26727] netlink: 'syz.7.6420': attribute type 29 has an invalid length. [ 853.942029][T26727] netlink: 500 bytes leftover after parsing attributes in process `syz.7.6420'. [ 853.972713][T25963] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.018588][T26756] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6427'. [ 854.052709][T26756] loop8: detected capacity change from 0 to 2048 [ 854.083494][T26756] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 854.149945][T26756] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6427: bg 0: block 234: padding at end of block bitmap is not set [ 854.165237][T26756] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1162 with error 28 [ 854.179292][T26756] EXT4-fs (loop8): This should not happen!! Data will be lost [ 854.179292][T26756] [ 854.189615][T26756] EXT4-fs (loop8): Total free blocks count 0 [ 854.195771][T26756] EXT4-fs (loop8): Free/Dirty block details [ 854.201906][T26756] EXT4-fs (loop8): free_blocks=0 [ 854.207193][T26756] EXT4-fs (loop8): dirty_blocks=1168 [ 854.212722][T26756] EXT4-fs (loop8): Block reservation details [ 854.220203][T26756] EXT4-fs (loop8): i_reserved_data_blocks=73 [ 854.375240][T26783] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6435'. [ 854.393530][T26783] loop9: detected capacity change from 0 to 2048 [ 854.433079][T26783] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 854.447676][T25963] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 854.479518][T25963] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.539852][T26783] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6435: bg 0: block 234: padding at end of block bitmap is not set [ 854.558162][T26783] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1744 with error 117 [ 854.571089][T26783] EXT4-fs (loop9): This should not happen!! Data will be lost [ 854.571089][T26783] [ 854.773025][T21054] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 854.800063][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.933976][T26814] lo speed is unknown, defaulting to 1000 [ 855.024182][T26814] lo speed is unknown, defaulting to 1000 [ 855.033339][T26815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6445'. [ 855.730069][T26832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6451'. [ 855.762222][T26833] netlink: 'syz.9.6450': attribute type 4 has an invalid length. [ 855.794801][T26832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6451'. [ 855.876695][T26832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6451'. [ 856.051657][T26844] loop1: detected capacity change from 0 to 2048 [ 856.100489][T26844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 856.177983][T26844] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6454: bg 0: block 234: padding at end of block bitmap is not set [ 856.197166][T26844] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1512 with error 28 [ 856.209792][T26844] EXT4-fs (loop1): This should not happen!! Data will be lost [ 856.209792][T26844] [ 856.219496][T26844] EXT4-fs (loop1): Total free blocks count 0 [ 856.225642][T26844] EXT4-fs (loop1): Free/Dirty block details [ 856.232331][T26844] EXT4-fs (loop1): free_blocks=0 [ 856.237361][T26844] EXT4-fs (loop1): dirty_blocks=1520 [ 856.242684][T26844] EXT4-fs (loop1): Block reservation details [ 856.248743][T26844] EXT4-fs (loop1): i_reserved_data_blocks=95 [ 856.619276][T26871] syzkaller0: entered promiscuous mode [ 856.624992][T26871] syzkaller0: entered allmulticast mode [ 856.644391][T25684] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 856.672431][T25684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.841091][T26878] netlink: 'syz.8.6463': attribute type 1 has an invalid length. [ 856.872835][T26878] bond2: entered promiscuous mode [ 856.879867][T26878] bond2: entered allmulticast mode [ 856.885335][T26878] 8021q: adding VLAN 0 to HW filter on device bond2 [ 856.892968][T26876] netlink: 'syz.9.6462': attribute type 29 has an invalid length. [ 856.910513][T26878] bridge1: entered promiscuous mode [ 856.915948][T26878] bridge1: entered allmulticast mode [ 856.921807][T26878] bond2: (slave bridge1): Enslaving as a backup interface with an up link [ 856.941062][T26876] netlink: 'syz.9.6462': attribute type 29 has an invalid length. [ 856.989132][ T5106] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 857.112061][ T5106] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 857.278034][T26884] blktrace: Concurrent blktraces are not allowed on loop2 [ 857.556553][T26892] loop8: detected capacity change from 0 to 128 [ 857.867648][T26909] netlink: 'syz.4.6471': attribute type 29 has an invalid length. [ 857.876599][T26909] netlink: 'syz.4.6471': attribute type 29 has an invalid length. [ 858.515099][T26919] netlink: 'syz.7.6473': attribute type 4 has an invalid length. [ 858.637350][T26924] loop4: detected capacity change from 0 to 128 [ 858.654843][T26924] FAT-fs (loop4): Directory bread(block 32) failed [ 858.661709][T26924] FAT-fs (loop4): Directory bread(block 33) failed [ 858.677037][T26924] FAT-fs (loop4): Directory bread(block 34) failed [ 858.692108][T26924] FAT-fs (loop4): Directory bread(block 35) failed [ 858.699329][T26924] FAT-fs (loop4): Directory bread(block 36) failed [ 858.706136][T26924] FAT-fs (loop4): Directory bread(block 37) failed [ 858.712938][T26924] FAT-fs (loop4): Directory bread(block 38) failed [ 858.719698][T26924] FAT-fs (loop4): Directory bread(block 39) failed [ 858.732667][T26924] FAT-fs (loop4): Directory bread(block 40) failed [ 858.739430][T26924] FAT-fs (loop4): Directory bread(block 41) failed [ 858.814445][T26924] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 858.834144][T26924] __nla_validate_parse: 6 callbacks suppressed [ 858.834156][T26924] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6477'. [ 858.984612][T26934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6479'. [ 859.024643][T26934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6479'. [ 859.166549][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 859.166564][ T28] audit: type=1400 audit(858.662:14530): avc: denied { shutdown } for pid=26941 comm="syz.4.6482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 859.295048][T26947] netlink: 'syz.4.6484': attribute type 29 has an invalid length. [ 859.351283][T26947] netlink: 'syz.4.6484': attribute type 29 has an invalid length. [ 859.367893][T26947] netlink: 500 bytes leftover after parsing attributes in process `syz.4.6484'. [ 859.713877][T26961] netlink: 'syz.9.6488': attribute type 29 has an invalid length. [ 859.723266][T26961] netlink: 'syz.9.6488': attribute type 29 has an invalid length. [ 860.629519][T26980] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6493'. [ 861.212848][T26989] netlink: 'syz.4.6496': attribute type 8 has an invalid length. [ 861.220763][T26989] netlink: 'syz.4.6496': attribute type 7 has an invalid length. [ 861.228762][T26989] netlink: 194488 bytes leftover after parsing attributes in process `syz.4.6496'. [ 861.238887][T26991] netlink: 'syz.8.6495': attribute type 4 has an invalid length. [ 861.419015][T27000] netlink: 'syz.4.6500': attribute type 29 has an invalid length. [ 861.481038][T27000] netlink: 'syz.4.6500': attribute type 29 has an invalid length. [ 861.499561][T27000] netlink: 500 bytes leftover after parsing attributes in process `syz.4.6500'. [ 861.585645][T27009] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6503'. [ 861.603947][T27009] loop9: detected capacity change from 0 to 2048 [ 861.628294][T27009] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 861.774173][T27009] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6503: bg 0: block 234: padding at end of block bitmap is not set [ 861.788927][T27009] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 861.801533][T27009] EXT4-fs (loop9): This should not happen!! Data will be lost [ 861.801533][T27009] [ 861.811592][T27009] EXT4-fs (loop9): Total free blocks count 0 [ 861.941312][T27009] EXT4-fs (loop9): Free/Dirty block details [ 861.963629][T27009] EXT4-fs (loop9): free_blocks=0 [ 861.971597][T27009] EXT4-fs (loop9): dirty_blocks=2784 [ 861.997746][T27009] EXT4-fs (loop9): Block reservation details [ 862.004127][T27009] EXT4-fs (loop9): i_reserved_data_blocks=174 [ 862.269382][ T5118] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 730 with error 28 [ 862.568000][T27034] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 862.689668][T27035] loop4: detected capacity change from 0 to 512 [ 862.805395][ T28] audit: type=1400 audit(862.302:14531): avc: denied { bind } for pid=27039 comm="syz.1.6509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 862.852886][T27035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 863.054858][T21054] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 863.204119][T27049] loop1: detected capacity change from 0 to 512 [ 863.261181][T27049] loop1: detected capacity change from 0 to 128 [ 863.330594][T24416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.341637][ T28] audit: type=1400 audit(862.812:14532): avc: denied { shutdown } for pid=27043 comm="syz.8.6512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 863.484889][T27053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.546805][T27053] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.700151][T27053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 864.090148][T27076] validate_nla: 2 callbacks suppressed [ 864.090162][T27076] netlink: 'syz.4.6520': attribute type 29 has an invalid length. [ 864.104306][T27076] netlink: 'syz.4.6520': attribute type 29 has an invalid length. [ 864.248994][ T28] audit: type=1400 audit(863.542:14533): avc: denied { create } for pid=27067 comm="syz.1.6519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 864.469011][T27080] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6522'. [ 864.673658][T27058] netlink: 'syz.9.6516': attribute type 29 has an invalid length. [ 864.683197][T27058] netlink: 'syz.9.6516': attribute type 29 has an invalid length. [ 864.703058][T27058] netlink: 500 bytes leftover after parsing attributes in process `syz.9.6516'. [ 864.736842][T27086] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6524'. [ 865.325376][T27107] vhci_hcd vhci_hcd.4: default hub control req: 2016 v0100 i0004 l1 [ 865.835057][ T28] audit: type=1400 audit(865.332:14534): avc: denied { ioctl } for pid=27114 comm="syz.4.6532" path="socket:[82129]" dev="sockfs" ino=82129 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 866.122567][T27121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=27121 comm=syz.8.6534 [ 866.136251][T27122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=27122 comm=syz.8.6534 [ 866.149201][T27121] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6534'. [ 866.158400][ T28] audit: type=1400 audit(865.652:14535): avc: denied { accept } for pid=27120 comm="syz.8.6534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 866.207631][T27133] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6537'. [ 866.227261][T27133] loop9: detected capacity change from 0 to 2048 [ 866.255920][T27133] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 866.339578][T27133] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6537: bg 0: block 234: padding at end of block bitmap is not set [ 866.400293][T27141] netlink: 'syz.8.6538': attribute type 29 has an invalid length. [ 866.408638][T27141] netlink: 'syz.8.6538': attribute type 29 has an invalid length. [ 866.423373][T27133] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1362 with error 28 [ 866.435933][T27133] EXT4-fs (loop9): This should not happen!! Data will be lost [ 866.435933][T27133] [ 866.449168][T27133] EXT4-fs (loop9): Total free blocks count 0 [ 866.455317][T27133] EXT4-fs (loop9): Free/Dirty block details [ 866.461330][T27133] EXT4-fs (loop9): free_blocks=0 [ 866.466361][T27133] EXT4-fs (loop9): dirty_blocks=1376 [ 866.471846][T27133] EXT4-fs (loop9): Block reservation details [ 866.477979][T27133] EXT4-fs (loop9): i_reserved_data_blocks=86 [ 866.643353][T27148] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6540'. [ 866.796470][T27148] loop4: detected capacity change from 0 to 2048 [ 866.846786][T27148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 866.875904][ T28] audit: type=1400 audit(866.312:14536): avc: denied { bind } for pid=27143 comm="syz.1.6539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 867.001473][T21054] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 867.026389][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.063199][T27148] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6540: bg 0: block 234: padding at end of block bitmap is not set [ 867.092178][T27148] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 867.251554][T27148] EXT4-fs (loop4): This should not happen!! Data will be lost [ 867.251554][T27148] [ 867.291437][T27148] EXT4-fs (loop4): Total free blocks count 0 [ 867.333470][T27148] EXT4-fs (loop4): Free/Dirty block details [ 867.348231][T27148] EXT4-fs (loop4): free_blocks=0 [ 867.379690][T27168] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6545'. [ 867.407637][T27148] EXT4-fs (loop4): dirty_blocks=2480 [ 867.449887][T27148] EXT4-fs (loop4): Block reservation details [ 867.505015][T27148] EXT4-fs (loop4): i_reserved_data_blocks=155 [ 867.610926][T27168] loop8: detected capacity change from 0 to 2048 [ 867.734910][T27168] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 867.748123][ T36] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 424 with error 28 [ 867.774418][T27178] FAULT_INJECTION: forcing a failure. [ 867.774418][T27178] name failslab, interval 1, probability 0, space 0, times 0 [ 867.787174][T27178] CPU: 1 UID: 0 PID: 27178 Comm: syz.1.6549 Tainted: G W syzkaller #0 PREEMPT(full) [ 867.787264][T27178] Tainted: [W]=WARN [ 867.787272][T27178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 867.787287][T27178] Call Trace: [ 867.787295][T27178] [ 867.787304][T27178] __dump_stack+0x1d/0x30 [ 867.787337][T27178] dump_stack_lvl+0x95/0xd0 [ 867.787368][T27178] dump_stack+0x15/0x1b [ 867.787418][T27178] should_fail_ex+0x263/0x280 [ 867.787461][T27178] should_failslab+0x8c/0xb0 [ 867.787491][T27178] kmem_cache_alloc_noprof+0x66/0x400 [ 867.787551][T27178] ? skb_clone+0x151/0x1f0 [ 867.787605][T27178] skb_clone+0x151/0x1f0 [ 867.787637][T27178] __netlink_deliver_tap+0x2c9/0x500 [ 867.787670][T27178] netlink_unicast+0x66b/0x690 [ 867.787722][T27178] netlink_sendmsg+0x5c8/0x6f0 [ 867.787763][T27178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.787825][T27178] ____sys_sendmsg+0x563/0x5b0 [ 867.787862][T27178] ___sys_sendmsg+0x195/0x1e0 [ 867.787990][T27178] __x64_sys_sendmsg+0xd4/0x160 [ 867.788032][T27178] x64_sys_call+0x194c/0x3020 [ 867.788067][T27178] do_syscall_64+0x12c/0x3b0 [ 867.788118][T27178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.788142][T27178] RIP: 0033:0x7f468fe8c819 [ 867.788162][T27178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.788185][T27178] RSP: 002b:00007f468e8e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 867.788210][T27178] RAX: ffffffffffffffda RBX: 00007f4690105fa0 RCX: 00007f468fe8c819 [ 867.788250][T27178] RDX: 0000000000008080 RSI: 0000200000000000 RDI: 0000000000000004 [ 867.788323][T27178] RBP: 00007f468e8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 867.788336][T27178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.788348][T27178] R13: 00007f4690106038 R14: 00007f4690105fa0 R15: 00007ffcf051b0a8 [ 867.788372][T27178] [ 868.071982][T27183] tipc: Failed to remove unknown binding: 66,2,2/0:1054693790/1054693792 [ 868.102950][T25963] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.195927][T27195] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6553'. [ 868.223180][T27195] loop8: detected capacity change from 0 to 2048 [ 868.342716][T27195] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 868.359396][T24416] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 868.378309][T27200] blktrace: Concurrent blktraces are not allowed on loop2 [ 868.449696][T27195] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6553: bg 0: block 234: padding at end of block bitmap is not set [ 868.477605][T27195] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1538 with error 28 [ 868.498917][T27195] EXT4-fs (loop8): This should not happen!! Data will be lost [ 868.498917][T27195] [ 868.508888][T27195] EXT4-fs (loop8): Total free blocks count 0 [ 868.519304][T27195] EXT4-fs (loop8): Free/Dirty block details [ 868.525424][T27195] EXT4-fs (loop8): free_blocks=0 [ 868.550779][T27195] EXT4-fs (loop8): dirty_blocks=1552 [ 868.567570][T27195] EXT4-fs (loop8): Block reservation details [ 868.581368][T27195] EXT4-fs (loop8): i_reserved_data_blocks=97 [ 868.779117][T25963] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 868.796491][T25963] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.075330][T27234] vxcan0: left promiscuous mode [ 869.081510][T27234] bond2: left promiscuous mode [ 869.086303][T27234] bridge1: left promiscuous mode [ 869.112588][ T5118] bond2: (slave bridge1): link status up again after 0 ms [ 869.121610][ T5118] bond2: (slave bridge1): failed to get link speed/duplex [ 869.247075][ T5113] bond2: (slave bridge1): failed to get link speed/duplex [ 869.364323][ T5113] bond2: (slave bridge1): failed to get link speed/duplex [ 869.521275][ T5106] bond2: (slave bridge1): failed to get link speed/duplex [ 869.595839][ T28] audit: type=1400 audit(869.092:14537): avc: denied { bind } for pid=27242 comm="syz.4.6570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 869.643685][ T5113] bond2: (slave bridge1): failed to get link speed/duplex [ 869.654793][T27243] serio: Serial port ttyS3 [ 869.737554][T27243] loop4: detected capacity change from 0 to 128 [ 869.810331][ T5106] bond2: (slave bridge1): failed to get link speed/duplex [ 869.927112][T27255] loop9: detected capacity change from 0 to 512 [ 869.940880][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 869.971333][T27255] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 870.314666][ T2364] bond2: (slave bridge1): failed to get link speed/duplex [ 870.502279][ T2364] bond2: (slave bridge1): failed to get link speed/duplex [ 870.583443][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.651032][T27282] loop8: detected capacity change from 0 to 512 [ 870.673761][T27282] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 870.708427][T27280] netlink: 'syz.9.6582': attribute type 29 has an invalid length. [ 870.727856][T27280] netlink: 'syz.9.6582': attribute type 29 has an invalid length. [ 870.735897][ T28] audit: type=1400 audit(870.222:14538): avc: denied { name_bind } for pid=27277 comm="syz.8.6581" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 870.766911][T27280] netlink: 500 bytes leftover after parsing attributes in process `syz.9.6582'. [ 870.841609][T27287] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6583'. [ 870.860055][T27287] loop9: detected capacity change from 0 to 2048 [ 870.876119][T27287] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 870.961430][T27287] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6583: bg 0: block 234: padding at end of block bitmap is not set [ 870.978112][T27287] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1056 with error 28 [ 870.990813][T27287] EXT4-fs (loop9): This should not happen!! Data will be lost [ 870.990813][T27287] [ 871.000516][T27287] EXT4-fs (loop9): Total free blocks count 0 [ 871.006616][T27287] EXT4-fs (loop9): Free/Dirty block details [ 871.012658][T27287] EXT4-fs (loop9): free_blocks=0 [ 871.017823][T27287] EXT4-fs (loop9): dirty_blocks=1056 [ 871.023244][T27287] EXT4-fs (loop9): Block reservation details [ 871.029443][T27287] EXT4-fs (loop9): i_reserved_data_blocks=66 [ 871.174231][T27303] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6587'. [ 871.192428][T27303] loop1: detected capacity change from 0 to 2048 [ 871.215552][T21054] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 871.229601][T27305] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6588'. [ 871.245424][T27303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 871.260391][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.283977][T27311] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6590'. [ 871.319825][ T28] audit: type=1326 audit(870.812:14539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.9.6589" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd84d10c819 code=0x0 [ 871.347476][T27317] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6590'. [ 871.378114][T27319] loop9: detected capacity change from 0 to 2048 [ 871.423677][T27319] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 871.450889][T27303] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6587: bg 0: block 234: padding at end of block bitmap is not set [ 871.465571][T27303] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1140 with error 117 [ 871.478209][T27303] EXT4-fs (loop1): This should not happen!! Data will be lost [ 871.478209][T27303] [ 871.528042][T25963] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.570766][ T28] audit: type=1400 audit(871.062:14540): avc: denied { getopt } for pid=27313 comm="syz.9.6589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 871.683774][T25684] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 871.699465][T25684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.984552][T27346] netlink: 'syz.8.6598': attribute type 29 has an invalid length. [ 871.994067][T27346] netlink: 'syz.8.6598': attribute type 29 has an invalid length. [ 872.253792][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.666892][T27356] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6602'. [ 872.685523][T27358] bond1: left promiscuous mode [ 872.690487][T27358] bridge1: left promiscuous mode [ 872.859984][T27360] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6602'. [ 873.153661][T27369] loop9: detected capacity change from 0 to 4096 [ 873.162888][T27369] EXT4-fs: test_dummy_encryption option not supported [ 873.264117][T27375] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6609'. [ 873.296525][T27375] loop9: detected capacity change from 0 to 2048 [ 873.363421][T27375] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 873.438200][T27375] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6609: bg 0: block 234: padding at end of block bitmap is not set [ 873.452896][T27375] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1104 with error 28 [ 873.465601][T27375] EXT4-fs (loop9): This should not happen!! Data will be lost [ 873.465601][T27375] [ 873.476823][T27375] EXT4-fs (loop9): Total free blocks count 0 [ 873.483089][T27375] EXT4-fs (loop9): Free/Dirty block details [ 873.489059][T27375] EXT4-fs (loop9): free_blocks=0 [ 873.494169][T27375] EXT4-fs (loop9): dirty_blocks=1104 [ 873.499708][T27375] EXT4-fs (loop9): Block reservation details [ 873.505737][T27375] EXT4-fs (loop9): i_reserved_data_blocks=69 [ 873.625666][T21054] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 873.641092][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.831731][T27396] blktrace: Concurrent blktraces are not allowed on loop18 [ 874.141345][ T5106] net_ratelimit: 29 callbacks suppressed [ 874.141364][ T5106] bond2: (slave bridge1): failed to get link speed/duplex [ 874.186898][T27421] loop8: detected capacity change from 0 to 512 [ 874.204516][T27421] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 874.281066][ T5113] bond2: (slave bridge1): failed to get link speed/duplex [ 874.296078][T25963] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.297605][ T28] audit: type=1400 audit(873.723:14541): avc: denied { watch } for pid=27418 comm="syz.8.6622" path="/73/file0/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 874.466232][T27430] netlink: 'syz.4.6623': attribute type 29 has an invalid length. [ 874.474774][T27430] netlink: 'syz.4.6623': attribute type 29 has an invalid length. [ 874.488294][ T5106] bond2: (slave bridge1): failed to get link speed/duplex [ 874.648531][T27431] loop8: detected capacity change from 0 to 512 [ 875.324411][ T5106] bond2: (slave bridge1): failed to get link speed/duplex [ 875.603532][ T5113] bond2: (slave bridge1): failed to get link speed/duplex [ 875.619943][T27431] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 876.241794][T25963] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.308061][T27438] loop9: detected capacity change from 0 to 1024 [ 876.367662][T27438] EXT4-fs: Ignoring removed bh option [ 876.454587][T27438] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 876.533032][ T30] bond2: (slave bridge1): failed to get link speed/duplex [ 876.556006][T27445] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6628'. [ 876.590445][ T28] audit: type=1400 audit(876.083:14542): avc: denied { link } for pid=27437 comm="syz.9.6627" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 876.591694][T27445] loop4: detected capacity change from 0 to 2048 [ 876.652867][ T5106] bond2: (slave bridge1): failed to get link speed/duplex [ 876.749368][T27445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 876.783055][ T5113] bond2: (slave bridge1): failed to get link speed/duplex [ 877.308795][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 877.350226][ T5116] bond2: (slave bridge1): failed to get link speed/duplex [ 877.371131][T27445] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6628: bg 0: block 234: padding at end of block bitmap is not set [ 877.404874][T27445] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 356 with error 28 [ 877.449589][T27445] EXT4-fs (loop4): This should not happen!! Data will be lost [ 877.449589][T27445] [ 877.457148][T27473] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6635'. [ 877.500850][ T5106] bond2: (slave bridge1): failed to get link speed/duplex [ 877.520572][T27445] EXT4-fs (loop4): Total free blocks count 0 [ 877.540973][T27445] EXT4-fs (loop4): Free/Dirty block details [ 877.572673][T27445] EXT4-fs (loop4): free_blocks=0 [ 877.594904][T27445] EXT4-fs (loop4): dirty_blocks=368 [ 877.607898][T27445] EXT4-fs (loop4): Block reservation details [ 877.620921][T27445] EXT4-fs (loop4): i_reserved_data_blocks=23 [ 877.650181][T27480] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6637'. [ 877.661821][T27483] blktrace: Concurrent blktraces are not allowed on loop18 [ 877.677085][T27480] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6637'. [ 877.757547][T24416] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 877.772666][T24416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.081308][T27491] loop4: detected capacity change from 0 to 512 [ 878.227401][T27491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 878.780547][T27503] loop8: detected capacity change from 0 to 512 [ 878.854625][T24416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.891024][T27503] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 879.174111][ T5116] net_ratelimit: 10 callbacks suppressed [ 879.174186][ T5116] bond2: (slave bridge1): failed to get link speed/duplex [ 879.239141][T27522] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6647'. [ 879.262273][T27522] loop1: detected capacity change from 0 to 2048 [ 879.288608][T27522] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 879.300838][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 879.366178][T27522] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6647: bg 0: block 234: padding at end of block bitmap is not set [ 879.382037][T27522] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 500 with error 28 [ 879.413064][T27522] EXT4-fs (loop1): This should not happen!! Data will be lost [ 879.413064][T27522] [ 879.423001][ T5116] bond2: (slave bridge1): failed to get link speed/duplex [ 879.441139][T27522] EXT4-fs (loop1): Total free blocks count 0 [ 879.456047][T27522] EXT4-fs (loop1): Free/Dirty block details [ 879.471649][T27522] EXT4-fs (loop1): free_blocks=0 [ 879.484073][T27522] EXT4-fs (loop1): dirty_blocks=512 [ 879.499257][T27522] EXT4-fs (loop1): Block reservation details [ 879.513846][T27522] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 879.540719][ T30] bond2: (slave bridge1): failed to get link speed/duplex [ 879.642948][T25684] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 879.654264][ T5113] bond2: (slave bridge1): failed to get link speed/duplex [ 879.663614][T25684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.734025][T27538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6651'. [ 879.770834][ T5113] bond2: (slave bridge1): failed to get link speed/duplex [ 879.880035][T27538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6651'. [ 879.889173][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 880.068435][ T5106] bond2: (slave bridge1): failed to get link speed/duplex [ 880.190699][ T30] bond2: (slave bridge1): failed to get link speed/duplex [ 880.300782][ T5116] bond2: (slave bridge1): failed to get link speed/duplex [ 880.409202][T27552] netlink: 'syz.7.6656': attribute type 4 has an invalid length. [ 880.499402][T27559] netlink: 'syz.1.6659': attribute type 1 has an invalid length. [ 880.514959][T27559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 880.533653][T27559] bond1: (slave gretap1): making interface the new active one [ 880.541942][T27559] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 880.553617][T27559] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27559 comm=syz.1.6659 [ 880.671088][T27565] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6660'. [ 880.689735][T27565] loop1: detected capacity change from 0 to 2048 [ 880.774468][T27565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 880.955371][T27565] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6660: bg 0: block 234: padding at end of block bitmap is not set [ 880.979637][T27565] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1542 with error 117 [ 880.995437][T27565] EXT4-fs (loop1): This should not happen!! Data will be lost [ 880.995437][T27565] [ 881.154226][T25684] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 881.171316][T25684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.575782][T25963] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.732252][T27592] x_tables: duplicate underflow at hook 1 [ 881.747691][T27581] blktrace: Concurrent blktraces are not allowed on loop2 [ 881.798083][T27592] loop4: detected capacity change from 0 to 1024 [ 881.807831][T27592] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 882.660753][T27617] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6676'. [ 882.707433][T27617] loop9: detected capacity change from 0 to 2048 [ 882.725453][T27617] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 882.819848][T27617] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6676: bg 0: block 234: padding at end of block bitmap is not set [ 882.852853][T27617] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1618 with error 28 [ 882.879298][T27617] EXT4-fs (loop9): This should not happen!! Data will be lost [ 882.879298][T27617] [ 882.940600][T27617] EXT4-fs (loop9): Total free blocks count 0 [ 882.946762][T27617] EXT4-fs (loop9): Free/Dirty block details [ 882.952747][T27617] EXT4-fs (loop9): free_blocks=0 [ 882.958001][T27617] EXT4-fs (loop9): dirty_blocks=1632 [ 882.968034][T27617] EXT4-fs (loop9): Block reservation details [ 882.986365][T27617] EXT4-fs (loop9): i_reserved_data_blocks=102 [ 883.176818][T27634] loop8: detected capacity change from 0 to 512 [ 883.312609][T27634] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 883.684929][T21054] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 883.718920][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.794533][ T5116] net_ratelimit: 28 callbacks suppressed [ 884.794561][ T5116] bond2: (slave bridge1): failed to get link speed/duplex [ 885.156833][T27650] ip6gre1: left promiscuous mode [ 885.162143][T27650] bridge1: left promiscuous mode [ 885.171717][ T5111] bond2: (slave bridge1): failed to get link speed/duplex [ 885.408199][ T5116] bond2: (slave bridge1): failed to get link speed/duplex [ 885.530396][ T5111] bond2: (slave bridge1): failed to get link speed/duplex [ 885.583800][T27659] netlink: 'syz.7.6685': attribute type 29 has an invalid length. [ 885.601802][T27659] netlink: 'syz.7.6685': attribute type 29 has an invalid length. [ 885.610564][T27659] netlink: 500 bytes leftover after parsing attributes in process `syz.7.6685'. [ 885.652996][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 885.744790][T27668] lo speed is unknown, defaulting to 1000 [ 885.770400][ T5116] bond2: (slave bridge1): failed to get link speed/duplex [ 885.787866][T27668] lo speed is unknown, defaulting to 1000 [ 885.881753][ T5116] bond2: (slave bridge1): failed to get link speed/duplex [ 886.004555][T25963] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.120604][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 886.223712][T27678] blktrace: Concurrent blktraces are not allowed on loop2 [ 886.251488][ T5116] bond2: (slave bridge1): failed to get link speed/duplex [ 886.380476][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 886.584150][T27693] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6695'. [ 886.609131][T27693] loop4: detected capacity change from 0 to 2048 [ 886.628664][T27693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 886.848830][T27693] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6695: bg 0: block 234: padding at end of block bitmap is not set [ 886.911646][T27693] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 886.931533][T27693] EXT4-fs (loop4): This should not happen!! Data will be lost [ 886.931533][T27693] [ 886.947514][T27693] EXT4-fs (loop4): Total free blocks count 0 [ 886.963170][T27693] EXT4-fs (loop4): Free/Dirty block details [ 886.976753][T27693] EXT4-fs (loop4): free_blocks=0 [ 887.002906][T27693] EXT4-fs (loop4): dirty_blocks=2080 [ 887.044454][T27693] EXT4-fs (loop4): Block reservation details [ 887.074745][T27693] EXT4-fs (loop4): i_reserved_data_blocks=130 [ 887.343690][T27709] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6699'. [ 887.382431][ T2364] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 16 with error 28 [ 887.425058][T27709] loop8: detected capacity change from 0 to 2048 [ 887.477074][T27711] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6700'. [ 887.513149][T27709] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 887.565618][T27711] loop9: detected capacity change from 0 to 2048 [ 887.584399][T27709] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6699: bg 0: block 234: padding at end of block bitmap is not set [ 887.624194][T27711] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 887.646794][T27709] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1068 with error 28 [ 887.659287][T27709] EXT4-fs (loop8): This should not happen!! Data will be lost [ 887.659287][T27709] [ 887.669028][T27709] EXT4-fs (loop8): Total free blocks count 0 [ 887.675251][T27709] EXT4-fs (loop8): Free/Dirty block details [ 887.681223][T27709] EXT4-fs (loop8): free_blocks=0 [ 887.686294][T27709] EXT4-fs (loop8): dirty_blocks=1072 [ 887.693400][T27709] EXT4-fs (loop8): Block reservation details [ 887.699482][T27709] EXT4-fs (loop8): i_reserved_data_blocks=67 [ 887.831693][T27711] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6700: bg 0: block 234: padding at end of block bitmap is not set [ 887.856709][T27711] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1074 with error 28 [ 887.893168][T27711] EXT4-fs (loop9): This should not happen!! Data will be lost [ 887.893168][T27711] [ 887.950227][T24416] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 887.962053][T27711] EXT4-fs (loop9): Total free blocks count 0 [ 888.013990][T27711] EXT4-fs (loop9): Free/Dirty block details [ 888.020029][T27711] EXT4-fs (loop9): free_blocks=0 [ 888.080183][T27711] EXT4-fs (loop9): dirty_blocks=1088 [ 888.085776][T27711] EXT4-fs (loop9): Block reservation details [ 888.102504][T27711] EXT4-fs (loop9): i_reserved_data_blocks=68 [ 888.134472][T25963] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 888.271937][T25963] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.467199][T27736] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6704'. [ 888.511051][T27736] loop8: detected capacity change from 0 to 2048 [ 888.553961][T27736] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 888.664300][T27736] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6704: bg 0: block 234: padding at end of block bitmap is not set [ 888.696928][T21054] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 888.700282][T27736] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1020 with error 28 [ 888.731222][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.750204][T27736] EXT4-fs (loop8): This should not happen!! Data will be lost [ 888.750204][T27736] [ 888.759972][T27736] EXT4-fs (loop8): Total free blocks count 0 [ 888.790208][T27736] EXT4-fs (loop8): Free/Dirty block details [ 888.796169][T27736] EXT4-fs (loop8): free_blocks=0 [ 888.810182][T27736] EXT4-fs (loop8): dirty_blocks=1024 [ 888.815485][T27736] EXT4-fs (loop8): Block reservation details [ 888.826778][T27736] EXT4-fs (loop8): i_reserved_data_blocks=64 [ 889.436850][T27759] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6707'. [ 889.810181][ T5113] net_ratelimit: 24 callbacks suppressed [ 889.810196][ T5113] bond2: (slave bridge1): failed to get link speed/duplex [ 889.943118][T27753] loop4: detected capacity change from 0 to 2048 [ 890.012351][T25963] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 890.041878][T27753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 890.055124][T25963] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.093943][ T5113] bond2: (slave bridge1): failed to get link speed/duplex [ 890.218930][T27753] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6707: bg 0: block 234: padding at end of block bitmap is not set [ 890.249614][T27773] loop1: detected capacity change from 0 to 512 [ 890.256663][ T5113] bond2: (slave bridge1): failed to get link speed/duplex [ 890.270307][T27753] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1328 with error 28 [ 890.276237][T27773] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 890.297929][T27753] EXT4-fs (loop4): This should not happen!! Data will be lost [ 890.297929][T27753] [ 890.307893][T27773] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.6712: bad orphan inode 131083 [ 890.320294][T27753] EXT4-fs (loop4): Total free blocks count 0 [ 890.326454][T27753] EXT4-fs (loop4): Free/Dirty block details [ 890.332933][T27773] loop1: lost filesystem error report for type 5 error -117 [ 890.333035][T27753] EXT4-fs (loop4): free_blocks=0 [ 890.340415][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 890.340435][ C1] EXT4-fs (loop1): initial error at time 889: ext4_orphan_get:1423 [ 890.340465][ C1] EXT4-fs (loop1): last error at time 889: ext4_orphan_get:1423 [ 890.373147][T27777] netlink: 'syz.8.6713': attribute type 29 has an invalid length. [ 890.382429][T27777] netlink: 'syz.8.6713': attribute type 29 has an invalid length. [ 890.398424][ T5111] bond2: (slave bridge1): failed to get link speed/duplex [ 890.405792][T27773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 890.427162][T27753] EXT4-fs (loop4): dirty_blocks=1328 [ 890.432577][T27753] EXT4-fs (loop4): Block reservation details [ 890.439645][T27753] EXT4-fs (loop4): i_reserved_data_blocks=83 [ 890.563560][ T2364] bond2: (slave bridge1): failed to get link speed/duplex [ 890.694441][ T2364] bond2: (slave bridge1): failed to get link speed/duplex [ 890.881828][ T5116] bond2: (slave bridge1): failed to get link speed/duplex [ 891.257108][T27787] netlink: 'syz.7.6714': attribute type 29 has an invalid length. [ 891.265577][T27787] netlink: 'syz.7.6714': attribute type 29 has an invalid length. [ 891.279590][ T2364] bond2: (slave bridge1): failed to get link speed/duplex [ 891.400052][ T2364] bond2: (slave bridge1): failed to get link speed/duplex [ 891.530066][ T2364] bond2: (slave bridge1): failed to get link speed/duplex [ 891.800972][T25684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.844164][T24416] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 891.876446][T24416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.563288][T27812] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6722'. [ 892.640149][T27813] blktrace: Concurrent blktraces are not allowed on loop8 [ 892.805083][T27816] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6723'. [ 892.863959][T27816] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6723'. [ 892.930715][T27822] loop9: detected capacity change from 0 to 512 [ 892.937300][T27822] EXT4-fs: Ignoring removed bh option [ 892.969394][T27822] EXT4-fs: Ignoring removed mblk_io_submit option [ 893.001314][T27822] EXT4-fs error (device loop9): ext4_iget_extra_inode:5042: inode #15: comm syz.9.6725: corrupted in-inode xattr: e_value size too large [ 893.020148][T27822] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 893.022385][T27822] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.6725: couldn't read orphan inode 15 (err -117) [ 893.031573][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 893.031590][ C1] EXT4-fs (loop9): initial error at time 892: ext4_iget_extra_inode:5042: inode 15 [ 893.031632][ C1] EXT4-fs (loop9): last error at time 892: ext4_iget_extra_inode:5042: inode 15 [ 893.102097][T27822] loop9: lost filesystem error report for type 5 error -117 [ 893.150418][T27822] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 893.236868][T27829] netlink: 'syz.8.6726': attribute type 21 has an invalid length. [ 893.244940][T27829] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6726'. [ 893.448721][T27838] lo speed is unknown, defaulting to 1000 [ 893.784320][T27838] lo speed is unknown, defaulting to 1000 [ 893.994389][T27824] lo speed is unknown, defaulting to 1000 [ 894.404573][T27824] lo speed is unknown, defaulting to 1000 [ 894.818740][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.945038][T27852] netlink: 'syz.8.6727': attribute type 29 has an invalid length. [ 894.961943][T27847] netlink: 'syz.8.6727': attribute type 29 has an invalid length. [ 894.997211][ T36] bridge_slave_1: left allmulticast mode [ 895.043741][ T36] bridge_slave_1: left promiscuous mode [ 895.095816][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.140027][ T36] bridge_slave_0: left allmulticast mode [ 895.197885][ T36] bridge_slave_0: left promiscuous mode [ 895.220144][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.313185][T27868] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6735'. [ 895.361215][T27868] loop8: detected capacity change from 0 to 2048 [ 895.531002][T27868] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 895.555748][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 895.658262][T27878] loop9: detected capacity change from 0 to 512 [ 895.709290][T27878] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 895.980649][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 896.013380][ T36] bond0 (unregistering): Released all slaves [ 896.040047][T27868] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6735: bg 0: block 234: padding at end of block bitmap is not set [ 896.056582][T27868] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 382 with error 117 [ 896.107505][T27868] EXT4-fs (loop8): This should not happen!! Data will be lost [ 896.107505][T27868] [ 896.166909][T27882] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6737'. [ 896.176671][ T36] hsr_slave_0: left promiscuous mode [ 896.184158][ T36] hsr_slave_1: left promiscuous mode [ 896.223092][T27886] loop4: detected capacity change from 0 to 512 [ 896.279126][ T36] team0 (unregistering): Port device team_slave_1 removed [ 896.282614][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.298477][ T36] team0 (unregistering): Port device team_slave_0 removed [ 896.306346][T27886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 896.342870][T27886] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.6737: iget: bad i_size value: 2533274857506816 [ 896.359318][T25963] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 896.372157][T27890] loop9: detected capacity change from 0 to 512 [ 896.378740][T27890] EXT4-fs: Ignoring removed bh option [ 896.387386][T27890] EXT4-fs: Ignoring removed mblk_io_submit option [ 896.400251][T27890] EXT4-fs error (device loop9): ext4_iget_extra_inode:5042: inode #15: comm syz.9.6738: corrupted in-inode xattr: e_value size too large [ 896.414724][T27890] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 896.417484][T25963] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.426702][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 896.426716][ C0] EXT4-fs (loop9): initial error at time 895: ext4_iget_extra_inode:5042: inode 15 [ 896.426762][ C0] EXT4-fs (loop9): last error at time 895: ext4_iget_extra_inode:5042: inode 15 [ 896.428727][T27890] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.6738: couldn't read orphan inode 15 (err -117) [ 896.508751][T27824] chnl_net:caif_netlink_parms(): no params data found [ 896.522429][T27894] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6739'. [ 896.531958][T24416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.550878][T27894] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6739'. [ 896.559998][T27890] loop9: lost filesystem error report for type 5 error -117 [ 896.573600][T27890] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 896.681845][T27824] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.729520][T27824] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.761014][T27824] bridge_slave_0: entered allmulticast mode [ 896.767675][T27824] bridge_slave_0: entered promiscuous mode [ 896.776439][T27824] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.783665][T27824] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.790869][T27824] bridge_slave_1: entered allmulticast mode [ 896.797623][T27824] bridge_slave_1: entered promiscuous mode [ 896.815069][ T28] audit: type=1400 audit(896.304:14543): avc: denied { read write } for pid=27906 comm="syz.8.6742" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 896.855604][T27824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.760188][T25716] hid_parser_main: 91 callbacks suppressed [ 897.760207][T25716] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 897.783287][T25716] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 897.807516][ T28] audit: type=1400 audit(896.304:14544): avc: denied { open } for pid=27906 comm="syz.8.6742" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 897.817200][T25716] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 897.841594][T27824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.524726][T27927] netlink: 'syz.4.6743': attribute type 29 has an invalid length. [ 898.532834][T27928] netlink: 'syz.4.6743': attribute type 29 has an invalid length. [ 898.548667][ T36] IPVS: stop unused estimator thread 0... [ 898.557963][T27931] fido_id[27931]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 898.595822][T27824] team0: Port device team_slave_0 added [ 898.630557][T27824] team0: Port device team_slave_1 added [ 898.679953][T27824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.686932][T27824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.740159][T27824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.763238][T27824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.782971][T27824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.887852][T27824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 899.003604][T27959] blktrace: Concurrent blktraces are not allowed on loop2 [ 899.916933][T27824] hsr_slave_0: entered promiscuous mode [ 899.923054][T27824] hsr_slave_1: entered promiscuous mode [ 900.281088][T27973] netlink: 'syz.8.6748': attribute type 29 has an invalid length. [ 900.297468][T27973] netlink: 'syz.8.6748': attribute type 29 has an invalid length. [ 900.299987][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.307301][T27973] netlink: 500 bytes leftover after parsing attributes in process `syz.8.6748'. [ 900.410129][T27982] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6749'. [ 900.433596][T27982] loop9: detected capacity change from 0 to 2048 [ 900.487183][T27982] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 900.617772][T27982] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6749: bg 0: block 234: padding at end of block bitmap is not set [ 900.640414][T27824] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 900.672426][T27824] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 900.689355][T27982] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 458 with error 28 [ 900.719714][T27824] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 900.753559][T27824] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 900.766877][T27982] EXT4-fs (loop9): This should not happen!! Data will be lost [ 900.766877][T27982] [ 900.799823][T27982] EXT4-fs (loop9): Total free blocks count 0 [ 900.807305][T28011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6752'. [ 900.808160][T27982] EXT4-fs (loop9): Free/Dirty block details [ 900.841057][T28011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6752'. [ 900.858427][T27982] EXT4-fs (loop9): free_blocks=0 [ 900.877019][T27982] EXT4-fs (loop9): dirty_blocks=464 [ 900.887847][T27982] EXT4-fs (loop9): Block reservation details [ 900.899276][T27982] EXT4-fs (loop9): i_reserved_data_blocks=29 [ 900.924527][T27824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.968721][T27824] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.993567][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.000719][ T5116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.010485][T21054] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 901.025081][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.032181][ T5116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.042903][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.325467][T28049] loop4: detected capacity change from 0 to 512 [ 903.364092][T28049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.374730][T28053] netlink: 'syz.1.6757': attribute type 29 has an invalid length. [ 903.751530][T24416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.770084][T28059] loop8: detected capacity change from 0 to 512 [ 903.799643][T28061] netlink: 'syz.9.6755': attribute type 29 has an invalid length. [ 903.808771][T28061] netlink: 'syz.9.6755': attribute type 29 has an invalid length. [ 903.834639][T27824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 903.870584][T28053] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6757'. [ 903.887713][T28059] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 903.938531][T28055] netlink: 'syz.1.6757': attribute type 29 has an invalid length. [ 903.975251][T28059] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 903.992863][T28059] Quota error (device loop8): write_blk: dquota write failed [ 903.993297][T28079] loop9: detected capacity change from 0 to 512 [ 904.000356][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 904.000374][ C0] EXT4-fs (loop8): initial error at time 903: ext4_mb_generate_buddy:1317 [ 904.021611][ C0] EXT4-fs (loop8): last error at time 903: ext4_mb_generate_buddy:1317 [ 904.030403][T28059] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 904.039578][T28059] Quota error (device loop8): write_blk: dquota write failed [ 904.047008][T28059] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 904.052895][T28079] EXT4-fs: Ignoring removed bh option [ 904.057597][T28059] EXT4-fs error (device loop8): ext4_acquire_dquot:7028: comm syz.8.6758: Failed to acquire dquot type 1 [ 904.073704][T28059] loop8: lost filesystem error report for type 5 error -28 [ 904.076121][T28059] EXT4-fs (loop8): 1 truncate cleaned up [ 904.099891][T28059] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 904.124349][T28079] EXT4-fs: Ignoring removed mblk_io_submit option [ 904.147197][T28086] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6761'. [ 904.163705][T28086] loop4: detected capacity change from 0 to 2048 [ 904.189771][T28079] EXT4-fs error (device loop9): ext4_iget_extra_inode:5042: inode #15: comm syz.9.6760: corrupted in-inode xattr: e_value size too large [ 904.204744][T28059] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 904.209734][ T28] audit: type=1400 audit(903.704:14545): avc: denied { remount } for pid=28058 comm="syz.8.6758" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 904.239341][T28079] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 904.239795][T28079] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.6760: couldn't read orphan inode 15 (err -117) [ 904.248820][T28059] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 904.255637][T28086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 904.260782][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 904.260799][ C1] EXT4-fs (loop9): initial error at time 903: ext4_iget_extra_inode:5042: inode 15 [ 904.260831][ C1] EXT4-fs (loop9): last error at time 903: ext4_iget_extra_inode:5042: inode 15 [ 904.285849][T28059] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 904.314249][T28079] loop9: lost filesystem error report for type 5 error -117 [ 904.318086][T28079] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 904.417886][T27824] veth0_vlan: entered promiscuous mode [ 904.423751][T28100] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 3: comm syz.8.6758: path /100/file0: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=4096 fake=0 [ 904.451916][T27824] veth1_vlan: entered promiscuous mode [ 904.479653][T28059] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 904.490443][T27824] veth0_macvtap: entered promiscuous mode [ 904.497878][T27824] veth1_macvtap: entered promiscuous mode [ 904.518160][T28086] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6761: bg 0: block 234: padding at end of block bitmap is not set [ 904.547066][T27824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.600253][T28086] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 804 with error 28 [ 904.617075][T27824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 904.627856][T25963] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.640369][T28086] EXT4-fs (loop4): This should not happen!! Data will be lost [ 904.640369][T28086] [ 904.650307][T28086] EXT4-fs (loop4): Total free blocks count 0 [ 904.656349][T28086] EXT4-fs (loop4): Free/Dirty block details [ 904.662649][T28086] EXT4-fs (loop4): free_blocks=0 [ 904.667760][T28086] EXT4-fs (loop4): dirty_blocks=816 [ 904.673189][T28086] EXT4-fs (loop4): Block reservation details [ 904.698596][T28086] EXT4-fs (loop4): i_reserved_data_blocks=51 [ 904.805792][ T2364] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.834464][ T2364] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.886893][T28129] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6764'. [ 904.916176][ T2364] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.929031][T24416] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 904.944427][T28129] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6764'. [ 904.959326][ T2364] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.070474][T24416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.911005][T28152] blktrace: Concurrent blktraces are not allowed on loop2 [ 906.325569][T28157] loop7: detected capacity change from 0 to 512 [ 906.512756][T28157] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 906.794709][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.003361][T27824] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.433640][T28197] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6779'. [ 908.558694][T28199] loop7: detected capacity change from 0 to 512 [ 908.709014][T28199] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 908.935833][T28197] loop9: detected capacity change from 0 to 2048 [ 908.982516][T28197] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 909.001402][T28203] loop4: detected capacity change from 0 to 2048 [ 909.023208][T28203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 909.093645][T28197] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6779: bg 0: block 234: padding at end of block bitmap is not set [ 909.162456][T27824] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.175739][T28203] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6780: bg 0: block 234: padding at end of block bitmap is not set [ 909.208106][T28197] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 542 with error 28 [ 909.220886][T28203] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1270 with error 28 [ 909.242678][T28197] EXT4-fs (loop9): This should not happen!! Data will be lost [ 909.242678][T28197] [ 909.252441][T28203] EXT4-fs (loop4): This should not happen!! Data will be lost [ 909.252441][T28203] [ 909.262405][T28203] EXT4-fs (loop4): Total free blocks count 0 [ 909.268451][T28203] EXT4-fs (loop4): Free/Dirty block details [ 909.276001][T28203] EXT4-fs (loop4): free_blocks=0 [ 909.281127][T28203] EXT4-fs (loop4): dirty_blocks=1280 [ 909.286418][T28203] EXT4-fs (loop4): Block reservation details [ 909.289072][ T28] audit: type=1326 audit(908.785:14546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28210 comm="syz.7.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39904c819 code=0x7ffc0000 [ 909.292618][T28203] EXT4-fs (loop4): i_reserved_data_blocks=80 [ 909.332900][T28197] EXT4-fs (loop9): Total free blocks count 0 [ 909.367711][ T28] audit: type=1326 audit(908.815:14547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28210 comm="syz.7.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff39904c819 code=0x7ffc0000 [ 909.367726][T28197] EXT4-fs (loop9): Free/Dirty block details [ 909.367743][T28197] EXT4-fs (loop9): free_blocks=0 [ 909.367756][T28197] EXT4-fs (loop9): dirty_blocks=544 [ 909.413455][ T28] audit: type=1326 audit(908.845:14548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28210 comm="syz.7.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39904c819 code=0x7ffc0000 [ 909.441510][T28213] audit: audit_backlog=65 > audit_backlog_limit=64 [ 909.448352][T28213] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 909.458504][ T28] audit: type=1326 audit(908.845:14549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28210 comm="syz.7.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39904c819 code=0x7ffc0000 [ 909.467087][T28213] audit: backlog limit exceeded [ 909.481606][ T28] audit: type=1326 audit(908.845:14550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28210 comm="syz.7.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff39904c819 code=0x7ffc0000 [ 909.489142][T28197] EXT4-fs (loop9): Block reservation details [ 909.509444][ T28] audit: type=1326 audit(908.845:14551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28210 comm="syz.7.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39904c819 code=0x7ffc0000 [ 909.538125][ T28] audit: type=1326 audit(908.845:14552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28210 comm="syz.7.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39904c819 code=0x7ffc0000 [ 909.569068][T28197] EXT4-fs (loop9): i_reserved_data_blocks=34 [ 909.722540][T21054] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 909.773011][T28219] netlink: 'syz.7.6782': attribute type 29 has an invalid length. [ 909.781455][T28219] netlink: 'syz.7.6782': attribute type 29 has an invalid length. [ 909.783949][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.804135][T28219] netlink: 500 bytes leftover after parsing attributes in process `syz.7.6782'. [ 909.826349][T24416] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 909.841969][T28228] loop9: detected capacity change from 0 to 128 [ 909.864531][T24416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.921032][T28228] loop9: detected capacity change from 0 to 1024 [ 909.956008][T28228] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 910.939727][T28247] loop4: detected capacity change from 0 to 512 [ 911.124383][T28247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 911.368773][T28249] loop7: detected capacity change from 0 to 8192 [ 911.499171][T24416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.813081][T28261] blktrace: Concurrent blktraces are not allowed on loop18 [ 912.131412][T28231] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.138591][T28231] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.860024][T28231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 912.979865][T28231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.609005][T28283] netlink: 596 bytes leftover after parsing attributes in process `syz.4.6800'. [ 913.762294][T28266] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 913.784322][T28281] netlink: 'syz.4.6800': attribute type 29 has an invalid length. [ 913.792505][T28282] netlink: 'syz.4.6800': attribute type 29 has an invalid length. [ 913.800905][ T5112] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.827861][ T5112] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.988902][ T5112] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.853735][T28307] loop7: detected capacity change from 0 to 512 [ 914.893195][T28307] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 914.968233][T28301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6806'. [ 914.993902][ T5112] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.641379][T28317] loop9: detected capacity change from 0 to 8192 [ 915.746865][T28317] netlink: 'syz.9.6808': attribute type 1 has an invalid length. [ 915.941693][T28325] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6810'. [ 916.042536][T27824] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.100116][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 916.100129][ T28] audit: type=1400 audit(915.595:14627): avc: denied { setcurrent } for pid=28335 comm="syz.1.6814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 916.135127][ T28] audit: type=1400 audit(915.625:14628): avc: denied { bind } for pid=28335 comm="syz.1.6814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 916.321050][T28340] netlink: 'syz.9.6816': attribute type 29 has an invalid length. [ 916.339074][T28351] blktrace: Concurrent blktraces are not allowed on loop8 [ 916.389278][T28345] netlink: 'syz.9.6816': attribute type 29 has an invalid length. [ 916.468306][T28340] netlink: 500 bytes leftover after parsing attributes in process `syz.9.6816'. [ 917.138083][T28373] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6824'. [ 917.234359][ T28] audit: type=1400 audit(916.725:14629): avc: denied { append } for pid=28375 comm="syz.8.6825" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 917.292701][ T28] audit: type=1400 audit(916.745:14630): avc: denied { ioctl } for pid=28375 comm="syz.8.6825" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 917.531457][T28385] loop1: detected capacity change from 0 to 512 [ 917.689899][T28385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 918.246913][T25684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.625064][T28398] netlink: 'syz.7.6831': attribute type 29 has an invalid length. [ 918.633670][T28402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6832'. [ 918.642787][T28398] netlink: 'syz.7.6831': attribute type 29 has an invalid length. [ 918.652773][T28398] netlink: 500 bytes leftover after parsing attributes in process `syz.7.6831'. [ 919.087376][ T28] audit: type=1400 audit(918.575:14631): avc: denied { write } for pid=28417 comm="syz.9.6837" name="cgroup.subtree_control" dev="cgroup2" ino=327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 919.904525][T28427] loop1: detected capacity change from 0 to 512 [ 919.918024][ T28] audit: type=1400 audit(918.605:14632): avc: denied { open } for pid=28417 comm="syz.9.6837" path="" dev="cgroup2" ino=327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 919.983817][T28427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 920.162482][ T28] audit: type=1400 audit(918.605:14633): avc: denied { ioctl } for pid=28417 comm="syz.9.6837" path="" dev="cgroup2" ino=327 ioctlcmd=0x54c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 920.165743][T28418] loop9: detected capacity change from 0 to 512 [ 920.195587][T28418] EXT4-fs: Ignoring removed nobh option [ 920.204390][T28418] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 920.231033][T28418] EXT4-fs (loop9): 1 truncate cleaned up [ 920.315778][T25684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.331337][T28418] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 920.716389][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.219766][T28464] loop1: detected capacity change from 0 to 512 [ 921.367694][T28464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.080400][T25684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.238417][T28485] blktrace: Concurrent blktraces are not allowed on loop18 [ 923.436065][T28496] loop7: detected capacity change from 0 to 512 [ 923.574027][T28496] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 924.070716][T28500] loop4: detected capacity change from 0 to 512 [ 924.151950][T28500] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 924.222570][T28500] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 924.306345][T28500] EXT4-fs (loop4): failed to initialize system zone (-117) [ 924.366668][T28500] EXT4-fs (loop4): mount failed [ 924.689148][T27824] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.280837][T28504] netlink: 'syz.1.6851': attribute type 29 has an invalid length. [ 925.291201][T28504] netlink: 'syz.1.6851': attribute type 29 has an invalid length. [ 925.334285][T28504] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6851'. [ 925.580206][T28521] blktrace: Concurrent blktraces are not allowed on loop14 [ 925.612221][T28523] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6857'. [ 925.717243][T28524] loop4: detected capacity change from 0 to 512 [ 925.786186][T28524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 926.542379][T28547] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6860'. [ 926.779595][T24416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.792564][T28547] loop1: detected capacity change from 0 to 2048 [ 926.836721][T28555] vlan2: entered allmulticast mode [ 926.853622][T28547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 927.090741][T28547] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6860: bg 0: block 234: padding at end of block bitmap is not set [ 927.214185][T28547] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1036 with error 28 [ 927.293700][T28547] EXT4-fs (loop1): This should not happen!! Data will be lost [ 927.293700][T28547] [ 927.331463][T28547] EXT4-fs (loop1): Total free blocks count 0 [ 927.352774][T28547] EXT4-fs (loop1): Free/Dirty block details [ 927.374536][T28547] EXT4-fs (loop1): free_blocks=0 [ 927.391853][T28547] EXT4-fs (loop1): dirty_blocks=1040 [ 927.411093][T28547] EXT4-fs (loop1): Block reservation details [ 927.435976][T28547] EXT4-fs (loop1): i_reserved_data_blocks=65 [ 928.157162][T28592] loop7: detected capacity change from 0 to 512 [ 928.186248][T28592] EXT4-fs: Ignoring removed nobh option [ 928.222841][T25684] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 928.238295][T28592] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 928.252530][T25684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.333799][T28592] EXT4-fs (loop7): 1 truncate cleaned up [ 928.364785][T28592] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 928.492335][T28605] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6871'. [ 928.514199][T28596] blktrace: Concurrent blktraces are not allowed on loop18 [ 928.603962][T28608] blktrace: Concurrent blktraces are not allowed on loop8 [ 928.616749][T27824] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.040092][T28662] loop1: detected capacity change from 0 to 512 [ 930.904812][T28670] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6882'. [ 931.069416][T28670] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6882'. [ 931.242184][T28683] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6889'. [ 931.259902][T28683] loop1: detected capacity change from 0 to 2048 [ 931.276797][T28684] blktrace: Concurrent blktraces are not allowed on loop16 [ 931.305459][T28683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 931.697430][T28683] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6889: bg 0: block 234: padding at end of block bitmap is not set [ 931.784662][T28683] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 26 with error 117 [ 931.860290][T28683] EXT4-fs (loop1): This should not happen!! Data will be lost [ 931.860290][T28683] [ 932.029911][T28683] syz.1.6889 (28683) used greatest stack depth: 8056 bytes left [ 932.094549][T25684] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 932.128391][T25684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.981646][T28715] blktrace: Concurrent blktraces are not allowed on loop8 [ 933.126279][T28717] vlan2: entered allmulticast mode [ 934.517151][T28740] loop8: detected capacity change from 0 to 512 [ 934.698122][T28740] EXT4-fs: Ignoring removed bh option [ 934.703652][T28740] EXT4-fs: Ignoring removed mblk_io_submit option [ 934.783222][T28740] /dev/loop8: Can't open blockdev [ 934.919570][T28745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6902'. [ 934.957910][T28745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6902'. [ 935.534430][T28754] loop9: detected capacity change from 0 to 512 [ 935.655392][T28754] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 936.124593][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.158661][T28779] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6909'. [ 938.326012][T28779] loop9: detected capacity change from 0 to 2048 [ 938.384635][T28782] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=28782 comm=syz.7.6911 [ 938.403463][T28779] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 938.441189][T28782] loop7: detected capacity change from 0 to 2048 [ 938.501897][T28782] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 938.580410][T28779] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6909: bg 0: block 234: padding at end of block bitmap is not set [ 938.608333][T28779] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 820 with error 28 [ 938.633184][T28782] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6911: bg 0: block 234: padding at end of block bitmap is not set [ 938.677484][T28779] EXT4-fs (loop9): This should not happen!! Data will be lost [ 938.677484][T28779] [ 938.687181][T28779] EXT4-fs (loop9): Total free blocks count 0 [ 938.693250][T28779] EXT4-fs (loop9): Free/Dirty block details [ 938.707380][T28779] EXT4-fs (loop9): free_blocks=0 [ 938.718114][T28779] EXT4-fs (loop9): dirty_blocks=832 [ 938.739191][T28779] EXT4-fs (loop9): Block reservation details [ 938.750825][T28779] EXT4-fs (loop9): i_reserved_data_blocks=52 [ 938.778854][T28782] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28 [ 938.801077][T28782] EXT4-fs (loop7): This should not happen!! Data will be lost [ 938.801077][T28782] [ 938.857560][T28782] EXT4-fs (loop7): Total free blocks count 0 [ 938.863675][T28782] EXT4-fs (loop7): Free/Dirty block details [ 938.870055][T28782] EXT4-fs (loop7): free_blocks=0 [ 938.875120][T28782] EXT4-fs (loop7): dirty_blocks=208 [ 938.922225][T28798] loop4: detected capacity change from 0 to 512 [ 938.957076][T28798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 939.256128][T28782] EXT4-fs (loop7): Block reservation details [ 939.286945][T28782] EXT4-fs (loop7): i_reserved_data_blocks=13 [ 939.392404][T27824] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 939.408803][T27824] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.578834][T24416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.589045][T28809] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6915'. [ 939.608894][T28809] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6915'. [ 940.124927][T28817] netlink: 'syz.4.6916': attribute type 29 has an invalid length. [ 940.133452][T28817] netlink: 'syz.4.6916': attribute type 29 has an invalid length. [ 940.150492][T21054] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 940.348382][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.726634][T28830] loop1: detected capacity change from 0 to 512 [ 940.733358][T28830] EXT4-fs: Ignoring removed bh option [ 940.760633][T28830] EXT4-fs: Ignoring removed mblk_io_submit option [ 940.856433][T28830] EXT4-fs error (device loop1): ext4_iget_extra_inode:5042: inode #15: comm syz.1.6921: corrupted in-inode xattr: e_value size too large [ 940.912779][T28830] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 940.913107][T28830] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.6921: couldn't read orphan inode 15 (err -117) [ 940.922292][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 940.922325][ C0] EXT4-fs (loop1): initial error at time 940: ext4_iget_extra_inode:5042: inode 15 [ 940.922381][ C0] EXT4-fs (loop1): last error at time 940: ext4_iget_extra_inode:5042: inode 15 [ 940.997194][T28836] loop9: detected capacity change from 0 to 512 [ 941.072799][T28830] loop1: lost filesystem error report for type 5 error -117 [ 941.120267][T28836] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 941.402866][T28830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 941.595877][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.687700][T28847] blktrace: Concurrent blktraces are not allowed on loop16 [ 942.867618][T28864] loop4: detected capacity change from 0 to 512 [ 943.108887][T28866] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6929'. [ 943.244183][T28867] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6929'. [ 943.738551][T28864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 944.548103][T24416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.618026][T28878] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6931'. [ 944.634989][T28878] loop4: detected capacity change from 0 to 2048 [ 944.650725][T28878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 944.819764][T28878] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6931: bg 0: block 234: padding at end of block bitmap is not set [ 944.867389][T28878] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 530 with error 28 [ 944.897271][T28878] EXT4-fs (loop4): This should not happen!! Data will be lost [ 944.897271][T28878] [ 944.929735][T28878] EXT4-fs (loop4): Total free blocks count 0 [ 944.935773][T28878] EXT4-fs (loop4): Free/Dirty block details [ 944.944487][T28887] netlink: 'syz.8.6933': attribute type 29 has an invalid length. [ 944.953024][T28887] netlink: 'syz.8.6933': attribute type 29 has an invalid length. [ 944.982032][T28878] EXT4-fs (loop4): free_blocks=0 [ 945.016074][T28878] EXT4-fs (loop4): dirty_blocks=544 [ 945.046007][T28878] EXT4-fs (loop4): Block reservation details [ 945.070102][T28878] EXT4-fs (loop4): i_reserved_data_blocks=34 [ 945.483578][T24416] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 945.499409][T24416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.551041][T28893] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6935'. [ 945.607628][T28893] loop4: detected capacity change from 0 to 2048 [ 945.770723][T28893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 945.809768][T28906] tipc: Failed to remove unknown binding: 66,2,2/0:4077533165/4077533167 [ 945.881219][T28907] loop9: detected capacity change from 0 to 512 [ 945.921801][T28893] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6935: bg 0: block 234: padding at end of block bitmap is not set [ 945.964299][T28907] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 946.257065][T28893] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 146 with error 28 [ 946.273607][T28893] EXT4-fs (loop4): This should not happen!! Data will be lost [ 946.273607][T28893] [ 946.283491][T28893] EXT4-fs (loop4): Total free blocks count 0 [ 946.292143][T28893] EXT4-fs (loop4): Free/Dirty block details [ 946.302593][T28912] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6940'. [ 946.307054][T28893] EXT4-fs (loop4): free_blocks=0 [ 946.316530][T28893] EXT4-fs (loop4): dirty_blocks=160 [ 946.337074][T28893] EXT4-fs (loop4): Block reservation details [ 946.347172][T28893] EXT4-fs (loop4): i_reserved_data_blocks=10 [ 946.515398][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.546593][T24416] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 946.608064][T24416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.814240][T28944] loop9: detected capacity change from 0 to 512 [ 946.907234][T28944] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 947.185113][T28949] blktrace: Concurrent blktraces are not allowed on loop8 [ 947.444740][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.534513][T25684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.537150][T28961] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6946'. [ 947.560123][T28964] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6948'. [ 947.578551][ T28] audit: type=1400 audit(947.057:14634): avc: denied { write } for pid=28960 comm="syz.4.6956" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 947.614879][T28961] loop7: detected capacity change from 0 to 2048 [ 947.651308][T28966] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6947'. [ 947.667692][T28964] loop9: detected capacity change from 0 to 2048 [ 947.671156][T28966] loop1: detected capacity change from 0 to 2048 [ 947.684009][ T3002] ================================================================== [ 947.692136][ T3002] BUG: KCSAN: data-race in set_nlink / set_nlink [ 947.698493][ T3002] [ 947.700816][ T3002] read to 0xffff888107e6e988 of 4 bytes by task 24363 on cpu 1: [ 947.708445][ T3002] set_nlink+0x29/0xb0 [ 947.712523][ T3002] kernfs_iop_permission+0x1e5/0x220 [ 947.717823][ T3002] inode_permission+0x31f/0x3b0 [ 947.722699][ T3002] link_path_walk+0x779/0xe30 [ 947.727389][ T3002] path_openat+0x1c6/0x2050 [ 947.731893][ T3002] do_file_open+0x16c/0x290 [ 947.736398][ T3002] do_sys_openat2+0x94/0x130 [ 947.740998][ T3002] __x64_sys_openat+0xf2/0x120 [ 947.745776][ T3002] x64_sys_call+0x1e39/0x3020 [ 947.750465][ T3002] do_syscall_64+0x12c/0x3b0 [ 947.755059][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.760964][ T3002] [ 947.763289][ T3002] write to 0xffff888107e6e988 of 4 bytes by task 3002 on cpu 0: [ 947.770920][ T3002] set_nlink+0x99/0xb0 [ 947.774997][ T3002] kernfs_iop_permission+0x1e5/0x220 [ 947.780301][ T3002] inode_permission+0x31f/0x3b0 [ 947.785168][ T3002] link_path_walk+0x779/0xe30 [ 947.789863][ T3002] path_lookupat+0x8c/0x500 [ 947.794381][ T3002] filename_lookup+0x190/0x390 [ 947.799164][ T3002] vfs_statx+0x96/0x170 [ 947.803350][ T3002] vfs_fstatat+0x118/0x170 [ 947.807775][ T3002] __se_sys_newfstatat+0x55/0x3e0 [ 947.812807][ T3002] __x64_sys_newfstatat+0x55/0x70 [ 947.817840][ T3002] x64_sys_call+0x2c64/0x3020 [ 947.822530][ T3002] do_syscall_64+0x12c/0x3b0 [ 947.827122][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.833022][ T3002] [ 947.835348][ T3002] value changed: 0x00000008 -> 0x00000009 [ 947.841068][ T3002] [ 947.843391][ T3002] Reported by Kernel Concurrency Sanitizer on: [ 947.849547][ T3002] CPU: 0 UID: 0 PID: 3002 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 947.859977][ T3002] Tainted: [W]=WARN [ 947.863778][ T3002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 947.873833][ T3002] ================================================================== [ 947.915709][T28964] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 947.939788][T28966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 947.955079][T28961] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 948.043211][T28961] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6946: bg 0: block 234: padding at end of block bitmap is not set [ 948.067622][T28966] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6947: bg 0: block 234: padding at end of block bitmap is not set [ 948.085990][T28964] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6948: bg 0: block 234: padding at end of block bitmap is not set [ 948.100904][T28961] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 318 with error 28 [ 948.118030][T28966] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 390 with error 28 [ 948.130963][T28964] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 410 with error 28 [ 948.143657][T28961] EXT4-fs (loop7): This should not happen!! Data will be lost [ 948.143657][T28961] [ 948.153455][T28966] EXT4-fs (loop1): This should not happen!! Data will be lost [ 948.153455][T28966] [ 948.163207][T28964] EXT4-fs (loop9): This should not happen!! Data will be lost [ 948.163207][T28964] [ 948.167848][T28961] EXT4-fs (loop7): Total free blocks count 0 [ 948.173482][T28964] EXT4-fs (loop9): Total free blocks count 0 [ 948.186663][T28966] EXT4-fs (loop1): Total free blocks count 0 [ 948.192750][T28966] EXT4-fs (loop1): Free/Dirty block details [ 948.198826][T28964] EXT4-fs (loop9): Free/Dirty block details [ 948.199403][T28961] EXT4-fs (loop7): Free/Dirty block details [ 948.204727][T28964] EXT4-fs (loop9): free_blocks=0 [ 948.204791][T28964] EXT4-fs (loop9): dirty_blocks=416 [ 948.223295][T28966] EXT4-fs (loop1): free_blocks=0 [ 948.228319][T28966] EXT4-fs (loop1): dirty_blocks=400 [ 948.232817][T28961] EXT4-fs (loop7): free_blocks=0 [ 948.233714][T28966] EXT4-fs (loop1): Block reservation details [ 948.244720][T28966] EXT4-fs (loop1): i_reserved_data_blocks=25 [ 948.248940][T28961] EXT4-fs (loop7): dirty_blocks=320 [ 948.254798][T28964] EXT4-fs (loop9): Block reservation details [ 948.259381][T28961] EXT4-fs (loop7): Block reservation details [ 948.274763][T28964] EXT4-fs (loop9): i_reserved_data_blocks=26 [ 948.284551][T28961] EXT4-fs (loop7): i_reserved_data_blocks=20 [ 948.360982][T21054] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 948.378523][T21054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.396875][T25684] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 948.424895][T27824] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 948.430672][T25684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.445294][T27824] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.