last executing test programs: 47m44.762397446s ago: executing program 3 (id=3360): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e22, 0x5, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000001c0)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x48ed, 0xfffffffc) 47m44.583642921s ago: executing program 3 (id=3366): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$eJzs3N1rXGUaAPDnnEymaZvtpMuybPdmsyxLC8tOky4p27KwrVS88ULQW6EhnZSQ6QdJpCbNxUT/AVGvBW8EtShe2OveKHrrjba3ihdCkdgoiGjkzEeSNjNJ2s70hPb3g3fO+553Zp7nmcPMOS/MTABPrOHsJo04FBFnk4hSc38aEcV6byCi1rjfyvLixE/LixNJrK4+/30SSUTcWV6caD1X0tzubw4GIuKLp5L446ub487OL0yPV6uVmeb46NyFy0dn5xf+PXVh/HzlfOXi6PH/jh0bOz5yYqxrtf789anrP/79mW9rv7z367Uf3ngniVMx2JzbWEe3DMfw2muyUSEixrsdLCd9zXo21pkUtnlQ2uOkAADoKN1wDffnKEVfrF+8leKTL3NNDgAAAOiK1b6IVQAAAOAxl1j/AwAAwGOu9T2AO8uLE62W7zcSHq3bpyNiqFH/SrM1ZgpRq28Hoj8i9t1JYuPPWpPGwx7acER8c+vEh1mLHv0OeSu1pYj4S7vjn9TrH6r/intz/WlEjHQh/vA9423q7+tCyLs8TP2nuhD/PusHgK64cbpxItt8/kvXrn+izfmv0Obc9SDanP+6fo7fSuv6b2XT9d96/X0drv+e22GMq+++daXTXFb//64//UGrZfGz7bZPuu2frOzM7aWIvxba1Z+s1Z90qP/sDmOUfrtS6TT3wPV3yerbEYejff0tydb/T3R0cqpaGWncto2x9PnY+53i511/dvz3dai/9f9PnY7/5R3GePHMmY827by13t26/vS7YvJCvVds7nl5fG5uZjSimDy7ef+xrXNp3af1HFn9R/6x9fu/Xf3ZZ0Kt+Tpka4Gl5jYbv3JPzP9fu/pxp3xa6788j/+5Dsd/Y/2fFTYf/9d2GOOfn75+pNPcxvVv1rL4rbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSkETEYSVpe66dpuRyxPyL+FPvS6qXZuX9NXnrp4rlsLmIo+tPJqWplJCJKjXGSjUfr/fXxsXvG/4mIgxHxZmlvfVyeuFQ9l3fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArNkfEYORpOWISCNipZSm5XLeWQEAAABddyDvBAAAAICeG8o7AQAAAKDnrP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosYN/u3EziYjayb31lik25/pzzQzotTTvBIDc9OWdAJCbQt4JALm5zzW+ywV4DCXbzA90nNnT9VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L0OH7pxM4mI2sm99ZYpNuf6c80M6LU07wSA3PR1mhiIiMKjzQV4tLzF4clljQ8k28wPrN+ndvfMnp7lBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuM1hvSVqOiGJzX7kc8YeIGIr+ZHKqWhmJiAMR8VWpf082Hs05ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpvdn5herxarcxknTSanbU9OuudpPGK1XZLPjoP2SnGrkhjl3by/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPs/ML0+PVamVmNu9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLzNzi9Mj1erlZkedvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/PweAAD//1pFCiI=") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x7fffffff) 47m43.691918855s ago: executing program 3 (id=3374): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ac, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x77}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x3eb}}], 0x1, 0x8001) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 47m43.175560894s ago: executing program 3 (id=3383): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@nombcache}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0x460b8000}}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x147042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x8000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) tkill(r1, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) 47m42.319565136s ago: executing program 3 (id=3390): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc20}, 0x24000) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000b00)={0x0, 0x200f36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/119, 0x77}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x92, 0x0, @fd, 0xfff, 0x0, 0x6}) io_uring_enter(r0, 0x6686, 0x2936, 0x28, 0x0, 0x0) 47m41.596391694s ago: executing program 3 (id=3396): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 47m41.443328194s ago: executing program 32 (id=3396): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.950553007s ago: executing program 5 (id=23350): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x1, @perf_config_ext={0x2, 0x3}, 0x9000, 0xa88, 0x8409, 0x7, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x7, 0x7ffc0001}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) chroot(0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4ba}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) listen(0xffffffffffffffff, 0x5) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x804000, 0x0) io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000100)={{}, {r6, r7/1000+60000}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x2000000000000000, 0xfffffffffffffffb}, 0x0) ptrace$getregs(0xc, 0x0, 0x1, &(0x7f0000000040)=""/99) 3.187739658s ago: executing program 1 (id=23358): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8020}, 0x4000000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfffffffffffffffb}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027", 0x23}], 0x1}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 3.112181064s ago: executing program 1 (id=23360): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080), 0x80800) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000280)={0x0, 0x80003734, 0x100, 0xfffffffe, 0x280}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000180)={0x3f, 0x6}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0xc0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100028, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c"], 0x0, 0x26, 0x0, 0x1}, 0x28) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r7, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r6, 0x0, 0x0}, 0x10) socket(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x1f38, 0x0, 0x4000000000000000, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 3.108554403s ago: executing program 5 (id=23361): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x1, @perf_config_ext={0x2, 0x3}, 0x9000, 0xa88, 0x8409, 0x7, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x7, 0x7ffc0001}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) chroot(0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4ba}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) listen(0xffffffffffffffff, 0x5) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x804000, 0x0) io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) r6 = syz_clone(0xb45040, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000100)={{}, {r7, r8/1000+60000}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x2000000000000000, 0xfffffffffffffffb}, 0x0) ptrace$getregs(0xc, r6, 0x1, &(0x7f0000000040)=""/99) 2.701311484s ago: executing program 2 (id=23364): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080), 0x80800) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000280)={0x0, 0x80003734, 0x100, 0xfffffffe, 0x280}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000180)={0x3f, 0x6}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0xc0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100028, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c"], 0x0, 0x26, 0x0, 0x1}, 0x28) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r7, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r6, 0x0, 0x0}, 0x10) socket(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x1f38, 0x0, 0x4000000000000000, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) 2.420317969s ago: executing program 5 (id=23366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x5, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x6, 0x100000000}, 0x1590, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x20000004) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) 2.403061406s ago: executing program 2 (id=23367): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080), 0x80800) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000280)={0x0, 0x80003734, 0x100, 0xfffffffe, 0x280}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000180)={0x3f, 0x6}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0xc0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100028, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c"], 0x0, 0x26, 0x0, 0x1}, 0x28) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r7, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r6, 0x0, 0x0}, 0x10) socket(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x1f38, 0x0, 0x4000000000000000, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) 2.386769853s ago: executing program 4 (id=23368): socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000008}) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x80c, &(0x7f0000000300)="$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") acct(&(0x7f0000000180)='./file1\x00') setxattr(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x11}, 0x94) syz_open_dev$loop(&(0x7f0000000140), 0xbcc, 0x100000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) dup2(r3, r4) 2.348742875s ago: executing program 5 (id=23369): socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000008}) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x80c, &(0x7f0000000300)="$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") acct(&(0x7f0000000180)='./file1\x00') setxattr(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x11}, 0x94) syz_open_dev$loop(&(0x7f0000000140), 0xbcc, 0x100000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) dup2(r3, r4) 2.342946704s ago: executing program 1 (id=23370): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003c80)={@map, 0xffffffffffffffff, 0x1b}, 0x20) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x2, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, 0x0, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000002340)='L', 0x1}], 0x1}, 0x8c1) r3 = socket$kcm(0x11, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x440, 0x3, 0xfffffffc, 0x0, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f00000001c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x30}, 0x4000000) 1.994634167s ago: executing program 1 (id=23373): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003c80)={@map, 0xffffffffffffffff, 0x1b}, 0x20) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x2, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, 0x0, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000002340)='L', 0x1}], 0x1}, 0x8c1) r3 = socket$kcm(0x11, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x440, 0x3, 0xfffffffc, 0x0, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f00000001c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x30}, 0x4000000) 1.805800071s ago: executing program 2 (id=23374): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xd, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(0x0, 0x12e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file1\x00'}, 0x18) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x354, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r3, 0x2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_config_ext={0x7, 0x7}, 0x0, 0x10000, 0xa, 0x5, 0x8, 0x20005, 0xac9c, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, r0, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a"], 0x5c}}, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.727548645s ago: executing program 1 (id=23375): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x10, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x48048}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0500000000000000000000007fbdbc14e20210cb166f7b79973be48736643064742be19767a0430a96dcf0b515ae937d0766f0784068d6bfbf853d90f76bf6cad413542521645a211e634acf1327a0e96a42f4b3d8e2b2418a4276c2e2eddce5607525809deeae6cc46d26e53547", @ANYBLOB, @ANYRES64=0x0], 0x10) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3) socket$key(0xf, 0x3, 0x2) 1.660122412s ago: executing program 2 (id=23376): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0xa}, 0x3013, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x64040005, 0x0, 0x0) shutdown(r2, 0x0) r3 = getpgrp(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = syz_pidfd_open(r3, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f00000018c0), 0x0, 0x0, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r5, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fremovexattr(r4, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) 1.596072679s ago: executing program 0 (id=23377): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003c80)={@map, 0xffffffffffffffff, 0x1b}, 0x20) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x2, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, 0x0, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000002340)='L', 0x1}], 0x1}, 0x8c1) r3 = socket$kcm(0x11, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x440, 0x3, 0xfffffffc, 0x0, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f00000001c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x30}, 0x4000000) 1.507478763s ago: executing program 4 (id=23378): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8020}, 0x4000000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfffffffffffffffb}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b2300000", 0x17}], 0x1}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.49607272s ago: executing program 5 (id=23379): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x10, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x48048}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0500000000000000000000007fbdbc14e20210cb166f7b79973be48736643064742be19767a0430a96dcf0b515ae937d0766f0784068d6bfbf853d90f76bf6cad413542521645a211e634acf1327a0e96a42f4b3d8e2b2418a4276c2e2eddce5607525809deeae6cc46d26e53547", @ANYBLOB, @ANYRES64=0x0], 0x10) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3) socket$key(0xf, 0x3, 0x2) 1.488094009s ago: executing program 0 (id=23380): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080), 0x80800) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000280)={0x0, 0x80003734, 0x100, 0xfffffffe, 0x280}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000180)={0x3f, 0x6}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0xc0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100028, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c"], 0x0, 0x26, 0x0, 0x1}, 0x28) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r7, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r6, 0x0, 0x0}, 0x10) socket(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x1f38, 0x0, 0x4000000000000000, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) 1.422620026s ago: executing program 4 (id=23381): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080), 0x80800) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000280)={0x0, 0x80003734, 0x100, 0xfffffffe, 0x280}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000180)={0x3f, 0x6}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0xc0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100028, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c"], 0x0, 0x26, 0x0, 0x1}, 0x28) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r7, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r6, 0x0, 0x0}, 0x10) socket(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x1f38, 0x0, 0x4000000000000000, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) 1.382504908s ago: executing program 4 (id=23382): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0xa}, 0x3013, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x64040005, 0x0, 0x0) shutdown(r2, 0x0) r3 = getpgrp(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = syz_pidfd_open(r3, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f00000018c0), 0x0, 0x0, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r5, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fremovexattr(r4, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) 1.244830291s ago: executing program 0 (id=23383): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8020}, 0x4000000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfffffffffffffffb}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b2300000", 0x17}], 0x1}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.200458653s ago: executing program 0 (id=23384): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080), 0x80800) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000280)={0x0, 0x80003734, 0x100, 0xfffffffe, 0x280}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000180)={0x3f, 0x6}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0xc0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100028, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c"], 0x0, 0x26, 0x0, 0x1}, 0x28) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r7, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r6, 0x0, 0x0}, 0x10) socket(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x1f38, 0x0, 0x4000000000000000, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) 998.913194ms ago: executing program 0 (id=23385): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x1, @perf_config_ext={0x2, 0x3}, 0x9000, 0xa88, 0x8409, 0x7, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x7, 0x7ffc0001}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) chroot(0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4ba}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) listen(0xffffffffffffffff, 0x5) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x804000, 0x0) io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) r6 = syz_clone(0xb45040, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000100)={{}, {r7, r8/1000+60000}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x2000000000000000, 0xfffffffffffffffb}, 0x0) ptrace$getregs(0xc, r6, 0x1, &(0x7f0000000040)=""/99) 922.033139ms ago: executing program 1 (id=23386): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x800ce90, 0x10, 0x3, 0x40004333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = epoll_create1(0x80000) r8 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0xc000000b}) signalfd4(r8, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x2, @private2, 0x401, 0x4}, 0x0, 0x0, 0x1}) setitimer(0x2, &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000000)) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) brk(0x800000) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r10, 0x402c542c, &(0x7f00000000c0)={0x9, 0x0, 0xd0, 0x4002, 0x5, "0c411be01fbcd2b7cb366b0200", 0x1004, 0xffffffff}) socket$key(0xf, 0x3, 0x2) 789.174233ms ago: executing program 2 (id=23387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000978000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xd, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file1\x00'}, 0x18) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x354, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, 0x0, 0x0) listen(r6, 0x2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x2, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3, 0x3, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x1, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0xb, 0x0, 0x400}, {{@in6=@loopback, 0x4d5, 0x33}, 0xa, @in=@remote, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x4000) fsetxattr$security_capability(r3, &(0x7f0000000000), &(0x7f0000000140)=@v3={0x3000000, [{0x81, 0xfffffe00}, {0x3ff, 0x3}]}, 0x18, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_config_ext={0x7, 0x7}, 0x0, 0x10000, 0xa, 0x5, 0x8, 0x20005, 0xac9c, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, r1, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a"], 0x5c}}, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 632.654203ms ago: executing program 5 (id=23388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c3580"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 504.006598ms ago: executing program 4 (id=23389): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003c80)={@map, 0xffffffffffffffff, 0x1b}, 0x20) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x2, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, 0x0, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000002340)='L', 0x1}], 0x1}, 0x8c1) r3 = socket$kcm(0x11, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x440, 0x3, 0xfffffffc, 0x0, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f00000001c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x30}, 0x4000000) 87.943077ms ago: executing program 0 (id=23390): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0xa}, 0x3013, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x64040005, 0x0, 0x0) shutdown(r2, 0x0) r3 = getpgrp(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = syz_pidfd_open(r3, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f00000018c0), 0x0, 0x0, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fremovexattr(r4, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) 32.225646ms ago: executing program 4 (id=23391): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x800ce90, 0x10, 0x3, 0x40004333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = epoll_create1(0x80000) r8 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0xc000000b}) signalfd4(r8, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x2, @private2, 0x401, 0x4}, 0x0, 0x0, 0x1}) setitimer(0x2, &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000000)) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) brk(0x800000) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r10, 0x402c542c, &(0x7f00000000c0)={0x9, 0x0, 0xd0, 0x4002, 0x5, "0c411be01fbcd2b7cb366b0200", 0x1004, 0xffffffff}) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) 0s ago: executing program 2 (id=23392): socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000008}) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x80c, &(0x7f0000000300)="$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") acct(&(0x7f0000000180)='./file1\x00') setxattr(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x11}, 0x94) syz_open_dev$loop(&(0x7f0000000140), 0xbcc, 0x100000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) dup2(r3, r4) kernel console output (not intermixed with test programs): 858.806193][T17645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21108'. [ 2860.506067][T17658] netlink: 15 bytes leftover after parsing attributes in process `syz.4.21108'. [ 2860.705368][T17665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21112'. [ 2860.904830][T17672] xt_hashlimit: size too large, truncated to 1048576 [ 2860.912071][T17672] xt_hashlimit: max too large, truncated to 1048576 [ 2860.971197][T17665] netlink: 92 bytes leftover after parsing attributes in process `syz.1.21112'. [ 2862.715841][T17683] 9p: Bad value for 'rfdno' [ 2863.236146][T17691] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2866.348663][T17716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21126'. [ 2866.359106][T17716] netlink: 92 bytes leftover after parsing attributes in process `syz.0.21126'. [ 2870.738657][T17740] syzkaller0: entered promiscuous mode [ 2870.744732][T17740] syzkaller0: entered allmulticast mode [ 2870.873417][T17737] 9p: Bad value for 'rfdno' [ 2870.912683][T17737] syz1: rxe_newlink: already configured on xfrm0 [ 2870.924997][T17752] lo speed is unknown, defaulting to 1000 [ 2870.934440][T17752] lo speed is unknown, defaulting to 1000 [ 2870.941214][T17752] xfrm0 speed is unknown, defaulting to 1000 [ 2870.983884][T17758] loop2: detected capacity change from 0 to 512 [ 2870.993764][T17758] EXT4-fs: Ignoring removed i_version option [ 2871.010224][T17758] EXT4-fs: Ignoring removed bh option [ 2871.149079][T17758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2871.167533][T17758] ext4 filesystem being mounted at /303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2871.181442][T17752] Q±6ã`Ò˜: renamed from lo [ 2871.237776][T17767] xt_hashlimit: size too large, truncated to 1048576 [ 2871.244789][T17767] xt_hashlimit: max too large, truncated to 1048576 [ 2872.759449][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2873.286179][T17792] loop2: detected capacity change from 0 to 4096 [ 2873.343415][T17792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2873.416269][T17792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2873.674631][T17807] loop2: detected capacity change from 0 to 4096 [ 2873.705824][T17807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2873.741277][T17807] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2873.884312][T17818] loop2: detected capacity change from 0 to 4096 [ 2873.904853][T17818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2873.938700][T17818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2874.212036][T17838] lo speed is unknown, defaulting to 1000 [ 2874.218186][T17838] lo speed is unknown, defaulting to 1000 [ 2874.244526][T17843] Q±6ã`Ò˜: renamed from lo [ 2874.270959][T17838] xfrm0 speed is unknown, defaulting to 1000 [ 2874.353975][T17849] loop6: detected capacity change from 0 to 8 [ 2874.399473][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2874.410381][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2874.451642][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2874.462458][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2875.209771][T14754] page_pool_release_retry() stalled pool shutdown: id 241, 50 inflight 120 sec [ 2875.254886][T17741] loop6: unable to read partition table [ 2875.579196][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2875.590706][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2875.612582][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2875.623343][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2875.640471][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2875.651362][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2875.670178][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2875.681036][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2875.690438][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2875.701223][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2875.719522][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2875.730394][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2875.748447][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2875.759188][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2875.769955][T17849] loop6: unable to read partition table [ 2875.778120][T17849] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 2878.052780][T17892] loop2: detected capacity change from 0 to 4096 [ 2878.086448][T17892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2878.099833][T17892] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2878.209552][T17905] lo speed is unknown, defaulting to 1000 [ 2878.216126][T17905] lo speed is unknown, defaulting to 1000 [ 2878.234045][T17905] xfrm0 speed is unknown, defaulting to 1000 [ 2878.271629][T17912] Q±6ã`Ò˜: renamed from lo [ 2881.439008][T17959] lo speed is unknown, defaulting to 1000 [ 2881.478788][T17968] Q±6ã`Ò˜: renamed from lo (while UP) [ 2881.667191][T17959] Q±6ã`Ò˜ speed is unknown, defaulting to 1000 [ 2881.913772][T17959] xfrm0 speed is unknown, defaulting to 1000 [ 2882.141815][T17983] netlink: 12 bytes leftover after parsing attributes in process `syz.5.21211'. [ 2882.878710][T17993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=17993 comm=syz.5.21211 [ 2884.017603][T18003] 9p: Bad value for 'rfdno' [ 2884.112838][T18003] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2884.897263][T18031] loop2: detected capacity change from 0 to 512 [ 2884.905143][T18031] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 2885.897962][T18038] loop2: detected capacity change from 0 to 4096 [ 2885.939103][T18038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2886.008553][T18038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2886.115043][T18044] 9p: Bad value for 'rfdno' [ 2886.164377][T18044] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2886.681519][T18060] gretap0: entered promiscuous mode [ 2886.710043][T18069] 9p: Bad value for 'rfdno' [ 2886.751249][T18069] syz1: rxe_newlink: already configured on xfrm0 [ 2887.776149][T18088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21241'. [ 2888.049666][T18088] netlink: 15 bytes leftover after parsing attributes in process `syz.1.21241'. [ 2888.088160][T18095] 9p: Bad value for 'rfdno' [ 2888.164937][T18108] syz1: rxe_newlink: already configured on xfrm0 [ 2888.312234][T18111] 9p: Bad value for 'rfdno' [ 2888.344699][T18111] syz1: rxe_newlink: already configured on xfrm0 [ 2890.324653][T18146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.21257'. [ 2890.493672][T18146] netlink: 15 bytes leftover after parsing attributes in process `syz.5.21257'. [ 2890.559231][T18150] 9p: Bad value for 'rfdno' [ 2890.589508][T18150] syz1: rxe_newlink: already configured on xfrm0 [ 2891.668574][T18181] 9p: Bad value for 'rfdno' [ 2891.766505][T18181] syz1: rxe_newlink: already configured on xfrm0 [ 2891.801970][T18192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21275'. [ 2892.059190][T18192] netlink: 15 bytes leftover after parsing attributes in process `syz.2.21275'. [ 2894.446584][T18238] loop2: detected capacity change from 0 to 2048 [ 2894.454397][T18238] EXT4-fs: Ignoring removed orlov option [ 2894.460256][T18238] EXT4-fs: Ignoring removed oldalloc option [ 2894.467621][T18238] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 2894.515120][T18238] 9p: Bad value for 'rfdno' [ 2894.531990][T18238] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2895.950426][T18267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21298'. [ 2896.001528][T18271] Q±6ã`Ò˜ speed is unknown, defaulting to 1000 [ 2896.008325][T18271] Q±6ã`Ò˜ speed is unknown, defaulting to 1000 [ 2896.044764][T18271] xfrm0 speed is unknown, defaulting to 1000 [ 2896.773568][T18267] netlink: 15 bytes leftover after parsing attributes in process `syz.1.21298'. [ 2897.159610][T18310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21310'. [ 2897.279398][T18310] netlink: 15 bytes leftover after parsing attributes in process `syz.2.21310'. [ 2897.650017][T18332] Q±6ã`Ò˜ speed is unknown, defaulting to 1000 [ 2897.657302][T18332] Q±6ã`Ò˜ speed is unknown, defaulting to 1000 [ 2897.664707][T18332] xfrm0 speed is unknown, defaulting to 1000 [ 2898.101902][T18349] syzkaller0: entered promiscuous mode [ 2898.107534][T18349] syzkaller0: entered allmulticast mode [ 2899.183151][T18375] 9p: Bad value for 'rfdno' [ 2899.189382][T18375] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2901.312394][T18426] loop2: detected capacity change from 0 to 2048 [ 2901.333724][T18426] EXT4-fs: Ignoring removed orlov option [ 2901.349963][T18426] EXT4-fs: Ignoring removed oldalloc option [ 2901.376467][T18426] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 2901.481336][T18426] 9p: Bad value for 'rfdno' [ 2901.487896][T18426] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2905.188252][T18502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21369'. [ 2905.317980][T18502] netlink: 15 bytes leftover after parsing attributes in process `syz.2.21369'. [ 2906.970083][T18536] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2907.519654][T18548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21382'. [ 2909.132842][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21389'. [ 2910.220267][T18595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21397'. [ 2910.333625][T18604] 9p: Bad value for 'rfdno' [ 2910.398306][T18610] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2910.652361][T18622] 9p: Bad value for 'rfdno' [ 2910.669242][T18622] syz1: rxe_newlink: already configured on xfrm0 [ 2910.860594][T18621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21405'. [ 2912.387360][T18653] 9p: Bad value for 'rfdno' [ 2912.419045][T18651] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2912.428839][T18653] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2912.581403][T18661] 9p: Bad value for 'rfdno' [ 2912.639330][T18661] syz1: rxe_newlink: already configured on xfrm0 [ 2912.667623][T18646] loop2: detected capacity change from 0 to 512 [ 2912.711595][T18646] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2912.741870][T18646] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 2912.760633][T18646] System zones: 1-12 [ 2912.764899][T18646] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2912.787766][T18646] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.21414: bg 0: block 361: padding at end of block bitmap is not set [ 2912.802895][T18646] loop2: lost filesystem error report for type 5 error -117 [ 2912.810407][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 2912.824781][ C0] EXT4-fs (loop2): initial error at time 2000000297: ext4_validate_block_bitmap:441 [ 2912.830867][T18646] EXT4-fs (loop2): Remounting filesystem read-only [ 2912.834335][ C0] EXT4-fs (loop2): last error at time 2000000297: ext4_validate_block_bitmap:441 [ 2912.870634][T18646] EXT4-fs (loop2): 1 truncate cleaned up [ 2912.882049][T18646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 2913.181200][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 2913.528393][T18685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21425'. [ 2913.729251][T18686] netlink: 15 bytes leftover after parsing attributes in process `syz.2.21425'. [ 2915.160659][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21436'. [ 2915.826757][T18721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21438'. [ 2917.856209][T18771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21452'. [ 2918.894062][T18795] loop2: detected capacity change from 0 to 512 [ 2918.920530][T18795] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2918.965520][T18795] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 2919.000441][T18795] System zones: 1-12 [ 2919.004491][T18795] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2919.040853][T18795] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.21460: bg 0: block 361: padding at end of block bitmap is not set [ 2919.090959][T18813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21465'. [ 2919.110598][T18795] loop2: lost filesystem error report for type 5 error -117 [ 2919.110788][T18795] EXT4-fs (loop2): Remounting filesystem read-only [ 2919.125108][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 2919.125137][ C0] EXT4-fs (loop2): initial error at time 2000000303: ext4_validate_block_bitmap:441 [ 2919.125185][ C0] EXT4-fs (loop2): last error at time 2000000303: ext4_validate_block_bitmap:441 [ 2919.190476][T18795] EXT4-fs (loop2): 1 truncate cleaned up [ 2919.197091][T18795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 2919.392963][T18813] netlink: 15 bytes leftover after parsing attributes in process `syz.4.21465'. [ 2919.445329][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 2919.572064][T18825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21469'. [ 2919.737170][T18835] syzkaller0: entered promiscuous mode [ 2919.743861][T18835] syzkaller0: entered allmulticast mode [ 2919.748820][T18825] netlink: 15 bytes leftover after parsing attributes in process `syz.0.21469'. [ 2920.039991][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21476'. [ 2920.229752][T18851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.21478'. [ 2920.481731][T18851] netlink: 15 bytes leftover after parsing attributes in process `syz.5.21478'. [ 2921.085715][T18870] netlink: 12 bytes leftover after parsing attributes in process `syz.5.21484'. [ 2921.385101][T18871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=18871 comm=syz.5.21484 [ 2921.865449][T18892] syzkaller0: entered promiscuous mode [ 2921.873214][T18892] syzkaller0: entered allmulticast mode [ 2923.051365][T18936] netlink: 12 bytes leftover after parsing attributes in process `syz.5.21508'. [ 2923.088678][T18938] loop2: detected capacity change from 0 to 2048 [ 2923.116115][T18938] EXT4-fs: Ignoring removed orlov option [ 2923.146947][T18938] EXT4-fs: Ignoring removed oldalloc option [ 2923.176931][T18938] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 2923.296053][T18938] 9p: Bad value for 'rfdno' [ 2923.309558][T18936] netlink: 15 bytes leftover after parsing attributes in process `syz.5.21508'. [ 2923.328591][T18946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21512'. [ 2923.375602][T18938] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2923.560589][T18949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=18949 comm=syz.4.21512 [ 2924.194067][T18969] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2924.702116][T18984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21525'. [ 2924.810194][T18984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=18984 comm=syz.2.21525 [ 2924.944979][T18982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21524'. [ 2925.376898][T19010] 9p: Bad value for 'rfdno' [ 2925.397343][T19010] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2925.744181][T19017] syzkaller0: entered promiscuous mode [ 2925.749872][T19017] syzkaller0: entered allmulticast mode [ 2926.089462][T19019] loop2: detected capacity change from 0 to 512 [ 2926.106317][T19019] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2926.134328][T19019] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 2926.143781][T19019] System zones: 1-12 [ 2926.148023][T19019] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2926.155108][T19019] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.21538: bg 0: block 361: padding at end of block bitmap is not set [ 2926.170432][T19019] loop2: lost filesystem error report for type 5 error -117 [ 2926.170749][T19019] EXT4-fs (loop2): Remounting filesystem read-only [ 2926.184896][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 2926.184921][ C1] EXT4-fs (loop2): initial error at time 2000000310: ext4_validate_block_bitmap:441 [ 2926.184953][ C1] EXT4-fs (loop2): last error at time 2000000310: ext4_validate_block_bitmap:441 [ 2926.210953][T19019] EXT4-fs (loop2): 1 truncate cleaned up [ 2926.217621][T19019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 2926.818024][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 2927.105017][T19041] 9p: Bad value for 'rfdno' [ 2927.175656][T19041] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2927.279685][T19057] loop2: detected capacity change from 0 to 512 [ 2927.426401][T19057] loop2: detected capacity change from 0 to 256 [ 2927.737044][T19070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21555'. [ 2928.076825][T19078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21559'. [ 2928.088563][T19070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=19070 comm=syz.1.21555 [ 2928.303946][T19078] netlink: 15 bytes leftover after parsing attributes in process `syz.4.21559'. [ 2928.385423][T19093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21564'. [ 2928.409140][T19091] 9p: Bad value for 'rfdno' [ 2928.457686][T19091] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2928.592267][T19103] netlink: 15 bytes leftover after parsing attributes in process `syz.4.21564'. [ 2928.733652][T19102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21567'. [ 2929.431825][T19115] netlink: 12 bytes leftover after parsing attributes in process `syz.5.21571'. [ 2929.633320][T19115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=19115 comm=syz.5.21571 [ 2929.701356][T19124] netlink: 12 bytes leftover after parsing attributes in process `syz.5.21574'. [ 2929.915568][T19124] netlink: 15 bytes leftover after parsing attributes in process `syz.5.21574'. [ 2930.130162][T19131] 9p: Bad value for 'rfdno' [ 2930.158568][T19131] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2930.206765][T19136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.21578'. [ 2930.707876][T19151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=19151 comm=syz.1.21584 [ 2931.102946][T19165] loop2: detected capacity change from 0 to 512 [ 2931.222508][T19165] loop2: detected capacity change from 0 to 256 [ 2931.388789][T19177] syzkaller0: entered promiscuous mode [ 2931.400127][T19177] syzkaller0: entered allmulticast mode [ 2931.798203][T19184] loop2: detected capacity change from 0 to 512 [ 2931.810200][T19184] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2931.821195][T19184] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 2931.829272][T19184] System zones: 1-12 [ 2931.833732][T19184] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2931.841580][T19184] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.21598: bg 0: block 361: padding at end of block bitmap is not set [ 2931.879886][T19184] loop2: lost filesystem error report for type 5 error -117 [ 2931.880144][T19184] EXT4-fs (loop2): Remounting filesystem read-only [ 2931.887746][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 2931.887772][ C0] EXT4-fs (loop2): initial error at time 2000000316: ext4_validate_block_bitmap:441 [ 2931.887803][ C0] EXT4-fs (loop2): last error at time 2000000316: ext4_validate_block_bitmap:441 [ 2931.927135][T19184] EXT4-fs (loop2): 1 truncate cleaned up [ 2931.934306][T19184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 2932.023647][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 2933.982661][T19231] 9p: Bad value for 'rfdno' [ 2934.056922][T19231] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2934.236806][T19229] loop2: detected capacity change from 0 to 512 [ 2934.244399][T19229] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2934.284862][T19229] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 2934.308168][T19229] System zones: 1-12 [ 2934.317050][T19229] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2934.329794][T19229] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.21613: bg 0: block 361: padding at end of block bitmap is not set [ 2934.344821][T19229] loop2: lost filesystem error report for type 5 error -117 [ 2934.345041][T19229] EXT4-fs (loop2): Remounting filesystem read-only [ 2934.352407][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 2934.352430][ C0] EXT4-fs (loop2): initial error at time 2000000318: ext4_validate_block_bitmap:441 [ 2934.352465][ C0] EXT4-fs (loop2): last error at time 2000000318: ext4_validate_block_bitmap:441 [ 2934.385036][T19229] EXT4-fs (loop2): 1 truncate cleaned up [ 2934.391182][T19229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 2934.749232][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 2934.789034][T19255] syzkaller0: entered promiscuous mode [ 2934.795150][T19255] syzkaller0: entered allmulticast mode [ 2935.253466][T19271] netlink: 'syz.1.21627': attribute type 4 has an invalid length. [ 2935.300445][T29967] page_pool_release_retry() stalled pool shutdown: id 241, 50 inflight 181 sec [ 2935.349349][T29967] Q±6ã`Ò˜ speed is unknown, defaulting to 1000 [ 2935.360112][T29967] syz2: Port: 1 Link DOWN [ 2935.372507][T19258] loop2: detected capacity change from 0 to 512 [ 2935.411788][T19258] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2935.463674][T19258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 2935.493566][T19265] __nla_validate_parse: 7 callbacks suppressed [ 2935.493590][T19265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21625'. [ 2935.510465][T19258] System zones: 1-12 [ 2935.514703][T19258] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2935.521722][T19258] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.21622: bg 0: block 361: padding at end of block bitmap is not set [ 2935.560566][T19258] loop2: lost filesystem error report for type 5 error -117 [ 2935.560787][T19258] EXT4-fs (loop2): Remounting filesystem read-only [ 2935.574709][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 2935.574744][ C1] EXT4-fs (loop2): initial error at time 2000000319: ext4_validate_block_bitmap:441 [ 2935.574765][ C1] EXT4-fs (loop2): last error at time 2000000319: ext4_validate_block_bitmap:441 [ 2935.643931][T19258] EXT4-fs (loop2): 1 truncate cleaned up [ 2935.650101][T19258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 2935.953550][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 2936.675663][T19304] 9p: Bad value for 'rfdno' [ 2936.693597][T19304] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2936.845391][T19309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21640'. [ 2937.139624][T19317] netlink: 83 bytes leftover after parsing attributes in process `syz.1.21640'. [ 2937.478621][T19329] netlink: 'syz.5.21645': attribute type 4 has an invalid length. [ 2937.499670][T19327] netlink: 'syz.1.21647': attribute type 4 has an invalid length. [ 2937.784943][T19341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21650'. [ 2937.972887][T19342] netlink: 15 bytes leftover after parsing attributes in process `syz.0.21650'. [ 2938.605961][T19363] netlink: 'syz.4.21658': attribute type 4 has an invalid length. [ 2939.314910][T19378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.21662'. [ 2939.513650][T19391] loop2: detected capacity change from 0 to 512 [ 2939.528927][T19387] netlink: 'syz.0.21666': attribute type 4 has an invalid length. [ 2939.631506][T19391] loop2: detected capacity change from 0 to 256 [ 2939.631543][T19396] netlink: 15 bytes leftover after parsing attributes in process `syz.5.21662'. [ 2939.724430][T19400] netlink: 'syz.1.21670': attribute type 4 has an invalid length. [ 2940.492976][ T5582] Bluetooth: hci0: Frame reassembly failed (-84) [ 2940.691158][T19437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21681'. [ 2940.904425][T19437] netlink: 15 bytes leftover after parsing attributes in process `syz.4.21681'. [ 2941.957516][T19468] netlink: 'syz.5.21691': attribute type 4 has an invalid length. [ 2942.107278][T19474] tipc: Enabling of bearer rejected, failed to enable media [ 2942.155302][T19478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21694'. [ 2942.208308][T19481] netlink: 'syz.1.21695': attribute type 4 has an invalid length. [ 2942.394196][T19478] netlink: 15 bytes leftover after parsing attributes in process `syz.0.21694'. [ 2942.503117][T19425] Bluetooth: hci0: command 0x1003 tx timeout [ 2942.509509][ T3731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2942.611071][T19496] loop2: detected capacity change from 0 to 512 [ 2942.709993][T19496] loop2: detected capacity change from 0 to 256 [ 2942.927443][T19504] netlink: 'syz.1.21704': attribute type 4 has an invalid length. [ 2944.364280][T19541] loop2: detected capacity change from 0 to 512 [ 2944.385077][T19541] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2944.396361][T19541] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 2944.404764][T19541] System zones: 1-12 [ 2944.409760][T19541] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2944.416813][T19541] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.21717: bg 0: block 361: padding at end of block bitmap is not set [ 2944.432258][T19541] loop2: lost filesystem error report for type 5 error -117 [ 2944.432576][T19541] EXT4-fs (loop2): Remounting filesystem read-only [ 2944.440362][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 2944.440385][ C1] EXT4-fs (loop2): initial error at time 2000000328: ext4_validate_block_bitmap:441 [ 2944.440418][ C1] EXT4-fs (loop2): last error at time 2000000328: ext4_validate_block_bitmap:441 [ 2944.472940][T19541] EXT4-fs (loop2): 1 truncate cleaned up [ 2944.480916][T19541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 2944.640891][T19565] tipc: Enabling of bearer rejected, failed to enable media [ 2944.870028][T19573] 9p: Bad value for 'rfdno' [ 2944.903329][T19573] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2944.958807][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 2945.019646][T19578] syzkaller0: entered promiscuous mode [ 2945.025392][T19578] syzkaller0: entered allmulticast mode [ 2945.141132][T19582] netlink: 'syz.0.21731': attribute type 4 has an invalid length. [ 2945.252768][T19591] 9p: Bad value for 'rfdno' [ 2945.268684][T19591] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2945.308366][T19593] netlink: 'syz.5.21736': attribute type 4 has an invalid length. [ 2945.423285][T19602] netlink: 'syz.0.21739': attribute type 4 has an invalid length. [ 2945.912149][T14430] Bluetooth: hci0: Frame reassembly failed (-84) [ 2946.472876][T19628] 9p: Bad value for 'rfdno' [ 2946.480619][T19628] syz1: rxe_newlink: already configured on xfrm0 [ 2946.609077][T19634] netlink: 'syz.4.21750': attribute type 4 has an invalid length. [ 2947.238460][T19646] netlink: 'syz.1.21754': attribute type 4 has an invalid length. [ 2947.731604][T19666] 9p: Bad value for 'rfdno' [ 2947.737801][T19666] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2948.011859][ T3731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2948.018486][T19425] Bluetooth: hci0: command 0x1003 tx timeout [ 2948.504113][T19678] netlink: 12 bytes leftover after parsing attributes in process `syz.5.21763'. [ 2948.587846][T19678] netlink: 15 bytes leftover after parsing attributes in process `syz.5.21763'. [ 2949.372408][T19700] 9p: Bad value for 'rfdno' [ 2949.378181][T19700] syz1: rxe_newlink: already configured on xfrm0 [ 2949.464744][T19705] netlink: 'syz.4.21773': attribute type 4 has an invalid length. [ 2949.634880][T19702] loop2: detected capacity change from 0 to 512 [ 2949.647174][T19702] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2949.674321][T19702] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 2949.690265][T19702] System zones: 1-12 [ 2949.704662][T19702] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2949.712087][T19702] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.21772: bg 0: block 361: padding at end of block bitmap is not set [ 2949.731225][T19702] loop2: lost filesystem error report for type 5 error -117 [ 2949.731488][T19702] EXT4-fs (loop2): Remounting filesystem read-only [ 2949.745470][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 2949.745493][ C1] EXT4-fs (loop2): initial error at time 2000000333: ext4_validate_block_bitmap:441 [ 2949.745539][ C1] EXT4-fs (loop2): last error at time 2000000333: ext4_validate_block_bitmap:441 [ 2949.787759][T19702] EXT4-fs (loop2): 1 truncate cleaned up [ 2949.794172][T19702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 2950.266682][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 2950.307831][T19724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21778'. [ 2950.505283][T19724] netlink: 15 bytes leftover after parsing attributes in process `syz.2.21778'. [ 2950.693486][T19727] netlink: 'syz.1.21779': attribute type 4 has an invalid length. [ 2950.795084][T19731] netlink: 'syz.2.21781': attribute type 4 has an invalid length. [ 2950.964120][T19741] syzkaller0: entered promiscuous mode [ 2950.969768][T19741] syzkaller0: entered allmulticast mode [ 2952.271685][T19764] loop2: detected capacity change from 0 to 512 [ 2952.350628][T19764] loop2: detected capacity change from 0 to 256 [ 2952.789776][T19770] netlink: 'syz.2.21795': attribute type 4 has an invalid length. [ 2952.794579][T19776] netlink: 'syz.4.21797': attribute type 4 has an invalid length. [ 2952.883662][T19780] netlink: 'syz.0.21798': attribute type 4 has an invalid length. [ 2953.657205][T28793] Bluetooth: hci0: Frame reassembly failed (-84) [ 2954.183882][T19807] netlink: 'syz.1.21808': attribute type 4 has an invalid length. [ 2955.043129][T19819] 9p: Bad value for 'rfdno' [ 2955.049947][T19819] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2955.700673][T19425] Bluetooth: hci0: command 0x1003 tx timeout [ 2955.706876][ T3731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2955.776238][T19837] loop2: detected capacity change from 0 to 512 [ 2955.795162][T19837] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2955.839590][T19837] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 2955.862570][T19837] System zones: 1-12 [ 2955.871126][T19837] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2955.885306][T19837] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.21819: bg 0: block 361: padding at end of block bitmap is not set [ 2955.916673][T19837] loop2: lost filesystem error report for type 5 error -117 [ 2955.916962][T19837] EXT4-fs (loop2): Remounting filesystem read-only [ 2955.924700][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 2955.924781][ C0] EXT4-fs (loop2): initial error at time 2000000340: ext4_validate_block_bitmap:441 [ 2955.924808][ C0] EXT4-fs (loop2): last error at time 2000000340: ext4_validate_block_bitmap:441 [ 2955.971393][T19837] EXT4-fs (loop2): 1 truncate cleaned up [ 2955.977580][T19837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 2956.094374][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 2956.310646][T19847] loop2: detected capacity change from 0 to 2048 [ 2956.327726][T19847] EXT4-fs: Ignoring removed orlov option [ 2956.358116][T19847] EXT4-fs: Ignoring removed oldalloc option [ 2956.378657][T19847] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 2956.417609][T19847] 9p: Bad value for 'rfdno' [ 2956.441090][T19847] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2957.209105][T16908] Bluetooth: hci0: Frame reassembly failed (-84) [ 2957.423173][T19880] netlink: 'syz.5.21835': attribute type 4 has an invalid length. [ 2957.495093][T19882] 9p: Bad value for 'rfdno' [ 2957.501847][T19882] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2957.575249][T19887] netlink: 'syz.0.21838': attribute type 4 has an invalid length. [ 2957.596930][T19885] netlink: 'syz.5.21837': attribute type 4 has an invalid length. [ 2957.834731][T19891] 9p: Bad value for 'rfdno' [ 2957.865452][T19891] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2959.220536][ T3731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2959.226938][T19425] Bluetooth: hci0: command 0x1003 tx timeout [ 2959.302889][T19935] netlink: 'syz.2.21855': attribute type 4 has an invalid length. [ 2959.388995][T19932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21854'. [ 2959.469428][T19940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21857'. [ 2959.531664][T19938] 9p: Bad value for 'rfdno' [ 2959.558317][T19938] syz1: rxe_newlink: already configured on xfrm0 [ 2959.750224][T19940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=19940 comm=syz.2.21857 [ 2961.905219][T19974] loop2: detected capacity change from 0 to 512 [ 2961.912857][T19974] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2961.942193][T19974] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 2961.950190][T19974] System zones: 1-12 [ 2961.967123][T19974] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2961.976822][T19974] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.21865: bg 0: block 361: padding at end of block bitmap is not set [ 2961.992679][T19974] loop2: lost filesystem error report for type 5 error -117 [ 2961.992936][T19974] EXT4-fs (loop2): Remounting filesystem read-only [ 2962.000410][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 2962.000434][ C0] EXT4-fs (loop2): initial error at time 2000000346: ext4_validate_block_bitmap:441 [ 2962.000464][ C0] EXT4-fs (loop2): last error at time 2000000346: ext4_validate_block_bitmap:441 [ 2962.032893][T19974] EXT4-fs (loop2): 1 truncate cleaned up [ 2962.039087][T19974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 2962.111933][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 2962.610807][T20000] netlink: 'syz.2.21876': attribute type 4 has an invalid length. [ 2962.694867][T20006] netlink: 'syz.1.21877': attribute type 4 has an invalid length. [ 2962.899526][T20022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21883'. [ 2962.946930][T20017] 9p: Bad value for 'wfdno' [ 2963.024502][T20017] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2963.112030][T20022] netlink: 83 bytes leftover after parsing attributes in process `syz.1.21883'. [ 2963.393401][T20034] 9p: Bad value for 'rfdno' [ 2963.454698][T20034] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2965.224665][T20068] 9p: Bad value for 'wfdno' [ 2965.231983][T20070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21897'. [ 2965.300912][T20071] syz1: rxe_newlink: already configured on xfrm0 [ 2965.392829][T20070] netlink: 83 bytes leftover after parsing attributes in process `syz.0.21897'. [ 2965.455690][T20079] netlink: 'syz.0.21899': attribute type 4 has an invalid length. [ 2965.794970][T14430] Bluetooth: hci0: Frame reassembly failed (-84) [ 2966.545179][T20101] 9p: Bad value for 'rfdno' [ 2966.582216][T20101] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2966.753202][T20107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21909'. [ 2966.874594][T20110] 9p: Bad value for 'wfdno' [ 2966.941203][T20111] syz1: rxe_newlink: already configured on xfrm0 [ 2967.060037][T20113] netlink: 83 bytes leftover after parsing attributes in process `syz.1.21909'. [ 2967.197456][T20119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21912'. [ 2967.431386][T20119] netlink: 15 bytes leftover after parsing attributes in process `syz.1.21912'. [ 2967.860509][ T3731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2968.141567][T20142] netlink: 'syz.0.21921': attribute type 4 has an invalid length. [ 2969.118644][T20149] 9p: Bad value for 'wfdno' [ 2969.168745][T20151] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2969.335005][T20154] netlink: 12 bytes leftover after parsing attributes in process `syz.5.21924'. [ 2969.590339][T20154] netlink: 15 bytes leftover after parsing attributes in process `syz.5.21924'. [ 2970.462780][T20195] 9p: Bad value for 'wfdno' [ 2970.487153][T20191] syz1: rxe_newlink: already configured on xfrm0 [ 2971.258828][T20216] netlink: 'syz.1.21944': attribute type 4 has an invalid length. [ 2971.508548][T20224] netlink: 'syz.1.21946': attribute type 4 has an invalid length. [ 2972.316285][T20240] netlink: 'syz.1.21952': attribute type 4 has an invalid length. [ 2972.452361][T20245] netlink: 'syz.4.21954': attribute type 4 has an invalid length. [ 2972.672687][T20258] netlink: 'syz.4.21958': attribute type 4 has an invalid length. [ 2973.248706][T16908] Bluetooth: hci0: Frame reassembly failed (-84) [ 2973.735617][T20275] 9p: Bad value for 'rfdno' [ 2973.791396][T20275] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2973.839213][T20280] netlink: 'syz.4.21966': attribute type 4 has an invalid length. [ 2974.076731][T20292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21971'. [ 2974.257839][T20300] netlink: 'syz.1.21973': attribute type 4 has an invalid length. [ 2974.445897][T20292] netlink: 15 bytes leftover after parsing attributes in process `syz.0.21971'. [ 2975.233600][T20312] 9p: Could not find request transport: fd0xffffffffffffffff [ 2975.269551][T20312] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2975.310851][T19425] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2975.319186][ T3731] Bluetooth: hci0: command 0x1003 tx timeout [ 2975.465377][T20322] netlink: 'syz.2.21980': attribute type 4 has an invalid length. [ 2976.246340][T20334] loop2: detected capacity change from 0 to 512 [ 2976.261685][T20334] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2976.273929][T20334] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 2976.289348][T20334] System zones: 1-12 [ 2976.294459][T20334] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2976.302447][T20334] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.21985: bg 0: block 361: padding at end of block bitmap is not set [ 2976.320472][T20334] loop2: lost filesystem error report for type 5 error -117 [ 2976.320943][T20334] EXT4-fs (loop2): Remounting filesystem read-only [ 2976.335350][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 2976.335378][ C0] EXT4-fs (loop2): initial error at time 2000000360: ext4_validate_block_bitmap:441 [ 2976.335402][ C0] EXT4-fs (loop2): last error at time 2000000360: ext4_validate_block_bitmap:441 [ 2976.361999][T20334] EXT4-fs (loop2): 1 truncate cleaned up [ 2976.369182][T20334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 2976.463734][T20345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21987'. [ 2976.501336][T20348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21988'. [ 2976.714316][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 2976.844684][T20345] netlink: 15 bytes leftover after parsing attributes in process `syz.1.21987'. [ 2977.849004][T20382] netlink: 'syz.0.21999': attribute type 4 has an invalid length. [ 2978.318598][T20387] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22001'. [ 2978.857059][T20409] netlink: 'syz.5.22010': attribute type 4 has an invalid length. [ 2979.025522][T20414] 9p: Bad value for 'wfdno' [ 2979.056121][T20414] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2979.308795][T16906] Bluetooth: hci0: Frame reassembly failed (-84) [ 2979.382064][T20421] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22014'. [ 2981.380586][T19425] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2981.382991][ T3731] Bluetooth: hci0: command 0x1003 tx timeout [ 2982.014290][T20456] loop2: detected capacity change from 0 to 512 [ 2982.091902][T20456] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2982.221628][T20456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 2982.240622][T20456] System zones: 1-12 [ 2982.250054][T20456] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2982.276386][T20456] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.22024: bg 0: block 361: padding at end of block bitmap is not set [ 2982.314003][T20456] loop2: lost filesystem error report for type 5 error -117 [ 2982.314330][T20456] EXT4-fs (loop2): Remounting filesystem read-only [ 2982.321925][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 2982.321952][ C0] EXT4-fs (loop2): initial error at time 2000000366: ext4_validate_block_bitmap:441 [ 2982.321980][ C0] EXT4-fs (loop2): last error at time 2000000366: ext4_validate_block_bitmap:441 [ 2982.387515][T20456] EXT4-fs (loop2): 1 truncate cleaned up [ 2982.394188][T20456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 2982.522439][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 2982.593586][T20475] loop2: detected capacity change from 0 to 512 [ 2982.649489][T20475] loop2: detected capacity change from 0 to 256 [ 2982.867048][T20486] loop2: detected capacity change from 0 to 512 [ 2983.059984][T20486] loop2: detected capacity change from 0 to 256 [ 2983.475370][T20507] loop2: detected capacity change from 0 to 256 [ 2983.683858][T20512] loop2: detected capacity change from 0 to 256 [ 2983.987878][T20520] netlink: 'syz.0.22049': attribute type 4 has an invalid length. [ 2984.025229][T20523] loop2: detected capacity change from 0 to 512 [ 2984.082134][T20523] loop2: detected capacity change from 0 to 256 [ 2985.225006][T20555] netlink: 'syz.5.22061': attribute type 4 has an invalid length. [ 2986.262443][T20573] loop2: detected capacity change from 0 to 512 [ 2986.269836][T20573] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2986.291146][T20573] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 2986.310154][T20573] System zones: 1-12 [ 2986.360661][T20573] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2986.388346][T20573] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.22066: bg 0: block 361: padding at end of block bitmap is not set [ 2986.454729][T20573] loop2: lost filesystem error report for type 5 error -117 [ 2986.455009][T20573] EXT4-fs (loop2): Remounting filesystem read-only [ 2986.462516][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 2986.462541][ C1] EXT4-fs (loop2): initial error at time 2000000370: ext4_validate_block_bitmap:441 [ 2986.462591][ C1] EXT4-fs (loop2): last error at time 2000000370: ext4_validate_block_bitmap:441 [ 2986.540592][T20573] EXT4-fs (loop2): 1 truncate cleaned up [ 2986.547318][T20573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 2986.678645][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 2987.654893][T20604] netlink: 'syz.4.22076': attribute type 4 has an invalid length. [ 2987.894400][T20591] loop2: detected capacity change from 0 to 512 [ 2988.020262][T20591] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2988.171269][T20591] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 2988.246072][T20591] System zones: 1-12 [ 2988.250268][T20591] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2988.268243][T20591] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.22071: bg 0: block 361: padding at end of block bitmap is not set [ 2988.309410][T20591] loop2: lost filesystem error report for type 5 error -117 [ 2988.309685][T20591] EXT4-fs (loop2): Remounting filesystem read-only [ 2988.317164][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 2988.317187][ C0] EXT4-fs (loop2): initial error at time 2000000372: ext4_validate_block_bitmap:441 [ 2988.317212][ C0] EXT4-fs (loop2): last error at time 2000000372: ext4_validate_block_bitmap:441 [ 2988.371061][T20591] EXT4-fs (loop2): 1 truncate cleaned up [ 2988.385914][T20591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 2988.556411][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 2988.592816][T20633] loop2: detected capacity change from 0 to 512 [ 2988.680568][T20633] loop2: detected capacity change from 0 to 256 [ 2988.912179][T20638] loop2: detected capacity change from 0 to 512 [ 2988.919470][T20638] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2988.930870][T20638] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 2988.938880][T20638] System zones: 1-12 [ 2988.943339][T20638] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2988.950133][T20638] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.22090: bg 0: block 361: padding at end of block bitmap is not set [ 2988.965291][T20638] loop2: lost filesystem error report for type 5 error -117 [ 2988.967340][T20638] EXT4-fs (loop2): Remounting filesystem read-only [ 2988.980390][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 2988.982607][T20638] EXT4-fs (loop2): 1 truncate cleaned up [ 2988.988255][ C0] EXT4-fs (loop2): initial error at time 2000000373: ext4_validate_block_bitmap:441 [ 2988.996390][T20638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 2989.004236][ C0] EXT4-fs (loop2): last error at time 2000000373: ext4_validate_block_bitmap:441 [ 2989.058059][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 2989.209954][T20650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22094'. [ 2989.255963][T20654] netlink: 'syz.4.22095': attribute type 4 has an invalid length. [ 2989.384187][T20659] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2989.454704][T20661] 9p: Bad value for 'wfdno' [ 2989.467026][T20661] syz1: rxe_newlink: already configured on xfrm0 [ 2989.635741][T20670] netlink: 'syz.5.22103': attribute type 4 has an invalid length. [ 2989.718973][T20675] netlink: 15 bytes leftover after parsing attributes in process `syz.0.22101'. [ 2989.851286][T23558] Bluetooth: hci0: Frame reassembly failed (-84) [ 2989.867538][T23558] Bluetooth: hci0: Frame reassembly failed (-84) [ 2990.404369][T20691] 9p: Bad value for 'rfdno' [ 2990.779330][T20698] netlink: 'syz.4.22113': attribute type 4 has an invalid length. [ 2990.847353][T20704] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2990.907449][T20706] netlink: 'syz.5.22117': attribute type 4 has an invalid length. [ 2991.175389][T20719] 9p: Bad value for 'rfdno' [ 2991.298291][T20725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22123'. [ 2991.373501][T20725] netlink: 15 bytes leftover after parsing attributes in process `syz.1.22123'. [ 2991.860497][T19425] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2991.867266][ T3731] Bluetooth: hci0: command 0x1003 tx timeout [ 2992.616597][T20745] netlink: 'syz.5.22130': attribute type 4 has an invalid length. [ 2992.885319][T20748] netlink: 'syz.0.22131': attribute type 4 has an invalid length. [ 2993.559748][T20757] bridge_slave_0: left allmulticast mode [ 2993.570416][T20757] bridge_slave_0: left promiscuous mode [ 2993.580858][T20757] bridge0: port 1(bridge_slave_0) entered disabled state [ 2993.597418][T20757] bridge_slave_1: left allmulticast mode [ 2993.610515][T20757] bridge_slave_1: left promiscuous mode [ 2993.616351][T20757] bridge0: port 2(bridge_slave_1) entered disabled state [ 2993.671574][T20754] 9p: Bad value for 'rfdno' [ 2993.731051][T20757] bond0: (slave bond_slave_0): Releasing backup interface [ 2993.744913][T20757] bond0: (slave bond_slave_1): Releasing backup interface [ 2993.762226][T20757] team0: Port device team_slave_0 removed [ 2993.772831][T20757] team0: Port device team_slave_1 removed [ 2993.779163][T20757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2993.792531][T20757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2993.801892][T20757] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2995.484280][T20802] netlink: 'syz.1.22148': attribute type 4 has an invalid length. [ 2995.527017][T20799] 9p: Bad value for 'rfdno' [ 2995.860946][T14754] page_pool_release_retry() stalled pool shutdown: id 241, 50 inflight 241 sec [ 2996.525089][T20831] netlink: 'syz.1.22158': attribute type 39 has an invalid length. [ 2996.700886][T20838] 9p: Bad value for 'rfdno' [ 2996.744349][T20841] syzkaller0: entered promiscuous mode [ 2996.750251][T20841] syzkaller0: entered allmulticast mode [ 2997.498223][T20865] netlink: 'syz.0.22171': attribute type 4 has an invalid length. [ 2997.679838][T20873] 9p: Bad value for 'wfdno' [ 2997.698381][T20876] netlink: 'syz.0.22175': attribute type 4 has an invalid length. [ 2997.726690][T20873] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 2998.731166][T20896] loop2: detected capacity change from 0 to 512 [ 2998.846712][T20896] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2998.944448][T20896] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 2999.005149][T20896] System zones: 1-12 [ 2999.009364][T20896] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2999.042012][T20896] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.22183: bg 0: block 361: padding at end of block bitmap is not set [ 2999.110559][T20896] loop2: lost filesystem error report for type 5 error -117 [ 2999.113431][T20896] EXT4-fs (loop2): Remounting filesystem read-only [ 2999.121006][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 2999.121030][ C0] EXT4-fs (loop2): initial error at time 2000000383: ext4_validate_block_bitmap:441 [ 2999.121058][ C0] EXT4-fs (loop2): last error at time 2000000383: ext4_validate_block_bitmap:441 [ 2999.159153][T20907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22185'. [ 2999.190737][T20896] EXT4-fs (loop2): 1 truncate cleaned up [ 2999.205155][T20896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 2999.321698][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 2999.437277][T20916] loop2: detected capacity change from 0 to 2048 [ 2999.460157][T20916] EXT4-fs: Ignoring removed orlov option [ 2999.490488][T20916] EXT4-fs: Ignoring removed oldalloc option [ 2999.531844][T20916] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 2999.533473][T20907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20907 comm=syz.0.22185 [ 2999.741072][T20916] 9p: Bad value for 'wfdno' [ 2999.822980][T20916] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3000.629932][T20948] netlink: 'syz.0.22200': attribute type 4 has an invalid length. [ 3000.644297][T16908] Bluetooth: hci0: Frame reassembly failed (-84) [ 3001.056669][T20964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22205'. [ 3001.261357][T20965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20965 comm=syz.4.22205 [ 3001.919905][T20983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22210'. [ 3002.665089][ T3731] Bluetooth: hci0: command 0x1003 tx timeout [ 3002.730464][T19425] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3002.932848][T20997] netlink: 'syz.1.22215': attribute type 39 has an invalid length. [ 3002.935283][T21000] loop2: detected capacity change from 0 to 2048 [ 3002.960921][T21000] EXT4-fs: Ignoring removed orlov option [ 3002.966680][T21000] EXT4-fs: Ignoring removed oldalloc option [ 3003.024182][T21000] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 3003.191817][T21000] 9p: Bad value for 'wfdno' [ 3003.251954][T20999] netlink: 15 bytes leftover after parsing attributes in process `syz.4.22217'. [ 3003.281247][T21004] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3003.736417][T21018] netlink: 'syz.0.22222': attribute type 4 has an invalid length. [ 3003.902184][T21020] netlink: 'syz.0.22223': attribute type 4 has an invalid length. [ 3004.076218][T21028] netlink: 'syz.0.22226': attribute type 4 has an invalid length. [ 3005.859013][T21039] netlink: 15 bytes leftover after parsing attributes in process `syz.2.22231'. [ 3007.068846][T21068] netlink: 'syz.5.22237': attribute type 39 has an invalid length. [ 3007.079938][T21071] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3007.104839][T21071] netlink: 'syz.2.22241': attribute type 39 has an invalid length. [ 3007.165587][T21074] netlink: 52 bytes leftover after parsing attributes in process `syz.1.22240'. [ 3007.206638][T21071] hsr_slave_1 (unregistering): left promiscuous mode [ 3007.294223][T21073] netlink: 'syz.5.22242': attribute type 4 has an invalid length. [ 3007.634886][T21083] syzkaller0: entered promiscuous mode [ 3007.640527][T21083] syzkaller0: entered allmulticast mode [ 3007.688982][T21081] netlink: 'syz.4.22239': attribute type 4 has an invalid length. [ 3008.062019][T21102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22247'. [ 3009.146723][T21120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22257'. [ 3009.424903][T14432] Bluetooth: hci0: Frame reassembly failed (-84) [ 3009.501502][T21132] 9p: Bad value for 'rfdno' [ 3009.521174][T21132] syz1: rxe_newlink: already configured on xfrm0 [ 3009.584654][T21135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22262'. [ 3009.895515][T21135] netlink: 83 bytes leftover after parsing attributes in process `syz.4.22262'. [ 3010.982323][T21155] netlink: 'syz.5.22268': attribute type 39 has an invalid length. [ 3011.607595][T21169] netlink: 52 bytes leftover after parsing attributes in process `syz.4.22270'. [ 3011.620406][ T3731] Bluetooth: hci0: command 0x1003 tx timeout [ 3011.626729][T19425] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3011.659107][T21164] netlink: 'syz.5.22271': attribute type 4 has an invalid length. [ 3011.766896][T21173] loop2: detected capacity change from 0 to 2048 [ 3011.779337][T21173] EXT4-fs: Ignoring removed orlov option [ 3011.797909][T21173] EXT4-fs: Ignoring removed oldalloc option [ 3011.812883][T21173] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 3011.839382][T21173] 9p: Bad value for 'rfdno' [ 3011.844890][T21173] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3011.951706][T21182] 9p: Bad value for 'rfdno' [ 3012.211734][T21195] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 3012.229790][T21195] netlink: 'syz.4.22281': attribute type 39 has an invalid length. [ 3012.357204][T21189] loop2: detected capacity change from 0 to 512 [ 3012.366359][T21189] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 3012.468165][T21189] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 3012.497258][T21189] System zones: 1-12 [ 3012.509599][T21189] EXT4-fs (loop2): orphan cleanup on readonly fs [ 3012.519120][T21189] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.22278: bg 0: block 361: padding at end of block bitmap is not set [ 3012.536229][T21189] loop2: lost filesystem error report for type 5 error -117 [ 3012.537078][T21189] EXT4-fs (loop2): Remounting filesystem read-only [ 3012.544481][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 3012.544497][ C0] EXT4-fs (loop2): initial error at time 2000000396: ext4_validate_block_bitmap:441 [ 3012.544518][ C0] EXT4-fs (loop2): last error at time 2000000396: ext4_validate_block_bitmap:441 [ 3012.578248][T21189] EXT4-fs (loop2): 1 truncate cleaned up [ 3012.585515][T21189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 3012.831664][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 3012.858851][T21204] 9p: Bad value for 'rfdno' [ 3012.899783][T21204] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3012.983314][T21208] loop2: detected capacity change from 0 to 2048 [ 3012.992652][T21208] EXT4-fs: Ignoring removed orlov option [ 3013.005298][T21208] EXT4-fs: Ignoring removed oldalloc option [ 3013.016251][T21208] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 3013.138464][T21208] 9p: Bad value for 'rfdno' [ 3013.367407][T21223] loop2: detected capacity change from 0 to 2048 [ 3013.537608][T21223] EXT4-fs: Ignoring removed orlov option [ 3014.116918][T21223] EXT4-fs: Ignoring removed oldalloc option [ 3014.130851][T21223] ext4: Unknown parameter 'min_batch_t' [ 3014.247725][T21223] 9p: Bad value for 'rfdno' [ 3015.231501][T21253] loop2: detected capacity change from 0 to 512 [ 3015.296898][T21253] loop2: detected capacity change from 0 to 256 [ 3015.323468][T21256] 9p: Bad value for 'rfdno' [ 3015.339553][T21259] netlink: 'syz.0.22301': attribute type 4 has an invalid length. [ 3015.488887][T21263] 9p: Bad value for 'rfdno' [ 3015.525479][T21267] netlink: 'syz.0.22304': attribute type 4 has an invalid length. [ 3015.525490][T21263] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3015.527080][T21265] netlink: 'syz.2.22303': attribute type 4 has an invalid length. [ 3015.563481][T21269] netlink: 'syz.4.22305': attribute type 4 has an invalid length. [ 3015.873887][T21275] netlink: 15 bytes leftover after parsing attributes in process `syz.1.22307'. [ 3016.370707][T16908] Bluetooth: hci0: Frame reassembly failed (-84) [ 3016.756663][T21302] netlink: 'syz.0.22314': attribute type 4 has an invalid length. [ 3017.526685][T21318] 9p: Bad value for 'rfdno' [ 3017.569368][T21318] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3018.460462][T19425] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3018.681061][T21340] netlink: 'syz.0.22327': attribute type 4 has an invalid length. [ 3018.733409][T21342] syzkaller0: entered promiscuous mode [ 3018.751655][T21342] syzkaller0: entered allmulticast mode [ 3018.816465][T21347] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.22330'. [ 3019.006966][T21355] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.22332'. [ 3019.050965][T21358] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3019.485226][T21364] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 3019.502923][T21364] netlink: 'syz.4.22335': attribute type 39 has an invalid length. [ 3019.521384][T21358] netlink: 'syz.2.22334': attribute type 39 has an invalid length. [ 3020.361753][ T5582] Bluetooth: hci0: Frame reassembly failed (-84) [ 3020.415535][ T5582] Bluetooth: hci0: Frame reassembly failed (-84) [ 3020.571745][T21372] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22339'. [ 3021.018754][T21397] netlink: 'syz.1.22346': attribute type 4 has an invalid length. [ 3022.250670][T21418] netlink: 'syz.1.22352': attribute type 39 has an invalid length. [ 3022.340687][ T3731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3022.810060][T21428] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3022.841297][T21426] netlink: 'syz.4.22355': attribute type 4 has an invalid length. [ 3022.853437][T21428] netlink: 'syz.2.22356': attribute type 39 has an invalid length. [ 3023.001902][T21438] netlink: 'syz.0.22360': attribute type 4 has an invalid length. [ 3023.677019][T21449] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3023.805450][T21449] netlink: 'syz.0.22364': attribute type 39 has an invalid length. [ 3023.841288][T21453] netlink: 'syz.1.22365': attribute type 4 has an invalid length. [ 3023.869806][T21452] netlink: 'syz.5.22366': attribute type 4 has an invalid length. [ 3023.890501][T21456] loop2: detected capacity change from 0 to 512 [ 3023.958332][T21458] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.22368'. [ 3024.003975][T21456] loop2: detected capacity change from 0 to 256 [ 3024.778149][T21472] loop2: detected capacity change from 0 to 512 [ 3024.786855][T21468] netlink: 'syz.5.22371': attribute type 4 has an invalid length. [ 3024.845673][T21475] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.22374'. [ 3025.051108][T21485] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3025.093396][T21485] netlink: 'syz.2.22378': attribute type 39 has an invalid length. [ 3025.230423][T21493] loop2: detected capacity change from 0 to 2048 [ 3025.247746][T21493] EXT4-fs: Ignoring removed orlov option [ 3025.266647][T21493] EXT4-fs: Ignoring removed oldalloc option [ 3025.292777][T21493] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 3025.413926][T21493] 9p: Bad value for 'rfdno' [ 3025.439269][T21493] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3027.357734][T21547] netlink: 'syz.1.22397': attribute type 4 has an invalid length. [ 3027.884926][T21562] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22403'. [ 3029.424831][T21585] netlink: 'syz.1.22410': attribute type 4 has an invalid length. [ 3029.564519][T21588] netlink: 'syz.2.22411': attribute type 4 has an invalid length. [ 3030.310138][T21612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22418'. [ 3030.517695][T21619] netlink: 'syz.4.22421': attribute type 4 has an invalid length. [ 3030.796024][T21632] netlink: 52 bytes leftover after parsing attributes in process `syz.0.22423'. [ 3032.920482][T21664] loop2: detected capacity change from 0 to 512 [ 3032.939079][T21664] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 3032.957251][T21664] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 3032.965472][T21664] System zones: 1-12 [ 3032.969518][T21664] EXT4-fs (loop2): orphan cleanup on readonly fs [ 3032.976621][T21664] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.22437: bg 0: block 361: padding at end of block bitmap is not set [ 3032.991486][T21664] loop2: lost filesystem error report for type 5 error -117 [ 3032.991772][T21664] EXT4-fs (loop2): Remounting filesystem read-only [ 3033.005648][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 3033.005666][ C0] EXT4-fs (loop2): initial error at time 2000000417: ext4_validate_block_bitmap:441 [ 3033.005692][ C0] EXT4-fs (loop2): last error at time 2000000417: ext4_validate_block_bitmap:441 [ 3033.031872][T21664] EXT4-fs (loop2): 1 truncate cleaned up [ 3033.037984][T21664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 3033.088197][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 3033.190013][T21678] netlink: 'syz.2.22441': attribute type 4 has an invalid length. [ 3033.300061][T21682] 9p: Bad value for 'rfdno' [ 3033.316864][T21682] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3033.359193][T21684] loop2: detected capacity change from 0 to 512 [ 3033.456161][T21684] loop2: detected capacity change from 0 to 256 [ 3034.357755][T21714] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3034.384407][T21714] netlink: 'syz.0.22454': attribute type 39 has an invalid length. [ 3034.853548][T21730] loop2: detected capacity change from 0 to 512 [ 3034.934071][T21730] loop2: detected capacity change from 0 to 256 [ 3035.416982][T21741] 9p: Bad value for 'rfdno' [ 3035.455196][T21741] syz1: rxe_newlink: already configured on xfrm0 [ 3035.638795][T21746] 9p: Bad value for 'rfdno' [ 3035.660928][T21746] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3035.764771][T21754] netlink: 'syz.0.22467': attribute type 4 has an invalid length. [ 3036.644451][T21773] netlink: 'syz.4.22473': attribute type 4 has an invalid length. [ 3037.211560][T21789] 9p: Bad value for 'rfdno' [ 3037.235616][T21789] syz1: rxe_newlink: already configured on xfrm0 [ 3037.726147][T21805] 9p: Bad value for 'rfdno' [ 3037.778574][T21805] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3038.603883][T21825] 9p: Bad value for 'rfdno' [ 3038.640799][T21825] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3039.462355][T21851] netlink: 'syz.1.22502': attribute type 4 has an invalid length. [ 3039.771320][T21860] netlink: 'syz.2.22506': attribute type 4 has an invalid length. [ 3040.277286][T21868] 9p: Bad value for 'rfdno' [ 3040.387765][T21868] syz1: rxe_newlink: already configured on xfrm0 [ 3040.535030][T16908] Bluetooth: hci0: Frame reassembly failed (-84) [ 3040.980904][T21898] netlink: 'syz.1.22520': attribute type 4 has an invalid length. [ 3041.079102][T21903] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3041.099090][T21903] netlink: 'syz.0.22522': attribute type 39 has an invalid length. [ 3041.205265][T21909] netlink: 'syz.0.22525': attribute type 4 has an invalid length. [ 3042.376358][T21938] netlink: 'syz.4.22535': attribute type 4 has an invalid length. [ 3042.580464][T19425] Bluetooth: hci0: command 0x1003 tx timeout [ 3042.585411][ T3731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3044.250658][T14432] Bluetooth: hci0: Frame reassembly failed (-84) [ 3045.383116][T22008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22558'. [ 3045.525613][T22008] netlink: 15 bytes leftover after parsing attributes in process `syz.4.22558'. [ 3045.547585][T22012] netlink: 116376 bytes leftover after parsing attributes in process `syz.5.22559'. [ 3046.028913][T22024] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.22563'. [ 3046.199026][T22030] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3046.221998][T22030] netlink: 'syz.0.22566': attribute type 39 has an invalid length. [ 3046.260439][ T3731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3046.544296][T22043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22571'. [ 3046.771173][T22047] netlink: 15 bytes leftover after parsing attributes in process `syz.5.22571'. [ 3047.071981][T22065] netlink: 'syz.5.22578': attribute type 39 has an invalid length. [ 3047.447388][T22081] netlink: 'syz.1.22584': attribute type 4 has an invalid length. [ 3047.790070][T22104] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 3047.807872][T22104] netlink: 'syz.4.22593': attribute type 39 has an invalid length. [ 3049.381835][T19425] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3049.384356][ T3731] Bluetooth: hci0: command 0x1003 tx timeout [ 3049.522119][T22143] syzkaller0: entered promiscuous mode [ 3049.539014][T22143] syzkaller0: entered allmulticast mode [ 3050.002887][T16908] Bluetooth: hci0: Frame reassembly failed (-84) [ 3050.028113][T22167] netlink: 'syz.1.22614': attribute type 4 has an invalid length. [ 3050.068795][T22168] netlink: 'syz.0.22615': attribute type 4 has an invalid length. [ 3050.146820][T22171] netlink: 'syz.1.22617': attribute type 39 has an invalid length. [ 3050.663394][T22181] netlink: 'syz.5.22620': attribute type 4 has an invalid length. [ 3050.889741][T22188] 9p: Bad value for 'rfdno' [ 3050.905878][T22188] syz1: rxe_newlink: already configured on xfrm0 [ 3051.105928][T22197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22626'. [ 3051.311310][T22205] netlink: 15 bytes leftover after parsing attributes in process `syz.0.22626'. [ 3051.561154][T22209] netlink: 'syz.1.22628': attribute type 4 has an invalid length. [ 3052.020479][T19425] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3052.089887][T22238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22640'. [ 3052.248434][T14432] Bluetooth: hci0: Frame reassembly failed (-84) [ 3052.256651][T22238] netlink: 15 bytes leftover after parsing attributes in process `syz.4.22640'. [ 3053.680929][T22273] 9p: Bad value for 'rfdno' [ 3053.769041][T22273] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3053.788356][T22275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22651'. [ 3053.969569][T22275] netlink: 15 bytes leftover after parsing attributes in process `syz.0.22651'. [ 3054.047815][T22284] netlink: 'syz.1.22654': attribute type 4 has an invalid length. [ 3054.161532][T22288] netlink: 'syz.1.22656': attribute type 39 has an invalid length. [ 3054.260398][ T3731] Bluetooth: hci0: command 0x1003 tx timeout [ 3054.260413][T19425] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3054.369480][T14430] Bluetooth: hci0: Frame reassembly failed (-84) [ 3055.053007][T22306] 9p: Bad value for 'rfdno' [ 3055.096549][T22306] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3055.423970][T22320] 9p: Bad value for 'rfdno' [ 3055.430135][T22320] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3055.691463][T22329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22669'. [ 3056.100623][T29967] page_pool_release_retry() stalled pool shutdown: id 241, 50 inflight 301 sec [ 3056.420443][ T3731] Bluetooth: hci0: command 0x1003 tx timeout [ 3056.445141][T19425] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3056.673907][T22353] netlink: 'syz.1.22675': attribute type 4 has an invalid length. [ 3056.736629][T22359] netlink: 'syz.5.22678': attribute type 4 has an invalid length. [ 3058.915107][T22413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22692'. [ 3058.977345][T22413] netlink: 15 bytes leftover after parsing attributes in process `syz.5.22692'. [ 3059.390548][T22423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22696'. [ 3059.423749][T22423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22696'. [ 3059.435792][T22425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22697'. [ 3059.447811][T22423] sctp: [Deprecated]: syz.2.22696 (pid 22423) Use of int in max_burst socket option. [ 3059.447811][T22423] Use struct sctp_assoc_value instead [ 3059.581357][T22430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22699'. [ 3059.642726][T22430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22699'. [ 3059.718582][T22430] sctp: [Deprecated]: syz.1.22699 (pid 22430) Use of int in max_burst socket option. [ 3059.718582][T22430] Use struct sctp_assoc_value instead [ 3060.873806][T16906] Bluetooth: hci0: Frame reassembly failed (-84) [ 3062.886238][T22490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22715'. [ 3062.900638][ T3731] Bluetooth: hci0: command 0x1003 tx timeout [ 3062.910380][T19425] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3063.459666][T16908] Bluetooth: hci0: Frame reassembly failed (-84) [ 3064.813188][T22549] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.22731'. [ 3064.875259][T22551] 9p: Bad value for 'rfdno' [ 3064.881278][T22551] syz1: rxe_newlink: already configured on xfrm0 [ 3064.940057][T22554] sctp: [Deprecated]: syz.4.22733 (pid 22554) Use of int in max_burst socket option. [ 3064.940057][T22554] Use struct sctp_assoc_value instead [ 3065.339244][T22567] netlink: 'syz.5.22738': attribute type 39 has an invalid length. [ 3065.385073][T22572] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.22739'. [ 3065.462485][ T3731] Bluetooth: hci0: command 0x1003 tx timeout [ 3065.468846][T19425] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3065.627039][T22585] loop2: detected capacity change from 0 to 2048 [ 3065.635223][T22585] EXT4-fs: Ignoring removed orlov option [ 3065.641470][T22585] EXT4-fs: Ignoring removed oldalloc option [ 3065.652772][T22585] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 3065.675281][T22585] 9p: Bad value for 'rfdno' [ 3065.681979][T22585] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3065.902764][T16906] Bluetooth: hci0: Frame reassembly failed (-84) [ 3066.161435][T22593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22747'. [ 3067.578606][T22620] 9p: Bad value for 'rfdno' [ 3067.592648][T22620] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3067.739997][T22627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22758'. [ 3067.940491][ T3731] Bluetooth: hci0: command 0x1003 tx timeout [ 3067.946794][T19425] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3068.546811][T22645] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22763'. [ 3068.582627][T22645] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22763'. [ 3068.632202][T22645] sctp: [Deprecated]: syz.5.22763 (pid 22645) Use of int in max_burst socket option. [ 3068.632202][T22645] Use struct sctp_assoc_value instead [ 3068.831121][T22652] netlink: 'syz.5.22765': attribute type 39 has an invalid length. [ 3068.898341][T22656] netlink: 'syz.5.22766': attribute type 39 has an invalid length. [ 3068.999717][T22662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22767'. [ 3069.030267][T22662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22767'. [ 3069.087805][T22662] sctp: [Deprecated]: syz.1.22767 (pid 22662) Use of int in max_burst socket option. [ 3069.087805][T22662] Use struct sctp_assoc_value instead [ 3069.097970][T22658] loop2: detected capacity change from 0 to 764 [ 3070.842861][T22699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22782'. [ 3071.176971][T14432] Bluetooth: hci0: Frame reassembly failed (-84) [ 3072.921798][T22743] 9p: Bad value for 'rfdno' [ 3072.938213][T22743] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3073.050147][T22748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22795'. [ 3073.061546][T22748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22795'. [ 3073.074144][T22748] sctp: [Deprecated]: syz.0.22795 (pid 22748) Use of int in max_burst socket option. [ 3073.074144][T22748] Use struct sctp_assoc_value instead [ 3073.220522][ T3731] Bluetooth: hci0: command 0x1003 tx timeout [ 3073.221322][T19425] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3074.696042][T22784] 9p: Bad value for 'rfdno' [ 3074.731541][T22784] syz1: rxe_newlink: already configured on xfrm0 [ 3074.771444][T22786] batadv1: left allmulticast mode [ 3074.794962][T22786] batadv1: left promiscuous mode [ 3074.812816][T22786] bridge0: port 3(batadv1) entered disabled state [ 3075.018889][T22801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.22812'. [ 3075.113083][T16906] Bluetooth: hci0: Frame reassembly failed (-84) [ 3075.357486][T22817] netlink: 'syz.4.22817': attribute type 39 has an invalid length. [ 3075.940039][T22831] netlink: 'syz.1.22821': attribute type 39 has an invalid length. [ 3076.434316][T22845] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22826'. [ 3076.447999][T22845] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22826'. [ 3076.463966][T22845] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22826'. [ 3076.918049][T22866] 9p: Bad value for 'rfdno' [ 3076.943067][T22866] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3077.141000][T19425] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3077.142276][ T3731] Bluetooth: hci0: command 0x1003 tx timeout [ 3077.395504][T22885] loop2: detected capacity change from 0 to 764 [ 3077.638501][T22898] 9p: Bad value for 'rfdno' [ 3077.672674][T22898] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3078.437473][T22924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22853'. [ 3078.591620][T22924] netlink: 15 bytes leftover after parsing attributes in process `syz.0.22853'. [ 3078.675100][T22922] loop2: detected capacity change from 0 to 512 [ 3078.699145][T22922] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 3078.729047][T22922] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 3078.748756][T22935] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22856'. [ 3078.780380][T22922] System zones: 1-12 [ 3078.785091][T22922] EXT4-fs (loop2): orphan cleanup on readonly fs [ 3078.793981][T22935] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22856'. [ 3078.811360][T22922] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.22852: bg 0: block 361: padding at end of block bitmap is not set [ 3078.839654][T22935] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22856'. [ 3078.861033][T22922] loop2: lost filesystem error report for type 5 error -117 [ 3078.861371][T22922] EXT4-fs (loop2): Remounting filesystem read-only [ 3078.871073][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 3078.871092][ C0] EXT4-fs (loop2): initial error at time 2000000463: ext4_validate_block_bitmap:441 [ 3078.871114][ C0] EXT4-fs (loop2): last error at time 2000000463: ext4_validate_block_bitmap:441 [ 3078.971468][T22922] EXT4-fs (loop2): 1 truncate cleaned up [ 3078.977885][T22922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 3079.131524][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 3079.295575][T22945] loop2: detected capacity change from 0 to 764 [ 3079.450130][T22949] syzkaller0: entered promiscuous mode [ 3079.460491][T22949] syzkaller0: entered allmulticast mode [ 3079.654309][T22958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22863'. [ 3079.675024][T22958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22863'. [ 3079.728016][T22956] sctp: [Deprecated]: syz.2.22863 (pid 22956) Use of int in max_burst socket option. [ 3079.728016][T22956] Use struct sctp_assoc_value instead [ 3079.806046][T22964] syzkaller0: entered promiscuous mode [ 3079.811776][T22964] syzkaller0: entered allmulticast mode [ 3079.991270][T22973] loop2: detected capacity change from 0 to 2048 [ 3080.009507][T22973] EXT4-fs: Ignoring removed orlov option [ 3080.024513][T22973] EXT4-fs: Ignoring removed oldalloc option [ 3080.033448][T22973] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 3080.071109][T22973] 9p: Bad value for 'rfdno' [ 3080.083230][T22973] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3080.347439][T22986] loop2: detected capacity change from 0 to 512 [ 3080.377948][T22986] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 3080.412497][T22986] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 3080.435597][T22986] System zones: 1-12 [ 3080.439755][T22986] EXT4-fs (loop2): orphan cleanup on readonly fs [ 3080.447225][T22986] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.22870: bg 0: block 361: padding at end of block bitmap is not set [ 3080.462308][T22986] loop2: lost filesystem error report for type 5 error -117 [ 3080.462508][T22986] EXT4-fs (loop2): Remounting filesystem read-only [ 3080.476590][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 3080.476619][ C0] EXT4-fs (loop2): initial error at time 2000000464: ext4_validate_block_bitmap:441 [ 3080.476648][ C0] EXT4-fs (loop2): last error at time 2000000464: ext4_validate_block_bitmap:441 [ 3080.503407][T22986] EXT4-fs (loop2): 1 truncate cleaned up [ 3080.510956][T22986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 3080.635660][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 3080.704919][T23002] netlink: 'syz.4.22876': attribute type 39 has an invalid length. [ 3080.894293][T22999] loop2: detected capacity change from 0 to 512 [ 3080.920842][T22999] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 3080.940368][T22999] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 3080.948538][T22999] System zones: 1-12 [ 3080.953144][T22999] EXT4-fs (loop2): orphan cleanup on readonly fs [ 3080.960401][T22999] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.22875: bg 0: block 361: padding at end of block bitmap is not set [ 3080.975338][T22999] loop2: lost filesystem error report for type 5 error -117 [ 3080.975688][T22999] EXT4-fs (loop2): Remounting filesystem read-only [ 3080.983347][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 3080.983379][ C1] EXT4-fs (loop2): initial error at time 2000000465: ext4_validate_block_bitmap:441 [ 3080.983411][ C1] EXT4-fs (loop2): last error at time 2000000465: ext4_validate_block_bitmap:441 [ 3081.019264][T22999] EXT4-fs (loop2): 1 truncate cleaned up [ 3081.027202][T22999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 3081.074567][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 3081.111044][T23017] loop2: detected capacity change from 0 to 2048 [ 3081.122815][T23017] EXT4-fs: Ignoring removed orlov option [ 3081.130105][T23017] EXT4-fs: Ignoring removed oldalloc option [ 3081.140926][T23017] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 3081.168621][T23017] 9p: Bad value for 'rfdno' [ 3081.182247][T23017] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3081.277605][T23025] sctp: [Deprecated]: syz.2.22884 (pid 23025) Use of int in max_burst socket option. [ 3081.277605][T23025] Use struct sctp_assoc_value instead [ 3081.469751][T23027] loop2: detected capacity change from 0 to 764 [ 3081.987238][T23052] 9p: Bad value for 'rfdno' [ 3081.994071][T23052] syz1: rxe_newlink: already configured on xfrm0 [ 3082.296276][T16906] Bluetooth: hci0: Frame reassembly failed (-84) [ 3082.321701][T23065] netlink: 'syz.1.22898': attribute type 39 has an invalid length. [ 3082.925476][T23090] __nla_validate_parse: 8 callbacks suppressed [ 3082.925498][T23090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22907'. [ 3082.943963][T23090] netlink: 'syz.4.22907': attribute type 39 has an invalid length. [ 3083.974408][T23111] 9p: Bad value for 'rfdno' [ 3084.000301][T23111] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3084.217508][T23120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22915'. [ 3084.340330][T19425] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3084.346660][ T3731] Bluetooth: hci0: command 0x1003 tx timeout [ 3084.366518][T23127] 9p: Bad value for 'rfdno' [ 3084.393007][T23127] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3084.433321][T23130] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22919'. [ 3084.489741][ T28] audit: type=1326 audit(2000000468.688:31439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23131 comm="syz.5.22920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3084.539926][ T28] audit: type=1326 audit(2000000468.688:31440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23131 comm="syz.5.22920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3084.591148][ T28] audit: type=1326 audit(2000000468.688:31441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23131 comm="syz.5.22920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3084.624583][T23139] loop2: detected capacity change from 0 to 764 [ 3084.637129][ T28] audit: type=1326 audit(2000000468.688:31442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23131 comm="syz.5.22920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3084.680950][ T28] audit: type=1326 audit(2000000468.698:31443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23131 comm="syz.5.22920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3084.726336][ T28] audit: type=1326 audit(2000000468.698:31444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23131 comm="syz.5.22920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3084.795135][ T28] audit: type=1326 audit(2000000468.718:31445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23131 comm="syz.5.22920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3084.861862][ T28] audit: type=1326 audit(2000000468.718:31446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23131 comm="syz.5.22920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3084.892124][ T28] audit: type=1326 audit(2000000468.718:31447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23131 comm="syz.5.22920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3084.922452][ T28] audit: type=1326 audit(2000000468.728:31448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23131 comm="syz.5.22920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3085.177183][T23158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22929'. [ 3085.404717][T23165] loop2: detected capacity change from 0 to 2048 [ 3085.417665][T23165] EXT4-fs: Ignoring removed orlov option [ 3085.447006][T23165] EXT4-fs: Ignoring removed oldalloc option [ 3085.464205][T23165] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 3085.504333][T23165] 9p: Bad value for 'rfdno' [ 3085.516773][T23165] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3085.743397][T23174] loop2: detected capacity change from 0 to 764 [ 3085.916146][T23178] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22934'. [ 3085.928813][T23178] sctp: [Deprecated]: syz.4.22934 (pid 23178) Use of int in max_burst socket option. [ 3085.928813][T23178] Use struct sctp_assoc_value instead [ 3086.523016][T23204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22945'. [ 3086.542003][T23204] sctp: [Deprecated]: syz.2.22945 (pid 23204) Use of int in max_burst socket option. [ 3086.542003][T23204] Use struct sctp_assoc_value instead [ 3086.645492][T23206] syzkaller0: entered promiscuous mode [ 3086.653114][T23206] syzkaller0: entered allmulticast mode [ 3087.021448][T14432] Bluetooth: hci0: Frame reassembly failed (-84) [ 3087.923705][T23246] netlink: 116376 bytes leftover after parsing attributes in process `syz.5.22959'. [ 3089.060912][T19425] Bluetooth: hci0: command 0x1003 tx timeout [ 3089.068593][ T3731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3089.206525][T23288] 9p: Bad value for 'rfdno' [ 3089.292586][T23288] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3089.298141][T23286] loop2: detected capacity change from 0 to 764 [ 3089.494722][ T28] kauditd_printk_skb: 962 callbacks suppressed [ 3089.494741][ T28] audit: type=1326 audit(2000000473.698:32411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23291 comm="syz.5.22976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3089.526056][ T28] audit: type=1326 audit(2000000473.698:32412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23291 comm="syz.5.22976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3089.553155][ T28] audit: type=1326 audit(2000000473.708:32413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23291 comm="syz.5.22976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3089.577858][ T28] audit: type=1326 audit(2000000473.758:32414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23291 comm="syz.5.22976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3089.604154][ T28] audit: type=1326 audit(2000000473.758:32415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23291 comm="syz.5.22976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3089.629399][ T28] audit: type=1326 audit(2000000473.758:32416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23291 comm="syz.5.22976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3089.653961][ T28] audit: type=1326 audit(2000000473.758:32417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23291 comm="syz.5.22976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3089.679554][ T28] audit: type=1326 audit(2000000473.758:32418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23291 comm="syz.5.22976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3089.719204][ T28] audit: type=1326 audit(2000000473.788:32419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23291 comm="syz.5.22976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3089.744024][ T28] audit: type=1326 audit(2000000473.788:32420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23291 comm="syz.5.22976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3089.833719][T23307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22981'. [ 3089.852905][T23307] xfrm0: entered promiscuous mode [ 3089.861866][T23307] sctp: [Deprecated]: syz.0.22981 (pid 23307) Use of int in max_burst socket option. [ 3089.861866][T23307] Use struct sctp_assoc_value instead [ 3090.119182][T23323] syzkaller0: entered promiscuous mode [ 3090.130042][T23321] 9p: Bad value for 'rfdno' [ 3090.138866][T23323] syzkaller0: entered allmulticast mode [ 3090.180055][T23321] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3090.315190][T23333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22991'. [ 3090.326197][T23333] netlink: 'syz.2.22991': attribute type 39 has an invalid length. [ 3090.630558][T23343] 9p: Bad value for 'rfdno' [ 3090.687348][T23347] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3091.652548][T23365] loop2: detected capacity change from 0 to 512 [ 3091.660535][T23365] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 3091.704161][T23365] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 3091.728022][T23365] System zones: 1-12 [ 3091.745085][T23365] EXT4-fs (loop2): orphan cleanup on readonly fs [ 3091.761088][T23365] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.23000: bg 0: block 361: padding at end of block bitmap is not set [ 3091.787927][T23365] loop2: lost filesystem error report for type 5 error -117 [ 3091.788116][T23365] EXT4-fs (loop2): Remounting filesystem read-only [ 3091.796722][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 3091.796749][ C0] EXT4-fs (loop2): initial error at time 2000000475: ext4_validate_block_bitmap:441 [ 3091.796780][ C0] EXT4-fs (loop2): last error at time 2000000475: ext4_validate_block_bitmap:441 [ 3091.854650][T23365] EXT4-fs (loop2): 1 truncate cleaned up [ 3091.861217][T23365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 3091.967185][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 3094.055587][T23434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23019'. [ 3094.272938][T23434] netlink: 15 bytes leftover after parsing attributes in process `syz.0.23019'. [ 3094.501008][ T28] kauditd_printk_skb: 671 callbacks suppressed [ 3094.501070][ T28] audit: type=1326 audit(2000000478.708:33092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23431 comm="syz.1.23018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdec43ccfce code=0x7ffc0000 [ 3094.631433][T23440] netlink: 76 bytes leftover after parsing attributes in process `syz.4.23022'. [ 3094.720418][ T28] audit: type=1326 audit(2000000478.738:33093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23431 comm="syz.1.23018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdec43ccfce code=0x7ffc0000 [ 3094.780724][ T28] audit: type=1326 audit(2000000478.738:33094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23431 comm="syz.1.23018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdec43ccfce code=0x7ffc0000 [ 3094.831236][ T28] audit: type=1326 audit(2000000478.738:33095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23431 comm="syz.1.23018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdec43ccfce code=0x7ffc0000 [ 3094.883421][ T28] audit: type=1326 audit(2000000478.748:33096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23431 comm="syz.1.23018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdec43ccfce code=0x7ffc0000 [ 3094.939030][ T28] audit: type=1326 audit(2000000478.748:33097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23431 comm="syz.1.23018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdec43ccfce code=0x7ffc0000 [ 3094.963541][ T28] audit: type=1326 audit(2000000478.748:33098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23431 comm="syz.1.23018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdec43ccfce code=0x7ffc0000 [ 3094.988107][ T28] audit: type=1326 audit(2000000478.748:33099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23431 comm="syz.1.23018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdec43ccfce code=0x7ffc0000 [ 3095.012287][ T28] audit: type=1326 audit(2000000478.748:33100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23431 comm="syz.1.23018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdec43ccfce code=0x7ffc0000 [ 3095.080481][ T28] audit: type=1326 audit(2000000478.748:33101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23431 comm="syz.1.23018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdec43ccfce code=0x7ffc0000 [ 3095.241011][T23457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23028'. [ 3095.291535][T23457] netlink: 'syz.1.23028': attribute type 39 has an invalid length. [ 3095.346522][T23464] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23032'. [ 3095.449170][T23464] netlink: 15 bytes leftover after parsing attributes in process `syz.5.23032'. [ 3095.552390][T23477] netlink: 20 bytes leftover after parsing attributes in process `syz.5.23035'. [ 3095.575099][T23477] netlink: 20 bytes leftover after parsing attributes in process `syz.5.23035'. [ 3095.588692][T23477] sctp: [Deprecated]: syz.5.23035 (pid 23477) Use of int in max_burst socket option. [ 3095.588692][T23477] Use struct sctp_assoc_value instead [ 3095.799714][T23495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23042'. [ 3096.137523][T23505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23045'. [ 3096.172102][T23505] netlink: 15 bytes leftover after parsing attributes in process `syz.2.23045'. [ 3096.866582][T23532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23055'. [ 3096.992928][T23541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23057'. [ 3097.097219][T23532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=23532 comm=syz.1.23055 [ 3097.658075][T23560] netlink: 'syz.1.23063': attribute type 39 has an invalid length. [ 3098.153173][T23570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=23570 comm=syz.0.23066 [ 3098.199446][T23572] sctp: [Deprecated]: syz.0.23067 (pid 23572) Use of int in max_burst socket option. [ 3098.199446][T23572] Use struct sctp_assoc_value instead [ 3098.882914][T23594] loop2: detected capacity change from 0 to 2048 [ 3098.900108][T23594] EXT4-fs: Ignoring removed orlov option [ 3098.920862][T23594] EXT4-fs: Ignoring removed oldalloc option [ 3098.943014][T23594] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 3099.058896][T23594] 9p: Bad value for 'rfdno' [ 3099.119087][T23594] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3099.491916][T23604] sctp: [Deprecated]: syz.0.23078 (pid 23604) Use of int in max_burst socket option. [ 3099.491916][T23604] Use struct sctp_assoc_value instead [ 3099.546135][T23600] loop2: detected capacity change from 0 to 764 [ 3100.270030][ T28] kauditd_printk_skb: 1122 callbacks suppressed [ 3100.270054][ T28] audit: type=1326 audit(2000000484.448:34224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23628 comm="syz.0.23088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3a89c799 code=0x7ffc0000 [ 3100.345957][ T28] audit: type=1326 audit(2000000484.448:34225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23628 comm="syz.0.23088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3a89c799 code=0x7ffc0000 [ 3100.395676][ T28] audit: type=1326 audit(2000000484.448:34226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23628 comm="syz.0.23088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3a89c799 code=0x7ffc0000 [ 3100.474291][ T28] audit: type=1326 audit(2000000484.448:34227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23628 comm="syz.0.23088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3a89c799 code=0x7ffc0000 [ 3100.500436][ T28] audit: type=1326 audit(2000000484.448:34228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23628 comm="syz.0.23088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3a89c799 code=0x7ffc0000 [ 3100.527536][ T28] audit: type=1326 audit(2000000484.448:34229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23628 comm="syz.0.23088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b3a89c799 code=0x7ffc0000 [ 3100.562627][ T28] audit: type=1326 audit(2000000484.458:34230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23628 comm="syz.0.23088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3a89c799 code=0x7ffc0000 [ 3100.586770][ T28] audit: type=1326 audit(2000000484.458:34231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23628 comm="syz.0.23088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3a89c799 code=0x7ffc0000 [ 3100.612084][ T28] audit: type=1326 audit(2000000484.458:34232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23628 comm="syz.0.23088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3a89c799 code=0x7ffc0000 [ 3100.640744][ T28] audit: type=1326 audit(2000000484.458:34233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23628 comm="syz.0.23088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4b3a89c799 code=0x7ffc0000 [ 3100.763059][T23643] __nla_validate_parse: 10 callbacks suppressed [ 3100.763081][T23643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23092'. [ 3100.781069][T23643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23092'. [ 3100.792508][T23643] sctp: [Deprecated]: syz.0.23092 (pid 23643) Use of int in max_burst socket option. [ 3100.792508][T23643] Use struct sctp_assoc_value instead [ 3101.112743][T23656] netlink: 64 bytes leftover after parsing attributes in process `syz.2.23096'. [ 3101.332860][T23663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23099'. [ 3101.485436][T23663] netlink: 15 bytes leftover after parsing attributes in process `syz.1.23099'. [ 3101.544307][T23666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23100'. [ 3101.670845][T23666] netlink: 15 bytes leftover after parsing attributes in process `syz.1.23100'. [ 3101.933011][T23672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23103'. [ 3101.954918][T23672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23103'. [ 3101.972278][T23672] sctp: [Deprecated]: syz.0.23103 (pid 23672) Use of int in max_burst socket option. [ 3101.972278][T23672] Use struct sctp_assoc_value instead [ 3101.999417][T23674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23104'. [ 3102.568720][T23687] loop2: detected capacity change from 0 to 512 [ 3102.602245][T23687] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 3102.647216][T23697] 9p: Bad value for 'rfdno' [ 3102.671792][T23687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 3102.686108][T23697] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3102.694636][T23687] System zones: 1-12 [ 3102.705355][T23687] EXT4-fs (loop2): orphan cleanup on readonly fs [ 3102.722531][T23687] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.23109: bg 0: block 361: padding at end of block bitmap is not set [ 3102.739352][T23687] loop2: lost filesystem error report for type 5 error -117 [ 3102.739560][T23687] EXT4-fs (loop2): Remounting filesystem read-only [ 3102.748030][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 3102.748060][ C0] EXT4-fs (loop2): initial error at time 2000000486: ext4_validate_block_bitmap:441 [ 3102.748083][ C0] EXT4-fs (loop2): last error at time 2000000486: ext4_validate_block_bitmap:441 [ 3102.787272][T23687] EXT4-fs (loop2): 1 truncate cleaned up [ 3102.828682][T23706] netlink: 'syz.0.23115': attribute type 39 has an invalid length. [ 3102.849129][T23687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 3102.977565][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 3104.396021][T23741] 9p: Bad value for 'rfdno' [ 3104.411794][T23738] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3105.271790][ T28] kauditd_printk_skb: 641 callbacks suppressed [ 3105.271808][ T28] audit: type=1326 audit(2000000489.468:34875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23768 comm="syz.4.23134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3105.322338][ T28] audit: type=1326 audit(2000000489.508:34876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23768 comm="syz.4.23134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3105.346949][ T28] audit: type=1326 audit(2000000489.518:34877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23768 comm="syz.4.23134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3105.372415][ T28] audit: type=1326 audit(2000000489.518:34878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23768 comm="syz.4.23134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3105.396695][ T28] audit: type=1326 audit(2000000489.518:34879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23768 comm="syz.4.23134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3105.431771][ T28] audit: type=1326 audit(2000000489.518:34880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23768 comm="syz.4.23134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3105.464954][ T28] audit: type=1326 audit(2000000489.528:34881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23768 comm="syz.4.23134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3105.493920][ T28] audit: type=1326 audit(2000000489.528:34882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23768 comm="syz.4.23134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3105.541888][ T28] audit: type=1326 audit(2000000489.738:34883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23780 comm="syz.4.23139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3105.569581][ T28] audit: type=1326 audit(2000000489.738:34884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23780 comm="syz.4.23139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3105.858575][T28793] Bluetooth: hci0: Frame reassembly failed (-84) [ 3106.530230][T23813] __nla_validate_parse: 13 callbacks suppressed [ 3106.537130][T23813] netlink: 116376 bytes leftover after parsing attributes in process `syz.5.23149'. [ 3106.597831][T23815] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23150'. [ 3106.746074][T23815] netlink: 15 bytes leftover after parsing attributes in process `syz.5.23150'. [ 3106.889784][T23819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23152'. [ 3107.070034][T23819] netlink: 15 bytes leftover after parsing attributes in process `syz.4.23152'. [ 3107.672902][T23850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23162'. [ 3107.860509][ T3731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3107.863141][T23850] netlink: 15 bytes leftover after parsing attributes in process `syz.0.23162'. [ 3109.100090][T23888] netlink: 16 bytes leftover after parsing attributes in process `syz.5.23176'. [ 3109.121618][T23888] netlink: 'syz.5.23176': attribute type 39 has an invalid length. [ 3109.307752][T23885] loop2: detected capacity change from 0 to 512 [ 3109.326692][T23885] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 3109.357460][T23885] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 3109.379836][T23885] System zones: 1-12 [ 3109.389287][T23885] EXT4-fs (loop2): orphan cleanup on readonly fs [ 3109.396516][T23885] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.23175: bg 0: block 361: padding at end of block bitmap is not set [ 3109.411426][T23885] loop2: lost filesystem error report for type 5 error -117 [ 3109.411628][T23885] EXT4-fs (loop2): Remounting filesystem read-only [ 3109.425888][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 3109.425914][ C0] EXT4-fs (loop2): initial error at time 2000000493: ext4_validate_block_bitmap:441 [ 3109.425948][ C0] EXT4-fs (loop2): last error at time 2000000493: ext4_validate_block_bitmap:441 [ 3109.452022][T23885] EXT4-fs (loop2): 1 truncate cleaned up [ 3109.458550][T23885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 3109.509455][T12233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 3109.640594][T23903] sctp: [Deprecated]: syz.0.23181 (pid 23903) Use of int in max_burst socket option. [ 3109.640594][T23903] Use struct sctp_assoc_value instead [ 3110.286638][ T28] kauditd_printk_skb: 1450 callbacks suppressed [ 3110.286738][ T28] audit: type=1326 audit(2000000494.488:36335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23910 comm="syz.5.23184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3110.383593][ T28] audit: type=1326 audit(2000000494.498:36336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23910 comm="syz.5.23184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f036b95c502 code=0x7ffc0000 [ 3110.506362][ T28] audit: type=1326 audit(2000000494.498:36337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23910 comm="syz.5.23184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f036b95c502 code=0x7ffc0000 [ 3110.608883][ T28] audit: type=1326 audit(2000000494.518:36338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23910 comm="syz.5.23184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3110.698862][ T28] audit: type=1326 audit(2000000494.518:36339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23910 comm="syz.5.23184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3110.730849][T23926] 9p: Bad value for 'rfdno' [ 3110.780598][ T28] audit: type=1326 audit(2000000494.518:36340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23910 comm="syz.5.23184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3110.813024][T23926] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 3110.866471][ T28] audit: type=1326 audit(2000000494.518:36341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23910 comm="syz.5.23184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3110.950119][ T28] audit: type=1326 audit(2000000494.528:36342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23910 comm="syz.5.23184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3111.020997][T23934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23190'. [ 3111.024828][ T28] audit: type=1326 audit(2000000494.528:36343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23910 comm="syz.5.23184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3111.111452][ T28] audit: type=1326 audit(2000000494.528:36344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23910 comm="syz.5.23184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b95c799 code=0x7ffc0000 [ 3111.282374][T23945] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23195'. [ 3111.630047][T23945] __nla_validate_parse: 1 callbacks suppressed [ 3111.630084][T23945] netlink: 15 bytes leftover after parsing attributes in process `syz.5.23195'. [ 3112.843426][T23966] netlink: 64 bytes leftover after parsing attributes in process `syz.0.23202'. [ 3112.930222][T23969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23203'. [ 3113.172144][T23976] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23206'. [ 3113.194123][T23969] netlink: 15 bytes leftover after parsing attributes in process `syz.0.23203'. [ 3113.442742][T23986] netlink: 15 bytes leftover after parsing attributes in process `syz.5.23206'. [ 3113.723171][T23995] loop2: detected capacity change from 0 to 764 [ 3114.123315][T23998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23211'. [ 3114.333386][T23998] netlink: 15 bytes leftover after parsing attributes in process `syz.0.23211'. [ 3114.452001][T24004] netlink: 64 bytes leftover after parsing attributes in process `syz.0.23214'. [ 3114.488719][T24006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23215'. [ 3115.203688][T24019] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3115.301153][ T28] kauditd_printk_skb: 893 callbacks suppressed [ 3115.301173][ T28] audit: type=1326 audit(2000000499.508:37238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24014 comm="syz.4.23218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3115.376316][ T28] audit: type=1326 audit(2000000499.508:37239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24014 comm="syz.4.23218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3115.458587][ T28] audit: type=1326 audit(2000000499.558:37240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24014 comm="syz.4.23218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3115.504089][ T28] audit: type=1326 audit(2000000499.558:37241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24014 comm="syz.4.23218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3115.532551][T24036] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3115.567929][ T28] audit: type=1326 audit(2000000499.608:37242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24014 comm="syz.4.23218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3115.597192][T24040] netlink: 'syz.0.23227': attribute type 39 has an invalid length. [ 3115.622808][ T28] audit: type=1326 audit(2000000499.608:37243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24014 comm="syz.4.23218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3115.685315][ T28] audit: type=1326 audit(2000000499.628:37244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.2.23224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23423c799 code=0x7ffc0000 [ 3115.710213][ T28] audit: type=1326 audit(2000000499.628:37245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.2.23224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23423c799 code=0x7ffc0000 [ 3115.735628][ T28] audit: type=1326 audit(2000000499.628:37246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.2.23224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23423c799 code=0x7ffc0000 [ 3115.759697][ T28] audit: type=1326 audit(2000000499.628:37247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.2.23224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff23423c799 code=0x7ffc0000 [ 3115.858164][T24045] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3115.876331][T24045] netlink: 'syz.0.23230': attribute type 39 has an invalid length. [ 3116.420541][T29967] page_pool_release_retry() stalled pool shutdown: id 241, 50 inflight 362 sec [ 3116.548646][T24064] loop2: detected capacity change from 0 to 764 [ 3116.977422][T24071] __nla_validate_parse: 4 callbacks suppressed [ 3116.977463][T24071] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.23239'. [ 3117.137707][T24080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23242'. [ 3117.227351][T24080] netlink: 15 bytes leftover after parsing attributes in process `syz.1.23242'. [ 3118.142949][T24109] syzkaller0: entered promiscuous mode [ 3118.154705][T24109] syzkaller0: entered allmulticast mode [ 3118.193035][T24117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23256'. [ 3118.330921][T24120] netlink: 15 bytes leftover after parsing attributes in process `syz.0.23256'. [ 3119.350556][T24150] loop2: detected capacity change from 0 to 764 [ 3119.447335][T24156] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23269'. [ 3119.663858][T24156] netlink: 15 bytes leftover after parsing attributes in process `syz.5.23269'. [ 3120.153243][T24166] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30 sclass=netlink_tcpdiag_socket pid=24166 comm=syz.1.23272 [ 3120.310442][ T28] kauditd_printk_skb: 2370 callbacks suppressed [ 3120.310461][ T28] audit: type=1326 audit(2000000504.508:39618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24160 comm="syz.4.23270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2e4dacfce code=0x7ffc0000 [ 3120.388012][ T28] audit: type=1326 audit(2000000504.548:39619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24162 comm="syz.5.23271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f036b91cfce code=0x7ffc0000 [ 3120.429645][ T28] audit: type=1326 audit(2000000504.548:39620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24162 comm="syz.5.23271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f036b91cfce code=0x7ffc0000 [ 3120.497854][ T28] audit: type=1326 audit(2000000504.548:39621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24162 comm="syz.5.23271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f036b91cfce code=0x7ffc0000 [ 3120.527528][T24177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23276'. [ 3120.535926][ T28] audit: type=1326 audit(2000000504.548:39622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24160 comm="syz.4.23270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2e4dacfce code=0x7ffc0000 [ 3120.561959][ T28] audit: type=1326 audit(2000000504.548:39623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24160 comm="syz.4.23270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2e4dacfce code=0x7ffc0000 [ 3120.615985][ T28] audit: type=1326 audit(2000000504.558:39624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24160 comm="syz.4.23270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2e4dacfce code=0x7ffc0000 [ 3120.648075][ T28] audit: type=1326 audit(2000000504.558:39625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24162 comm="syz.5.23271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f036b91cfce code=0x7ffc0000 [ 3120.673064][ T28] audit: type=1326 audit(2000000504.558:39626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24160 comm="syz.4.23270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2e4dacfce code=0x7ffc0000 [ 3120.698880][T24178] netlink: 15 bytes leftover after parsing attributes in process `syz.1.23276'. [ 3120.710068][ T28] audit: type=1326 audit(2000000504.558:39627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24162 comm="syz.5.23271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f036b91cfce code=0x7ffc0000 [ 3120.919531][T24189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23281'. [ 3122.233220][T24234] __nla_validate_parse: 2 callbacks suppressed [ 3122.233265][T24234] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23297'. [ 3122.485799][T24234] netlink: 15 bytes leftover after parsing attributes in process `syz.5.23297'. [ 3124.096490][T24279] netlink: 52 bytes leftover after parsing attributes in process `syz.2.23313'. [ 3124.200013][T24284] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3124.605711][T24297] netlink: 15 bytes leftover after parsing attributes in process `syz.2.23319'. [ 3124.764559][T24302] loop2: detected capacity change from 0 to 764 [ 3124.854905][T24310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23323'. [ 3124.877901][T24310] netlink: 15 bytes leftover after parsing attributes in process `syz.5.23323'. [ 3127.424101][T25591] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3127.472080][T25593] sctp: [Deprecated]: syz.0.23345 (pid 25593) Use of int in max_burst socket option. [ 3127.472080][T25593] Use struct sctp_assoc_value instead [ 3127.753454][ T28] kauditd_printk_skb: 1484 callbacks suppressed [ 3127.753474][ T28] audit: type=1326 audit(2000000511.958:41112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25638 comm="syz.4.23348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3127.846546][ T28] audit: type=1326 audit(2000000511.988:41113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25638 comm="syz.4.23348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3127.921689][ T28] audit: type=1326 audit(2000000511.988:41114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25638 comm="syz.4.23348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3127.966862][ T28] audit: type=1326 audit(2000000512.028:41115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25638 comm="syz.4.23348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3127.994626][ T28] audit: type=1326 audit(2000000512.028:41116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25638 comm="syz.4.23348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3128.019117][ T28] audit: type=1326 audit(2000000512.028:41117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25638 comm="syz.4.23348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3128.044315][ T28] audit: type=1326 audit(2000000512.028:41118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25638 comm="syz.4.23348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3128.070685][ T28] audit: type=1326 audit(2000000512.028:41119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25638 comm="syz.4.23348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3128.095033][ T28] audit: type=1326 audit(2000000512.028:41120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25638 comm="syz.4.23348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3128.169546][ T28] audit: type=1326 audit(2000000512.028:41121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25638 comm="syz.4.23348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e4dec799 code=0x7ffc0000 [ 3128.612722][T25676] netlink: 15 bytes leftover after parsing attributes in process `syz.2.23356'. [ 3128.762488][T25683] netlink: 52 bytes leftover after parsing attributes in process `syz.2.23359'. [ 3128.838744][T25687] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3129.167612][T25693] usb usb7: usbfs: process 25693 (syz.2.23364) did not claim interface 63 before use [ 3129.531121][T25700] usb usb7: usbfs: process 25700 (syz.2.23367) did not claim interface 63 before use [ 3130.132881][T25831] netlink: 15 bytes leftover after parsing attributes in process `syz.2.23374'. [ 3130.370641][T25840] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 3130.623568][T25874] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3131.092624][T25885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23387'. [ 3131.297529][T25885] netlink: 15 bytes leftover after parsing attributes in process `syz.2.23387'. [ 3131.921329][ C0] ================================================================== [ 3131.929513][ C0] BUG: KCSAN: data-race in __perf_event_overflow / __perf_event_set_bpf_prog [ 3131.938399][ C0] [ 3131.940776][ C0] write to 0xffff88815a8f9168 of 8 bytes by task 25900 on cpu 1: [ 3131.948555][ C0] __perf_event_set_bpf_prog+0x419/0x470 [ 3131.954805][ C0] perf_ioctl+0x92e/0x15d0 [ 3131.959321][ C0] __se_sys_ioctl+0xce/0x140 [ 3131.964065][ C0] __x64_sys_ioctl+0x43/0x50 [ 3131.968718][ C0] x64_sys_call+0x1563/0x3020 [ 3131.973439][ C0] do_syscall_64+0x12c/0x370 [ 3131.978089][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3131.984031][ C0] [ 3131.986394][ C0] read to 0xffff88815a8f9168 of 8 bytes by interrupt on cpu 0: [ 3131.993983][ C0] __perf_event_overflow+0x252/0x920 [ 3131.999340][ C0] perf_swevent_hrtimer+0x28d/0x310 [ 3132.004594][ C0] __hrtimer_run_queues+0x218/0x4f0 [ 3132.009851][ C0] hrtimer_interrupt+0x269/0x810 [ 3132.015011][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 3132.021364][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 3132.027051][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3132.033415][ C0] inet6_recvmsg+0x7d/0x290 [ 3132.037995][ C0] sock_recvmsg_nosec+0x5f/0x130 [ 3132.043094][ C0] ____sys_recvmsg+0x26f/0x280 [ 3132.048063][ C0] ___sys_recvmsg+0x11f/0x3b0 [ 3132.053089][ C0] do_recvmmsg+0x1ef/0x560 [ 3132.058095][ C0] __x64_sys_recvmmsg+0xe5/0x170 [ 3132.063402][ C0] x64_sys_call+0x80f/0x3020 [ 3132.068144][ C0] do_syscall_64+0x12c/0x370 [ 3132.072812][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3132.078809][ C0] [ 3132.081187][ C0] value changed: 0x0000000000000000 -> 0xffffc9000663f000 [ 3132.088351][ C0] [ 3132.090709][ C0] Reported by Kernel Concurrency Sanitizer on: [ 3132.097083][ C0] CPU: 0 UID: 0 PID: 25895 Comm: syz.0.23390 Tainted: G W syzkaller #0 PREEMPT(full) [ 3132.108154][ C0] Tainted: [W]=WARN [ 3132.111985][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3132.122081][ C0] ================================================================== [ 3132.205182][T25903] loop2: detected capacity change from 0 to 764