last executing test programs: 13m24.028263108s ago: executing program 32 (id=1780): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x81, 0xffffffff}) mmap(&(0x7f000028d000/0x2000)=nil, 0x2000, 0xa, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x7, 0x0, 0x0, 0x0, 0xb, 0x510, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x5}, 0x105902, 0x10003, 0x80033f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000680)={0x0, 0xbd, 0x40000}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x9, 0x0, 0xfd, 0x0, 0x9, 0x16048, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x8, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x1) socket(0x1e, 0x4, 0x0) capget(&(0x7f0000000140)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x8, 0x13, 0x7}) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000300)=0x10000, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a497f75241d4e1deb"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc050) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf908"], 0x65) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030106000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$inet6(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000011b000000000000000000008500000041000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000380)={0x19980330}, &(0x7f00000003c0)={0x6, 0x7, 0x3fffc, 0x101, 0x2, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xd, 0x0, &(0x7f0000000280)="d458de510f3291418b71c65b26", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x50) r5 = openat2(0xffffffffffffffff, &(0x7f0000002900)='./file0\x00', &(0x7f0000002940)={0x20c000, 0x0, 0x1}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x6, 0x26, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000087f00000048d26022f018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185100000d0000000000000000000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bf", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018260000", @ANYRES32=r6, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x40, '\x00', r7, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x6, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000050000000000943764ba7900000098090000180000007d20000000000000030000001804ca15f0000000000000000c1e000085100000ffffffff186000000900000000000000090000009d000000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x9e, 0x1000, &(0x7f0000001900)=""/4096, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x10, r5, 0x8, &(0x7f0000002980)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000029c0)={0x0, 0x3, 0x1, 0x213f}, 0x10, r8, r4, 0x0, &(0x7f0000002a00)=[0xffffffffffffffff, r9, r1], 0x0, 0x10, 0x2}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 13m23.35718512s ago: executing program 33 (id=1796): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0xc, 0x25dd}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x2000000000000) 12m13.059350204s ago: executing program 34 (id=2451): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x848000000015, 0x805, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, 0x0) io_uring_enter(0xffffffffffffffff, 0x6b7c, 0x9d7e, 0x8, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000480)='pids.events\x00', 0x275a, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_setup(0x363a, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x4c032, 0xffffffffffffffff, 0x300) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r4 = accept(r1, &(0x7f00000001c0)=@caif=@dgm, &(0x7f0000000240)=0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f00000002c0)=0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff003c3a00fc020000000000000000000000000000ff020000000000000000000000000001020090"], 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 7m35.656577192s ago: executing program 35 (id=5227): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x94) socket$rds(0x15, 0x5, 0x0) timer_create(0x8, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000400000000020000000000001202000000020000000000000e030000000000000000005f00db519448fb81bc5b679ee056627a2db04ff8cbb222978edd412f1f50417f6f06deda57e25215b8663a5d6be143c7ad027d0754dcf6ad7b19a8cef08a790e33"], 0x0, 0x54}, 0x28) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x24004051, &(0x7f000005ffe4)={0xa, 0x4e25, 0x6, @private1}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x0) 6m19.699432542s ago: executing program 36 (id=5785): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 5m53.104000333s ago: executing program 37 (id=6004): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f00000000c0), 0x8) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000200)={0x3fe, {{0xa, 0x4e23, 0xffffffc8, @mcast1, 0x9}}}, 0x88) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) clock_adjtime(0x0, &(0x7f0000000380)={0x4, 0x3, 0x4101, 0x4000000000000b, 0xffffffffffffffff, 0x7, 0x400000400, 0x80000000000a, 0x5, 0x400000000000100, 0x7, 0xf, 0xffffffffffffffff, 0x83, 0x761c9026, 0x3ff, 0x0, 0x2, 0x8, 0x9, 0x8001, 0x7, 0x0, 0x3, 0x72a3, 0xe}) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac14142100000000000000000000000020010000000000000000000000000000000000000000000000000a0000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) 5m49.870902859s ago: executing program 38 (id=6034): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b4b, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) r2 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001140)={0x0, 0xce, 0xe, 0x7ff}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0xfd}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f0000000000), 0x10, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000010200000400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000030400"/24], 0x48}}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000a80), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @remote}, &(0x7f0000000180)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x10001, 0xe, 0x1ff}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r4, 0x5}, 0x8) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800b66cf7e6a58cd8e0e80c86470ec8c3c0d6b06acd299df554ff6d4c46a5e948e458d6291d3aab88af945442040056972d9d82b584db7aed7075fcb4850257c7cf202122802afec235970a469a73ea4193e861993d0d14c39e25a81de895927d3a86ba369ed1c66b615488829a7502aaed5d20c90800753013f6a46fd587a882589bea59703c5619a8697ee9661140a295a65ede871662b0a5713e89f3bfff54a01fbb1a641056b8f7d98a65a17dedcf11ffbb8c93ed0275431beebd524767543f3a0083992c9406001106a201fa8fb4c2abb7d22d810aa4101e5e610000", 0xdf}, {&(0x7f00000029c0)="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", 0xf11}], 0x2) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000022c0)={0x14, 0x25, 0x1, 0x70bd2b, 0xfffffffe, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24008010}, 0x844) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x81, 0x7, 0xf8, 0xa, 0x0, 0xb4c, 0x1000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x1}, 0x1110a1, 0x4, 0x4, 0xb, 0x7, 0x9, 0x9, 0x0, 0x14b, 0x0, 0xffffffffffffff01}, 0x0, 0x0, 0xffffffffffffffff, 0x3) 5m44.65182737s ago: executing program 39 (id=6054): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x24, 0x2, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r6, 0x0, 0x0, 0x40000, &(0x7f0000002500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @multicast2}, 0x1, 0x3, 0xc, 0x1}}, 0x80) sendmmsg$inet(r6, &(0x7f0000006e00)=[{{&(0x7f00000004c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc8}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8040) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f00000001c0)='pids.events\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r9}, &(0x7f0000000400), &(0x7f0000000440)=r11}, 0x20) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x4030000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r12 = syz_io_uring_setup(0x4b7, &(0x7f0000000180)={0x0, 0x86e1, 0x4, 0x8, 0x3d6}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r12, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r12, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) sendmsg$AUDIT_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008054}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 5m22.99189202s ago: executing program 40 (id=6156): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x110) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) timer_create(0x2, &(0x7f00000002c0)={0x0, 0x20, 0x1, @thr={&(0x7f0000000080), &(0x7f0000000140)="7b340d1835d93eb9d607359de30ed07101f771fe4a6ea54bd7c41e6c64aa05f7817c67d941a1b4db0ded9e360c2e04811899fb23530004153bb3af970e3cbd151040c61132b71aeafd1e56b41d20615c313bb76b31a9710d97c95c2bf0b97122cd127239b328ba075cd12a2b21a32d14c18dd87d4c769574bc216fe4fb2614c6c3ec9f5fdc86135f261520f5"}}, &(0x7f0000000300)) sendmsg$inet6(r1, 0x0, 0x4048043) socket(0xf, 0x80000, 0x1916eb1e) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8013, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x2, 0x9}, 0x10c02c, 0x9, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_NAME(0x10, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ptrace(0x10, 0x0) ptrace$peeksig(0x4212, 0x0, &(0x7f00000004c0)={0x3, 0x1}, &(0x7f00000004c0)) r4 = dup(r3) ioctl$TIOCSETD(r4, 0x5423, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x11, 0x3, 0x10) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f0000000c40)=[{0x0}], 0x1, 0x3d, 0x5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'syztnl2\x00', r7, 0x0, 0x0, 0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2, 0x40, 0x0, 0x0, 0x6}}) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000340)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) 5m20.033275747s ago: executing program 41 (id=6169): r0 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x86f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c00028008000400070000ff7f0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x0, 0x4a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)=[{0x5, 0x5, 0xf, 0x1}], 0x10, 0xe}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x802) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)) write(0xffffffffffffffff, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) 5m16.375570467s ago: executing program 42 (id=6184): socket$nl_netfilter(0x10, 0x3, 0xc) pidfd_send_signal(0xffffffffffffffff, 0x8000b, 0x0, 0x4) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68190, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c76c, 0x5, 0x0, 0x2, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40481, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000022c0)='/sys/kernel/profiling', 0x2a482, 0x48) write$cgroup_subtree(r2, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x9) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611080000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m6.407114301s ago: executing program 43 (id=6252): io_uring_setup(0x2a6d, &(0x7f00000002c0)={0x0, 0xd610, 0x0, 0x1, 0x28b}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x2}, 0x0, 0x0, 0x800000, 0x9, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getaffinity(r0, 0x8, &(0x7f00000000c0)) poll(0x0, 0x0, 0x9) socketpair(0x21, 0x6, 0x800, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x101, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f00009f0000/0x3000)=nil, 0x3000, 0x1000000) listen(r4, 0x20) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x8, 0x2004f, 0x0, 'queue0\x00', 0x200}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc08c5332, &(0x7f0000000400)={{}, 0x0, 0x0, 0x3, {}, 0x0, 0x4008}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) 5m4.92795379s ago: executing program 44 (id=6263): ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200001, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x2, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x24008004) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, 0x0) epoll_wait(r3, &(0x7f0000000280)=[{}], 0x1, 0x4000005) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) statx(r4, &(0x7f0000000080)='./file0\x00', 0x1000, 0x4, &(0x7f0000000340)) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200021"], 0x69) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) close(r4) finit_module(r4, &(0x7f00000002c0)='\'!}(\\)%#&+\x00', 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40d0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x24000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r6) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x4, 0x1297, &(0x7f0000002e40)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x24, r7, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4005005}, 0x40000) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="180000"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x5, 0x4000, 0x7, 0x0, 0x5, 0x0}) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x9, 0x30}, &(0x7f00000002c0)=0xc) socket(0x23, 0x80805, 0x0) 4m35.01841927s ago: executing program 49 (id=6437): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0xff80, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0xfffd, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) 4m32.956087028s ago: executing program 50 (id=6447): socket$nl_netfilter(0x10, 0x3, 0xc) pidfd_send_signal(0xffffffffffffffff, 0x8000b, 0x0, 0x4) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68190, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c76c, 0x5, 0x0, 0x2, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40481, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000022c0)='/sys/kernel/profiling', 0x2a482, 0x48) write$cgroup_subtree(r3, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x9) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611080000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 4m17.428550747s ago: executing program 51 (id=6514): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0xffff, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@empty}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 4m11.037967777s ago: executing program 52 (id=6534): socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000200), 0x6000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20008144}, 0x8000) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2}, 0x50) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x82102, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x8}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c4", 0x1e}], 0x1}, 0x4008001) 4m5.15708994s ago: executing program 53 (id=6568): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r0, r2, 0x25, 0x0, @val=@tracing={0x0, 0xfffffffffffff8a5}}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40d1}, 0x68) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000cc0), 0xc0e81, 0x0) 3m56.418525756s ago: executing program 54 (id=6629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x44956) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000500)={0x0, 0x7f00, &(0x7f00000004c0)={&(0x7f0000000300)={0x14, r1, 0x111, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40010) 3m45.62833181s ago: executing program 55 (id=6705): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000003c0), &(0x7f0000000400)=0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x4e, 0x0, 0x9, 0x5, 0x0, 0xd2, 0x10}, &(0x7f00000001c0)=0x9c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xd00, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x84000100}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x48, 0x1404, 0x10, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x24000020) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000ffff2bbd700001dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="01000000230800004800128009000100766c616e000000003800028006000100030000001c0004800c000100ffffffff040000000c0001000300000028070000100003800c003900070000000700000008000500", @ANYRES32=r3], 0x70}, 0x1, 0x0, 0x0, 0x20048045}, 0x40000) 3m41.598794632s ago: executing program 56 (id=6727): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6c, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x101040, 0x100) io_uring_setup(0x524, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x2, 0x3}}, 0x20) socket(0xa, 0x3, 0x0) 3m35.305237499s ago: executing program 57 (id=6762): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = memfd_secret(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x10, 0x7fff, 0xfffffffe, 0x4, r0, 0x1, '\x00', 0x0, r1, 0x4, 0x1, 0x1, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r0, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 3m32.983589065s ago: executing program 58 (id=6784): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600034e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 3m30.08497889s ago: executing program 59 (id=6796): perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x10108, 0x2, 0x8406, 0x9, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000380)="7cda6c", 0x3ff, r2}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0xa, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x80, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x57, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x8}}, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x80}, 0x1, 0x0, 0x0, 0x8810}, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) dup2(r1, r0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r6, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x2686, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) 3m28.538939331s ago: executing program 60 (id=6800): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x8, 0x100001d, 0x4003, 0x83ffffc, 0xb, "69b7841b47f3ce7a26149600"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x10000) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x11f) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000001000"/192]) 3m21.960129876s ago: executing program 61 (id=6822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x8080) (fail_nth: 8) 3m18.856456649s ago: executing program 62 (id=6836): unshare(0x42000000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1a00048, &(0x7f00000001c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c756e695f786c6174653d302c756e695f786c6174653d312c696f636861727365743d69736f383835392d342c6e6f6e756d7461696c3d302c756e695f786c6174653d302c636865636b3d6e6f726d6106000000000000002c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c757466383d312c73686f72746e616d653d6d697865642c757466383d302c73686f72746e616d653d77696e39352c00"], 0x3, 0x35d, &(0x7f00000009c0)="$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") setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300), 0x4) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x2, 0xfffffffe, 0x0, 0x10400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x2a0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @private2}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000001304000000000000000100000500110000000000000300000000000000000000000000000901"], 0x0, 0x4a}, 0x20) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={&(0x7f0000000040), 0xc}, 0x8000, 0xc92, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x1, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x894b, &(0x7f0000000180)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[], 0x0, 0x34, 0x0, 0x4}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000600)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x1ec6299b, 0x34, &(0x7f00000006c0)=""/52, 0x40f00, 0xb, '\x00', 0x0, 0x1a, r5, 0x8, &(0x7f0000000700)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x1ff50, r3, 0x2, &(0x7f00000008c0)=[0xffffffffffffffff], &(0x7f0000000900)=[{0x0, 0x2, 0x8, 0x7}, {0x2, 0x5, 0x0, 0x9}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) 3m14.766842892s ago: executing program 63 (id=6860): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netstat\x00') r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0xe41fb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x2013, 0x32, 0x43a1bd56, 0x7, 0x2, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000ff1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) 3m12.626811022s ago: executing program 64 (id=6869): perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x10108, 0x2, 0x8406, 0x9, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000380)="7cda6c", 0x3ff, r0}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0xa, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x80, r4, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x57, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x8}}, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x80}, 0x1, 0x0, 0x0, 0x8810}, 0x0) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000001900)={0x80, 0x8, 0x7fff, 0x3, 0x1, 0x8, &(0x7f0000000900)='*'}) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f00000000c0)={0x0, &(0x7f0000001200)=""/119, &(0x7f00000002c0), &(0x7f0000000140), 0x7, r0}, 0x38) mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f00000000c0)={0x0, 0x0, 0xa0000}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r6, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x2686, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e0000000400000004"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) 3m5.714424869s ago: executing program 65 (id=6924): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x2) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x9a}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x48018}, 0x4004004) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setown(r7, 0x8, 0x0) socket(0x10, 0x80000, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x6, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0x5, 0xfffffffffffffffe, 0x800, 0xfffffffffffffffe, 0x8000000100000, 0x10000000000}, 0x0, &(0x7f0000000000)={0x1f, 0x2, 0x9, 0x1, 0xf, 0x0, 0xfffffffffffffeff, 0x43}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r6, @ANYBLOB="2400330001000000"], 0x24}}, 0x18) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x25e9b6, &(0x7f0000000240)={[{@grpquota}, {@nogrpid}, {@resgid={'resgid', 0x3d, r1}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'grpquota'}}]}, 0x5, 0x510, &(0x7f0000000ac0)="$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") r9 = socket(0x40000000015, 0x5, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x3, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x11) connect$inet(r9, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r9, 0x0, &(0x7f0000000040)) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000400000000000000fdfffdff1801000020756c2500000000002020205b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f1000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa10000f8ffffffb702000008000000b7030000bd00000085000000700000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 3m4.139606921s ago: executing program 66 (id=6949): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x4040, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000030000000400000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) pread64(r5, &(0x7f00000000c0)=""/23, 0x17, 0x1) 2m59.00274784s ago: executing program 67 (id=6982): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m57.125770881s ago: executing program 68 (id=7002): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) read$msr(r1, &(0x7f00000002c0)=""/108, 0x6c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffee0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000000040000000000000000000085"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x724}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r7, r6, 0x25, 0x4, @val=@perf_event={0x200}}, 0x18) connect$can_bcm(0xffffffffffffffff, &(0x7f00000006c0), 0x10) syz_emit_ethernet(0xfcbb, &(0x7f00000002c0)=ANY=[], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd7000fedbdf2500000000000000000000000000000001fe800000896c000000000000000000bb00000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000800000000000000400000000000000fdffffffffffff7ffeffffffff7f40000200000000000008030000000100000001000201000000004400050000000000000000000000000000000000000000002b00000000000000fc0200"], 0xfc}}, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000105000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Ls1cYB+CTwEsoVCIiONhBMLg0KsRBh2SwEtMsRsSKFGfBQQfBwUFSorMf/4DiF4iL2NlRjCAKcZKM4lxQXDKltD6FtnZpiyl9ua4lnHPf59w5/J7A/1o8/NRsNmMhhGbi75/+7jQ/XuyZHJ2aDiEW5kII+a++/LUSizp+u/U8WpeidTGRqe3fjL2ctt/23ldTh/GofhEP4YcQwuLjUfLfvo3P31nuKrm+sVzYXM0tPBTWnobm+/PdW/mlneGDbHmmKzsbfVgX8dbMT9VGju+apefdtoFP1Vojcx31pWMfM5//1p/z3+us1CuNib6TlcF0R/2yvB3l/ip/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgg53lrpLrG8uFzdXcwkNh7Wlovj/fvZVf2hk+yJZnurKz8be+i3hr5qdqI8d3zdLzbtvAp2qtkbmO+tKxd0e/+fFj/hIt9HX4Y/57nZV6pTHRd7IymO6oX5a3o9xf3+cPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCX8uPFnsnRqekQYmEuhPDt/fe9v+w3E2/1WNR3Hv2Wov1iIlPbvxl7OW2/7b2vpg4nEyEkfnfv4uNR8otWPoR/5OcAAAD//2wlhu4=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42, 0x0) 2m52.191593823s ago: executing program 69 (id=7025): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x60000600) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000535000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) unshare(0x22020600) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES8=r0], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x81) setresgid(0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xb, @none, 0x0, 0x1}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0xffffff34, 0x0}, 0x7}], 0x1, 0x60, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x20cc16, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x3, 0x22e, &(0x7f0000000480)="$eJzs3cFOE08cB/DfQqGF/z+Rm4mJyRoPeiJqfACM0cRIYoLpQW8kcmLjgV5aLvAYvoLv5QMYTlzMGNwuC21dSJWWms/nwo/5ziw7O2R3L52mKH27+yU6nSyWtmIrTrPYiKWoHMeo1lgLALA4TlOK7yml9ZTS5B7PG0Z7DwCARVQ9/9Nvn//xY8anBADcsPcfPr59sd2OnTzvRJwc97v9bvmzzF+/2X71JP9loxrzX5z0+93l8/xpPvrucJavxPowf1aOz8/j1Yjorsbjh2V+lr18t51fHt+OTzc+ewAAAAAAAAAAAAAAAAAAAAAAmI/7kVc26tZ6f5/NzdF8bZiXv13YH2hk/55W3Ku2B663B0pHs5gUAAAAAAAAAAAAAAAAAAAALJje4HB/tyj2DuqiHREXW1p1lLLL0YQiGx64qc8tKpZiuuFrw2leo/PnkZZseImaR7X+8BquTV7c6xTRui2rM22R/4XjpDu7RdGulnmsTzT/A6R0VkxewWpbjEtR5PV6rUZE8xk+2pl2XqcppeLrg4PeIFJj5/oe0Z7FjQgAAAAAAAAAAAAAAAAAALjwEfHxrLM8jzMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNnrDQ6rb/k/3N8tir0sBmVx0LuyOIqI/+PKztXfWonO/CYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+1nAAAA//8zfBSj") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x81, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) timer_create(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sync() sync() sync() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a800000000080108000000000000000002000000050003003a00000006000240890d00001400048008000140fffffff808000140fffffff9060002408c090000050003003a0000004c000480080001400000000708000940000000c208000240000000020800024000000002080008400000000308000140000000090800094000000003080004400000000108000440000000090600024000f6000009000100"], 0xa8}, 0x1, 0x0, 0x0, 0x58}, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xb, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) 2m29.71216513s ago: executing program 70 (id=7164): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40800) ioctl$SG_SET_DEBUG(r0, 0x227e, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x80000000, @empty, 0x2}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0x3, @loopback, 0x81}], 0x48) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x2002, 0x4, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000001c0)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x78, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x80}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x5}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x1d, 0x5, 0x2, 0x0, 0xffffffff, 0x4, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000090000000800000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r8, &(0x7f0000000200), 0x0}, 0x20) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x0, 0x30}, 0x18) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r10 = fcntl$dupfd(r9, 0x406, r9) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$NFT_MSG_GETCHAIN(r10, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x4, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0x12, 0xc, "6c4f8791fe10b52a01fb02bb592e"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) mmap(&(0x7f000057a000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0xb2993000) fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) 2m9.317163469s ago: executing program 71 (id=7285): syz_emit_ethernet(0x45, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2f, 0x37, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x23, 0x0, @opaque="e16f9c7e7907ff8c8bc8787b24cbb3fd428cfd080c7d26f42c995a"}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x1000}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f) 1m58.079834107s ago: executing program 3 (id=7374): getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) keyctl$session_to_parent(0x12) 1m58.01489963s ago: executing program 3 (id=7375): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408c815}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e22}, 0x6e, 0x0}}], 0x2, 0x40008004) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r5, &(0x7f0000000980)=[{{&(0x7f0000000240)=@can, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)=""/133, 0x85}], 0x1}, 0x1}, {{&(0x7f0000000580)=@nl=@unspec, 0x80, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/212, 0xd4}, {&(0x7f00000007c0)=""/35, 0x23}, {&(0x7f0000000800)=""/145, 0x91}], 0x3, &(0x7f0000000900)=""/123, 0x7b}, 0x6}], 0x2, 0x2, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x113) 1m57.614992633s ago: executing program 9 (id=7381): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m57.511595226s ago: executing program 9 (id=7383): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, 0x0, 0x0) sendto$packet(r0, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x6e) 1m57.453862758s ago: executing program 9 (id=7384): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, 0x0, 0x0) sendto$packet(r0, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x6e) (fail_nth: 1) 1m57.168079367s ago: executing program 9 (id=7386): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x553, &(0x7f00000009c0)="$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") syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x1f, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) r4 = memfd_create(&(0x7f0000000080)=',\xea\x02', 0x4) ftruncate(r4, 0x7000000) r5 = dup(r4) preadv2(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3fc03, 0x25f14}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}, @IFLA_GTP_ROLE={0x8, 0x4, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x14044080}, 0x0) iopl(0x3) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m57.035177132s ago: executing program 3 (id=7389): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 1m57.021196032s ago: executing program 3 (id=7390): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x3240880, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffffffffffffff98}}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = syz_clone(0xc008000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) tgkill(r0, r0, 0x13) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ppoll(&(0x7f0000000000)=[{r2, 0x3348}], 0x1, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000300)={[0x1]}, 0x8) 1m56.728520381s ago: executing program 9 (id=7393): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timerfd_create(0x3, 0x80800) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x4000, 0x0, 0x0, 0x2) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000}, 0x1c) connect$inet6(r0, &(0x7f0000001dc0)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7ff}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_flash={0x33, 0x7f, './file0/../file0/file0\x00'}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x104) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fffffff3180100006400000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94) 1m56.314010215s ago: executing program 9 (id=7398): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000140)) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0xff, 0x0, 0x2401}) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x0, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a00f1a, &(0x7f00000000c0), 0x82, 0x4a8, &(0x7f0000001c40)="$eJzs3LtvHMUfAPDvrl+/X54GAiQhAkOEsHjYsRMgBQ0IJIogQFAEqIztRFGcGMVGwlGUGIRCg4QiQQ2USPwFdDQIqJCQqKBHQRGkSUAUh/ZuNzmvffEj5zsn9/lIZ8/c7N7M7Ozszs74HEDHGsh+JBFbIuLXiNheiy7cYKD26+rlM+N/Xz4znkSl8tqfETEfceXymfFi02K/zXlkMI1IP0zyTBaamTt9fGxqavJUHh+ePfHO8Mzc6SeOnRg7Onl08uTowYMH9o88/dTok02pZ1avK7vPTu/Z9eIbF14aP3zh7R++zsq7JU+vr8ea9C5+ayCr+F+VqnLaw/H/m8puo9laF06621gQVqUrIrLm6sn6f6VSOVeXtj1e+GCZ3Tevc/GAdZTdm/qWeD+/L85XGkpumArcCpJodwmA9iju99nzb/Fq4fCj7S49W3sAyup9NX/VUrojzbfpKT3fNtNARBye/+fz7BXNmIcAAFjGx+OfHYrHlxr/pXFPLfBH9mNbvobSHxF3RMSdEXFXROyIiLsjqtveGxE7V5Jp3QJBeWlo8fgnvVjapKmrC9n475l8bWvh+K8Y/UV/Vx7bWq1/T3Lk2NTkvvyYDEZPXxYfuUEe3z7/8yeN0urHf9kry78YC+bluNhdmqCbGJsdqw5Km+DS+xG7u+PfSqVSqn9y7UAnEbErInav7qO3FYFjj361p9FGy9d/0cdd14QzofJlxCO19p+PUv0LyeL1yd6t19cnh/8XU5P7houzYrEffzr/SqP8V17/9ZG1/6aF53+e8sVcHuh/q369diYarFxuaZjH+d8+avhMs9bzvzd5vXo9KpZd3xubnT01EtGbHKrGF7w/en3fIl5sn9V/cG9EZHlU61/smVavcZG3/30RsSdfL7s/Ih7Iy/5gRDwUEXsb1j7i++cap22E9p+oa/8kyuf/zrO130X7z6060HX8u28a5b+y9j9QDQ3m71Svf8tYaQHXfuQAAADg1pFWZ26SdOhaOE2Hhmp/2LsjNqVT0zOzjx2ZfvfkRG2Gpz960mKma3vdfOhIMp9/Yi0+ms8VF+n783njT7uiGh8an56aaHPdodNtbtD/M793tbt0wLpbah1tdIkvtAG3n3L/TxdGz73cysIALeX72tC5lun/aavKAbSe+z90rqX6/7lS3FoA3J7c/6Fz6f/QufR/6Fyl/t8Vv7SrJEALreHr/AIbJvDq0Gr26otm5h7pBjkI5UDx70nqklb+/yBuGOi7+RK+eZPFSKNVB7PNFyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAm+S8AAP//i1LmAQ==") bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000140)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mq_open(&(0x7f0000000180)='-:\x00', 0x80, 0x60, &(0x7f0000000340)={0x100000000, 0x0, 0x7fffffd, 0x8}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000d40)={'#! ', '', [], 0xa, "36254d06c1bbe1873ab2f26be885522e6e3f12dd062b2aa3cb2c7a0fa66f0ec4bbec79"}, 0x27) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x238, 0xc8, 0x8, 0x238, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}, @common=@rt={{0x138}, {0x6, [0x2, 0x6], 0x6, 0x20, 0x6, [@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0x2e}, @private0, @dev={0xfe, 0x80, '\x00', 0x34}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x15}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, @private1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xc}, @private0={0xfc, 0x0, '\x00', 0x1}], 0x7}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x2, 0x100, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 1m56.262734927s ago: executing program 72 (id=7398): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000140)) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0xff, 0x0, 0x2401}) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x0, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a00f1a, &(0x7f00000000c0), 0x82, 0x4a8, &(0x7f0000001c40)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000140)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mq_open(&(0x7f0000000180)='-:\x00', 0x80, 0x60, &(0x7f0000000340)={0x100000000, 0x0, 0x7fffffd, 0x8}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000d40)={'#! ', '', [], 0xa, "36254d06c1bbe1873ab2f26be885522e6e3f12dd062b2aa3cb2c7a0fa66f0ec4bbec79"}, 0x27) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x238, 0xc8, 0x8, 0x238, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}, @common=@rt={{0x138}, {0x6, [0x2, 0x6], 0x6, 0x20, 0x6, [@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0x2e}, @private0, @dev={0xfe, 0x80, '\x00', 0x34}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x15}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, @private1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xc}, @private0={0xfc, 0x0, '\x00', 0x1}], 0x7}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x2, 0x100, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 1m55.975548147s ago: executing program 3 (id=7407): socketpair(0x8, 0x1, 0xffff, &(0x7f0000000040)={0x0, 0x0}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r1, 0x10e, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0x2, &(0x7f00000001c0), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0x1024b3, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x8, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(r3, &(0x7f00000008c0)=[{&(0x7f0000000440)=""/114, 0x72}, {&(0x7f0000000580)=""/140, 0x8c}, {&(0x7f0000000640)=""/255, 0xff}, {&(0x7f0000000740)=""/128, 0x80}, {0x0}, {&(0x7f00000007c0)=""/220, 0xdc}], 0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000040000701fefffff8ff000000017c0000040042800c00018006000600800a000014000280100014800c0019"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg$unix(r7, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x100888e, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@delalloc}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) 1m55.784198553s ago: executing program 0 (id=7410): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af80200000000b70800000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/92, @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000"], 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x353, @time={0x95}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m55.781086743s ago: executing program 3 (id=7411): r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180)=0x3, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x39, &(0x7f0000000100)={0x0, 0xecd, 0x20000, 0x3, 0x10c}, &(0x7f0000000280), &(0x7f0000001880), &(0x7f0000000000)) r2 = memfd_create(&(0x7f0000001940)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) fsetxattr$security_capability(r2, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0xffffffff, 0x1}, {0x0, 0x1}]}, 0x14, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) pwrite64(r3, &(0x7f0000000140), 0x0, 0xe7c) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x80, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="880100009fff40b9d50b3c82470a8a53e93801030300000000000000000001000006080003400000010028010b80551ae8865d700600124000030000080008400000008b2c00164000ebff1400000780ffffffff0000000300000009fffffff90000000701000800000004012000000030000d8014fc03000000000000000000000000000000000108000100ac1414bb080001"], 0x188}, 0x1, 0x0, 0x0, 0x90}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, @perf_bp={0x0, 0x9}, 0x0, 0x428f, 0x0, 0x1}, 0x0, 0xfff7ffffffffffff, r4, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') socket$netlink(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x44000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x10003, 0x85}, 0x10100c, 0x7, 0xffff, 0x7, 0xfffffffffffffffd, 0x4, 0x8, 0x0, 0x0, 0x0, 0x86}, 0x0, 0xffffffffffffffff, r8, 0x0) r9 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x1, 0x0) fchdir(r10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 1m55.718562315s ago: executing program 73 (id=7411): r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180)=0x3, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x39, &(0x7f0000000100)={0x0, 0xecd, 0x20000, 0x3, 0x10c}, &(0x7f0000000280), &(0x7f0000001880), &(0x7f0000000000)) r2 = memfd_create(&(0x7f0000001940)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) fsetxattr$security_capability(r2, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0xffffffff, 0x1}, {0x0, 0x1}]}, 0x14, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) pwrite64(r3, &(0x7f0000000140), 0x0, 0xe7c) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x80, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="880100009fff40b9d50b3c82470a8a53e93801030300000000000000000001000006080003400000010028010b80551ae8865d700600124000030000080008400000008b2c00164000ebff1400000780ffffffff0000000300000009fffffff90000000701000800000004012000000030000d8014fc03000000000000000000000000000000000108000100ac1414bb080001"], 0x188}, 0x1, 0x0, 0x0, 0x90}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, @perf_bp={0x0, 0x9}, 0x0, 0x428f, 0x0, 0x1}, 0x0, 0xfff7ffffffffffff, r4, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') socket$netlink(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x44000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x10003, 0x85}, 0x10100c, 0x7, 0xffff, 0x7, 0xfffffffffffffffd, 0x4, 0x8, 0x0, 0x0, 0x0, 0x86}, 0x0, 0xffffffffffffffff, r8, 0x0) r9 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x1, 0x0) fchdir(r10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 1m55.675786296s ago: executing program 0 (id=7414): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af80200000000b70800000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/92, @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m55.587767009s ago: executing program 0 (id=7415): socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000780)=@ethtool_rxnfc={0x32, 0x9, 0x2, {0x11, @hdata="26ccb4cd1d298462d0cab207ad0ab3affe54aff6b1c81fe7e7d2e53579dffda36aab20743a3eb2e35907ae56f1e4d7bf687e6581", {0x0, @broadcast, 0x0, 0x9, [0x401, 0x7]}, @ah_ip6_spec={@loopback, @dev={0xfe, 0x80, '\x00', 0x20}, 0x7, 0xab}, {0x0, @remote, 0x6, 0xcf32, [0x23, 0xb]}, 0x5, 0xfff}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB="8c010500", @ANYRES16=r4, @ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0x44014}, 0x8080) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x888) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x9315, 0x1f480, 0x0, 0x39d}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) creat(&(0x7f00000002c0)='./file0\x00', 0x104) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x6, 0x5}, 0x0, 0x0, 0xfffffffa, 0x6, 0x6, 0xc9, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, r5, 0x7d691000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m53.519914037s ago: executing program 0 (id=7423): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x200000, &(0x7f0000000340)={[{@block_validity}, {}, {@usrjquota}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$eJzs3d1rW+UfAPDvSZu9/37rYAz1Qgq7cDKXrq0vE4TNS9HhQO9naLMymi6jScdaB9su3I03MgQRB+If4L2Xw3/Av2KggyGj6IUXVk56smV56Uua2cx8PnC25znnpN/z5DnPk+/JSUgAQ2s8/ScX8XJEfJVEHG7aNhrZxvH1/VYf35hJlyTW1j75PYkkW9fYP8n+P5hVXoqIn7+IOJlrj1tdXpkvlsulxaw+UVu4OlFdXjl1eaE4V5orXZmanj7z1vTUu++83WPL2oO+fuHPbz++/8GZL4+vfvPjwyN3kzgXh7JtTe1IegyYutVcGY/x7I/l41zLjpM7CDKIdvKksXtGsnGej3QOOBwj2agH/vtuRsQaMJxGTAAwrBp5QOPavvl6fiN/Nz32Rfbo/fULoPb2j66/NxL76tdGB1aTZ66M0uvdsT7ET2P89Nu9u+kSLe+ntLrZh3gADbduR8Tp0dH2+S/J5r/ene70JmyL1hhbff0Bdu5+mv+80Sn/yT3Jf6JD/nOww9jtxebjP/ewD2G6SvO/9zrmv0+mrrGRrPa/es6XTy5dLpdOR8T/I+JE5Pem9Y3u55xZfdA1V27O/9Iljd/IBbPjeDi699nHzBZrxZ20udmj2xGvPM1/k2ib//fVc93W/k+fjwtbjHGsdO/Vbts2b3+z/mfAaz9EvNax/5/e0Uo2vj85UT8fJhpnRbs/7hz7pVv87bW//9L+P7Bx+8eS5vu11e3H+H7fX6Vu23o9//ckn9bLe7J114u12uJkxJ7ko/b1U08f26g39k/bf+L4xvNfp/N/f0R8tsX23zl6p+uug9D/s9vq/2cK+bY1HQoPPvz8u27xt9b/b9ZLJ7I1W5n/tnJcvZ3NAAAAAAAAMLhyEXEoklzhSTmXKxTWP99xNA7kypVq7eSlytKV2ah/V3Ys8rnGne7DTZ+HmMw+D9uoT7XUpyPiSER8PbK/Xi/MVMqzu914AAAAAAAAAAAAAAAAAAAAGBAHu3z/P/XryG4fHfDc+clvGF6bjv9+/NITMJC8/sPwMv5heBn/MLyMfxhexj8ML+MfhpfxD8PL+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+unD+fLqsrT6+MZPWZ68tL81Xrp2aLVXnCwtLM4WZyuLVwlylMlcuFWYqC5v9vXKlcnVyKpauT9RK1dpEdXnl4kJl6Urt4uWF4lzpYin/r7QKAAAAAAAAAAAAAAAAAAAAXizV5ZX5YrlcWlToWjgbA3EYPReSzXr5bHYy9BRidPcbqPAcCrs8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk38CAAD//2iMNWI=") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], &(0x7f0000000300)=""/246, 0x26, 0xf6, 0x1}, 0x28) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="cf", 0x206c}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x2, 0x6ef8eb021116b2d8) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a49007, 0x0) 1m52.18416654s ago: executing program 0 (id=7431): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c666c7573682c726f6469722c726f6469722c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c001762a07a915c8f6c3378b924fc250bdae45cd22bb33f29d72cf1c8410df88b83b9710b49374a748455718cc4af5f3ced9aa10632d595e9c8c3a89f41b650b9ebd4886ae65bf02b7c8ea4e76ef2cc241ac9f89f2753df98db0ba9558c753363f296424ec60e703fac2db7e9f31283852e115cf6acb8d77b3e5d68", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000140)) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0xff, 0x0, 0x2401}) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x0, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a00f1a, &(0x7f00000000c0), 0x82, 0x4a8, &(0x7f0000001c40)="$eJzs3LtvHMUfAPDvrl+/X54GAiQhAkOEsHjYsRMgBQ0IJIogQFAEqIztRFGcGMVGwlGUGIRCg4QiQQ2USPwFdDQIqJCQqKBHQRGkSUAUh/ZuNzmvffEj5zsn9/lIZ8/c7N7M7Ozszs74HEDHGsh+JBFbIuLXiNheiy7cYKD26+rlM+N/Xz4znkSl8tqfETEfceXymfFi02K/zXlkMI1IP0zyTBaamTt9fGxqavJUHh+ePfHO8Mzc6SeOnRg7Onl08uTowYMH9o88/dTok02pZ1avK7vPTu/Z9eIbF14aP3zh7R++zsq7JU+vr8ea9C5+ayCr+F+VqnLaw/H/m8puo9laF06621gQVqUrIrLm6sn6f6VSOVeXtj1e+GCZ3Tevc/GAdZTdm/qWeD+/L85XGkpumArcCpJodwmA9iju99nzb/Fq4fCj7S49W3sAyup9NX/VUrojzbfpKT3fNtNARBye/+fz7BXNmIcAAFjGx+OfHYrHlxr/pXFPLfBH9mNbvobSHxF3RMSdEXFXROyIiLsjqtveGxE7V5Jp3QJBeWlo8fgnvVjapKmrC9n475l8bWvh+K8Y/UV/Vx7bWq1/T3Lk2NTkvvyYDEZPXxYfuUEe3z7/8yeN0urHf9kry78YC+bluNhdmqCbGJsdqw5Km+DS+xG7u+PfSqVSqn9y7UAnEbErInav7qO3FYFjj361p9FGy9d/0cdd14QzofJlxCO19p+PUv0LyeL1yd6t19cnh/8XU5P7houzYrEffzr/SqP8V17/9ZG1/6aF53+e8sVcHuh/q369diYarFxuaZjH+d8+avhMs9bzvzd5vXo9KpZd3xubnT01EtGbHKrGF7w/en3fIl5sn9V/cG9EZHlU61/smVavcZG3/30RsSdfL7s/Ih7Iy/5gRDwUEXsb1j7i++cap22E9p+oa/8kyuf/zrO130X7z6060HX8u28a5b+y9j9QDQ3m71Svf8tYaQHXfuQAAADg1pFWZ26SdOhaOE2Hhmp/2LsjNqVT0zOzjx2ZfvfkRG2Gpz960mKma3vdfOhIMp9/Yi0+ms8VF+n783njT7uiGh8an56aaHPdodNtbtD/M793tbt0wLpbah1tdIkvtAG3n3L/TxdGz73cysIALeX72tC5lun/aavKAbSe+z90rqX6/7lS3FoA3J7c/6Fz6f/QufR/6Fyl/t8Vv7SrJEALreHr/AIbJvDq0Gr26otm5h7pBjkI5UDx70nqklb+/yBuGOi7+RK+eZPFSKNVB7PNFyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAm+S8AAP//i1LmAQ==") bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000140)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mq_open(&(0x7f0000000180)='-:\x00', 0x80, 0x60, &(0x7f0000000340)={0x100000000, 0x0, 0x7fffffd, 0x8}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000d40)={'#! ', '', [], 0xa, "36254d06c1bbe1873ab2f26be885522e6e3f12dd062b2aa3cb2c7a0fa66f0ec4bbec79"}, 0x27) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x238, 0xc8, 0x8, 0x238, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}, @common=@rt={{0x138}, {0x6, [0x2, 0x6], 0x6, 0x20, 0x6, [@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0x2e}, @private0, @dev={0xfe, 0x80, '\x00', 0x34}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x15}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, @private1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xc}, @private0={0xfc, 0x0, '\x00', 0x1}], 0x7}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x2, 0x100, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='./file0\x00') 1m51.675084547s ago: executing program 0 (id=7435): semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x9, 0x1000}, {0x3, 0x4, 0x1c00}, {0x4, 0x7, 0x800}], 0x3, &(0x7f0000000140)={0x0, 0x989680}) 1m51.246420312s ago: executing program 74 (id=7435): semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x9, 0x1000}, {0x3, 0x4, 0x1c00}, {0x4, 0x7, 0x800}], 0x3, &(0x7f0000000140)={0x0, 0x989680}) 1m33.571170491s ago: executing program 6 (id=7611): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x502, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'gretap0\x00', @random="841b034e96c8"}) getresuid(0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4c8, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2f, 0x4ba, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4a6, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x100, @val=0x80}, "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"}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x511, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x6, 0x8, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r2}, 0x50) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 1m32.946282811s ago: executing program 6 (id=7617): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) timerfd_gettime(0xffffffffffffffff, 0x0) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000800) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x87, r4}, {0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 1m32.192371167s ago: executing program 6 (id=7625): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x64, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m32.111034509s ago: executing program 6 (id=7628): perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x10108, 0x2, 0x8406, 0x9, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000380)="7cda6c", 0x3ff, r2}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x80, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x57, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x8}}, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x80}, 0x1, 0x0, 0x0, 0x8810}, 0x0) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000001900)={0x80, 0x8, 0x7fff, 0x3, 0x1, 0x8, &(0x7f0000000900)='*'}) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f00000000c0)={0x0, &(0x7f0000001200)=""/119, &(0x7f00000002c0), &(0x7f0000000140), 0x7, r2}, 0x38) dup2(r1, r0) mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f00000000c0)={0x0, 0x0, 0xa0000}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x2686, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e0000000400000004"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m31.709753222s ago: executing program 6 (id=7631): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$eJzs3bFra1UcB/DfTdMkT5FEcBLBCzo4PV7f6pIifVDMpGRQBy22BUmCkEKhVYydXF0cXV0Ewc1/wsX/QHAV3CxYuHKTe03SpiFB06rv81l6eu755vzOyS0lQ8794KVB7zCN44tPf45GI4lKO9pxmUQrKlH6POa0vwwA4L/sMsvit2xinVwSEY3NlQUAbNDa//+/33hJAMCGvf3Ou2/udjp7b6VpI54Mvjjt5p/s858RDyJi9zg+in4cxaNoxlVE9pdJ+0mWZaNqmmvFq4PRaTdPDt7/sXj93V8bMc7vRDNa4675/H5nbyedmMmP8jqeKeZv5/nH0YwXFsy/39l7vCAf3Vq89spM/Q+jGT99GB9HPw7HRUzyUYn4bCdN38i++v2T9/Ly8nwyOu3Wx+Omsq27f3cAAAAAAAAAAAAAAAAAAAAAAPi/elicnVOP8fk9eVdx/s7WVf7LdqSl1vz5PJN8Ur7QtfOBRll8XZ7P8yhN06wYOM1X48VqVO9n1QAAAAAAAAAAAAAAAAAAAPDvcnJ23jvo94+G/0ijPA2g/Fr/qvGLaz3tmTEvx/J4fTpXpWgumSu2yjFJxNLC8kWsvPY/imMPVt2oasz2PH9bzd9+t/Jb8M3ta38wf2l72f78jUatmObsvFfeXb2DZPEe1qPsaZQ3yQ+zY2qx6qS3XcrWuP2GJ7WFl5prb0Lt2XFjtGRMJMsKe/2Xyc6d9w6e6x8Nk+urqI13dWF8u2gU8ZtjGqvfz/lfyg2J0zoAAAAAAAAAAAAAAAAAAGCjpl/6neuePK7/Ymm0ktU3WxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3JXp8//XaIyK8AqDazE8ueclAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BT4MwAA//9YnFw0") r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000140)) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0xff, 0x0, 0x2401}) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x0, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a00f1a, &(0x7f00000000c0), 0x82, 0x4a8, &(0x7f0000001c40)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000d40)={'#! ', '', [], 0xa, "36254d06c1bbe1873ab2f26be885522e6e3f12dd062b2aa3cb2c7a0fa66f0ec4bbec79"}, 0x27) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x238, 0xc8, 0x8, 0x238, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}, @common=@rt={{0x138}, {0x6, [0x2, 0x6], 0x6, 0x20, 0x6, [@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0x2e}, @private0, @dev={0xfe, 0x80, '\x00', 0x34}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x15}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, @private1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xc}, @private0={0xfc, 0x0, '\x00', 0x1}], 0x7}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x2, 0x100, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 1m29.94007624s ago: executing program 6 (id=7641): perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x10108, 0x2, 0x8406, 0x9, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000380)="7cda6c", 0x3ff, r2}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x80, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x57, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x8}}, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x80}, 0x1, 0x0, 0x0, 0x8810}, 0x0) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000001900)={0x80, 0x8, 0x7fff, 0x3, 0x1, 0x8, &(0x7f0000000900)='*'}) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f00000000c0)={0x0, &(0x7f0000001200)=""/119, &(0x7f00000002c0), &(0x7f0000000140), 0x7, r2}, 0x38) dup2(r1, r0) mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f00000000c0)={0x0, 0x0, 0xa0000}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x2686, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e0000000400000004"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m29.895673231s ago: executing program 75 (id=7641): perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x10108, 0x2, 0x8406, 0x9, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000380)="7cda6c", 0x3ff, r2}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x80, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x57, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x8}}, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x80}, 0x1, 0x0, 0x0, 0x8810}, 0x0) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000001900)={0x80, 0x8, 0x7fff, 0x3, 0x1, 0x8, &(0x7f0000000900)='*'}) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f00000000c0)={0x0, &(0x7f0000001200)=""/119, &(0x7f00000002c0), &(0x7f0000000140), 0x7, r2}, 0x38) dup2(r1, r0) mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f00000000c0)={0x0, 0x0, 0xa0000}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x2686, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e0000000400000004"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m19.953777548s ago: executing program 5 (id=7722): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "b84c13d764315c96", "f8faaec9024e068ca57654b6e23fc4e5", "b91011c8", "ac3d7dd7d672f461"}, 0x28) recvfrom(r0, 0x0, 0x0, 0x40000073, 0x0, 0x0) 1m19.931014089s ago: executing program 5 (id=7723): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf251d000000006b3966", @ANYRES32=0x0, @ANYBLOB="04001f0008001d0002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x8000040) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x7, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff32}, 0xfffffffffffffd59) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000340)={{r4, &(0x7f0000000000)=']\x00', 0x400000, &(0x7f00000000c0)={@align=0x75f, {0x1, 0x7ff, 0x4, 0x2}}, 0x24, &(0x7f0000000100), &(0x7f0000000140)=0x38be}, {[0x4, 0xafe7, 0xc, 0x2]}, 0x3, 0xc2, &(0x7f0000000240)=""/194}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000340)={{r4, &(0x7f0000000000)=']\x00', 0x400000, &(0x7f00000000c0)={@align=0x75f, {0x1, 0x7ff, 0x4, 0x2}}, 0x24, &(0x7f0000000100), &(0x7f0000000140)=0x38be}, {[0x4, 0xafe7, 0xc, 0x2]}, 0x3, 0xc2, &(0x7f0000000240)=""/194}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYRES32=r3], 0x0, 0x5a, 0x0, 0x1, 0x80000}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x28) mq_open(&(0x7f0000000600)='batadv_sla`e_1\x00>9Fh\xf5\x9d \x9ab^s\xe8\xce\f\xcer#\x8c\xf82 g\x84;\xd8\xc0\x1a/A\xa8\xad=\xf8YV\x82,S\x80\xe8\xd16\x11\xf0Rts\a\x7f\x87\x80\x95\xb8W!\xe1~Sq\x7f\x1d\xa5\xc5\x1b\xa6\xa1\xc2\x16b\x9b\xd2\xf6\x04\xc4E\x12\xad:\xdc\xf6\xe1jg Xl\x88v#\xb6\xb2\xa2w\xcceO\xb9\xc1\x0f\x86\x97\xa4\"N\xa16!\x18\xa1\x9f\x82\xf7\x97}\ta\xb8q\x9a\x1f~th$%X\x9a!\xda^\xed\xa7\x8c\xc4o\xce,9;\xeb\xe2\xd8\x83)v\x95\xc5\xf1Cj\x02Fby\xb8\xcc\x03\xc7', 0x1, 0x0, 0x0) (async) mq_open(&(0x7f0000000600)='batadv_sla`e_1\x00>9Fh\xf5\x9d \x9ab^s\xe8\xce\f\xcer#\x8c\xf82 g\x84;\xd8\xc0\x1a/A\xa8\xad=\xf8YV\x82,S\x80\xe8\xd16\x11\xf0Rts\a\x7f\x87\x80\x95\xb8W!\xe1~Sq\x7f\x1d\xa5\xc5\x1b\xa6\xa1\xc2\x16b\x9b\xd2\xf6\x04\xc4E\x12\xad:\xdc\xf6\xe1jg Xl\x88v#\xb6\xb2\xa2w\xcceO\xb9\xc1\x0f\x86\x97\xa4\"N\xa16!\x18\xa1\x9f\x82\xf7\x97}\ta\xb8q\x9a\x1f~th$%X\x9a!\xda^\xed\xa7\x8c\xc4o\xce,9;\xeb\xe2\xd8\x83)v\x95\xc5\xf1Cj\x02Fby\xb8\xcc\x03\xc7', 0x1, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) (async) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r6, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) recvmmsg(r6, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) socket$inet(0x2, 0x1, 0x0) (async) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x1, &(0x7f0000000980)="9f", 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000480)={0x5, 0x0, 0x4}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback, 0x3681}, 0x1c) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback, 0x3681}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c1) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=5,size=0']) inotify_add_watch(r5, &(0x7f00000001c0)='./file1\x00', 0xe0000604) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) mmap(&(0x7f0000116000/0x3000)=nil, 0x3000, 0x300000b, 0x204031, r8, 0xe4772000) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0x9, @loopback, 0x400}}, 0x0, 0x0, 0x38, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e62, 0x6, @empty, 0x20}, 0x1c) 1m19.827211462s ago: executing program 5 (id=7724): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="020000009eddd9b3f440b9", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1808000000000000000000002000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045090100002000009500000000000000850000000c000000bf9800000000000056090000000000008500000084000000b70000000000000095000000000000006a9f121c1e1b1c712f5d32f5a7bfb6f0787817032d44b0c29972918fa8bd6d113245231e1b9cddea98bbc324e1c5242c775b717ac52b2e4a63eaf17c588e754e649664ef46eafe5f8271985168f477bd5cba5679fa9d31acab0ed63d3468705c14cc8c45393022235d12eb1f8e17e7"], &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) sendto$packet(r1, &(0x7f0000000680)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe4612b470d15be1dec450b4ec826d0474ae650acaa2e5685ce20b047aa872effbe0a4a4ee6f1743473d3f9e546244c3561a366932fe389c405d98fddbfaf94b0a0eb1a0497eac6a83b946f277a28eadf2491cb010de7676f6b2c4c23b844d0c504193ee3d5fc41ac012ddd59b44c05aface028fd56038ea888f7725682795e26c2159572fa25dea0330c95dfb", 0xd3, 0x4040840, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r9, 0x560a, &(0x7f0000001040)={0x0, 0x1, 0x4, 0x20, 0x0, "0000e5ff0100"}) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x2133, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f00000001c0), 0x19}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="1e00000000000000070000003a"], 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x8c) 1m17.812748068s ago: executing program 5 (id=7733): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000007f0020000000000000"], 0x24, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sync_file_range(r3, 0x8, 0x30, 0x5) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="a9e98c050000cd11df2512000e00"], 0x14}, 0x1, 0x0, 0x0, 0x4a8c0}, 0x40080) connect$inet6(r2, &(0x7f00000002c0)={0x4e24, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x0, 0x5, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180), 0x4) syz_genetlink_get_family_id$ethtool(0x0, r3) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000780)={{[0x0, 0xcb, 0x7, 0xb2]}, 0x0, 0x1, 0x9, 0x0, &(0x7f0000000440)=[{{@_ha_fsid={[0x0, 0x8]}, {0x7, 0x5, 0x9, 0x3ff}}, 0x9, 0x0, '/dev/bus/usb/00#/00#\x00'}, {{@align=0x1, {0x1, 0xfff8, 0x101, 0xf5a0}}, 0x9, 0x0, '^\x00'}, {{@_ha_fsid={[0xfffffff7, 0x7]}, {0xa, 0x0, 0x6, 0x44}}, 0xf218, 0x0, '/dev/bus/usb/00#/00#\x00'}, {{@_ha_fsid={[0xbc, 0x3]}, {0x6, 0xfff9, 0x4, 0x3}}, 0xcb, 0x0, '%.\x00'}, {{@align=0xffffffffffffffff, {0xdd, 0x7, 0x80000000, 0x5c18}}, 0x6, 0x0, 'ext4\x00'}]}) 1m17.311849574s ago: executing program 5 (id=7737): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000240)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {}, {@jqfmt_vfsv1}, {@grpid}]}, 0x2, 0x476, &(0x7f0000000540)="$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") r0 = syz_socket_connect_nvme_tcp() r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000002080)=0xffffffffffffffff, 0x4) sendto$inet_nvme_pdu(r0, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) close(r0) 1m16.918954107s ago: executing program 5 (id=7747): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xfff2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x4, 0x8, 0x5, 0x7}, 0x6, 0x5}, [{0x4b, 0x9ce, 0x6, 0x1, 0x9, 0x9}, {0x81, 0x7, 0x80000001, 0x1, 0x9f, 0x3}, {0x5, 0x5, 0x400, 0x4b13e0b0, 0x8, 0x9}, {0x4, 0x20, 0x4, 0x200, 0x8, 0x75}, {0x3, 0x5, 0x8, 0x6, 0xfcc4, 0x2}, {0x24, 0x80, 0x1fb979a6, 0x1, 0x180000, 0x401}, {0x1, 0xff, 0x9, 0xfffffffb, 0xb2e, 0x2}, {0x4, 0x0, 0x3, 0x1ff, 0xbb59, 0x4}, {0x3, 0x0, 0x81, 0x8, 0x0, 0x5}, {0x9, 0x2, 0x200, 0xe, 0xb370, 0x1}, {0x4, 0x3, 0x4, 0x8, 0x2, 0x8e}, {0x0, 0x4, 0x9, 0x8, 0x3}, {0x0, 0x8, 0x80000001, 0x0, 0x8001, 0x3}, {0x78d, 0x2, 0x2, 0x4, 0x4, 0x8}, {0x6, 0x100, 0x18f, 0x7, 0x0, 0x1}, {0x40, 0x4, 0x3, 0xffffffff, 0x9, 0x5}, {0xfffffeff, 0x9, 0x101, 0x2, 0xfffffbff, 0x9}, {0xffffffff, 0x0, 0x8, 0x3, 0x80000000, 0x2}, {0x81, 0x7, 0x1, 0x8, 0x101, 0x9}, {0x7, 0x5, 0x7d, 0x0, 0x0, 0x2}, {0xab, 0x40, 0x3, 0xfffffffd, 0x0, 0x3}, {0x4, 0x7, 0x6, 0x401, 0xfffffffe, 0x2}, {0x10001, 0xff, 0x0, 0x0, 0x5, 0x66a8}, {0x708c, 0x5, 0x401, 0x3, 0x0, 0x4}, {0x8, 0x0, 0x1, 0x5, 0x5, 0x7}, {0x3, 0xef60, 0x8, 0x7, 0xf4ec, 0x8400000}, {0x8, 0x7, 0x3, 0x8, 0x73, 0x91}, {0x7, 0x3, 0x0, 0xffffffff, 0x6, 0x7fd}, {0xa6fd, 0x4, 0x80000001, 0x1, 0xffffffe1, 0x401}, {0x3, 0x4024, 0x5, 0x5, 0xf, 0x2}, {0x1, 0x7, 0xc0, 0x7, 0x100, 0x2}, {0x1, 0x3, 0xffffff3a, 0xffffff0c, 0x4, 0x59d4}, {0x400, 0x5, 0x1ee, 0x4, 0x1, 0x91}, {0x2, 0x1, 0x5, 0x0, 0x9, 0x2}, {0x296, 0x6, 0x5, 0x8, 0x5, 0xa}, {0xf54, 0xd3, 0x5, 0x60, 0x9, 0x10}, {0x200, 0xff, 0x9, 0x1, 0x4, 0x3}, {0x7, 0x80, 0xb, 0x0, 0x4, 0x200}, {0x3, 0x9, 0x7, 0x3, 0x3, 0x3}, {0x0, 0x10, 0x3ff, 0x3, 0x3, 0x4}, {0xd57, 0xffffffff, 0x7, 0x6, 0xe, 0xf}, {0x74c3, 0x4, 0x7, 0x0, 0x5, 0x5}, {0x1, 0x3, 0x1, 0x3, 0x101, 0x2}, {0x7f, 0x2, 0x1, 0xb6b, 0x0, 0x5}, {0xffff, 0xb28, 0x7, 0x3, 0x3, 0x80000000}, {0x0, 0xfc3, 0x8, 0x0, 0xcc3, 0x101}, {0xf4cd, 0x4, 0x9, 0x9, 0x7fff, 0x9}, {0x6, 0x2, 0xb7, 0x1, 0x80000001, 0x6}, {0x2, 0x0, 0x6, 0x1, 0x6, 0x1}, {0x7ff, 0x237, 0xdfc, 0xffff, 0x400, 0x3}, {0x3, 0x3, 0x800, 0x2, 0xebf, 0x6}, {0x3263, 0x7, 0x80000001, 0x8, 0xb, 0x9}, {0x8, 0x5, 0x5, 0x2, 0x1, 0x40}, {0x7fb, 0x400, 0x3, 0x400, 0x7, 0xa0a}, {0x2, 0x1, 0xfffffff7, 0x8, 0x3, 0x8}, {0x487f, 0x800, 0x7ff, 0x6, 0x10001, 0x80000000}, {0x7fc, 0xd, 0x1ff, 0x6, 0xfffffff9, 0xffffff01}, {0x3, 0x3, 0x480, 0x8000, 0x8, 0x3}, {0x0, 0x8, 0x7, 0x5, 0x0, 0x101}, {0x5, 0x7, 0xd, 0x80000000, 0xffff, 0x2}, {0x4, 0x9, 0xfff, 0xffffff81, 0x0, 0x6f}, {0x3, 0x2, 0x6bfe1ad4, 0x3, 0x2, 0x80008}, {0x2, 0x101, 0x80, 0xfff, 0x9, 0x9}, {0x25, 0x4, 0xfffffbff, 0x77cf, 0x800, 0x9}, {0x2, 0x4, 0x101, 0x5, 0x101, 0xd05}, {0xfffffffe, 0xd, 0x0, 0x5, 0x7, 0x7941}, {0x2, 0x7, 0x7, 0x40, 0x9, 0x6}, {0x2, 0x370, 0x1, 0x7, 0x7, 0x9}, {0x3, 0x9, 0xc688, 0x3, 0x80000001, 0x3}, {0x5, 0x8, 0x3, 0x6, 0x7fff, 0x3}, {0x0, 0x2, 0x8, 0x10, 0x2, 0x5b5}, {0x2, 0x5, 0x4, 0xa, 0x19, 0x4}, {0xfffffffc, 0x95, 0x8, 0x2028, 0x5, 0x7}, {0x30, 0x1, 0x5, 0x1, 0x4, 0x5}, {0x0, 0x968d, 0x101, 0x5c, 0xff, 0xff}, {0x7, 0x5, 0x9, 0x8, 0x0, 0x7}, {0x6, 0x8, 0x934, 0x9}, {0x0, 0x3, 0x2, 0x10000, 0xc, 0x101}, {0x4, 0x1, 0x6, 0x7, 0xf582, 0x7}, {0x2, 0x7, 0x5, 0xa6, 0x3, 0x3de8}, {0xb9, 0x1, 0x8001, 0x1, 0xe9, 0xb440}, {0x1ff, 0x6, 0x3928, 0x5, 0x80000000, 0x3ff}, {0x8, 0x7fff, 0x7, 0xff, 0x81, 0x1b2}, {0x5, 0x3, 0x1, 0xd, 0x1, 0x800}, {0xc, 0x2, 0x78fd, 0x7, 0x7ff, 0x4}, {0x5, 0x34e1, 0x3, 0x7fffffff, 0x4, 0xd}, {0x1, 0x800, 0x3, 0xff, 0x2, 0x6}, {0x1, 0x8f2, 0x5, 0x2800000, 0x2, 0x7}, {0x401, 0x7ff, 0x6, 0x2a7318d7, 0x9, 0xffffff80}, {0x80000, 0xbd, 0x8, 0x0, 0x3b, 0x6}, {0xcd, 0x800, 0x7, 0x5}, {0x2, 0xb, 0xffffffff, 0x3, 0x7, 0x9}, {0x5, 0x0, 0x7fffffff, 0xb, 0x7, 0x4}, {0x9, 0x8, 0x5, 0x1ff, 0x2, 0xfffffffb}, {0x9, 0x276, 0x9, 0xffff, 0x93}, {0x8095, 0xfffffff2, 0x3, 0x3, 0x7, 0x8}, {0x76d, 0x9, 0x7, 0x1004, 0x3, 0xd}, {0x5, 0x4, 0x69, 0x3, 0x7, 0x4}, {0x2, 0x3, 0xfffffe01, 0x7, 0x8, 0x1}, {0x1, 0x7c4, 0x18e99bd9, 0x2, 0x9, 0x5}, {0x9, 0x2, 0x6, 0xfffffffb, 0x0, 0x441}, {0xffff0001, 0x5, 0x10000000, 0x9, 0x0, 0x200}, {0x2, 0x6, 0x0, 0x1, 0x2, 0x7}, {0x9, 0x80000001, 0x3, 0x4, 0x0, 0x4}, {0x0, 0x7, 0x2, 0x49, 0xffff, 0x1}, {0x9, 0x3877a981, 0x2, 0x5, 0x7c1e}, {0x6, 0x7, 0x1, 0x37, 0x101, 0x6}, {0x5, 0x400, 0xcc, 0xa8, 0x200, 0x10}, {0x4, 0x101, 0x8000, 0x8, 0x3, 0x9}, {0x9, 0x0, 0x6, 0x4, 0x4c14, 0x8}, {0x8, 0x3, 0x2, 0x5, 0x1, 0xa0}, {0x8, 0xe5, 0x68e4, 0xc, 0x340a, 0x20200000}, {0x401, 0x7f, 0x0, 0x0, 0x3, 0x98000000}, {0x6, 0x56, 0x10, 0x1, 0x29, 0x40}, {0xfffffff7, 0xffad, 0x5, 0x5d, 0xff, 0xe8000000}, {0xfffffff8, 0x40f1b4ea, 0x10000, 0x5, 0x3, 0x3}, {0x3, 0xd26, 0x7, 0x7, 0x5, 0x2}, {0xffffffff, 0xfffe, 0x8, 0x7, 0x2, 0x5}, {0x1, 0x6, 0x4, 0x1, 0x3, 0x8}, {0x7, 0x1ff80, 0x2006, 0x36, 0x6, 0x9}, {0x5, 0x9, 0xb, 0xf1f5, 0x5, 0x2}, {0x4000000, 0x8, 0xfffffffa, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x5, 0x7f, 0x6, 0x0, 0xffff, 0x1}, {0x9, 0x2, 0x3, 0x9, 0x4, 0x5}, {0x1119, 0xd75, 0xf, 0x1, 0x5, 0x1}, {0x6, 0x401, 0x2, 0x5359, 0x80000001, 0x8}, {0xb, 0x6db, 0x7, 0x200, 0x80, 0x6}], [{0x3}, {0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x1}, {0x3, 0x2}, {0x2}, {0x1}, {0x0, 0x1}, {0x5}, {0x2}, {}, {}, {0x4, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x7, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x2}, {0x5, 0x1}, {}, {0x5}, {0x3}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x46b716bf411929ed, 0x1}, {}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x2, 0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES8=r0], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'hsr0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="ffff0000"], 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m16.887388988s ago: executing program 76 (id=7747): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xfff2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x4, 0x8, 0x5, 0x7}, 0x6, 0x5}, [{0x4b, 0x9ce, 0x6, 0x1, 0x9, 0x9}, {0x81, 0x7, 0x80000001, 0x1, 0x9f, 0x3}, {0x5, 0x5, 0x400, 0x4b13e0b0, 0x8, 0x9}, {0x4, 0x20, 0x4, 0x200, 0x8, 0x75}, {0x3, 0x5, 0x8, 0x6, 0xfcc4, 0x2}, {0x24, 0x80, 0x1fb979a6, 0x1, 0x180000, 0x401}, {0x1, 0xff, 0x9, 0xfffffffb, 0xb2e, 0x2}, {0x4, 0x0, 0x3, 0x1ff, 0xbb59, 0x4}, {0x3, 0x0, 0x81, 0x8, 0x0, 0x5}, {0x9, 0x2, 0x200, 0xe, 0xb370, 0x1}, {0x4, 0x3, 0x4, 0x8, 0x2, 0x8e}, {0x0, 0x4, 0x9, 0x8, 0x3}, {0x0, 0x8, 0x80000001, 0x0, 0x8001, 0x3}, {0x78d, 0x2, 0x2, 0x4, 0x4, 0x8}, {0x6, 0x100, 0x18f, 0x7, 0x0, 0x1}, {0x40, 0x4, 0x3, 0xffffffff, 0x9, 0x5}, {0xfffffeff, 0x9, 0x101, 0x2, 0xfffffbff, 0x9}, {0xffffffff, 0x0, 0x8, 0x3, 0x80000000, 0x2}, {0x81, 0x7, 0x1, 0x8, 0x101, 0x9}, {0x7, 0x5, 0x7d, 0x0, 0x0, 0x2}, {0xab, 0x40, 0x3, 0xfffffffd, 0x0, 0x3}, {0x4, 0x7, 0x6, 0x401, 0xfffffffe, 0x2}, {0x10001, 0xff, 0x0, 0x0, 0x5, 0x66a8}, {0x708c, 0x5, 0x401, 0x3, 0x0, 0x4}, {0x8, 0x0, 0x1, 0x5, 0x5, 0x7}, {0x3, 0xef60, 0x8, 0x7, 0xf4ec, 0x8400000}, {0x8, 0x7, 0x3, 0x8, 0x73, 0x91}, {0x7, 0x3, 0x0, 0xffffffff, 0x6, 0x7fd}, {0xa6fd, 0x4, 0x80000001, 0x1, 0xffffffe1, 0x401}, {0x3, 0x4024, 0x5, 0x5, 0xf, 0x2}, {0x1, 0x7, 0xc0, 0x7, 0x100, 0x2}, {0x1, 0x3, 0xffffff3a, 0xffffff0c, 0x4, 0x59d4}, {0x400, 0x5, 0x1ee, 0x4, 0x1, 0x91}, {0x2, 0x1, 0x5, 0x0, 0x9, 0x2}, {0x296, 0x6, 0x5, 0x8, 0x5, 0xa}, {0xf54, 0xd3, 0x5, 0x60, 0x9, 0x10}, {0x200, 0xff, 0x9, 0x1, 0x4, 0x3}, {0x7, 0x80, 0xb, 0x0, 0x4, 0x200}, {0x3, 0x9, 0x7, 0x3, 0x3, 0x3}, {0x0, 0x10, 0x3ff, 0x3, 0x3, 0x4}, {0xd57, 0xffffffff, 0x7, 0x6, 0xe, 0xf}, {0x74c3, 0x4, 0x7, 0x0, 0x5, 0x5}, {0x1, 0x3, 0x1, 0x3, 0x101, 0x2}, {0x7f, 0x2, 0x1, 0xb6b, 0x0, 0x5}, {0xffff, 0xb28, 0x7, 0x3, 0x3, 0x80000000}, {0x0, 0xfc3, 0x8, 0x0, 0xcc3, 0x101}, {0xf4cd, 0x4, 0x9, 0x9, 0x7fff, 0x9}, {0x6, 0x2, 0xb7, 0x1, 0x80000001, 0x6}, {0x2, 0x0, 0x6, 0x1, 0x6, 0x1}, {0x7ff, 0x237, 0xdfc, 0xffff, 0x400, 0x3}, {0x3, 0x3, 0x800, 0x2, 0xebf, 0x6}, {0x3263, 0x7, 0x80000001, 0x8, 0xb, 0x9}, {0x8, 0x5, 0x5, 0x2, 0x1, 0x40}, {0x7fb, 0x400, 0x3, 0x400, 0x7, 0xa0a}, {0x2, 0x1, 0xfffffff7, 0x8, 0x3, 0x8}, {0x487f, 0x800, 0x7ff, 0x6, 0x10001, 0x80000000}, {0x7fc, 0xd, 0x1ff, 0x6, 0xfffffff9, 0xffffff01}, {0x3, 0x3, 0x480, 0x8000, 0x8, 0x3}, {0x0, 0x8, 0x7, 0x5, 0x0, 0x101}, {0x5, 0x7, 0xd, 0x80000000, 0xffff, 0x2}, {0x4, 0x9, 0xfff, 0xffffff81, 0x0, 0x6f}, {0x3, 0x2, 0x6bfe1ad4, 0x3, 0x2, 0x80008}, {0x2, 0x101, 0x80, 0xfff, 0x9, 0x9}, {0x25, 0x4, 0xfffffbff, 0x77cf, 0x800, 0x9}, {0x2, 0x4, 0x101, 0x5, 0x101, 0xd05}, {0xfffffffe, 0xd, 0x0, 0x5, 0x7, 0x7941}, {0x2, 0x7, 0x7, 0x40, 0x9, 0x6}, {0x2, 0x370, 0x1, 0x7, 0x7, 0x9}, {0x3, 0x9, 0xc688, 0x3, 0x80000001, 0x3}, {0x5, 0x8, 0x3, 0x6, 0x7fff, 0x3}, {0x0, 0x2, 0x8, 0x10, 0x2, 0x5b5}, {0x2, 0x5, 0x4, 0xa, 0x19, 0x4}, {0xfffffffc, 0x95, 0x8, 0x2028, 0x5, 0x7}, {0x30, 0x1, 0x5, 0x1, 0x4, 0x5}, {0x0, 0x968d, 0x101, 0x5c, 0xff, 0xff}, {0x7, 0x5, 0x9, 0x8, 0x0, 0x7}, {0x6, 0x8, 0x934, 0x9}, {0x0, 0x3, 0x2, 0x10000, 0xc, 0x101}, {0x4, 0x1, 0x6, 0x7, 0xf582, 0x7}, {0x2, 0x7, 0x5, 0xa6, 0x3, 0x3de8}, {0xb9, 0x1, 0x8001, 0x1, 0xe9, 0xb440}, {0x1ff, 0x6, 0x3928, 0x5, 0x80000000, 0x3ff}, {0x8, 0x7fff, 0x7, 0xff, 0x81, 0x1b2}, {0x5, 0x3, 0x1, 0xd, 0x1, 0x800}, {0xc, 0x2, 0x78fd, 0x7, 0x7ff, 0x4}, {0x5, 0x34e1, 0x3, 0x7fffffff, 0x4, 0xd}, {0x1, 0x800, 0x3, 0xff, 0x2, 0x6}, {0x1, 0x8f2, 0x5, 0x2800000, 0x2, 0x7}, {0x401, 0x7ff, 0x6, 0x2a7318d7, 0x9, 0xffffff80}, {0x80000, 0xbd, 0x8, 0x0, 0x3b, 0x6}, {0xcd, 0x800, 0x7, 0x5}, {0x2, 0xb, 0xffffffff, 0x3, 0x7, 0x9}, {0x5, 0x0, 0x7fffffff, 0xb, 0x7, 0x4}, {0x9, 0x8, 0x5, 0x1ff, 0x2, 0xfffffffb}, {0x9, 0x276, 0x9, 0xffff, 0x93}, {0x8095, 0xfffffff2, 0x3, 0x3, 0x7, 0x8}, {0x76d, 0x9, 0x7, 0x1004, 0x3, 0xd}, {0x5, 0x4, 0x69, 0x3, 0x7, 0x4}, {0x2, 0x3, 0xfffffe01, 0x7, 0x8, 0x1}, {0x1, 0x7c4, 0x18e99bd9, 0x2, 0x9, 0x5}, {0x9, 0x2, 0x6, 0xfffffffb, 0x0, 0x441}, {0xffff0001, 0x5, 0x10000000, 0x9, 0x0, 0x200}, {0x2, 0x6, 0x0, 0x1, 0x2, 0x7}, {0x9, 0x80000001, 0x3, 0x4, 0x0, 0x4}, {0x0, 0x7, 0x2, 0x49, 0xffff, 0x1}, {0x9, 0x3877a981, 0x2, 0x5, 0x7c1e}, {0x6, 0x7, 0x1, 0x37, 0x101, 0x6}, {0x5, 0x400, 0xcc, 0xa8, 0x200, 0x10}, {0x4, 0x101, 0x8000, 0x8, 0x3, 0x9}, {0x9, 0x0, 0x6, 0x4, 0x4c14, 0x8}, {0x8, 0x3, 0x2, 0x5, 0x1, 0xa0}, {0x8, 0xe5, 0x68e4, 0xc, 0x340a, 0x20200000}, {0x401, 0x7f, 0x0, 0x0, 0x3, 0x98000000}, {0x6, 0x56, 0x10, 0x1, 0x29, 0x40}, {0xfffffff7, 0xffad, 0x5, 0x5d, 0xff, 0xe8000000}, {0xfffffff8, 0x40f1b4ea, 0x10000, 0x5, 0x3, 0x3}, {0x3, 0xd26, 0x7, 0x7, 0x5, 0x2}, {0xffffffff, 0xfffe, 0x8, 0x7, 0x2, 0x5}, {0x1, 0x6, 0x4, 0x1, 0x3, 0x8}, {0x7, 0x1ff80, 0x2006, 0x36, 0x6, 0x9}, {0x5, 0x9, 0xb, 0xf1f5, 0x5, 0x2}, {0x4000000, 0x8, 0xfffffffa, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x5, 0x7f, 0x6, 0x0, 0xffff, 0x1}, {0x9, 0x2, 0x3, 0x9, 0x4, 0x5}, {0x1119, 0xd75, 0xf, 0x1, 0x5, 0x1}, {0x6, 0x401, 0x2, 0x5359, 0x80000001, 0x8}, {0xb, 0x6db, 0x7, 0x200, 0x80, 0x6}], [{0x3}, {0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x1}, {0x3, 0x2}, {0x2}, {0x1}, {0x0, 0x1}, {0x5}, {0x2}, {}, {}, {0x4, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x7, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x2}, {0x5, 0x1}, {}, {0x5}, {0x3}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x46b716bf411929ed, 0x1}, {}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x2, 0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES8=r0], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'hsr0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="ffff0000"], 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r6, 0xffffffffffffffff, 0x0) 6.652888882s ago: executing program 4 (id=8505): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000140)) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0xff, 0x0, 0x2401}) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x238, 0xc8, 0x8, 0x238, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}, @common=@rt={{0x138}, {0x6, [0x2, 0x6], 0x6, 0x20, 0x6, [@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0x2e}, @private0, @dev={0xfe, 0x80, '\x00', 0x34}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x15}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, @private1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xc}, @private0={0xfc, 0x0, '\x00', 0x1}], 0x7}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x2, 0x100, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='./file0\x00') 6.505250996s ago: executing program 4 (id=8512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{0x0}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) r2 = creat(0x0, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000004000000040000001500000000000000", @ANYRES32, @ANYBLOB="0000000000003635000000000000000000006faf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r4, &(0x7f0000000340), &(0x7f0000000180)=""/122}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r8 = timerfd_create(0x7, 0x800) timerfd_gettime(r8, &(0x7f0000000140)) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x8, 0xfff3}, {}, {0xf, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) dup3(r9, r5, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) writev(r2, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r2, &(0x7f00000001c0)='d', 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0xf423f, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 2.473796269s ago: executing program 2 (id=8567): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0xff03, 0x260, 0xffffffff, 0x130, 0x130, 0x98, 0x98, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010100, @multicast1, 0xffffffff, 0xff, 'ipvlan1\x00', 'sit0\x00', {}, {}, 0x62, 0x1c6a0dc5b9630812, 0x30}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'macsec0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x83, 0x7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"}) r2 = syz_open_pts(r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6200, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x10912, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x230, 0x2e8, 0x2e8, 0x230, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x8, 0x80, 0x1}}, @common=@unspec=@state={{0x28}, {0x1000}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x400, 0xa66, 0x2}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x8000000, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) close_range(r4, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140), 0x1, 0x7c0, &(0x7f0000001840)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x3e1403, 0x15) pwrite64(r6, &(0x7f0000000280)="bdfc938ac2a6124e7fa5ecb4bf98161439f7539674e75d14e18ecdc4ffdddf2b97049d7542bd1c821de9868bce6324306c1528a5ca382d1883cc9135eb557901cb6dde3f615900f0308a30bb42a98bb1e2060017e6227c719fb170f82bc2a3d83bb92844", 0x64, 0xe7c) ftruncate(r3, 0xd) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000003b0009002bbd7000fddbff2502"], 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x4000014) ioctl$TCGETS(r2, 0x5401, &(0x7f00000000c0)) 2.269436835s ago: executing program 4 (id=8569): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x3, 0x6, 0x6}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d333000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00"], 0x158}}, 0x0) io_cancel(0x0, 0x0, &(0x7f0000000480)) 2.268209155s ago: executing program 4 (id=8571): perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7ffb, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x2, 0x80805, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f00000000c0)=0x84) clock_gettime(0x6, &(0x7f0000000000)) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)=ANY=[@ANYBLOB="500000001800010000000000000003001d01000008000e00", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1500010000000000000000007721f5438b20ffdf0300000008000900", @ANYRESOCT], 0x50}, 0x1, 0x0, 0x0, 0xa8d0}, 0x0) 2.162494259s ago: executing program 2 (id=8573): unshare(0x6020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x8, 0x9, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.098606031s ago: executing program 2 (id=8574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) 1.994379094s ago: executing program 2 (id=8576): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socket$kcm(0x2, 0xa, 0x2) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000001ac0)=[{0xfffffffffffffffd, &(0x7f0000000000)=0x1, 0x2}, {0x5ab, &(0x7f00000000c0)=0x8000, 0x2}, {0x8000000000000001, &(0x7f0000000680)=0x3, 0x82}, {0x7ff, &(0x7f00000006c0), 0x2}, {0x3, &(0x7f0000000700)=0xb8, 0x2}, {0x1, &(0x7f0000000740)=0x2, 0x2}, {0x0, &(0x7f0000000780)=0x5, 0x82}, {0x7, &(0x7f00000007c0)=0x3, 0x2}, {0xffffffffffffffff, &(0x7f0000000800)=0xfffffffffffffff7, 0x82}, {0x7, &(0x7f0000000840)=0x6, 0x2}, {0x8, &(0x7f0000000880)=0xae1, 0x2}, {0xf, &(0x7f00000008c0)=0x4, 0x2}, {0x0, &(0x7f0000000940)=0x4, 0x2}, {0x7fff, &(0x7f0000000980)=0x2, 0x82}, {0x5, 0x0}, {0x3, &(0x7f0000000a00)=0xee9, 0x82}, {0xff, &(0x7f0000000a40)=0x3, 0x82}, {0x3c32, &(0x7f0000000a80)=0x6, 0x82}, {0xc, &(0x7f0000000ac0)=0x10000000008, 0x82}, {0xe800000000000000, &(0x7f0000000b00)=0x1, 0x2}, {0x6, 0x0, 0x2}, {0x7fffffffffffffff, &(0x7f0000000bc0), 0x2}, {0x8, &(0x7f0000002740)=0x1, 0x2}, {0x3, 0x0, 0x2}, {0x2, &(0x7f0000000cc0)=0x3, 0x82}, {0x8001, &(0x7f0000000d00)=0x4e5c, 0x2}, {0x7, &(0x7f0000000d80)=0x5, 0x82}, {0x3a, &(0x7f0000000e00)=0xfffffffffffffbff, 0x2}, {0xbbb, &(0x7f0000000e40)=0x4, 0x82}, {0x1, &(0x7f0000000e80)=0x100000001, 0x82}, {0xe5, &(0x7f0000000ec0)=0x5, 0x2}, {0x1000000000000005, &(0x7f0000000f00), 0x2}, {0x0, &(0x7f0000000f40)=0x8, 0x82}, {0x0, &(0x7f0000000f80)=0xffffffffffffffff, 0x2}, {0x9, &(0x7f0000000fc0)=0x4, 0x2}, {0x7f, &(0x7f0000001000)=0x6, 0x82}, {0x80000000, &(0x7f0000001040)=0x5, 0x82}, {0xfff, &(0x7f00000010c0)=0x5, 0x82}, {0x9, &(0x7f0000001100)=0x3, 0x2}, {0xa4, &(0x7f0000001140)=0x2, 0x2}, {0x400, &(0x7f0000001180)=0x8, 0x82}, {0x7, &(0x7f00000011c0)}, {0x2, &(0x7f0000001200)=0x4, 0x2}, {0x8, &(0x7f0000001240)=0x38, 0x2}, {0x200, &(0x7f0000001280), 0x82}, {0x2, &(0x7f00000012c0)=0x2a, 0x82}, {0x3cb, &(0x7f0000001300)=0xff, 0x2}, {0x3, &(0x7f0000001340)=0x2fa, 0x2}, {0xa, &(0x7f0000001380)=0x1, 0x2}, {0x3, &(0x7f00000013c0)=0x10000}, {0x2, &(0x7f0000001400)=0x5, 0x82}, {0x8001, &(0x7f0000001440)=0x8000, 0x82}, {0x5, &(0x7f0000001480), 0x2}, {0x2ddb2a85, &(0x7f00000014c0)=0x9, 0x82}, {0x7, &(0x7f0000001500)=0x4, 0x2}, {0x8, &(0x7f0000001580)=0x101, 0x2}, {0xfffffffffffffff8, 0x0, 0x82}, {0x8, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0x3, 0x0, 0x41}, {0x40, 0x0, 0x2}], 0x3d, 0x0, &(0x7f00000022c0)={0x77359400}, 0x0) 1.406470784s ago: executing program 7 (id=8579): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x81, 0x0, 0x0, 0x0, 0x9, 0xb00d8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xc, 0x1}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x9, 0x2, 0x0, 0x5, 0x0, 0x80000001}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbbce}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x7) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e9, 0x2, 0x0, 0x8, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000c80)=ANY=[], 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r5, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000200000008500000095000000b700000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x1016, &(0x7f00000003c0)=""/4118, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) wait4(r2, 0x0, 0x1000000, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x8000000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000002c0)={r7, 0x9}, 0x8) capget(&(0x7f00000000c0)={0x20071026, r2}, &(0x7f0000000300)={0x7, 0x9, 0x9, 0x4003fc, 0xff9a, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000001400)=ANY=[@ANYBLOB="18000700080000000000000000000000180100002020782500000000001c20207b1af8ff00000100007f5b7992fcf0dca1974d8fa3986fbcf8ffffffb702001008000000b703000000000000850000006200009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.405873924s ago: executing program 2 (id=8580): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x1214040, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x9400002f) umount2(&(0x7f0000000000)='./file0\x00', 0x2) 1.364932345s ago: executing program 2 (id=8583): socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_procfs$pagemap(0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x20402) creat(0x0, 0xecf86c37d53049cc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300080c5) setsockopt$sock_attach_bpf(r2, 0x1, 0x9, &(0x7f0000000040), 0x4) splice(r0, 0x0, r1, 0x0, 0x38f9, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@rand_addr=0x64010101, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x87}, {@in=@broadcast, 0x4d3, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x23}, {0x0, 0x192, 0x6, 0xd, 0xc1, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x4, 0x1f, 0x78}, {0x2, 0x5}, 0x4070bd2a, 0x3503, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8, 0x16, 0x10000}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xb, 0x0, &(0x7f00000002c0)="186bf7ffffffffffffffef", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x7, 0x9, 0xfff, 0x1, 0x6}, 0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x10, 0x0, 0x0, 0xce024d, 0xfffffffd}, 0x9c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737908000000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) close(r5) 1.314111516s ago: executing program 8 (id=8586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) 1.313140587s ago: executing program 8 (id=8587): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c666c7573682c726f6469722c726f6469722c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c001762a07a915c8f6c3378b924fc250bdae45cd22bb33f29d72cf1c8410df88b83b9710b49374a748455718cc4af5f3ced9aa10632d595e9c8c3a89f41b650b9ebd4886ae65bf02b7c8ea4e76ef2cc241ac9f89f2753df98db0ba9558c753363f296424ec60e703fac2db7e9f31283852e115cf6acb8d77b3e5d68", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000140)) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0xff, 0x0, 0x2401}) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x238, 0xc8, 0x8, 0x238, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}, @common=@rt={{0x138}, {0x6, [0x2, 0x6], 0x6, 0x20, 0x6, [@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0x2e}, @private0, @dev={0xfe, 0x80, '\x00', 0x34}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x15}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, @private1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xc}, @private0={0xfc, 0x0, '\x00', 0x1}], 0x7}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x2, 0x100, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='./file0\x00') 1.275531488s ago: executing program 8 (id=8588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x105, &(0x7f0000000400)=""/261, 0xb6df4c32c1d5c814, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x24) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000080)={0x6, 0x4, 0x25a4, 0x8000000000000000, 0x5fa, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee", 0x15}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x80000}]}, {0x0, [0x0, 0x51, 0x5f, 0x3e, 0x0, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2e, 0x0, 0x1, 0x5}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0xb, @any, 0x0, 0x1}, 0xe) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x8100, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000044) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r5, r5, 0x0, 0xe3aa6ea) creat(&(0x7f00000001c0)='./file1\x00', 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480240001800b000100736f636b65740000140002800800024000000003080001400000000228000180080001006e6174001c0002800800054000000003080002400020000208000140000000010900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x22, &(0x7f0000000380)={&(0x7f0000001000)={[{&(0x7f00000000c0)="f39d9cc08b98ffa7e9908d8d1124054a1d99b7faa1fe5b545c78015e1557c6dd3bff4274c7e23620345610d95d5fee36338c738ad9ebe0cc811fe60f9f317dbaaaa120e5065bd705636b9d7136b8ff79d58e11e555cb199232ae4e226e3cfd40b8a2156f22af69f0f9f373ea9687e6d9d4790e9702ab80061ae09b92cb47833c4f88d8b8c5de4c22b915017abe7c73e0fc39cf0766c61f42baf3d2e0dd3bf74a9d46e19494bce245e6a40165c977726ec56dfeeda562e3bd9c3a3f0a72", 0xbd, 0x2}, {&(0x7f0000000240)="bdf73abab6aba67549bf2ed7140305005cd1b854ed673a7a14e7ea41d0f12f7f379c00b41eef98602c37e1f8cb14a1ffb19327d2fcd2ce54e2a8a8eb358e15b28d5706d195b1bf58e961d25e2254bc", 0x4f, 0x2}, {&(0x7f00000002c0)="93c47083b0c82f7159536d767a6fe08ae5bc1675996e6f7e46727060b4955f006982021e322e09ceae06ced71504", 0x2e, 0x3}, {&(0x7f0000000300)="5e224e9d7bc527e62f30e41311220e5215faa866c7279334e4f41c3e25ee43d050df68b527c8593c3a7406573afa58689d8ccede0d6c02af5278966a5b0b7015b16d6aa62e43ff2095a89874336d30c41f977ab5bdff7d4e9f90c3da1f41", 0x5e, 0x1}, {&(0x7f0000000440)="a24d8826869642c9f3ba528948b9863a39f1c03c14eefb72a61b853e9dcdb8c1a92518493cfc8036998bf7550f054f0ff370bd03cda1198c07dd11f5e73e67c997ed7e92bd8ae4eca12ebfadb05170764872dc1839f2718fa4ceff01959c06a548a72b9d65e1b4751456d6adcf1103d714e86a8c7396fd7e296a3a8a4d6188c4a9b5be7e913c07fad36d41bced22d31dc17a4b988f9daf884dc2d3e610e97597dd35b040aceb704753e7995edfe0d02f3f676e", 0xb3, 0x2}, {&(0x7f0000000500)="d6a9abd7535e5a4453aaad3e57eb5a55cdc71360e623bc1a3e783cbe4c98b80e229558d46e70", 0x26, 0x2}, {&(0x7f0000000040)="0dea74b2067e1b7e9e6586e68dd462f576a193bd", 0x14, 0x3}]}, 0x7}, 0x1) 1.183078021s ago: executing program 4 (id=8589): unshare(0x6020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.134647922s ago: executing program 4 (id=8590): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000040)={0x6, 0x0, [{0x5811, 0x4, 0x6, [0x6, 0x7ff, 0xffffffff, 0xb1c9, 0x7, 0x3, 0x3]}, {0x3c, 0xcebf, 0x9, [0x72, 0x0, 0x0, 0x8, 0x539e, 0x6, 0x8, 0x8]}, {0x2, 0x1, 0x8e, [0x9, 0xff, 0x3, 0x5, 0x6878c926, 0x80000001, 0x36, 0x2]}, {0x9, 0xfffffffc, 0x2, [0x9, 0x19, 0x7f, 0x73, 0x7, 0x98, 0x81, 0x3]}, {0x7, 0x6f2d, 0xfffffff8, [0x550b, 0x5, 0x10000, 0x7, 0x2dbf, 0x2, 0x6f8, 0x6]}, {0x1, 0x53ad8dc0, 0x3, [0x2, 0x0, 0x2, 0x9, 0x6, 0x58, 0x1, 0x8001]}]}) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x4a7) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x3, 0x4}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11000, 0x0, 0x0}, &(0x7f0000000000)=0x40) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8922, &(0x7f0000000280)={'dummy0\x00'}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x21c004, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX]) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) 1.048500655s ago: executing program 1 (id=8593): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_matches\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r3 = timerfd_create(0x9, 0x0) r4 = timerfd_create(0x9, 0x0) timerfd_settime(r4, 0x2, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000400)=""/192, 0xc0}], 0x1) close_range(r2, 0xffffffffffffffff, 0x0) mount_setattr(r1, &(0x7f00000011c0)='./file0\x00', 0x0, &(0x7f0000001200)={0x1c, 0x100080}, 0x20) fsetxattr(r1, &(0x7f0000001600)=@known='user.incfs.size\x00', 0x0, 0x0, 0x3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r0}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000180)=""/113, 0x200000b1}], 0x1000000000000140, 0x21, 0x0) 931.723709ms ago: executing program 1 (id=8594): unshare(0x6020400) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_destroy(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x8, 0x9, 0x4}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x8, 0x1, 0x1, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f0000000840)=""/210, 0xc5}], 0x2, &(0x7f0000000480)=""/59, 0x3b}, 0x2}, {{&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000001280)=""/257, 0xf1}], 0x1, &(0x7f0000000240)=""/208, 0xd0}, 0xd}], 0x40002d0, 0x2, &(0x7f0000000a80)={0x0, 0x989680}) fcntl$getflags(r2, 0x401) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) unshare(0x22020400) r4 = geteuid() mount$tmpfs(0x0, &(0x7f0000000780)='./file1\x00', &(0x7f00000007c0), 0x140042, &(0x7f0000000800)={[{@nr_blocks={'nr_blocks', 0x3d, [0x25]}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@euid_eq={'euid', 0x3d, r4}}]}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x8205, &(0x7f0000000340)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x7}}, {@errors_remount}, {@lazytime}, {@data_err_ignore}, {@grpid}, {@block_validity}, {@orlov}]}, 0x1, 0x60a, &(0x7f0000000b00)="$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") r5 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendmmsg$inet(r5, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xecab}}], 0x18}}], 0x1, 0x8800) r6 = socket(0x18, 0x4, 0x1) getsockopt$inet_opts(r6, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000000)={0x0, 0x9, 0xffffffffffffffff, 0x10000, 0xfa2, 0xff01}) preadv2(r6, &(0x7f0000000140)=[{&(0x7f0000000040)=""/222, 0xde}], 0x1, 0x8, 0x0, 0xa) 896.0473ms ago: executing program 8 (id=8595): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x81, 0x0, 0x0, 0x0, 0x9, 0xb00d8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xc, 0x1}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x9, 0x2, 0x0, 0x5, 0x0, 0x80000001}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbbce}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x7) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e9, 0x2, 0x0, 0x8, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r6, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000200000008500000095000000b700000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x1016, &(0x7f00000003c0)=""/4118, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) wait4(r2, 0x0, 0x1000000, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x8000000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000002c0)={r8, 0x9}, 0x8) capget(&(0x7f00000000c0)={0x20071026, r2}, &(0x7f0000000300)={0x7, 0x9, 0x9, 0x4003fc, 0xff9a, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000001400)=ANY=[@ANYBLOB="18000700080000000000000000000000180100002020782500000000001c20207b1af8ff00000100007f5b7992fcf0dca1974d8fa3986fbcf8ffffffb702001008000000b703000000000000850000006200009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 505.222453ms ago: executing program 1 (id=8596): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0xff, 0x0, 0x2401}) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x238, 0xc8, 0x8, 0x238, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}, @common=@rt={{0x138}, {0x6, [0x2, 0x6], 0x6, 0x20, 0x6, [@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0x2e}, @private0, @dev={0xfe, 0x80, '\x00', 0x34}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x15}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, @private1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xc}, @private0={0xfc, 0x0, '\x00', 0x1}], 0x7}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x2, 0x100, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='./file0\x00') 504.216383ms ago: executing program 7 (id=8597): unshare(0x6020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x8, 0x9, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 440.442305ms ago: executing program 7 (id=8598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x34, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) 439.287785ms ago: executing program 1 (id=8599): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socket$kcm(0x2, 0xa, 0x2) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000001ac0)=[{0xfffffffffffffffd, &(0x7f0000000000)=0x1, 0x2}, {0x5ab, &(0x7f00000000c0)=0x8000, 0x2}, {0x8000000000000001, &(0x7f0000000680)=0x3, 0x82}, {0x7ff, &(0x7f00000006c0), 0x2}, {0x3, &(0x7f0000000700)=0xb8, 0x2}, {0x1, &(0x7f0000000740)=0x2, 0x2}, {0x0, &(0x7f0000000780)=0x5, 0x82}, {0x7, &(0x7f00000007c0)=0x3, 0x2}, {0xffffffffffffffff, &(0x7f0000000800)=0xfffffffffffffff7, 0x82}, {0x7, &(0x7f0000000840)=0x6, 0x2}, {0x8, &(0x7f0000000880)=0xae1, 0x2}, {0xf, &(0x7f00000008c0)=0x4, 0x2}, {0x0, &(0x7f0000000940)=0x4, 0x2}, {0x7fff, &(0x7f0000000980)=0x2, 0x82}, {0x5, 0x0}, {0x3, &(0x7f0000000a00)=0xee9, 0x82}, {0xff, &(0x7f0000000a40)=0x3, 0x82}, {0x3c32, &(0x7f0000000a80)=0x6, 0x82}, {0xc, &(0x7f0000000ac0)=0x10000000008, 0x82}, {0xe800000000000000, &(0x7f0000000b00)=0x1, 0x2}, {0x6, 0x0, 0x2}, {0x7fffffffffffffff, &(0x7f0000000bc0), 0x2}, {0x8, &(0x7f0000002740)=0x1, 0x2}, {0x3, 0x0, 0x2}, {0x2, &(0x7f0000000cc0)=0x3, 0x82}, {0x8001, &(0x7f0000000d00)=0x4e5c, 0x2}, {0x7, &(0x7f0000000d80)=0x5, 0x82}, {0x3a, &(0x7f0000000e00)=0xfffffffffffffbff, 0x2}, {0xbbb, &(0x7f0000000e40)=0x4, 0x82}, {0x1, &(0x7f0000000e80)=0x100000001, 0x82}, {0xe5, &(0x7f0000000ec0)=0x5, 0x2}, {0x1000000000000005, &(0x7f0000000f00), 0x2}, {0x0, &(0x7f0000000f40)=0x8, 0x82}, {0x0, &(0x7f0000000f80)=0xffffffffffffffff, 0x2}, {0x9, &(0x7f0000000fc0)=0x4, 0x2}, {0x7f, &(0x7f0000001000)=0x6, 0x82}, {0x80000000, &(0x7f0000001040)=0x5, 0x82}, {0xfff, &(0x7f00000010c0)=0x5, 0x82}, {0x9, &(0x7f0000001100)=0x3, 0x2}, {0xa4, &(0x7f0000001140)=0x2, 0x2}, {0x400, &(0x7f0000001180)=0x8, 0x82}, {0x7, &(0x7f00000011c0)}, {0x2, &(0x7f0000001200)=0x4, 0x2}, {0x8, &(0x7f0000001240)=0x38, 0x2}, {0x200, &(0x7f0000001280), 0x82}, {0x2, &(0x7f00000012c0)=0x2a, 0x82}, {0x3cb, &(0x7f0000001300)=0xff, 0x2}, {0x3, &(0x7f0000001340)=0x2fa, 0x2}, {0xa, &(0x7f0000001380)=0x1, 0x2}, {0x3, &(0x7f00000013c0)=0x10000}, {0x2, &(0x7f0000001400)=0x5, 0x82}, {0x8001, &(0x7f0000001440)=0x8000, 0x82}, {0x5, &(0x7f0000001480), 0x2}, {0x2ddb2a85, &(0x7f00000014c0)=0x9, 0x82}, {0x7, &(0x7f0000001500)=0x4, 0x2}, {0x0, 0x0}, {0xfffffffffffffff8, 0x0, 0x82}, {0x8, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0x3, 0x0, 0x41}, {0x40, 0x0, 0x2}], 0x3d, 0x0, &(0x7f00000022c0)={0x77359400}, 0x0) 417.183636ms ago: executing program 7 (id=8600): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d333000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00"], 0x158}}, 0x0) io_cancel(0x0, 0x0, &(0x7f0000000480)) 344.311958ms ago: executing program 7 (id=8601): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) 329.839769ms ago: executing program 1 (id=8602): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000140)) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0xff, 0x0, 0x2401}) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x238, 0xc8, 0x8, 0x238, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}, @common=@rt={{0x138}, {0x6, [0x2, 0x6], 0x6, 0x20, 0x6, [@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0x2e}, @private0, @dev={0xfe, 0x80, '\x00', 0x34}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x15}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, @private1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xc}, @private0={0xfc, 0x0, '\x00', 0x1}], 0x7}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x2, 0x100, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='./file0\x00') 250.041251ms ago: executing program 1 (id=8603): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x1) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x154) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@nombcache}, {@oldalloc}, {@nodiscard}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x3, 0x452, &(0x7f0000000140)="$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") bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x840020, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00cfc6f795310427bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3c45070000000000140012800900010076657468000000000400028008001300", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4004805}, 0xc080) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@multicast, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xd5, 0x4, 0x40, 0x1ff}}}}}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000008a00000000000000000000f813593fa048c12589b3b68902000000000000000000000000000000fbffffffffffffff0000000000000000eeff00000000400000000000000000020000000000000000020000002dcc88b5f71654d4a0ffe3dc8f9f2d75161b64d07820b714206e76f1e1571394a0972028aaf6ee12b8f8fadd2ed7a3df1b78209873cc24b43f27564e7757e98ee6504fdaa9ce8b9a49ff0a707c046ad7712a20974bb73754b3995926d23787f8902cd064bc1e1e64843be4f3bf"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'nr0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000080)={[{@bh}]}, 0x2, 0xbd6, &(0x7f00000025c0)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) syz_open_procfs(0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r3 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x2000000000006) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, 0x0, &(0x7f0000000840)) 197.832103ms ago: executing program 8 (id=8604): creat(&(0x7f0000000340)='./file0\x00', 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) creat(&(0x7f0000000400)='./file0\x00', 0x100) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x202219, 0xf662, 0x56, 0x0, 0x0) (fail_nth: 2) 162.016714ms ago: executing program 7 (id=8605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x105, &(0x7f0000000400)=""/261, 0xb6df4c32c1d5c814, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x24) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000080)={0x6, 0x4, 0x25a4, 0x8000000000000000, 0x5fa, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) unshare(0x22020600) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee", 0x15}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x80000}]}, {0x0, [0x0, 0x51, 0x5f, 0x3e, 0x0, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2e, 0x0, 0x1, 0x5}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0xb, @any, 0x0, 0x1}, 0xe) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x8100, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000044) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r5, r5, 0x0, 0xe3aa6ea) creat(&(0x7f00000001c0)='./file1\x00', 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480240001800b000100736f636b65740000140002800800024000000003080001400000000228000180080001006e6174001c0002800800054000000003080002400020000208000140000000010900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x22, &(0x7f0000000380)={&(0x7f0000001000)={[{&(0x7f00000000c0)="f39d9cc08b98ffa7e9908d8d1124054a1d99b7faa1fe5b545c78015e1557c6dd3bff4274c7e23620345610d95d5fee36338c738ad9ebe0cc811fe60f9f317dbaaaa120e5065bd705636b9d7136b8ff79d58e11e555cb199232ae4e226e3cfd40b8a2156f22af69f0f9f373ea9687e6d9d4790e9702ab80061ae09b92cb47833c4f88d8b8c5de4c22b915017abe7c73e0fc39cf0766c61f42baf3d2e0dd3bf74a9d46e19494bce245e6a40165c977726ec56dfeeda562e3bd9c3a3f0a72", 0xbd, 0x2}, {&(0x7f0000000240)="bdf73abab6aba67549bf2ed7140305005cd1b854ed673a7a14e7ea41d0f12f7f379c00b41eef98602c37e1f8cb14a1ffb19327d2fcd2ce54e2a8a8eb358e15b28d5706d195b1bf58e961d25e2254bc", 0x4f, 0x2}, {&(0x7f00000002c0)="93c47083b0c82f7159536d767a6fe08ae5bc1675996e6f7e46727060b4955f006982021e322e09ceae06ced71504", 0x2e, 0x3}, {&(0x7f0000000300)="5e224e9d7bc527e62f30e41311220e5215faa866c7279334e4f41c3e25ee43d050df68b527c8593c3a7406573afa58689d8ccede0d6c02af5278966a5b0b7015b16d6aa62e43ff2095a89874336d30c41f977ab5bdff7d4e9f90c3da1f41", 0x5e, 0x1}, {&(0x7f0000000440)="a24d8826869642c9f3ba528948b9863a39f1c03c14eefb72a61b853e9dcdb8c1a92518493cfc8036998bf7550f054f0ff370bd03cda1198c07dd11f5e73e67c997ed7e92bd8ae4eca12ebfadb05170764872dc1839f2718fa4ceff01959c06a548a72b9d65e1b4751456d6adcf1103d714e86a8c7396fd7e296a3a8a4d6188c4a9b5be7e913c07fad36d41bced22d31dc17a4b988f9daf884dc2d3e610e97597dd35b040aceb704753e7995edfe0d02f3f676e", 0xb3, 0x2}, {&(0x7f0000000500)="d6a9abd7535e5a4453aaad3e57eb5a55cdc71360e623bc1a3e783cbe4c98b80e229558d46e70", 0x26, 0x2}, {&(0x7f0000000040)="0dea74b2067e1b7e9e6586e68dd462f576a193bd", 0x14, 0x3}]}, 0x7}, 0x1) 0s ago: executing program 8 (id=8606): unshare(0x6020400) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_destroy(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x8, 0x9, 0x4}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x8, 0x1, 0x1, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f0000000840)=""/210, 0xc5}], 0x2, &(0x7f0000000480)=""/59, 0x3b}, 0x2}, {{&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000001280)=""/257, 0xf1}], 0x1, &(0x7f0000000240)=""/208, 0xd0}, 0xd}], 0x40002d0, 0x2, &(0x7f0000000a80)={0x0, 0x989680}) fcntl$getflags(r2, 0x401) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) unshare(0x22020400) r4 = geteuid() mount$tmpfs(0x0, &(0x7f0000000780)='./file1\x00', &(0x7f00000007c0), 0x140042, &(0x7f0000000800)={[{@nr_blocks={'nr_blocks', 0x3d, [0x25]}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@euid_eq={'euid', 0x3d, r4}}]}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x8205, &(0x7f0000000340)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x7}}, {@errors_remount}, {@lazytime}, {@data_err_ignore}, {@grpid}, {@block_validity}, {@orlov}]}, 0x1, 0x60a, &(0x7f0000000b00)="$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") r5 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendmmsg$inet(r5, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xecab}}], 0x18}}], 0x1, 0x8800) r6 = socket(0x18, 0x4, 0x1) getsockopt$inet_opts(r6, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000000)={0x0, 0x9, 0xffffffffffffffff, 0x10000, 0xfa2, 0xff01}) preadv2(r6, &(0x7f0000000140)=[{&(0x7f0000000040)=""/222, 0xde}], 0x1, 0x8, 0x0, 0xa) kernel console output (not intermixed with test programs): og_load+0x50d/0x1030 [ 1117.300837][ T8987] ? security_bpf+0x2b/0x90 [ 1117.300858][ T8987] __sys_bpf+0x505/0x7e0 [ 1117.300905][ T8987] __x64_sys_bpf+0x41/0x50 [ 1117.300926][ T8987] x64_sys_call+0x10cb/0x3020 [ 1117.300949][ T8987] do_syscall_64+0x12c/0x3b0 [ 1117.300996][ T8987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.301017][ T8987] RIP: 0033:0x7f56e142ce59 [ 1117.301033][ T8987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.301129][ T8987] RSP: 002b:00007f56dfe7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1117.301150][ T8987] RAX: ffffffffffffffda RBX: 00007f56e16a5fa0 RCX: 00007f56e142ce59 [ 1117.301165][ T8987] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1117.301239][ T8987] RBP: 00007f56dfe7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.301253][ T8987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.301266][ T8987] R13: 00007f56e16a6038 R14: 00007f56e16a5fa0 R15: 00007fffe5385ca8 [ 1117.301286][ T8987] [ 1117.534733][ T8987] syz.2.8191: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 1117.551127][ T8988] loop7: detected capacity change from 0 to 1764 [ 1117.551151][ T8987] CPU: 0 UID: 0 PID: 8987 Comm: syz.2.8191 Not tainted syzkaller #0 PREEMPT(lazy) [ 1117.551183][ T8987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1117.551195][ T8987] Call Trace: [ 1117.551203][ T8987] [ 1117.551211][ T8987] __dump_stack+0x1d/0x30 [ 1117.551235][ T8987] dump_stack_lvl+0x95/0xd0 [ 1117.551293][ T8987] dump_stack+0x15/0x1b [ 1117.551312][ T8987] warn_alloc+0x145/0x1c0 [ 1117.551335][ T8987] __vmalloc_node_range_noprof+0x27f/0x11c0 [ 1117.551369][ T8987] ? cred_has_capability+0x224/0x2a0 [ 1117.551434][ T8987] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 1117.551457][ T8987] __vmalloc_noprof+0xa4/0xf0 [ 1117.551511][ T8987] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 1117.551533][ T8987] bpf_prog_alloc_no_stats+0x47/0x390 [ 1117.551603][ T8987] ? bpf_prog_alloc+0x2a/0x150 [ 1117.551624][ T8987] bpf_prog_alloc+0x3c/0x150 [ 1117.551713][ T8987] bpf_prog_load+0x50d/0x1030 [ 1117.551743][ T8987] ? security_bpf+0x2b/0x90 [ 1117.551763][ T8987] __sys_bpf+0x505/0x7e0 [ 1117.551867][ T8987] __x64_sys_bpf+0x41/0x50 [ 1117.551961][ T8987] x64_sys_call+0x10cb/0x3020 [ 1117.552040][ T8987] do_syscall_64+0x12c/0x3b0 [ 1117.552067][ T8987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.552086][ T8987] RIP: 0033:0x7f56e142ce59 [ 1117.552108][ T8987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.552125][ T8987] RSP: 002b:00007f56dfe7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1117.552145][ T8987] RAX: ffffffffffffffda RBX: 00007f56e16a5fa0 RCX: 00007f56e142ce59 [ 1117.552163][ T8987] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1117.552181][ T8987] RBP: 00007f56dfe7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.552194][ T8987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.552206][ T8987] R13: 00007f56e16a6038 R14: 00007f56e16a5fa0 R15: 00007fffe5385ca8 [ 1117.552225][ T8987] [ 1117.552246][ T8987] Mem-Info: [ 1117.616268][ T8987] active_anon:37622 inactive_anon:5 isolated_anon:0 [ 1117.616268][ T8987] active_file:21359 inactive_file:3113 isolated_file:0 [ 1117.616268][ T8987] unevictable:0 dirty:173 writeback:0 [ 1117.616268][ T8987] slab_reclaimable:3948 slab_unreclaimable:26764 [ 1117.616268][ T8987] mapped:32973 shmem:20047 pagetables:10040 [ 1117.616268][ T8987] sec_pagetables:0 bounce:0 [ 1117.616268][ T8987] kernel_misc_reclaimable:0 [ 1117.616268][ T8987] free:1767510 free_pcp:67358 free_cma:0 [ 1117.639499][ T8987] Node 0 active_anon:150488kB inactive_anon:20kB active_file:85436kB inactive_file:12452kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131892kB dirty:692kB writeback:0kB shmem:80188kB kernel_stack:4944kB pagetables:40160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1117.677311][ T8990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8189'. [ 1117.701412][ T8987] Node 0 [ 1117.848676][ T8995] loop1: detected capacity change from 0 to 512 [ 1117.858942][ T8987] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1117.906341][ T8987] lowmem_reserve[]: 0 2878 7857 7857 [ 1117.917361][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8194'. [ 1117.922205][ T8987] Node 0 DMA32 free:2944356kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947984kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 1117.963551][ T8987] lowmem_reserve[]: 0 0 4978 4978 [ 1117.998991][ T8987] Node 0 Normal free:4118744kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:145452kB inactive_anon:20kB active_file:85424kB inactive_file:12492kB unevictable:0kB writepending:764kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:262404kB local_pcp:176688kB free_cma:0kB [ 1118.020420][ T28] audit: type=1326 audit(1780502040.510:22072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.4.8195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4b1dce59 code=0x7ffc0000 [ 1118.045587][ T8987] lowmem_reserve[]: [ 1118.060432][ T28] audit: type=1326 audit(1780502040.510:22073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.4.8195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4b1dce59 code=0x7ffc0000 [ 1118.070702][ T8987] 0 [ 1118.093354][ T28] audit: type=1326 audit(1780502040.510:22074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.4.8195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4b1dce59 code=0x7ffc0000 [ 1118.101915][ T8995] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8193: bg 0: block 169: padding at end of block bitmap is not set [ 1118.132330][ T28] audit: type=1326 audit(1780502040.510:22075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.4.8195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f9e4b1dce59 code=0x7ffc0000 [ 1118.166323][ T8987] 0 0 0 [ 1118.169408][ T8987] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1118.182306][ T8995] loop1: lost filesystem error report for type 5 error -117 [ 1118.182439][ T8987] Node 0 [ 1118.189755][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1118.189772][ C0] EXT4-fs (loop1): initial error at time 1780502040: ext4_validate_block_bitmap:441 [ 1118.189792][ C0] EXT4-fs (loop1): last error at time 1780502040: ext4_validate_block_bitmap:441 [ 1118.222604][ T8995] Quota error (device loop1): write_blk: dquota write failed [ 1118.230126][ T8995] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1118.246118][ T8987] DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 1*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944356kB [ 1118.250726][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8197'. [ 1118.264194][ T8987] Node 0 Normal: 3803*4kB (UME) 3493*8kB (UME) 1303*16kB (UME) 660*32kB (UME) 566*64kB (UME) 546*128kB (UME) 456*256kB (UME) 374*512kB (UM) 308*1024kB (UME) 201*2048kB (UME) 714*4096kB (UM) = 4151044kB [ 1118.271663][ T28] audit: type=1326 audit(1780502040.510:22076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.4.8195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4b1dce59 code=0x7ffc0000 [ 1118.297142][ T8987] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1118.327223][ T8995] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.8193: Failed to acquire dquot type 0 [ 1118.347658][ T8987] 41478 total pagecache pages [ 1118.358436][ T8987] 12 pages in swap cache [ 1118.367114][ T8987] Free swap = 124764kB [ 1118.373440][ T8987] Total swap = 124996kB [ 1118.382008][ T8987] 2097051 pages RAM [ 1118.385890][ T8987] 0 pages HighMem/MovableOnly [ 1118.392558][ T8995] loop1: lost filesystem error report for type 5 error -117 [ 1118.393113][ T8995] EXT4-fs (loop1): 1 truncate cleaned up [ 1118.411673][ T8995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1118.431351][ T8987] 81656 pages reserved [ 1118.450875][ T9008] loop8: detected capacity change from 0 to 512 [ 1118.486045][ T8995] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1118.516841][ T28] audit: type=1326 audit(1780502040.510:22077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.4.8195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4b1dce59 code=0x7ffc0000 [ 1118.532057][ T9011] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1118.548873][ T9011] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1118.563672][ T9008] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1118.579557][ T9008] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1118.607240][ T8995] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.8193: Failed to acquire dquot type 0 [ 1118.635684][ T9011] vhci_hcd vhci_hcd.0: Device attached [ 1118.688320][ T9011] tipc: Invalid UDP bearer configuration [ 1118.688373][ T9011] tipc: Enabling of bearer rejected, failed to enable media [ 1118.758229][ T9016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8198'. [ 1118.768350][ T4965] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.768932][ T7280] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.823274][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8199'. [ 1118.894307][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8200'. [ 1119.131608][ T9018] loop1: detected capacity change from 0 to 512 [ 1119.188506][ T9022] loop7: detected capacity change from 0 to 1024 [ 1119.195438][ T9022] EXT4-fs: Ignoring removed orlov option [ 1119.207492][ T9022] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 1119.217982][ T9022] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1119.226077][ T9022] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1119.231783][ T9026] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8202'. [ 1119.239523][ T3356] usb 6-1: SetAddress Request (2) to port 0 [ 1119.247742][ T9024] loop4: detected capacity change from 0 to 1024 [ 1119.251090][ T3356] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1119.263071][ T9022] EXT4-fs error (device loop7): __ext4_get_inode_loc:4885: comm syz.7.8201: Invalid inode table block 0 in block_group 0 [ 1119.263112][ T9022] loop7: lost filesystem error report for type 5 error -117 [ 1119.263285][ T9022] EXT4-fs (loop7): Remounting filesystem read-only [ 1119.275894][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1119.275957][ C1] EXT4-fs (loop7): initial error at time 1780502041: __ext4_get_inode_loc:4885 [ 1119.276004][ C1] EXT4-fs (loop7): last error at time 1780502041: __ext4_get_inode_loc:4885 [ 1119.280119][ T9024] EXT4-fs: Ignoring removed orlov option [ 1119.323238][ T9022] EXT4-fs (loop7): 1 truncate cleaned up [ 1119.330399][ T9024] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 1119.344407][ T9022] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1119.345854][ T9018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1119.388852][ T9018] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1119.399704][ T9024] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1119.399995][ T9024] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1119.405440][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8205'. [ 1119.426310][ T9024] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.8203: Invalid inode table block 0 in block_group 0 [ 1119.445396][ T9013] vhci_hcd: connection reset by peer [ 1119.462315][ T68] vhci_hcd vhci_hcd.2: stop threads [ 1119.467594][ T68] vhci_hcd vhci_hcd.2: release socket [ 1119.469145][ T9024] loop4: lost filesystem error report for type 5 error -117 [ 1119.473745][ T9024] EXT4-fs (loop4): Remounting filesystem read-only [ 1119.478255][ T68] vhci_hcd vhci_hcd.2: disconnect device [ 1119.482224][ T9022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.491477][ T9024] EXT4-fs (loop4): 1 truncate cleaned up [ 1119.493468][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1119.493486][ C1] EXT4-fs (loop4): initial error at time 1780502041: __ext4_get_inode_loc:4885 [ 1119.493510][ C1] EXT4-fs (loop4): last error at time 1780502041: __ext4_get_inode_loc:4885 [ 1119.542355][ T9024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1119.558691][ T9018] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.594148][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8206'. [ 1119.612181][ T9045] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8208'. [ 1119.622350][ T5155] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.667176][ T9049] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 1119.673717][ T9049] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1119.676481][ T9053] FAULT_INJECTION: forcing a failure. [ 1119.676481][ T9053] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.690076][ T9049] vhci_hcd vhci_hcd.0: Device attached [ 1119.705185][ T9049] tipc: Invalid UDP bearer configuration [ 1119.705219][ T9049] tipc: Enabling of bearer rejected, failed to enable media [ 1119.716135][ T9053] CPU: 0 UID: 0 PID: 9053 Comm: syz.1.8210 Not tainted syzkaller #0 PREEMPT(lazy) [ 1119.716192][ T9053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1119.716204][ T9053] Call Trace: [ 1119.716210][ T9053] [ 1119.716217][ T9053] __dump_stack+0x1d/0x30 [ 1119.716241][ T9053] dump_stack_lvl+0x95/0xd0 [ 1119.716260][ T9053] dump_stack+0x15/0x1b [ 1119.716281][ T9053] should_fail_ex+0x263/0x280 [ 1119.716300][ T9053] should_failslab+0x8c/0xb0 [ 1119.716329][ T9053] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1119.716415][ T9053] ? alloc_empty_file+0x70/0x1e0 [ 1119.716437][ T9053] alloc_empty_file+0x70/0x1e0 [ 1119.716473][ T9053] path_openat+0x65/0x2050 [ 1119.716553][ T9053] ? _parse_integer_limit+0x170/0x190 [ 1119.716625][ T9053] ? _parse_integer+0x27/0x40 [ 1119.716651][ T9053] ? kstrtoull+0x111/0x140 [ 1119.716678][ T9053] ? kstrtouint+0x76/0xc0 [ 1119.716705][ T9053] do_file_open+0x16c/0x290 [ 1119.716743][ T9053] do_sys_openat2+0x94/0x130 [ 1119.716774][ T9053] __x64_sys_openat+0xf2/0x120 [ 1119.716796][ T9053] x64_sys_call+0x1e39/0x3020 [ 1119.716817][ T9053] do_syscall_64+0x12c/0x3b0 [ 1119.716894][ T9053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.716914][ T9053] RIP: 0033:0x7f317307ce59 [ 1119.716930][ T9053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.716982][ T9053] RSP: 002b:00007f3171ad7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1119.717010][ T9053] RAX: ffffffffffffffda RBX: 00007f31732f5fa0 RCX: 00007f317307ce59 [ 1119.717025][ T9053] RDX: 0000000000515001 RSI: 0000200000001740 RDI: ffffffffffffff9c [ 1119.717039][ T9053] RBP: 00007f3171ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.717051][ T9053] R10: 0000000000000488 R11: 0000000000000246 R12: 0000000000000001 [ 1119.717063][ T9053] R13: 00007f31732f6038 R14: 00007f31732f5fa0 R15: 00007ffd6fdd97a8 [ 1119.717081][ T9053] [ 1119.734658][ T9057] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1119.756768][ T9050] vhci_hcd: connection closed [ 1119.758029][ T9057] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1119.942621][ T3710] vhci_hcd vhci_hcd.8: stop threads [ 1119.946855][ T9066] tipc: Invalid UDP bearer configuration [ 1119.947849][ T9066] tipc: Enabling of bearer rejected, failed to enable media [ 1119.947933][ T3710] vhci_hcd vhci_hcd.8: release socket [ 1119.953796][ T9057] vhci_hcd vhci_hcd.0: Device attached [ 1119.971655][ T3710] vhci_hcd vhci_hcd.8: disconnect device [ 1120.002249][ T9058] vhci_hcd: connection closed [ 1120.002489][ T3710] vhci_hcd vhci_hcd.7: stop threads [ 1120.012540][ T3710] vhci_hcd vhci_hcd.7: release socket [ 1120.018301][ T3710] vhci_hcd vhci_hcd.7: disconnect device [ 1120.046495][ T9070] loop1: detected capacity change from 0 to 512 [ 1120.055980][ T9070] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 1120.074328][ T9070] System zones: 1-12 [ 1120.078507][ T9070] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.8217: error while reading EA inode 32 err=-116 [ 1120.090936][ T9070] loop1: lost filesystem error report for type 5 error -117 [ 1120.091130][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1120.091250][ T9070] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.8217: error while reading EA inode 32 err=-116 [ 1120.098439][ C0] EXT4-fs (loop1): initial error at time 1780502042: ext4_xattr_inode_iget:446 [ 1120.105944][ T9070] loop1: lost filesystem error report for type 5 error -117 [ 1120.117151][ C0] [ 1120.117161][ C0] EXT4-fs (loop1): last error at time 1780502042: ext4_xattr_inode_iget:446 [ 1120.145031][ T9070] EXT4-fs (loop1): 1 orphan inode deleted [ 1120.151212][ T9070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1120.184896][ T4965] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.396336][ T9086] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 1120.402968][ T9086] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1120.426874][ T9086] vhci_hcd vhci_hcd.0: Device attached [ 1120.436772][ T9086] tipc: Invalid UDP bearer configuration [ 1120.436791][ T9086] tipc: Enabling of bearer rejected, failed to enable media [ 1120.455392][ T9089] vhci_hcd: connection closed [ 1120.455620][ T68] vhci_hcd vhci_hcd.8: stop threads [ 1120.465914][ T68] vhci_hcd vhci_hcd.8: release socket [ 1120.471304][ T68] vhci_hcd vhci_hcd.8: disconnect device [ 1120.608259][ T9098] loop1: detected capacity change from 0 to 512 [ 1120.623470][ T9098] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 1120.646229][ T9098] System zones: 1-12 [ 1120.654616][ T9098] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.8229: error while reading EA inode 32 err=-116 [ 1120.667473][ T9098] loop1: lost filesystem error report for type 5 error -117 [ 1120.667661][ T9098] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.8229: error while reading EA inode 32 err=-116 [ 1120.675086][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1120.675125][ C1] EXT4-fs (loop1): initial error at time 1780502043: ext4_xattr_inode_iget:446 [ 1120.675151][ C1] EXT4-fs (loop1): last error at time 1780502043: ext4_xattr_inode_iget:446 [ 1120.715207][ T9096] loop2: detected capacity change from 0 to 512 [ 1120.718130][ T9098] loop1: lost filesystem error report for type 5 error -117 [ 1120.722261][ T9098] EXT4-fs (loop1): 1 orphan inode deleted [ 1120.738424][ T9098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1120.764507][ T9096] EXT4-fs error (device loop2): ext4_quota_enable:7221: comm syz.2.8228: Bad quota inum: 1, type: 2 [ 1120.776983][ T9096] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 1120.778024][ T4965] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.796708][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1120.803539][ T9096] EXT4-fs (loop2): mount failed [ 1120.806993][ C1] EXT4-fs (loop2): initial error at time 1780502043: ext4_quota_enable:7221 [ 1120.807019][ C1] EXT4-fs (loop2): last error at time 1780502043: ext4_quota_enable:7221 [ 1120.878449][ T9112] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1120.885135][ T9112] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1120.906062][ T9112] vhci_hcd vhci_hcd.0: Device attached [ 1120.921337][ T9112] tipc: Invalid UDP bearer configuration [ 1120.921380][ T9112] tipc: Enabling of bearer rejected, failed to enable media [ 1120.965938][ T9121] loop7: detected capacity change from 0 to 512 [ 1120.983996][ T9121] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.8237: corrupted inode contents [ 1121.002796][ T9124] EXT4-fs: Ignoring removed oldalloc option [ 1121.015547][ T9124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1121.031345][ T9124] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1121.038406][ T9121] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1121.045180][ T9124] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.8236: lblock 0 mapped to illegal pblock 0 (length 1) [ 1121.050731][ T9121] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #16: comm syz.7.8237: mark_inode_dirty error [ 1121.054387][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1121.054441][ C1] EXT4-fs (loop7): initial error at time 1780502043: ext4_do_update_inode:5690: inode 16 [ 1121.054559][ C1] EXT4-fs (loop7): last error at time 1780502043: ext4_do_update_inode:5690: inode 16 [ 1121.109907][ T9124] EXT4-fs (loop2): Remounting filesystem read-only [ 1121.110129][ T9121] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1121.118615][ T9121] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.8237: corrupted inode contents [ 1121.140374][ T9121] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1121.141785][ T9121] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.8237: mark_inode_dirty error [ 1121.163392][ T9121] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.8237: corrupted inode contents [ 1121.176047][ T9121] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 1121.185469][ T9121] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.8237: corrupted inode contents [ 1121.197984][ T9121] EXT4-fs error (device loop7): ext4_truncate:4690: inode #16: comm syz.7.8237: mark_inode_dirty error [ 1121.209716][ T9121] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 1121.209780][ T1875] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1121.211152][ T9121] EXT4-fs (loop7): 1 truncate cleaned up [ 1121.228941][ T3710] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 1121.236683][ T9121] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1121.258440][ T3415] usb 4-1: SetAddress Request (2) to port 0 [ 1121.258492][ T3415] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1121.271095][ T9121] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1121.326174][ T6513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.399439][ T9135] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1121.412145][ T9135] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1121.432261][ T9143] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 1121.447581][ T9143] System zones: 1-12 [ 1121.452427][ T9143] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.8242: error while reading EA inode 32 err=-116 [ 1121.466478][ T9143] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.8242: error while reading EA inode 32 err=-116 [ 1121.478820][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1121.478851][ C1] EXT4-fs (loop7): initial error at time 1780502043: ext4_xattr_inode_iget:446 [ 1121.478874][ C1] EXT4-fs (loop7): last error at time 1780502043: ext4_xattr_inode_iget:446 [ 1121.506410][ T9143] EXT4-fs (loop7): 1 orphan inode deleted [ 1121.512798][ T9143] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1121.545406][ T6513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.622417][ T9145] bridge_slave_0: left allmulticast mode [ 1121.628091][ T9145] bridge_slave_0: left promiscuous mode [ 1121.633959][ T9145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.642674][ T9145] bridge_slave_1: left allmulticast mode [ 1121.648454][ T9145] bridge_slave_1: left promiscuous mode [ 1121.663143][ T9145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.676916][ T9145] bond0: (slave bond_slave_0): Releasing backup interface [ 1121.677258][ T7280] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.695769][ T9145] team0: Port device team_slave_0 removed [ 1121.702310][ T9145] team0: Port device team_slave_1 removed [ 1121.713835][ T9145] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1121.767410][ T9113] vhci_hcd: connection reset by peer [ 1121.776218][ T3710] vhci_hcd vhci_hcd.1: stop threads [ 1121.784157][ T3710] vhci_hcd vhci_hcd.1: release socket [ 1121.789753][ T3710] vhci_hcd vhci_hcd.1: disconnect device [ 1121.813929][ T9155] pimreg: entered allmulticast mode [ 1121.820033][ T9155] syz_tun: entered allmulticast mode [ 1121.825934][ T9155] syz_tun: left allmulticast mode [ 1121.832548][ T9154] pimreg: left allmulticast mode [ 1122.436523][ T9165] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1122.445580][ T9165] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 1122.476481][ T9165] EXT4-fs (loop7): failed to open journal device unknown-block(0,3) -6 [ 1122.522231][ T9168] EXT4-fs: Ignoring removed orlov option [ 1122.532875][ T9168] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 1122.614353][ T9168] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1122.629337][ T9175] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 1122.635316][ T9168] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1122.643194][ T9175] System zones: 1-12 [ 1122.649109][ T9168] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz.1.8252: Invalid inode table block 0 in block_group 0 [ 1122.663962][ T9175] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.8254: error while reading EA inode 32 err=-116 [ 1122.675207][ T9168] fserror_report: 5 callbacks suppressed [ 1122.675239][ T9168] loop1: lost filesystem error report for type 5 error -117 [ 1122.678642][ T9175] loop2: lost filesystem error report for type 5 error -117 [ 1122.710340][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1122.724219][ C1] EXT4-fs (loop2): initial error at time 1780502044: ext4_xattr_inode_iget:446 [ 1122.733209][ C1] EXT4-fs (loop2): last error at time 1780502044: ext4_xattr_inode_iget:446 [ 1122.742476][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1122.749020][ C0] EXT4-fs (loop1): initial error at time 1780502044: __ext4_get_inode_loc:4885 [ 1122.757983][ C0] EXT4-fs (loop1): last error at time 1780502044: __ext4_get_inode_loc:4885 [ 1122.770503][ T9168] EXT4-fs (loop1): Remounting filesystem read-only [ 1122.777286][ T9175] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.8254: error while reading EA inode 32 err=-116 [ 1122.789951][ T9168] __quota_error: 181 callbacks suppressed [ 1122.789976][ T9168] Quota error (device loop1): write_blk: dquota write failed [ 1122.812010][ T9175] loop2: lost filesystem error report for type 5 error -117 [ 1122.812405][ T9175] EXT4-fs (loop2): 1 orphan inode deleted [ 1122.817387][ T9168] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1122.836535][ T9175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1122.850796][ T9168] EXT4-fs (loop1): 1 truncate cleaned up [ 1122.859283][ T9168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1122.942890][ T1875] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.945032][ T9184] set_capacity_and_notify: 10 callbacks suppressed [ 1122.945046][ T9184] loop8: detected capacity change from 0 to 512 [ 1122.985069][ T9186] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1122.991823][ T9186] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1123.006037][ T9186] vhci_hcd vhci_hcd.0: Device attached [ 1123.015601][ T9184] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1123.030445][ T9186] tipc: Invalid UDP bearer configuration [ 1123.030458][ T9186] tipc: Enabling of bearer rejected, failed to enable media [ 1123.041648][ T9184] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 1123.047884][ T9187] vhci_hcd: connection closed [ 1123.053850][ T68] vhci_hcd vhci_hcd.7: stop threads [ 1123.063764][ T68] vhci_hcd vhci_hcd.7: release socket [ 1123.069141][ T68] vhci_hcd vhci_hcd.7: disconnect device [ 1123.086707][ T9184] EXT4-fs (loop8): failed to open journal device unknown-block(0,3) -6 [ 1123.219370][ T9168] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.228611][ T9200] loop2: detected capacity change from 0 to 512 [ 1123.263334][ T9202] loop1: detected capacity change from 0 to 1024 [ 1123.296315][ T9204] loop4: detected capacity change from 0 to 256 [ 1123.325794][ T9202] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 1123.333903][ T9206] loop4: detected capacity change from 0 to 256 [ 1123.349496][ T9200] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.8262: corrupted inode contents [ 1123.363705][ T9200] fserror_report: 4 callbacks suppressed [ 1123.363752][ T9200] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1123.383848][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1123.399720][ C1] EXT4-fs (loop2): initial error at time 1780502045: ext4_do_update_inode:5690: inode 16 [ 1123.400582][ T9200] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.8262: mark_inode_dirty error [ 1123.409857][ C1] EXT4-fs (loop2): last error at time 1780502045: ext4_do_update_inode:5690 [ 1123.422133][ T9200] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1123.430923][ C1] : inode 16 [ 1123.455855][ T9200] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.8262: corrupted inode contents [ 1123.456750][ T9211] loop8: detected capacity change from 0 to 256 [ 1123.467722][ T9200] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1123.474407][ T9200] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.8262: mark_inode_dirty error [ 1123.520403][ T9200] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1123.520964][ T9200] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.8262: corrupted inode contents [ 1123.565340][ T9200] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1123.566818][ T9200] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1123.589394][ T9214] syzkaller0: entered promiscuous mode [ 1123.598029][ T9214] syzkaller0: entered allmulticast mode [ 1123.600796][ T9200] loop2: lost filesystem error report for type 5 error -117 [ 1123.604286][ T9200] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.8262: corrupted inode contents [ 1123.637262][ T9200] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1123.637628][ T9200] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.8262: mark_inode_dirty error [ 1123.671466][ T9200] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1123.671999][ T9200] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1123.699552][ T9213] loop4: detected capacity change from 0 to 1024 [ 1123.701517][ T9213] EXT4-fs: Ignoring removed orlov option [ 1123.740675][ T9217] __nla_validate_parse: 11 callbacks suppressed [ 1123.740700][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8269'. [ 1123.767070][ T9213] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 1123.784134][ T9200] loop2: lost filesystem error report for type 5 error -117 [ 1123.787410][ T9219] netlink: 'syz.8.8268': attribute type 3 has an invalid length. [ 1123.802839][ T9219] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.8268'. [ 1123.813897][ T9213] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1123.824553][ T9200] EXT4-fs (loop2): 1 truncate cleaned up [ 1123.832585][ T9213] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1123.844762][ T9200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1123.859317][ T9200] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1123.897710][ T41] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1123.913417][ T9213] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.8267: Invalid inode table block 0 in block_group 0 [ 1123.927849][ T9217] loop7: detected capacity change from 0 to 512 [ 1123.940070][ T9213] loop4: lost filesystem error report for type 5 error -117 [ 1123.941039][ T41] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 1123.941039][ T9213] EXT4-fs (loop4): Remounting filesystem read-only [ 1123.962603][ T9223] loop8: detected capacity change from 0 to 512 [ 1123.974671][ T9223] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 1123.987515][ T9213] Quota error (device loop4): write_blk: dquota write failed [ 1123.995080][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1123.995123][ C1] EXT4-fs (loop4): initial error at time 1780502046: __ext4_get_inode_loc:4885 [ 1123.995165][ C1] EXT4-fs (loop4): last error at time 1780502046: __ext4_get_inode_loc:4885 [ 1124.020089][ T9223] System zones: 1-12 [ 1124.024282][ T1875] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.034140][ T9223] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.8270: error while reading EA inode 32 err=-116 [ 1124.035058][ T9213] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1124.046912][ T9223] loop8: lost filesystem error report for type 5 error -117 [ 1124.047210][ T9223] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.8270: error while reading EA inode 32 err=-116 [ 1124.047270][ T9223] loop8: lost filesystem error report for type 5 error -117 [ 1124.047506][ T9223] EXT4-fs (loop8): 1 orphan inode deleted [ 1124.048022][ T9223] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1124.127640][ T9217] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1124.132350][ T9213] EXT4-fs (loop4): 1 truncate cleaned up [ 1124.141583][ T9217] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1124.171893][ T9213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1124.181942][ T28] audit: type=1400 audit(1780502046.318:22252): avc: denied { write } for pid=9216 comm="syz.7.8269" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1124.219785][ T7280] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.250841][ T9217] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.307565][ T9213] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.333912][ T9240] loop2: detected capacity change from 0 to 256 [ 1124.395455][ T9244] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8278'. [ 1124.416994][ T9248] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1124.423630][ T9248] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1124.431732][ T9248] vhci_hcd vhci_hcd.0: Device attached [ 1124.475798][ T9252] netlink: 'syz.4.8280': attribute type 3 has an invalid length. [ 1124.483754][ T9252] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8280'. [ 1124.510170][ T9253] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1124.534907][ T9253] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1124.550480][ T28] audit: type=1400 audit(1780502046.655:22253): avc: denied { write } for pid=9243 comm="syz.7.8278" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1124.575332][ T9248] tipc: Invalid UDP bearer configuration [ 1124.575368][ T9248] tipc: Enabling of bearer rejected, failed to enable media [ 1124.600943][ T6513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.636586][ T9258] EXT4-fs: Ignoring removed orlov option [ 1124.645007][ T9258] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 1124.654217][ T9254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8279'. [ 1124.668012][ T9258] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1124.672196][ T9260] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 1124.678697][ T9258] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1124.684861][ T9260] System zones: 1-12 [ 1124.695706][ T9260] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.8282: error while reading EA inode 32 err=-116 [ 1124.699872][ T9258] EXT4-fs error (device loop7): __ext4_get_inode_loc:4885: comm syz.7.8281: Invalid inode table block 0 in block_group 0 [ 1124.708986][ T9260] loop1: lost filesystem error report for type 5 error -117 [ 1124.723294][ T9258] loop7: lost filesystem error report for type 5 error -117 [ 1124.726764][ T9260] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.8282: error while reading EA inode 32 err=-116 [ 1124.730774][ T9258] EXT4-fs (loop7): Remounting filesystem read-only [ 1124.737956][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1124.737969][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1124.737972][ C0] EXT4-fs (loop7): initial error at time 1780502046: __ext4_get_inode_loc:4885 [ 1124.737983][ C1] EXT4-fs (loop1): initial error at time 1780502046: ext4_xattr_inode_iget:446 [ 1124.737990][ C0] [ 1124.738001][ C1] [ 1124.737996][ C0] EXT4-fs (loop7): last error at time 1780502046: __ext4_get_inode_loc:4885 [ 1124.738007][ C1] EXT4-fs (loop1): last error at time 1780502046: ext4_xattr_inode_iget:446 [ 1124.738014][ C0] [ 1124.738024][ C1] [ 1124.741352][ T9260] EXT4-fs (loop1): 1 orphan inode deleted [ 1124.751384][ T9258] Quota error (device loop7): write_blk: dquota write failed [ 1124.782244][ T9260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1124.793951][ T9258] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1124.860270][ T9258] EXT4-fs (loop7): 1 truncate cleaned up [ 1124.866612][ T9258] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1124.867222][ T4965] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.937614][ T9272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1124.950604][ T9272] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1124.951280][ T9258] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.988823][ T9277] IPv6: Can't replace route, no match found [ 1125.008543][ T5155] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.020988][ T9276] EXT4-fs: Ignoring removed orlov option [ 1125.029112][ T9276] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 1125.046151][ T9276] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1125.054905][ T9276] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1125.062450][ T9276] EXT4-fs error (device loop7): __ext4_get_inode_loc:4885: comm syz.7.8288: Invalid inode table block 0 in block_group 0 [ 1125.075988][ T9276] EXT4-fs (loop7): Remounting filesystem read-only [ 1125.082683][ T9276] Quota error (device loop7): write_blk: dquota write failed [ 1125.090162][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1125.090187][ C1] EXT4-fs (loop7): initial error at time 1780502047: __ext4_get_inode_loc:4885 [ 1125.090208][ C1] EXT4-fs (loop7): last error at time 1780502047: __ext4_get_inode_loc:4885 [ 1125.114799][ T9276] EXT4-fs (loop7): 1 truncate cleaned up [ 1125.121485][ T9276] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1125.260808][ T9276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.305472][ T9249] vhci_hcd: connection reset by peer [ 1125.311607][ T41] vhci_hcd vhci_hcd.2: stop threads [ 1125.316896][ T41] vhci_hcd vhci_hcd.2: release socket [ 1125.322438][ T41] vhci_hcd vhci_hcd.2: disconnect device [ 1125.743737][ T3356] usb 6-1: device descriptor read/8, error -110 [ 1125.838614][ T9296] netlink: 'syz.1.8295': attribute type 3 has an invalid length. [ 1125.847183][ T9296] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8295'. [ 1125.912531][ T3356] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1125.927979][ T9298] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.8296: bg 0: block 169: padding at end of block bitmap is not set [ 1125.946493][ T3356] usb 6-1: enqueue for inactive port 0 [ 1125.960242][ T3356] usb 6-1: enqueue for inactive port 0 [ 1125.966114][ T3356] usb 6-1: enqueue for inactive port 0 [ 1125.976400][ T9298] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.8296: Failed to acquire dquot type 0 [ 1125.987683][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1125.987704][ C0] EXT4-fs (loop2): initial error at time 1780502047: ext4_validate_block_bitmap:441 [ 1125.987745][ C0] EXT4-fs (loop2): last error at time 1780502047: ext4_validate_block_bitmap:441 [ 1126.029818][ T9298] EXT4-fs (loop2): 1 truncate cleaned up [ 1126.052908][ T9298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1126.246528][ T9298] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1126.284968][ T9298] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.8296: Failed to acquire dquot type 0 [ 1126.396930][ T9311] futex_wake_op: syz.1.8300 tries to shift op by -9; fix this program [ 1126.416900][ T1875] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.430109][ T9311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8300'. [ 1126.676688][ T3415] usb 4-1: device descriptor read/8, error -110 [ 1126.871523][ T9327] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1126.881174][ T3415] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1126.893226][ T9327] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1126.903324][ T9327] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.8303: bad orphan inode 4 [ 1126.914487][ T9327] EXT4-fs (loop4): 1 orphan inode deleted [ 1126.924042][ T9327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1126.950741][ T9327] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 4: comm syz.4.8303: lblock 0 mapped to illegal pblock 4 (length 1) [ 1127.104664][ T3415] usb 4-1: enqueue for inactive port 0 [ 1127.112983][ T9331] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1127.113358][ T3415] usb 4-1: enqueue for inactive port 0 [ 1127.119546][ T9331] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1127.126681][ T3415] usb 4-1: enqueue for inactive port 0 [ 1127.153827][ T9331] vhci_hcd vhci_hcd.0: Device attached [ 1127.164524][ T9335] tipc: Invalid UDP bearer configuration [ 1127.164538][ T9335] tipc: Enabling of bearer rejected, failed to enable media [ 1127.239277][ T9335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8307'. [ 1127.265707][ T3356] usb 6-1: SetAddress Request (3) to port 0 [ 1127.271763][ T3356] usb 6-1: new SuperSpeed USB device number 3 using vhci_hcd [ 1127.566163][ T9342] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.8309: corrupted inode contents [ 1127.584040][ T9342] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1127.584236][ T9342] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #16: comm syz.8.8309: mark_inode_dirty error [ 1127.604782][ T9342] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1127.605927][ T9342] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.8309: corrupted inode contents [ 1127.627060][ T9342] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1127.627273][ T9342] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.8309: mark_inode_dirty error [ 1127.647771][ T9342] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.8309: corrupted inode contents [ 1127.659721][ T9342] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 1127.668421][ T9342] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.8309: corrupted inode contents [ 1127.680663][ T9342] EXT4-fs error (device loop8): ext4_truncate:4690: inode #16: comm syz.8.8309: mark_inode_dirty error [ 1127.691880][ C0] EXT4-fs (loop8): error count since last fsck: 7 [ 1127.691935][ C0] EXT4-fs (loop8): initial error at time 1780502049: ext4_do_update_inode:5690: inode 16 [ 1127.692019][ C0] EXT4-fs (loop8): last error at time 1780502049: ext4_do_update_inode:5690: inode 16 [ 1127.746204][ T9301] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1127.761430][ T9342] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 1127.786245][ T9342] EXT4-fs (loop8): 1 truncate cleaned up [ 1127.794466][ T9342] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1127.821223][ T41] EXT4-fs error (device loop8): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 1127.834867][ T9342] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1127.878586][ T7280] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1127.921011][ T9336] vhci_hcd: connection reset by peer [ 1127.926676][ T8773] vhci_hcd vhci_hcd.2: stop threads [ 1127.932273][ T8773] vhci_hcd vhci_hcd.2: release socket [ 1127.939363][ T8773] vhci_hcd vhci_hcd.2: disconnect device [ 1128.000773][ T9348] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.8311: corrupted inode contents [ 1128.028574][ T9348] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #16: comm syz.8.8311: mark_inode_dirty error [ 1128.040118][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1128.040181][ C0] EXT4-fs (loop8): initial error at time 1780502049: ext4_do_update_inode:5690: inode 16 [ 1128.040315][ C0] EXT4-fs (loop8): last error at time 1780502049: ext4_do_update_inode:5690: inode 16 [ 1128.057083][ T9355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.057161][ T9355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.162389][ T5155] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1128.199654][ T9348] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.8311: corrupted inode contents [ 1128.260327][ T3415] usb usb4-port1: attempt power cycle [ 1128.274812][ T9348] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.8311: mark_inode_dirty error [ 1128.289644][ T9348] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.8311: corrupted inode contents [ 1128.330555][ T9367] set_capacity_and_notify: 16 callbacks suppressed [ 1128.330587][ T9367] loop7: detected capacity change from 0 to 1024 [ 1128.350977][ T9369] loop4: detected capacity change from 0 to 512 [ 1128.357733][ T9348] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 1128.387024][ T9348] fserror_report: 8 callbacks suppressed [ 1128.394796][ T9348] loop8: lost filesystem error report for type 5 error -117 [ 1128.396211][ T9348] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.8311: corrupted inode contents [ 1128.400078][ T9367] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1128.436593][ T9348] EXT4-fs error (device loop8): ext4_truncate:4690: inode #16: comm syz.8.8311: mark_inode_dirty error [ 1128.462297][ T28] kauditd_printk_skb: 420 callbacks suppressed [ 1128.462311][ T28] audit: type=1400 audit(1780502050.313:22668): avc: denied { write } for pid=9366 comm="syz.7.8318" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1128.466481][ T9369] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8319: bg 0: block 169: padding at end of block bitmap is not set [ 1128.468553][ T28] audit: type=1400 audit(1780502050.313:22669): avc: denied { write } for pid=9366 comm="syz.7.8318" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1128.493355][ T9348] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 1128.507489][ T9369] loop4: lost filesystem error report for type 5 error -117 [ 1128.511095][ T9369] Quota error (device loop4): write_blk: dquota write failed [ 1128.540540][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1128.540564][ C1] EXT4-fs (loop4): initial error at time 1780502050: ext4_validate_block_bitmap:441 [ 1128.540608][ C1] EXT4-fs (loop4): last error at time 1780502050: ext4_validate_block_bitmap:441 [ 1128.547808][ T9348] loop8: lost filesystem error report for type 5 error -117 [ 1128.603231][ T9369] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1128.603341][ T9369] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.8319: Failed to acquire dquot type 0 [ 1128.603377][ T9369] loop4: lost filesystem error report for type 5 error -117 [ 1128.622773][ T9369] EXT4-fs (loop4): 1 truncate cleaned up [ 1128.644793][ T9348] EXT4-fs (loop8): 1 truncate cleaned up [ 1128.659698][ T9348] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1128.672296][ T9348] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1128.680074][ T9369] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1128.683095][ T3710] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1128.703504][ T3710] EXT4-fs error (device loop8): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 1128.723041][ T9369] Quota error (device loop4): write_blk: dquota write failed [ 1128.723086][ T28] audit: type=1400 audit(1780502050.546:22670): avc: denied { write } for pid=9368 comm="syz.4.8319" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1128.784521][ T9369] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1128.808187][ T9369] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.8319: Failed to acquire dquot type 0 [ 1129.322267][ T9391] 9p: Bad value for 'rfdno' [ 1129.560913][ T9403] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1129.567776][ T9403] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1129.626493][ T9403] vhci_hcd vhci_hcd.0: Device attached [ 1129.652453][ T9406] tipc: Invalid UDP bearer configuration [ 1129.652466][ T9406] tipc: Enabling of bearer rejected, failed to enable media [ 1129.732036][ T9410] loop1: detected capacity change from 0 to 256 [ 1129.765719][ T9406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8330'. [ 1129.953086][ T9414] loop7: detected capacity change from 0 to 512 [ 1130.024606][ T9] usb 10-1: SetAddress Request (6) to port 0 [ 1130.030945][ T9] usb 10-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1130.240000][ T9423] loop1: detected capacity change from 0 to 1024 [ 1130.260975][ T9414] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.8334: corrupted inode contents [ 1130.325418][ T9423] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1130.399341][ T9414] fserror_report: 11 callbacks suppressed [ 1130.399387][ T9414] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1130.415148][ T9423] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1130.443531][ T9404] vhci_hcd: connection reset by peer [ 1130.450347][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1130.456797][ C1] EXT4-fs (loop7): initial error at time 1780502052: ext4_do_update_inode:5690: inode 16 [ 1130.466806][ C1] EXT4-fs (loop7): last error at time 1780502052: ext4_do_update_inode:5690: inode 16 [ 1130.471664][ T4340] vhci_hcd vhci_hcd.4: stop threads [ 1130.483979][ T9414] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #16: comm syz.7.8334: mark_inode_dirty error [ 1130.495877][ T4340] vhci_hcd vhci_hcd.4: release socket [ 1130.498056][ T9414] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1130.506720][ T9423] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1130.513555][ T9414] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.8334: corrupted inode contents [ 1130.519263][ T4340] vhci_hcd vhci_hcd.4: disconnect device [ 1130.526759][ T9414] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1130.538766][ T9423] EXT4-fs (loop1): invalid journal inode [ 1130.539142][ T9414] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.8334: mark_inode_dirty error [ 1130.539165][ T9414] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1130.539354][ T9414] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.8334: corrupted inode contents [ 1130.539377][ T9414] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1130.539556][ T9414] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 1130.539590][ T9414] loop7: lost filesystem error report for type 5 error -117 [ 1130.539680][ T9414] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.8334: corrupted inode contents [ 1130.539778][ T9414] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1130.539927][ T9414] EXT4-fs error (device loop7): ext4_truncate:4690: inode #16: comm syz.7.8334: mark_inode_dirty error [ 1130.539950][ T9414] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1130.540099][ T9414] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 1130.540118][ T9414] loop7: lost filesystem error report for type 5 error -117 [ 1130.540498][ T9414] EXT4-fs (loop7): 1 truncate cleaned up [ 1130.611981][ T4340] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1130.612008][ T4340] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 1 [ 1130.634563][ T9428] loop8: detected capacity change from 0 to 256 [ 1130.650537][ T9414] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1130.899655][ T3415] usb usb4-port1: unable to enumerate USB device [ 1130.927891][ T9442] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1130.941619][ T9442] loop7: detected capacity change from 0 to 512 [ 1130.964840][ T9442] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1130.977108][ T28] audit: type=1400 audit(1780502052.679:22671): avc: denied { write } for pid=9441 comm="syz.7.8345" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1131.082467][ T9455] loop8: detected capacity change from 0 to 256 [ 1131.273055][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8350'. [ 1131.301319][ T9462] netlink: 56 bytes leftover after parsing attributes in process `syz.7.8350'. [ 1131.333456][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8350'. [ 1131.458734][ T9468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.466131][ T9468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.525060][ T9468] bridge0: entered allmulticast mode [ 1131.573182][ T9466] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 1131.581094][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8353'. [ 1131.599003][ T9466] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1131.621092][ T9468] loop8: detected capacity change from 0 to 512 [ 1131.686290][ T9468] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.8351: inode has both inline data and extents flags [ 1131.699515][ T9468] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1131.702414][ T9473] loop7: detected capacity change from 0 to 512 [ 1131.718364][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1131.724939][ C1] EXT4-fs (loop8): initial error at time 1780502053: ext4_orphan_get:1397: inode 15 [ 1131.727463][ T9468] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.8351: couldn't read orphan inode 15 (err -117) [ 1131.734572][ C1] EXT4-fs (loop8): last error at time 1780502053: ext4_orphan_get:1397: inode 15 [ 1131.784074][ T9468] loop8: lost filesystem error report for type 5 error -117 [ 1131.799991][ T9466] bridge_slave_1: left allmulticast mode [ 1131.813086][ T9466] bridge_slave_1: left promiscuous mode [ 1131.819321][ T9466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.827252][ T9466] bridge_slave_0: left allmulticast mode [ 1131.832709][ T9473] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1131.832962][ T9466] bridge_slave_0: left promiscuous mode [ 1131.833111][ T9466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.027747][ T9482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8198 sclass=netlink_route_socket pid=9482 comm=syz.4.8354 [ 1132.266952][ T9489] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1132.273488][ T9489] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1132.359984][ T9489] vhci_hcd vhci_hcd.0: Device attached [ 1133.137360][ T9490] vhci_hcd: connection reset by peer [ 1133.143152][ T4340] vhci_hcd vhci_hcd.2: stop threads [ 1133.150785][ T4340] vhci_hcd vhci_hcd.2: release socket [ 1133.156384][ T4340] vhci_hcd vhci_hcd.2: disconnect device [ 1133.162343][ T3356] usb 6-1: device descriptor read/8, error -110 [ 1133.283378][ T3356] usb 6-1: new SuperSpeed USB device number 3 using vhci_hcd [ 1133.306530][ T3356] usb 6-1: enqueue for inactive port 0 [ 1133.315515][ T3356] usb 6-1: enqueue for inactive port 0 [ 1133.324422][ T3356] usb 6-1: enqueue for inactive port 0 [ 1133.399776][ T9489] tipc: Invalid UDP bearer configuration [ 1133.399790][ T9489] tipc: Enabling of bearer rejected, failed to enable media [ 1133.472543][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8361'. [ 1133.523928][ T3356] usb usb6-port1: attempt power cycle [ 1133.555097][ T9520] EXT4-fs: Ignoring removed orlov option [ 1133.575903][ T9520] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 1133.617261][ T9520] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1133.629140][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8364'. [ 1133.642244][ T9520] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1133.662401][ T9520] EXT4-fs error (device loop7): __ext4_get_inode_loc:4885: comm syz.7.8362: Invalid inode table block 0 in block_group 0 [ 1133.718603][ T9520] loop7: lost filesystem error report for type 5 error -117 [ 1133.718900][ T9520] EXT4-fs (loop7): Remounting filesystem read-only [ 1133.726317][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1133.726351][ C1] EXT4-fs (loop7): initial error at time 1780502055: __ext4_get_inode_loc:4885 [ 1133.726420][ C1] EXT4-fs (loop7): last error at time 1780502055: __ext4_get_inode_loc:4885 [ 1133.828725][ T9520] __quota_error: 7 callbacks suppressed [ 1133.828762][ T9520] Quota error (device loop7): write_blk: dquota write failed [ 1133.844393][ T9522] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8364'. [ 1133.866192][ T9520] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1133.888847][ T9520] EXT4-fs (loop7): 1 truncate cleaned up [ 1133.913260][ T9522] set_capacity_and_notify: 4 callbacks suppressed [ 1133.973253][ T9522] loop1: detected capacity change from 0 to 128 [ 1134.098252][ T9545] loop4: detected capacity change from 0 to 1024 [ 1134.106528][ T9545] EXT4-fs: Invalid want_extra_isize 129 [ 1134.187402][ T28] audit: type=1326 audit(1780502055.579:22679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9538 comm="syz.4.8369" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4b1dce59 code=0x7ffc0000 [ 1134.250856][ T28] audit: type=1326 audit(1780502055.579:22680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9538 comm="syz.4.8369" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4b1dce59 code=0x7ffc0000 [ 1134.326423][ T28] audit: type=1326 audit(1780502055.579:22681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9538 comm="syz.4.8369" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4b1dce59 code=0x7ffc0000 [ 1134.409277][ T28] audit: type=1326 audit(1780502055.579:22682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9538 comm="syz.4.8369" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4b1dce59 code=0x7ffc0000 [ 1134.449734][ T9522] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 1134.493850][ T28] audit: type=1326 audit(1780502055.579:22683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9538 comm="syz.4.8369" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9e4b1dce59 code=0x7ffc0000 [ 1134.523358][ T9522] FAT-fs (loop1): Filesystem has been set read-only [ 1134.615406][ T28] audit: type=1326 audit(1780502055.579:22684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9538 comm="syz.4.8369" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9e4b1dcbc2 code=0x7ffc0000 [ 1134.747428][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8371'. [ 1134.781899][ T28] audit: type=1326 audit(1780502055.579:22685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9538 comm="syz.4.8369" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9e4b19d68e code=0x7ffc0000 [ 1134.920747][ T9549] loop8: detected capacity change from 0 to 256 [ 1135.083474][ T28] audit: type=1326 audit(1780502055.579:22686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9538 comm="syz.4.8369" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9e4b1dcc87 code=0x7ffc0000 [ 1135.083516][ T9553] loop2: detected capacity change from 0 to 256 [ 1135.296460][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8374'. [ 1135.378513][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8376'. [ 1135.622092][ T9557] loop8: detected capacity change from 0 to 512 [ 1135.637357][ T9] usb 10-1: device descriptor read/8, error -110 [ 1135.750514][ T9] usb 10-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1135.797352][ T9] usb 10-1: enqueue for inactive port 0 [ 1135.804660][ T9] usb 10-1: enqueue for inactive port 0 [ 1135.814108][ T9] usb 10-1: enqueue for inactive port 0 [ 1135.822885][ T9557] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1135.855370][ T3356] usb usb6-port1: unable to enumerate USB device [ 1135.867114][ T9567] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8379'. [ 1135.883249][ T9562] loop4: detected capacity change from 0 to 512 [ 1136.026616][ T9562] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.8378: corrupted inode contents [ 1136.062234][ T9579] loop2: detected capacity change from 0 to 256 [ 1136.181045][ T9562] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1136.181708][ T9562] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.8378: mark_inode_dirty error [ 1136.191223][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1136.191277][ C1] EXT4-fs (loop4): initial error at time 1780502057: ext4_do_update_inode:5690: inode 16 [ 1136.191394][ C1] EXT4-fs (loop4): last error at time 1780502057: ext4_do_update_inode:5690: inode 16 [ 1136.248683][ T9562] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1136.249754][ T9562] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.8378: corrupted inode contents [ 1136.582962][ T9562] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1136.583970][ T9562] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.8378: mark_inode_dirty error [ 1136.667788][ T9562] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1136.670779][ T9562] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.8378: corrupted inode contents [ 1136.692601][ T9562] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1136.693133][ T9562] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 1136.712021][ T9562] loop4: lost filesystem error report for type 5 error -117 [ 1136.713844][ T9562] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.8378: corrupted inode contents [ 1136.780308][ T9562] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1136.780876][ T9562] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.8378: mark_inode_dirty error [ 1136.841742][ T9584] loop2: detected capacity change from 0 to 1024 [ 1136.864283][ T9584] EXT4-fs: Ignoring removed orlov option [ 1136.878747][ T9562] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1136.879285][ T9562] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 1136.886401][ T9589] loop7: detected capacity change from 0 to 256 [ 1136.899532][ T9562] loop4: lost filesystem error report for type 5 error -117 [ 1136.912547][ T9584] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 1136.956153][ T9562] EXT4-fs (loop4): 1 truncate cleaned up [ 1136.976642][ T9] usb usb10-port1: attempt power cycle [ 1136.979112][ T30] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 1136.994175][ T9584] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1137.015489][ T9562] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1137.029702][ T9584] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1137.044330][ T9584] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.8384: Invalid inode table block 0 in block_group 0 [ 1137.077194][ T9592] loop7: detected capacity change from 0 to 256 [ 1137.090374][ T9584] loop2: lost filesystem error report for type 5 error -117 [ 1137.091241][ T9584] EXT4-fs (loop2): Remounting filesystem read-only [ 1137.105162][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1137.105195][ C0] EXT4-fs (loop2): initial error at time 1780502058: __ext4_get_inode_loc:4885 [ 1137.105240][ C0] EXT4-fs (loop2): last error at time 1780502058: __ext4_get_inode_loc:4885 [ 1137.139984][ T9584] EXT4-fs (loop2): 1 truncate cleaned up [ 1137.203152][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8388'. [ 1137.276284][ T9598] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8391'. [ 1137.377464][ T9594] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1137.397478][ T9598] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1137.570158][ T9614] EXT4-fs: Ignoring removed orlov option [ 1137.588642][ T9614] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 1137.606764][ T9614] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1137.622133][ T9622] 9p: Bad value for 'rfdno' [ 1137.627870][ T9614] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1137.643418][ T9614] EXT4-fs error (device loop7): __ext4_get_inode_loc:4885: comm syz.7.8395: Invalid inode table block 0 in block_group 0 [ 1137.656403][ T9614] loop7: lost filesystem error report for type 5 error -117 [ 1137.666501][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1137.680392][ C0] EXT4-fs (loop7): initial error at time 1780502058: __ext4_get_inode_loc:4885 [ 1137.689415][ C0] EXT4-fs (loop7): last error at time 1780502058: __ext4_get_inode_loc:4885 [ 1137.701454][ T9614] EXT4-fs (loop7): Remounting filesystem read-only [ 1137.713103][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8396'. [ 1137.722396][ T9614] EXT4-fs (loop7): 1 truncate cleaned up [ 1137.821465][ T9624] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8398'. [ 1137.830768][ T9624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8398'. [ 1137.885987][ T9624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1138.018545][ T9624] EXT4-fs (loop2): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 1138.086753][ T9611] syz.4.8394 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1138.101270][ T9611] CPU: 1 UID: 0 PID: 9611 Comm: syz.4.8394 Not tainted syzkaller #0 PREEMPT(lazy) [ 1138.101295][ T9611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1138.101386][ T9611] Call Trace: [ 1138.101394][ T9611] [ 1138.101404][ T9611] __dump_stack+0x1d/0x30 [ 1138.101431][ T9611] dump_stack_lvl+0x95/0xd0 [ 1138.101528][ T9611] dump_stack+0x15/0x1b [ 1138.101546][ T9611] dump_header+0x80/0x240 [ 1138.101565][ T9611] oom_kill_process+0x295/0x350 [ 1138.101674][ T9611] out_of_memory+0x97d/0xb80 [ 1138.101709][ T9611] try_charge_memcg+0x62f/0xa10 [ 1138.101742][ T9611] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 1138.101773][ T9611] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1138.101804][ T9611] alloc_pages_bulk_noprof+0x4d1/0x560 [ 1138.101828][ T9611] ? __alloc_frozen_pages_noprof+0x2a4/0x350 [ 1138.101853][ T9611] alloc_pages_bulk_mempolicy_noprof+0x873/0xeb0 [ 1138.101968][ T9611] __vmalloc_node_range_noprof+0x891/0x11c0 [ 1138.101997][ T9611] __kvmalloc_node_noprof+0x3d4/0x640 [ 1138.102019][ T9611] ? futex_hash_allocate+0x190/0x9a0 [ 1138.102130][ T9611] ? futex_hash_allocate+0x190/0x9a0 [ 1138.102171][ T9611] futex_hash_allocate+0x190/0x9a0 [ 1138.102199][ T9611] ? cap_task_prctl+0x13f/0x6b0 [ 1138.102233][ T9611] futex_hash_prctl+0xd8/0xf0 [ 1138.102261][ T9611] __se_sys_prctl+0x4f4/0x1400 [ 1138.102287][ T9611] __x64_sys_prctl+0x67/0x80 [ 1138.102311][ T9611] x64_sys_call+0x2533/0x3020 [ 1138.102361][ T9611] do_syscall_64+0x12c/0x3b0 [ 1138.102435][ T9611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.102457][ T9611] RIP: 0033:0x7f9e4b1dce59 [ 1138.102527][ T9611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.102546][ T9611] RSP: 002b:00007f9e49c2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1138.102570][ T9611] RAX: ffffffffffffffda RBX: 00007f9e4b455fa0 RCX: 00007f9e4b1dce59 [ 1138.102586][ T9611] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1138.102599][ T9611] RBP: 00007f9e4b272d6f R08: 0000000000000000 R09: 0000000000000000 [ 1138.102613][ T9611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1138.102625][ T9611] R13: 00007f9e4b456038 R14: 00007f9e4b455fa0 R15: 00007ffce54c1ea8 [ 1138.102643][ T9611] [ 1138.102650][ T9611] memory: usage 307200kB, limit 307200kB, failcnt 141 [ 1138.165428][ T9641] EXT4-fs: Ignoring removed orlov option [ 1138.368630][ T9611] memory+swap: usage 97260kB, limit 9007199254740988kB, failcnt 0 [ 1138.389038][ T9611] kmem: usage 96796kB, limit 9007199254740988kB, failcnt 0 [ 1138.412034][ T9611] Memory cgroup stats for /syz4: [ 1138.412215][ T9611] cache 126976 [ 1138.438150][ T9611] rss 49152 [ 1138.443564][ T9611] shmem 0 [ 1138.451028][ T9611] mapped_file 126976 [ 1138.460497][ T9611] dirty 4096 [ 1138.468125][ T9611] writeback 0 [ 1138.473192][ T9641] EXT4-fs (loop8): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 1138.473429][ T9611] workingset_refault_anon 71 [ 1138.488735][ T9611] workingset_refault_file 1088 [ 1138.493653][ T9611] swap 118784 [ 1138.497130][ T9611] swapcached 8888320 [ 1138.514283][ T9611] pgpgin 1358330 [ 1138.517920][ T9611] pgpgout 1358276 [ 1138.521625][ T9611] pgfault 1302689 [ 1138.525249][ T9611] pgmajfault 32 [ 1138.528704][ T9611] inactive_anon 0 [ 1138.532349][ T9611] active_anon 94208 [ 1138.536146][ T9611] inactive_file 126976 [ 1138.540203][ T9611] active_file 0 [ 1138.543742][ T9611] unevictable 0 [ 1138.547190][ T9611] hierarchical_memory_limit 314572800 [ 1138.552559][ T9611] hierarchical_memsw_limit 9223372036854771712 [ 1138.558722][ T9611] total_cache 126976 [ 1138.562614][ T9611] total_rss 49152 [ 1138.566229][ T9611] total_shmem 0 [ 1138.569698][ T9611] total_mapped_file 126976 [ 1138.574167][ T9611] total_dirty 4096 [ 1138.577961][ T9611] total_writeback 0 [ 1138.581760][ T9611] total_workingset_refault_anon 71 [ 1138.586901][ T9611] total_workingset_refault_file 1088 [ 1138.592181][ T9611] total_swap 118784 [ 1138.595980][ T9611] total_swapcached 8888320 [ 1138.600384][ T9611] total_pgpgin 1358330 [ 1138.609898][ T9641] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1138.621429][ T9641] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1138.631630][ T9611] total_pgpgout 1358276 [ 1138.633516][ T9641] EXT4-fs error (device loop8): __ext4_get_inode_loc:4885: comm syz.8.8403: Invalid inode table block 0 in block_group 0 [ 1138.635958][ T9611] total_pgfault 1302689 [ 1138.652586][ T9641] loop8: lost filesystem error report for type 5 error -117 [ 1138.653421][ T9611] total_pgmajfault 32 [ 1138.653450][ T9611] total_inactive_anon 0 [ 1138.653472][ T9611] total_active_anon 94208 [ 1138.660771][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1138.664848][ T9611] total_inactive_file 126976 [ 1138.668892][ C0] EXT4-fs (loop8): initial error at time 1780502059: __ext4_get_inode_loc:4885 [ 1138.668914][ C0] EXT4-fs (loop8): last error at time 1780502059: __ext4_get_inode_loc:4885 [ 1138.681837][ T9641] EXT4-fs (loop8): Remounting filesystem read-only [ 1138.684535][ T9611] total_active_file 0 [ 1138.707630][ T9647] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8405'. [ 1138.708676][ T9611] total_unevictable 0 [ 1138.725782][ T9611] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8394,pid=9610,uid=0 [ 1138.740649][ T9611] Memory cgroup out of memory: Killed process 9611 (syz.4.8394) total-vm:96348kB, anon-rss:1340kB, file-rss:22432kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1138.765026][ T9641] EXT4-fs (loop8): 1 truncate cleaned up [ 1138.875791][ T9647] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1139.013218][ T9657] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.8406: bg 0: block 169: padding at end of block bitmap is not set [ 1139.031239][ T9657] loop2: lost filesystem error report for type 5 error -117 [ 1139.032190][ T9657] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.8406: Failed to acquire dquot type 0 [ 1139.045587][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1139.052150][ T9] usb usb10-port1: unable to enumerate USB device [ 1139.058351][ C1] EXT4-fs (loop2): initial error at time 1780502060: ext4_validate_block_bitmap:441 [ 1139.058379][ C1] EXT4-fs (loop2): last error at time 1780502060: ext4_validate_block_bitmap:441 [ 1139.059995][ T9657] loop2: lost filesystem error report for type 5 error -117 [ 1139.088079][ T9657] EXT4-fs (loop2): 1 truncate cleaned up [ 1139.102525][ T9657] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1139.126168][ T9657] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.8406: Failed to acquire dquot type 0 [ 1139.134945][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8411'. [ 1139.293948][ T9668] set_capacity_and_notify: 9 callbacks suppressed [ 1139.293969][ T9668] loop8: detected capacity change from 0 to 8192 [ 1139.392196][ T9668] loop8: p1 < > p2 p4 < p5 > [ 1139.397207][ T9668] loop8: partition table partially beyond EOD, truncated [ 1139.404408][ T9668] loop8: p1 start 134217728 is beyond EOD, truncated [ 1139.411191][ T9668] loop8: p2 size 591360 extends beyond EOD, truncated [ 1139.584054][ T9668] loop8: p5 size 591360 extends beyond EOD, truncated [ 1139.600592][ T28] kauditd_printk_skb: 208 callbacks suppressed [ 1139.600616][ T28] audit: type=1400 audit(1780502060.639:22884): avc: denied { create } for pid=9674 comm="syz.2.8414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1139.971188][ T28] audit: type=1400 audit(1780502060.649:22885): avc: denied { bind } for pid=9674 comm="syz.2.8414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1141.370301][ T9698] loop1: detected capacity change from 0 to 2048 [ 1141.402995][ T9700] __nla_validate_parse: 1 callbacks suppressed [ 1141.403017][ T9700] netlink: 168 bytes leftover after parsing attributes in process `syz.7.8419'. [ 1141.515874][ T9704] netlink: 'syz.4.8422': attribute type 1 has an invalid length. [ 1141.524588][ T28] audit: type=1400 audit(1780502062.538:22886): avc: denied { name_bind } for pid=9703 comm="syz.4.8422" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 1141.641278][ T28] audit: type=1400 audit(1780502062.622:22887): avc: denied { bind } for pid=9707 comm="syz.7.8423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1141.756708][ T9714] loop8: detected capacity change from 0 to 1024 [ 1141.805414][ T9714] EXT4-fs: Ignoring removed orlov option [ 1141.845037][ T9714] EXT4-fs (loop8): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 1141.915463][ T9714] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1141.923823][ T9714] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1141.926256][ T9720] loop2: detected capacity change from 0 to 256 [ 1141.938502][ T9714] EXT4-fs error (device loop8): __ext4_get_inode_loc:4885: comm syz.8.8421: Invalid inode table block 0 in block_group 0 [ 1141.951226][ T9714] loop8: lost filesystem error report for type 5 error -117 [ 1141.951488][ T9714] EXT4-fs (loop8): Remounting filesystem read-only [ 1141.965399][ T9714] Quota error (device loop8): write_blk: dquota write failed [ 1141.977237][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1141.977284][ C0] EXT4-fs (loop8): initial error at time 1780502062: __ext4_get_inode_loc:4885 [ 1141.977343][ C0] EXT4-fs (loop8): last error at time 1780502062: __ext4_get_inode_loc:4885 [ 1142.008874][ T9714] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1142.019565][ T9714] EXT4-fs (loop8): 1 truncate cleaned up [ 1142.027605][ T9714] EXT4-fs mount: 34 callbacks suppressed [ 1142.027635][ T9714] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1142.199054][ T9730] loop7: detected capacity change from 0 to 512 [ 1142.218263][ T9737] loop2: detected capacity change from 0 to 256 [ 1142.232676][ T9714] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.293292][ T9730] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1142.305953][ T9730] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1142.321284][ T28] audit: type=1400 audit(1780502063.258:22888): avc: denied { write } for pid=9727 comm="syz.7.8431" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1142.382674][ T9730] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.408489][ T9746] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8434'. [ 1142.457982][ T9752] loop7: detected capacity change from 0 to 256 [ 1142.468231][ T9754] loop8: detected capacity change from 0 to 256 [ 1142.676612][ T9771] : renamed from bond_slave_0 [ 1142.723795][ T9762] loop7: detected capacity change from 0 to 1024 [ 1142.751408][ T9762] EXT4-fs: Ignoring removed orlov option [ 1142.778020][ T9762] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 1142.815563][ T9762] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1142.823777][ T9762] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1142.840027][ T9762] EXT4-fs error (device loop7): __ext4_get_inode_loc:4885: comm syz.7.8443: Invalid inode table block 0 in block_group 0 [ 1142.852777][ T9762] loop7: lost filesystem error report for type 5 error -117 [ 1142.853244][ T9762] EXT4-fs (loop7): Remounting filesystem read-only [ 1142.867144][ T9762] Quota error (device loop7): write_blk: dquota write failed [ 1142.874656][ T9762] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1142.884704][ T9762] EXT4-fs (loop7): 1 truncate cleaned up [ 1142.909875][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1142.916343][ C1] EXT4-fs (loop7): initial error at time 1780502063: __ext4_get_inode_loc:4885 [ 1142.925311][ C1] EXT4-fs (loop7): last error at time 1780502063: __ext4_get_inode_loc:4885 [ 1142.983158][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8445'. [ 1143.084317][ T9762] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1143.221324][ T9762] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.273900][ T9781] loop8: detected capacity change from 0 to 512 [ 1143.307711][ T9781] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1143.324241][ T9781] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1143.369238][ T28] audit: type=1400 audit(1780502064.269:22889): avc: denied { listen } for pid=9784 comm="syz.2.8450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1143.403776][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8451'. [ 1143.431797][ T9790] tc_dump_action: action bad kind [ 1143.464068][ T7280] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.474753][ T9793] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8452'. [ 1143.596184][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8456'. [ 1143.663439][ T9805] Cannot find add_set index 0 as target [ 1143.687897][ T9809] EXT4-fs: Ignoring removed orlov option [ 1143.704210][ T9809] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 1143.738837][ T9809] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1143.746878][ T9809] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1143.763446][ T9809] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.8459: Invalid inode table block 0 in block_group 0 [ 1143.766812][ T9801] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1143.793805][ T9801] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1143.797708][ T9809] loop4: lost filesystem error report for type 5 error -117 [ 1143.813236][ T9809] EXT4-fs (loop4): Remounting filesystem read-only [ 1143.827168][ T9809] EXT4-fs (loop4): 1 truncate cleaned up [ 1143.843445][ T9809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1143.883626][ T9801] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.932443][ T9809] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.950654][ T9821] FAULT_INJECTION: forcing a failure. [ 1143.950654][ T9821] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.963426][ T9821] CPU: 0 UID: 0 PID: 9821 Comm: syz.8.8463 Not tainted syzkaller #0 PREEMPT(lazy) [ 1143.963453][ T9821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1143.963463][ T9821] Call Trace: [ 1143.963470][ T9821] [ 1143.963563][ T9821] __dump_stack+0x1d/0x30 [ 1143.963603][ T9821] dump_stack_lvl+0x95/0xd0 [ 1143.963620][ T9821] dump_stack+0x15/0x1b [ 1143.963639][ T9821] should_fail_ex+0x263/0x280 [ 1143.963664][ T9821] should_failslab+0x8c/0xb0 [ 1143.963715][ T9821] __kmalloc_noprof+0xb8/0x4d0 [ 1143.963740][ T9821] ? nsim_fib_event_nb+0x23a/0xda0 [ 1143.963791][ T9821] nsim_fib_event_nb+0x23a/0xda0 [ 1143.963813][ T9821] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 1143.963871][ T9821] atomic_notifier_call_chain+0x79/0x1a0 [ 1143.963944][ T9821] ? __rcu_read_unlock+0x4e/0x70 [ 1143.963962][ T9821] call_fib_notifiers+0x65/0xa0 [ 1143.963987][ T9821] call_fib6_notifiers+0x30/0x40 [ 1143.964004][ T9821] fib6_add_rt2node+0xb9b/0x19d0 [ 1143.964053][ T9821] ? fib6_add_1+0x4f8/0xa80 [ 1143.964136][ T9821] ? fib6_add_1+0x830/0xa80 [ 1143.964168][ T9821] fib6_add+0x5c3/0xe70 [ 1143.964276][ T9821] ? ip6_route_info_create_nh+0x5e5/0x6b0 [ 1143.964299][ T9821] ip6_route_add+0xc7/0x170 [ 1143.964375][ T9821] ipv6_route_ioctl+0x2de/0x310 [ 1143.964403][ T9821] inet6_ioctl+0x152/0x190 [ 1143.964496][ T9821] sock_do_ioctl+0x73/0x230 [ 1143.964564][ T9821] sock_ioctl+0x41b/0x610 [ 1143.964654][ T9821] ? mutex_lock+0x57/0x90 [ 1143.964708][ T9821] ? __pfx_sock_ioctl+0x10/0x10 [ 1143.964736][ T9821] __se_sys_ioctl+0xce/0x140 [ 1143.964774][ T9821] __x64_sys_ioctl+0x43/0x50 [ 1143.964822][ T9821] x64_sys_call+0x1563/0x3020 [ 1143.964845][ T9821] do_syscall_64+0x12c/0x3b0 [ 1143.964889][ T9821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.964908][ T9821] RIP: 0033:0x7f363f76ce59 [ 1143.964922][ T9821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.964937][ T9821] RSP: 002b:00007f363e1c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1143.964954][ T9821] RAX: ffffffffffffffda RBX: 00007f363f9e5fa0 RCX: 00007f363f76ce59 [ 1143.965020][ T9821] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000005 [ 1143.965034][ T9821] RBP: 00007f363e1c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1143.965077][ T9821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1143.965088][ T9821] R13: 00007f363f9e6038 R14: 00007f363f9e5fa0 R15: 00007ffe82ab7698 [ 1143.965105][ T9821] [ 1144.228555][ T9823] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8465: bg 0: block 169: padding at end of block bitmap is not set [ 1144.244494][ T9823] loop7: lost filesystem error report for type 5 error -117 [ 1144.245179][ T9823] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.8465: Failed to acquire dquot type 0 [ 1144.252592][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1144.252611][ C1] EXT4-fs (loop7): initial error at time 1780502065: ext4_validate_block_bitmap:441 [ 1144.252631][ C1] EXT4-fs (loop7): last error at time 1780502065: ext4_validate_block_bitmap:441 [ 1144.294582][ T9823] loop7: lost filesystem error report for type 5 error -117 [ 1144.311862][ T9823] EXT4-fs (loop7): 1 truncate cleaned up [ 1144.373489][ T9823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1144.387467][ T9823] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1144.408922][ T9823] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.8465: Failed to acquire dquot type 0 [ 1144.430944][ T9829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1144.452607][ T9829] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1144.504405][ T9829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1144.519149][ T6513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1144.568410][ T9841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8470'. [ 1144.810848][ T9855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8473'. [ 1145.029132][ T9863] set_capacity_and_notify: 10 callbacks suppressed [ 1145.029147][ T9863] loop1: detected capacity change from 0 to 512 [ 1145.060626][ T9866] 9p: Bad value for 'wfdno' [ 1145.109691][ T9863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1145.122948][ T9863] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1145.146336][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1145.146350][ T28] audit: type=1400 audit(1780502065.924:22894): avc: denied { write } for pid=9861 comm="syz.1.8476" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1145.224756][ C0] Adjusting tsc more than 11% (6179711 vs 8464313) [ 1145.230254][ T9863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1145.447323][ T9873] loop7: detected capacity change from 0 to 256 [ 1145.777125][ T9875] loop7: detected capacity change from 0 to 256 [ 1145.846944][ T9858] loop2: detected capacity change from 0 to 512 [ 1145.885561][ T9858] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1145.948553][ T9858] EXT4-fs (loop2): 1 truncate cleaned up [ 1145.960077][ T9858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1146.062188][ T28] audit: type=1400 audit(1780502066.673:22895): avc: denied { write } for pid=9846 comm="syz.2.8473" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1146.220420][ T9884] loop1: detected capacity change from 0 to 512 [ 1146.236624][ T28] audit: type=1400 audit(1780502066.803:22896): avc: denied { write } for pid=9846 comm="syz.2.8473" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1146.273242][ T9888] loop7: detected capacity change from 0 to 512 [ 1146.284444][ T9888] EXT4-fs (loop7): invalid journal inode [ 1146.299808][ T9888] EXT4-fs (loop7): can't get journal size [ 1146.323112][ T9884] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8481: bg 0: block 169: padding at end of block bitmap is not set [ 1146.341565][ T9888] EXT4-fs (loop7): 1 truncate cleaned up [ 1146.347816][ T9888] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1146.362661][ T9884] loop1: lost filesystem error report for type 5 error -117 [ 1146.362887][ T9884] Quota error (device loop1): write_blk: dquota write failed [ 1146.377672][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1146.377703][ C1] EXT4-fs (loop1): initial error at time 1780502066: ext4_validate_block_bitmap:441 [ 1146.377727][ C1] EXT4-fs (loop1): last error at time 1780502066: ext4_validate_block_bitmap:441 [ 1146.406698][ T28] audit: type=1400 audit(1780502066.957:22897): avc: denied { write } for pid=9887 comm="syz.7.8482" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1146.436266][ T9884] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1146.460522][ T9884] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.8481: Failed to acquire dquot type 0 [ 1146.471988][ T9884] loop1: lost filesystem error report for type 5 error -117 [ 1146.472644][ T9884] EXT4-fs (loop1): 1 truncate cleaned up [ 1146.486501][ T9884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1146.502948][ T9884] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1146.520888][ T9884] Quota error (device loop1): write_blk: dquota write failed [ 1146.529388][ T9884] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1146.539824][ T9884] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.8481: Failed to acquire dquot type 0 [ 1146.663692][ T28] audit: type=1400 audit(1780502067.056:22898): avc: denied { write } for pid=9883 comm="syz.1.8481" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1147.497041][ T4965] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.060385][ T9847] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1148.097692][ T9908] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8488'. [ 1148.162357][ T9908] loop8: detected capacity change from 0 to 512 [ 1148.232794][ T9908] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1148.249333][ T9908] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1148.263606][ T1875] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.278151][ T6513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.291106][ T28] audit: type=1400 audit(2000000001.588:22899): avc: denied { write } for pid=9907 comm="syz.8.8488" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1148.318757][ T9915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8490'. [ 1148.328181][ T9917] loop1: detected capacity change from 0 to 512 [ 1148.363127][ T9908] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.363647][ T9917] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8493: bg 0: block 169: padding at end of block bitmap is not set [ 1148.389521][ T9915] tc_dump_action: action bad kind [ 1148.412693][ T9917] loop1: lost filesystem error report for type 5 error -117 [ 1148.412944][ T9917] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.8493: Failed to acquire dquot type 0 [ 1148.420341][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1148.420362][ C0] EXT4-fs (loop1): initial error at time 2000000001: ext4_validate_block_bitmap:441 [ 1148.420394][ C0] EXT4-fs (loop1): last error at time 2000000001: ext4_validate_block_bitmap:441 [ 1148.480512][ T9917] loop1: lost filesystem error report for type 5 error -117 [ 1148.481190][ T9917] EXT4-fs (loop1): 1 truncate cleaned up [ 1148.504144][ T9921] loop2: detected capacity change from 0 to 512 [ 1148.521429][ T9917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1148.543454][ T9923] loop7: detected capacity change from 0 to 512 [ 1148.558997][ T9917] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1148.564040][ T9931] netlink: 'syz.8.8496': attribute type 4 has an invalid length. [ 1148.595953][ T9931] netlink: 17 bytes leftover after parsing attributes in process `syz.8.8496'. [ 1148.604827][ T9921] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.8491: corrupted inode contents [ 1148.643226][ T9921] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1148.643657][ T9921] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.8491: mark_inode_dirty error [ 1148.653109][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1148.653140][ C0] EXT4-fs (loop2): initial error at time 2000000001: ext4_do_update_inode:5690: inode 16 [ 1148.653248][ C0] EXT4-fs (loop2): last error at time 2000000001: ext4_do_update_inode:5690: inode 16 [ 1148.653683][ T9931] vfat: Unknown parameter '' [ 1148.726009][ T9937] netlink: 168 bytes leftover after parsing attributes in process `syz.8.8498'. [ 1148.740645][ T9921] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1148.752865][ T9921] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.8491: corrupted inode contents [ 1148.781443][ T9917] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.8493: Failed to acquire dquot type 0 [ 1148.795448][ T9921] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1148.796468][ T9921] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.8491: mark_inode_dirty error [ 1148.796531][ T9921] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1148.797698][ T9921] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.8491: corrupted inode contents [ 1148.797805][ T9921] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1148.799474][ T9921] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1148.799570][ T9921] loop2: lost filesystem error report for type 5 error -117 [ 1148.800137][ T9921] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.8491: corrupted inode contents [ 1148.800223][ T9921] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1148.800667][ T9921] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.8491: mark_inode_dirty error [ 1148.800730][ T9921] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1148.801104][ T9921] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1148.872949][ T9923] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.8492: corrupted inode contents [ 1148.875017][ T9921] loop2: lost filesystem error report for type 5 error -117 [ 1148.948367][ T9923] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1148.959958][ T9921] EXT4-fs (loop2): 1 truncate cleaned up [ 1148.964127][ T9921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1148.964694][ T9921] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1149.038627][ T41] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 1149.049360][ T9923] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #16: comm syz.7.8492: mark_inode_dirty error [ 1149.051726][ T1875] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1149.061612][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1149.071123][ T4965] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1149.077049][ C0] EXT4-fs (loop7): initial error at time 2000000002: ext4_do_update_inode:5690: inode 16 [ 1149.095939][ C0] EXT4-fs (loop7): last error at time 2000000002: ext4_do_update_inode:5690: inode 16 [ 1149.111618][ T9923] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1149.112691][ T9923] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.8492: corrupted inode contents [ 1149.144768][ T9923] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1149.145471][ T9923] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.8492: mark_inode_dirty error [ 1149.147732][ T9944] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1149.167587][ T9923] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.8492: corrupted inode contents [ 1149.168287][ T9923] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 1149.168397][ T9923] loop7: lost filesystem error report for type 5 error -117 [ 1149.170654][ T9923] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.8492: corrupted inode contents [ 1149.171165][ T9923] EXT4-fs error (device loop7): ext4_truncate:4690: inode #16: comm syz.7.8492: mark_inode_dirty error [ 1149.171490][ T9923] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 1149.171520][ T9923] loop7: lost filesystem error report for type 5 error -117 [ 1149.173669][ T9923] EXT4-fs (loop7): 1 truncate cleaned up [ 1149.185343][ T9923] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1149.202584][ T9944] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1149.304533][ T9923] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1149.337681][ T30] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 1149.358972][ T9944] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1149.467612][ T9964] SET target dimension over the limit! [ 1149.482655][ T6513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1149.492169][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8504'. [ 1149.579411][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8509'. [ 1149.712692][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8519'. [ 1149.809906][T10008] EXT4-fs: Ignoring removed orlov option [ 1149.816237][T10008] EXT4-fs (loop8): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 1149.835220][T10008] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1149.848636][T10006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8522'. [ 1149.852857][T10008] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1149.865108][T10008] EXT4-fs error (device loop8): __ext4_get_inode_loc:4885: comm syz.8.8523: Invalid inode table block 0 in block_group 0 [ 1149.878104][T10008] loop8: lost filesystem error report for type 5 error -117 [ 1149.878287][T10008] EXT4-fs (loop8): Remounting filesystem read-only [ 1149.885711][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1149.885753][ C1] EXT4-fs (loop8): initial error at time 2000000003: __ext4_get_inode_loc:4885 [ 1149.885789][ C1] EXT4-fs (loop8): last error at time 2000000003: __ext4_get_inode_loc:4885 [ 1149.917081][T10008] EXT4-fs (loop8): 1 truncate cleaned up [ 1149.923648][T10008] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1149.951750][T10008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1150.035461][T10024] SET target dimension over the limit! [ 1150.054225][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8531'. [ 1150.082991][T10032] tipc: Invalid UDP bearer configuration [ 1150.083028][T10032] tipc: Enabling of bearer rejected, failed to enable media [ 1150.119671][T10034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1150.132340][T10034] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1150.153279][T10034] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1150.162780][T10038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8533'. [ 1150.299144][T10043] 9p: Bad value for 'rfdno' [ 1150.332042][T10028] EXT4-fs: dax option not supported [ 1150.346767][T10028] netlink: 'syz.8.8528': attribute type 4 has an invalid length. [ 1151.191918][T10054] set_capacity_and_notify: 7 callbacks suppressed [ 1151.191951][T10054] loop2: detected capacity change from 0 to 1024 [ 1151.207605][T10054] EXT4-fs: Ignoring removed orlov option [ 1151.233186][T10054] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 1151.248276][T10054] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1151.256564][T10054] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1151.264066][T10054] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.8539: Invalid inode table block 0 in block_group 0 [ 1151.277252][T10054] loop2: lost filesystem error report for type 5 error -117 [ 1151.277414][T10054] EXT4-fs (loop2): Remounting filesystem read-only [ 1151.284762][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1151.284789][ C1] EXT4-fs (loop2): initial error at time 2000000004: __ext4_get_inode_loc:4885 [ 1151.284824][ C1] EXT4-fs (loop2): last error at time 2000000004: __ext4_get_inode_loc:4885 [ 1151.316455][T10054] __quota_error: 12 callbacks suppressed [ 1151.316489][T10054] Quota error (device loop2): write_blk: dquota write failed [ 1151.329858][T10054] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1151.340398][T10054] EXT4-fs (loop2): 1 truncate cleaned up [ 1151.348968][T10054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1151.373898][T10054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.396045][T10065] loop1: detected capacity change from 0 to 512 [ 1151.415594][T10065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1151.428346][T10065] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1151.448965][ T28] audit: type=1400 audit(2000000004.563:22904): avc: denied { write } for pid=10064 comm="syz.1.8545" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1151.473558][T10071] FAULT_INJECTION: forcing a failure. [ 1151.473558][T10071] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.490907][T10071] CPU: 0 UID: 0 PID: 10071 Comm: syz.2.8547 Not tainted syzkaller #0 PREEMPT(lazy) [ 1151.490929][T10071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1151.490939][T10071] Call Trace: [ 1151.490946][T10071] [ 1151.490954][T10071] __dump_stack+0x1d/0x30 [ 1151.490975][T10071] dump_stack_lvl+0x95/0xd0 [ 1151.490993][T10071] dump_stack+0x15/0x1b [ 1151.491009][T10071] should_fail_ex+0x263/0x280 [ 1151.491028][T10071] should_failslab+0x8c/0xb0 [ 1151.491055][T10071] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1151.491082][T10071] ? vm_area_alloc+0x2c/0xb0 [ 1151.491108][T10071] vm_area_alloc+0x2c/0xb0 [ 1151.491132][T10071] mmap_region+0x1172/0x20d0 [ 1151.491153][T10071] ? avc_has_perm+0x101/0x190 [ 1151.491192][T10071] do_mmap+0x9b2/0xbd0 [ 1151.491210][T10071] ? selinux_mmap_file+0x5d/0x70 [ 1151.491231][T10071] vm_mmap_pgoff+0x183/0x2d0 [ 1151.491259][T10071] ksys_mmap_pgoff+0x267/0x310 [ 1151.491277][T10071] x64_sys_call+0x14df/0x3020 [ 1151.491295][T10071] do_syscall_64+0x12c/0x3b0 [ 1151.491319][T10071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.491340][T10071] RIP: 0033:0x7f56e142ce59 [ 1151.491355][T10071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.491370][T10071] RSP: 002b:00007f56dfe7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1151.491388][T10071] RAX: ffffffffffffffda RBX: 00007f56e16a5fa0 RCX: 00007f56e142ce59 [ 1151.491401][T10071] RDX: 0000000000000000 RSI: 0000000001000000 RDI: 0000200000568000 [ 1151.491413][T10071] RBP: 00007f56dfe7f090 R08: 0000000000000004 R09: 0000000000000000 [ 1151.491424][T10071] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 1151.491436][T10071] R13: 00007f56e16a6038 R14: 00007f56e16a5fa0 R15: 00007fffe5385ca8 [ 1151.491452][T10071] [ 1151.678740][T32407] usb usb6-port1: attempt power cycle [ 1151.691861][T10065] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.820660][T10089] loop1: detected capacity change from 0 to 256 [ 1151.878722][T10095] 9p: Bad value for 'rfdno' [ 1152.174476][T10101] loop2: detected capacity change from 0 to 512 [ 1152.675334][T10101] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.8557: corrupted inode contents [ 1152.717538][T10101] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.8557: mark_inode_dirty error [ 1152.729095][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1152.729127][ C1] EXT4-fs (loop2): initial error at time 2000000005: ext4_do_update_inode:5690: inode 16 [ 1152.729201][ C1] EXT4-fs (loop2): last error at time 2000000005: ext4_do_update_inode:5690: inode 16 [ 1152.795544][T10101] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.8557: corrupted inode contents [ 1152.836645][T10101] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.8557: mark_inode_dirty error [ 1152.869166][T10101] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.8557: corrupted inode contents [ 1152.905190][T10101] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1152.911058][T10109] loop7: detected capacity change from 0 to 8192 [ 1152.922674][T10111] netlink: 'syz.8.8560': attribute type 29 has an invalid length. [ 1152.925549][T10101] loop2: lost filesystem error report for type 5 error -117 [ 1152.978087][T10111] netlink: 'syz.8.8560': attribute type 3 has an invalid length. [ 1153.005394][T10101] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.8557: corrupted inode contents [ 1153.043242][T10101] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.8557: mark_inode_dirty error [ 1153.075042][T10101] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1153.084585][T10101] loop2: lost filesystem error report for type 5 error -117 [ 1153.085639][T10101] EXT4-fs (loop2): 1 truncate cleaned up [ 1153.112322][ T30] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1153.122107][ T30] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 1153.122275][T10114] loop1: detected capacity change from 0 to 512 [ 1153.136383][T10101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1153.188333][T10101] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1153.201731][T10117] netlink: 'syz.7.8559': attribute type 5 has an invalid length. [ 1153.238374][T10114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1153.252252][T10114] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1153.253315][ T1875] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.278285][ T28] audit: type=1400 audit(2000000006.265:22905): avc: denied { write } for pid=10113 comm="syz.1.8561" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1153.395299][ T4965] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.414748][T10125] netlink: 'syz.8.8564': attribute type 4 has an invalid length. [ 1153.465297][T10125] loop8: detected capacity change from 0 to 128 [ 1153.468653][T10130] loop1: detected capacity change from 0 to 256 [ 1153.476929][T10125] vfat: Unknown parameter '' [ 1153.486052][ T28] audit: type=1400 audit(2000000006.471:22906): avc: denied { write } for pid=10127 comm="syz.2.8563" path="socket:[144551]" dev="sockfs" ino=144551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1153.576347][T10135] loop7: detected capacity change from 0 to 256 [ 1153.689465][T32407] usb usb6-port1: unable to enumerate USB device [ 1153.729374][T10133] __nla_validate_parse: 7 callbacks suppressed [ 1153.729392][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8567'. [ 1153.796686][T10143] Cannot find add_set index 0 as target [ 1153.810676][ T28] audit: type=1400 audit(2000000006.770:22907): avc: denied { bind } for pid=10146 comm="syz.7.8572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1153.992248][T10156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8571'. [ 1154.230550][T10160] loop8: detected capacity change from 0 to 512 [ 1154.305986][T10160] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1154.346149][T10160] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1154.502657][ T28] audit: type=1400 audit(2000000007.322:22908): avc: denied { write } for pid=10159 comm="syz.8.8575" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1154.538543][T10076] syz.8.8548 (10076) used greatest stack depth: 6896 bytes left [ 1154.559493][ T7280] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.725304][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8585'. [ 1154.758334][ T28] audit: type=1326 audit(2000000007.649:22909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10169 comm="syz.7.8579" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f569ace59 code=0x7ffc0000 [ 1154.811003][ T28] audit: type=1326 audit(2000000007.649:22910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10169 comm="syz.7.8579" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f569ace59 code=0x7ffc0000 [ 1155.071127][T10192] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1155.084490][T10192] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1155.102706][T10209] 9p: Bad value for 'rfdno' [ 1155.129136][ T7280] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.140290][T10208] EXT4-fs: Ignoring removed orlov option [ 1155.169643][T10208] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 1155.192042][T10208] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1155.219112][T10208] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1155.241808][T10208] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz.1.8594: Invalid inode table block 0 in block_group 0 [ 1155.280382][T10208] fserror_report: 1 callbacks suppressed [ 1155.280407][T10208] loop1: lost filesystem error report for type 5 error -117 [ 1155.292830][T10208] EXT4-fs (loop1): Remounting filesystem read-only [ 1155.306879][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1155.306922][ C0] EXT4-fs (loop1): initial error at time 2000000008: __ext4_get_inode_loc:4885 [ 1155.306989][ C0] EXT4-fs (loop1): last error at time 2000000008: __ext4_get_inode_loc:4885 [ 1155.399702][T10208] EXT4-fs (loop1): 1 truncate cleaned up [ 1155.414252][T10208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1155.489512][T10208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.652771][T10226] EXT4-fs (loop7): invalid journal inode [ 1155.660352][T10226] EXT4-fs (loop7): can't get journal size [ 1155.675645][T10226] EXT4-fs (loop7): 1 truncate cleaned up [ 1155.706586][T10226] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1155.846735][T10235] FAULT_INJECTION: forcing a failure. [ 1155.846735][T10235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1155.872808][ T6513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.875647][T10235] CPU: 1 UID: 0 PID: 10235 Comm: syz.8.8604 Not tainted syzkaller #0 PREEMPT(lazy) [ 1155.875673][T10235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1155.875685][T10235] Call Trace: [ 1155.875692][T10235] [ 1155.875756][T10235] __dump_stack+0x1d/0x30 [ 1155.875802][T10235] dump_stack_lvl+0x95/0xd0 [ 1155.875821][T10235] dump_stack+0x15/0x1b [ 1155.875874][T10235] should_fail_ex+0x263/0x280 [ 1155.875894][T10235] should_fail+0xb/0x20 [ 1155.875945][T10235] should_fail_usercopy+0x1a/0x20 [ 1155.875965][T10235] _copy_to_user+0x20/0xa0 [ 1155.876052][T10235] simple_read_from_buffer+0xb5/0x130 [ 1155.876109][T10235] proc_fail_nth_read+0x10e/0x150 [ 1155.876187][T10235] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1155.876211][T10235] vfs_read+0x1ab/0x7f0 [ 1155.876289][T10235] ? __se_sys_io_uring_enter+0x19c/0xfc0 [ 1155.876349][T10235] ? putname+0x7c/0xc0 [ 1155.876368][T10235] ksys_read+0xdc/0x1a0 [ 1155.876399][T10235] __x64_sys_read+0x40/0x50 [ 1155.876423][T10235] x64_sys_call+0x2886/0x3020 [ 1155.876447][T10235] do_syscall_64+0x12c/0x3b0 [ 1155.876476][T10235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.876561][T10235] RIP: 0033:0x7f363f72d68e [ 1155.876638][T10235] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1155.876668][T10235] RSP: 002b:00007f363e1c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1155.876687][T10235] RAX: ffffffffffffffda RBX: 00007f363e1c76c0 RCX: 00007f363f72d68e [ 1155.876701][T10235] RDX: 000000000000000f RSI: 00007f363e1c70a0 RDI: 0000000000000006 [ 1155.876772][T10235] RBP: 00007f363e1c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1155.876785][T10235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.876798][T10235] R13: 00007f363f9e6038 R14: 00007f363f9e5fa0 R15: 00007ffe82ab7698 [ 1155.876817][T10235] [ 1155.886287][T10233] EXT4-fs: Ignoring removed oldalloc option [ 1156.097529][T10233] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1156.127521][T10238] EXT4-fs: Ignoring removed orlov option [ 1156.127884][T10233] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.8603: invalid indirect mapped block 83886080 (level 1) [ 1156.139154][T10196] syz.4.8590 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1156.161661][T10196] CPU: 1 UID: 0 PID: 10196 Comm: syz.4.8590 Not tainted syzkaller #0 PREEMPT(lazy) [ 1156.161692][T10196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1156.161706][T10196] Call Trace: [ 1156.161714][T10196] [ 1156.161724][T10196] __dump_stack+0x1d/0x30 [ 1156.161750][T10196] dump_stack_lvl+0x95/0xd0 [ 1156.161773][T10196] dump_stack+0x15/0x1b [ 1156.161833][T10196] dump_header+0x80/0x240 [ 1156.161877][T10196] oom_kill_process+0x295/0x350 [ 1156.161931][T10196] out_of_memory+0x97d/0xb80 [ 1156.162027][T10196] try_charge_memcg+0x62f/0xa10 [ 1156.162063][T10196] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 1156.162090][T10196] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1156.162195][T10196] alloc_pages_mpol+0xb3/0x260 [ 1156.162222][T10196] alloc_pages_noprof+0x8f/0x140 [ 1156.162293][T10196] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 1156.162322][T10196] __kvmalloc_node_noprof+0x3d4/0x640 [ 1156.162341][T10196] ? futex_hash_allocate+0x190/0x9a0 [ 1156.162424][T10196] ? futex_hash_allocate+0x190/0x9a0 [ 1156.162460][T10196] futex_hash_allocate+0x190/0x9a0 [ 1156.162494][T10196] ? cap_task_prctl+0x13f/0x6b0 [ 1156.162520][T10196] futex_hash_prctl+0xd8/0xf0 [ 1156.162614][T10196] __se_sys_prctl+0x4f4/0x1400 [ 1156.162644][T10196] __x64_sys_prctl+0x67/0x80 [ 1156.162670][T10196] x64_sys_call+0x2533/0x3020 [ 1156.162693][T10196] do_syscall_64+0x12c/0x3b0 [ 1156.162748][T10196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.162772][T10196] RIP: 0033:0x7f9e4b1dce59 [ 1156.162789][T10196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1156.162872][T10196] RSP: 002b:00007f9e49c2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1156.162893][T10196] RAX: ffffffffffffffda RBX: 00007f9e4b455fa0 RCX: 00007f9e4b1dce59 [ 1156.162906][T10196] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1156.162952][T10196] RBP: 00007f9e4b272d6f R08: 0000000000000000 R09: 0000000000000000 [ 1156.162968][T10196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1156.162983][T10196] R13: 00007f9e4b456038 R14: 00007f9e4b455fa0 R15: 00007ffce54c1ea8 [ 1156.163035][T10196] [ 1156.163297][T10196] memory: usage 307200kB, limit 307200kB, failcnt 309 [ 1156.393572][T10238] EXT4-fs (loop8): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 1156.395376][T10196] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 1156.412152][T10196] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1156.416300][T10233] fserror_report: 11 callbacks suppressed [ 1156.416324][T10233] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1156.419923][T10196] Memory cgroup stats for /syz4: [ 1156.420168][T10196] cache 0 [ 1156.429165][T10238] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1156.435675][T10196] rss 4096 [ 1156.448683][T10233] EXT4-fs (loop1): Remounting filesystem read-only [ 1156.456124][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1156.456134][T10196] shmem 0 [ 1156.456144][T10196] mapped_file 0 [ 1156.456169][T10196] dirty 0 [ 1156.456176][T10196] writeback 8192 [ 1156.456184][T10196] workingset_refault_anon 141 [ 1156.456244][ C1] ================================================================== [ 1156.456272][T10196] workingset_refault_file 1088 [ 1156.456282][T10196] swap 204800 [ 1156.456290][T10196] swapcached 9191424 [ 1156.456299][T10196] pgpgin 1370603 [ 1156.456278][ C1] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 1156.456307][T10196] pgpgout 1370601 [ 1156.456337][T10196] pgfault 1318786 [ 1156.456343][ C1] [ 1156.456345][T10196] pgmajfault 72 [ 1156.456354][T10196] inactive_anon 8192 [ 1156.456352][ C1] write to 0xffffffff86ccccd8 of 8 bytes by task 10196 on cpu 0: [ 1156.456366][T10196] active_anon 0 [ 1156.456374][T10196] inactive_file 0 [ 1156.456383][T10196] active_file 0 [ 1156.456376][ C1] prb_reserve+0x73e/0xad0 [ 1156.456391][T10196] unevictable 0 [ 1156.456400][T10196] hierarchical_memory_limit 314572800 [ 1156.456410][T10196] hierarchical_memsw_limit 9223372036854771712 [ 1156.456411][ C1] vprintk_store+0x54a/0x910 [ 1156.456430][ C1] vprintk_emit+0x1a4/0x600 [ 1156.456421][T10196] total_cache 0 [ 1156.456446][ C1] vprintk_default+0x26/0x30 [ 1156.456456][T10196] total_rss 4096 [ 1156.456465][T10196] total_shmem 0 [ 1156.456473][T10196] total_mapped_file 0 [ 1156.456467][ C1] vprintk+0x1d/0x30 [ 1156.456482][T10196] total_dirty 0 [ 1156.456490][T10196] total_writeback 8192 [ 1156.456498][T10196] total_workingset_refault_anon 141 [ 1156.456495][ C1] _printk+0x79/0xa0 [ 1156.456511][ C1] seq_buf_do_printk+0x113/0x1a0 [ 1156.456542][T10196] total_workingset_refault_file 1088 [ 1156.456535][ C1] mem_cgroup_print_oom_meminfo+0x17d/0x260 [ 1156.456552][T10196] total_swap 204800 [ 1156.456563][ C1] dump_header+0xa2/0x240 [ 1156.456581][ C1] oom_kill_process+0x295/0x350 [ 1156.456606][T10196] total_swapcached 9191424 [ 1156.456616][T10196] total_pgpgin 1370603 [ 1156.456608][ C1] out_of_memory+0x97d/0xb80 [ 1156.456624][T10196] total_pgpgout 1370601 [ 1156.456633][T10196] total_pgfault 1318786 [ 1156.456642][T10196] total_pgmajfault 72 [ 1156.456639][ C1] try_charge_memcg+0x62f/0xa10 [ 1156.456651][T10196] total_inactive_anon 8192 [ 1156.456660][T10196] total_active_anon 0 [ 1156.456670][T10196] total_inactive_file 0 [ 1156.456669][ C1] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 1156.456679][T10196] total_active_file 0 [ 1156.456694][T10196] total_unevictable 0 [ 1156.456702][T10196] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 1156.456715][ C1] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1156.456729][T10196] ,cpuset=/,mems_allowed=0,oom_memcg= [ 1156.456742][ C1] alloc_pages_mpol+0xb3/0x260 [ 1156.456755][T10196] /syz4,task_memcg=/syz4 [ 1156.456767][ C1] alloc_pages_noprof+0x8f/0x140 [ 1156.456773][T10196] ,task=syz.4.8590,pid=10195,uid=0 [ 1156.456789][ C1] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 1156.456811][ C1] __kvmalloc_node_noprof+0x3d4/0x640 [ 1156.456822][T10196] Memory cgroup out of memory: Killed process 10195 (syz.4.8590) total-vm:96348kB, anon-rss:1228kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1156.456832][ C1] futex_hash_allocate+0x190/0x9a0 [ 1156.456863][ C1] futex_hash_prctl+0xd8/0xf0 [ 1156.456884][ C1] __se_sys_prctl+0x4f4/0x1400 [ 1156.456902][ C1] __x64_sys_prctl+0x67/0x80 [ 1156.456919][ C1] x64_sys_call+0x2533/0x3020 [ 1156.456942][ C1] do_syscall_64+0x12c/0x3b0 [ 1156.456967][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.456987][ C1] [ 1156.456993][ C1] read to 0xffffffff86ccccd8 of 8 bytes by interrupt on cpu 1: [ 1156.457012][ C1] _prb_read_valid+0x1be/0x950 [ 1156.457045][ C1] desc_update_last_finalized+0x8f/0x170 [ 1156.457077][ C1] prb_final_commit+0x111/0x150 [ 1156.457106][ C1] vprintk_store+0x88b/0x910 [ 1156.457124][ C1] vprintk_emit+0x1a4/0x600 [ 1156.457142][ C1] vprintk_default+0x26/0x30 [ 1156.457162][ C1] vprintk+0x1d/0x30 [ 1156.457187][ C1] _printk+0x79/0xa0 [ 1156.457204][ C1] __ext4_msg+0x1aa/0x1c0 [ 1156.457222][ C1] print_daily_error_info+0x7a/0x300 [ 1156.457242][ C1] call_timer_fn+0x3b/0x240 [ 1156.457259][ C1] __run_timer_base+0x415/0x5f0 [ 1156.457287][ C1] run_timer_softirq+0x31/0x70 [ 1156.457314][ C1] handle_softirqs+0xb9/0x280 [ 1156.457334][ C1] __irq_exit_rcu+0x42/0xd0 [ 1156.457351][ C1] sysvec_apic_timer_interrupt+0x74/0x80 [ 1156.457376][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1156.457401][ C1] vprintk_emit+0x3d3/0x600 [ 1156.457421][ C1] vprintk_default+0x26/0x30 [ 1156.457440][ C1] vprintk+0x1d/0x30 [ 1156.457461][ C1] _printk+0x79/0xa0 [ 1156.457475][ C1] __ext4_msg+0x1aa/0x1c0 [ 1156.457496][ C1] ext4_handle_error+0x50a/0x550 [ 1156.457517][ C1] __ext4_error_inode+0x1bb/0x3c0 [ 1156.457539][ C1] ext4_free_branches+0x3ce/0x410 [ 1156.457564][ C1] ext4_ind_truncate+0x782/0x840 [ 1156.457588][ C1] ext4_truncate+0x66c/0xa10 [ 1156.457617][ C1] ext4_process_orphan+0x110/0x1c0 [ 1156.457643][ C1] ext4_orphan_cleanup+0x69c/0x9f0 [ 1156.457667][ C1] ext4_fill_super+0x3408/0x37c0 [ 1156.457687][ C1] get_tree_bdev_flags+0x291/0x300 [ 1156.457718][ C1] get_tree_bdev+0x1f/0x30 [ 1156.457747][ C1] ext4_get_tree+0x1c/0x30 [ 1156.457767][ C1] vfs_get_tree+0x57/0x1d0 [ 1156.457794][ C1] do_new_mount+0x288/0x8d0 [ 1156.457828][ C1] path_mount+0x4d0/0xbc0 [ 1156.457860][ C1] __se_sys_mount+0x28c/0x2e0 [ 1156.457893][ C1] __x64_sys_mount+0x67/0x80 [ 1156.457920][ C1] x64_sys_call+0x2d61/0x3020 [ 1156.457941][ C1] do_syscall_64+0x12c/0x3b0 [ 1156.457968][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.457986][ C1] [ 1156.457990][ C1] value changed: 0x0000000000000000 -> 0x0000000000006a47 [ 1156.458000][ C1] [ 1156.458005][ C1] Reported by Kernel Concurrency Sanitizer on: [ 1156.458019][ C1] CPU: 1 UID: 0 PID: 10233 Comm: syz.1.8603 Not tainted syzkaller #0 PREEMPT(lazy) [ 1156.458045][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1156.458060][ C1] ================================================================== [ 1156.458111][ C1] EXT4-fs (loop1): initial error at time 2000000009: ext4_free_branches:1023: inode 16 [ 1156.458175][ C1] EXT4-fs (loop1): last error at time 2000000009: ext4_free_branches:1023: inode 16 [ 1156.503750][T10238] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1156.513035][T10233] EXT4-fs (loop1): 1 orphan inode deleted [ 1156.520183][T10238] EXT4-fs error (device loop8): __ext4_get_inode_loc:4885: comm syz.8.8606: Invalid inode table block 0 in block_group 0 [ 1156.522134][T10233] EXT4-fs (loop1): 1 truncate cleaned up [ 1156.534885][T10238] loop8: lost filesystem error report for type 5 error -117 [ 1156.539698][T10233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1156.548770][T10241] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1156.562823][T10238] EXT4-fs (loop8): Remounting filesystem read-only [ 1156.562940][T10238] EXT4-fs (loop8): 1 truncate cleaned up [ 1156.565863][T10233] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.568109][T10241] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1156.575910][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1156.575942][ C1] EXT4-fs (loop8): initial error at time 2000000009: __ext4_get_inode_loc:4885 [ 1156.696163][T10238] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1156.699792][ C1] [ 1156.712264][ T28] kauditd_printk_skb: 521 callbacks suppressed [ 1156.712283][ T28] audit: type=1400 audit(2000000009.361:23428): avc: denied { write } for pid=10239 comm="syz.7.8605" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1156.713098][ C1] EXT4-fs (loop8): last error at time 2000000009: __ext4_get_inode_loc:4885 [ 1157.298838][T10238] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.309239][T10241] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.405451][T10233] set_capacity_and_notify: 12 callbacks suppressed [ 1157.405471][T10233] loop1: detected capacity change from 0 to 4096 [ 1157.420441][T10233] EXT4-fs: Ignoring removed bh option [ 1157.437434][T10233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1157.455762][ T28] audit: type=1400 audit(2000000010.175:23429): avc: denied { write } for pid=10232 comm="syz.1.8603" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1157.556438][ T4965] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.