last executing test programs: 8m36.148873252s ago: executing program 32 (id=589): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@newtaction={0x1c4, 0x30, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{0x128, 0x1, [@m_simple={0x124, 0x18, 0x0, 0x0, {{0xb}, {0xb8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb1, 0x3, '\t\x00Y$\xacA\x00\x00\xd8m\xdc\xd4\xf2\xb9\xab&\xd5\xb7\a^\xf6\v9\xa5\xbe\xa2\xfe\xcb\xf6\xfdh*^\xb3\xc0\x894a\xa1\x987;!\xbd^\x16\xd2\xecs\x9bQ&\xb3\xae\xbc~\xa8\xc3\xab\xee\xf7\xf4\xcbz\x19:[\xc7\xc7u\xe5\xde\xc3ql:\x03\x1af\xa4\xda+\xf2\xbb\xdfo\xffv\x00\x92p$\x99\'\xd7G*\xf7\xf4\x90/\xd4\xe8\x8bf\xb4/1\xcdY\xe3=\x827\xbd\xaa\x87(\xac\xd8\x16q\xec\xd1\x18&\xb6\xf1l\xb7Ta]cZ\xd0\x96\xb6\xa5\x14ys4A~\xe2\x93\x8a*\x01\xc7\xe0\x9d\x97\x9c\xd1\xb5 Wt\xa7,\xc7t\xfa>Z\xd7V\xe6\xc8\xec\x91'}]}, {0x43, 0x6, "c92acebef543cf5eac95ff99fdfe71226f0f8ca3945cf1e27303fef4d7edee9dc07b9c204234f1518f815a1e6f9900be0653c30ee7044fc49940d26166aca9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x88, 0x1, [@m_simple={0x44, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x17, 0x6, "3ac47d8f66b9ada606aa60a7fc99c95c9fbb58"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x40, 0x16, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 8m12.819957847s ago: executing program 33 (id=831): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002180)={0xffffffffffffffff, 0x1}, 0xc) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r2, @ANYBLOB="faffffff00"/20, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="000000e50400000000000000000000000000000000c15dc6f3"], 0x50) (async) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x6, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x5, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x7, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x3, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x7, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xff9, 0x10, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x445d, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x5, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8000008, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000008, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x2010001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x100, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x10008, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x8000040, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x40000002, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0xcc81, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) (async) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) (async) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[], 0xff2e) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffd, 0xdd5}, 0x2081, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x667}, 0x0, 0xdfffdfffffffffff, 0xffffffffffffffff, 0x1) (async) r7 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TCSETS(r7, 0x5402, &(0x7f00000021c0)={0xaa, 0x8, 0xa942, 0x7df6bacc, 0x19, "bc3799ebc9b132501b1cc47f6ffb8d38dfd6fa"}) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002140)={0x8, &(0x7f0000002100)=[{0x5, 0x2, 0x3, 0x2}, {0x3, 0x1, 0x3, 0x8}, {0x1, 0x7, 0xd1, 0x6}, {0x9, 0xbf, 0x80, 0x1}, {0x5, 0x7, 0x0, 0xfffff3ce}, {0xc256, 0x3, 0xf, 0x40}, {0xfff8, 0xf9, 0x34, 0x72}, {0x8000, 0xa, 0x4}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4014850) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0}, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x9, 0x11, &(0x7f0000002540)=ANY=[@ANYBLOB="18000000f9100000000000002b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018220000", @ANYRES32, @ANYBLOB="0000000002000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000c1dead9682eabcd7527532d7e3b9571a641a14975011617e280b395c7e79cc9a2ed900e225945b56a701f2d0b56b9ad77233779732925c4a53b520b62b342c9bc9f6d248203ef737f7895f989a9a813499bf5ffdb632b3ae12b882b0f42bf98a5fac0e281ec0"], &(0x7f0000000140)='GPL\x00', 0x7fff, 0xa3, &(0x7f0000002280)=""/163, 0x40f00, 0x15, '\x00', r8, @fallback=0x1c, r0, 0x8, &(0x7f0000000200)={0x7, 0x8}, 0x8, 0x10, &(0x7f0000002340)={0x2, 0x9, 0x1000, 0x1}, 0x10, 0xffffffffffffffff, r6, 0x1, &(0x7f0000002380)=[0xffffffffffffffff, r1, r0], &(0x7f00000023c0)=[{0x4, 0x1, 0x0, 0xa}], 0x10, 0x7ff}, 0x94) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) unshare(0x6a040000) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$XFS_IOC_GETBMAPA(r4, 0xc020582c, &(0x7f0000000000)={0xfffffffffffffffc, 0x6, 0x7fff, 0x3, 0x2}) write$P9_RVERSION(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1500000065ffff00800000fd1f3950320230302e4c"], 0x15) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_clone3(0x0, 0x0) 8m2.303753133s ago: executing program 4 (id=956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x8, 0x81, 0x6}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x3) epoll_create(0x8000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r3, 0x3}, 0x8) lstat(&(0x7f0000004780)='./file0\x00', &(0x7f00000047c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r4, 0x4007) r5 = getegid() fchown(r2, r4, r5) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[], 0xd4}}, 0x4000010) 8m1.401892936s ago: executing program 4 (id=969): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc096, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x471, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x2}, 0x40000) 8m1.337354364s ago: executing program 4 (id=971): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getgroups(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000180)={[{@nobh}, {@oldalloc}]}, 0x1, 0x240, &(0x7f00000002c0)="$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") rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x0, @desc1}}) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xb, [0x1, 0xe, 0x5, 0x0, 0x7, 0x9, 0x0, 0xf, 0x7, 0xc, 0xf, 0xb, 0x6, 0xb, 0x9, 0xa], 0x0, [0x7ff, 0x8, 0x0, 0x639, 0x6, 0xe6, 0x4, 0x3, 0x8, 0xb33, 0x0, 0x4, 0xb2, 0x7, 0x5, 0x3], [0x100, 0x6, 0x7, 0xca6, 0x5, 0x6, 0x2, 0x6, 0x0, 0x4, 0x1, 0x0, 0x9, 0x2, 0x9, 0x1fe]}}]}}]}, 0x8c}}, 0x0) 8m1.181832745s ago: executing program 4 (id=973): r0 = syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000980), 0x4ca800) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r2, &(0x7f00000038c0)=[{&(0x7f0000002540)=""/4103, 0x1007}], 0x1) socket$nl_route(0x10, 0x3, 0x0) gettid() syz_open_dev$usbfs(&(0x7f00000000c0), 0xe430, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRESOCT=r0], 0x50) r4 = perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8c7, 0x1}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x67}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000040)=0x4280, 0xffffffffffffff55) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, 0x0, &(0x7f0000001040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3, 0xffffffffffffffff}, &(0x7f0000000400)=0xa1, &(0x7f00000004c0)=r4}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r7, 0x88, &(0x7f0000000900)}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="a4000000020805000000000000000000170000050900010073797a31000000000900010073797a31000000000900010073797a3000000000050003002f00000005000300c4745e7a67000400000005000300840000004c00048008000140000008000140ff11f9a708000140000000050800014000000000080001400000000008000c40000007ff080001400000000b080001400000000905000300210000005989e7da5d3a039e7462425914b2eee716b7bd0404c15fe6d69faec186659a5b4ea5ae5d28905aae9ba4d1d102d4000b"], 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000005400e50100000000fd4447d5dbe8271f", @ANYRES32=r10], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x3, 0xfe, 0x4, 0x20000000}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000814}, 0x20004090) close(r6) r12 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r12, r12, 0x800022) openat(0xffffffffffffff9c, 0x0, 0x441, 0x14a) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8m0.628151603s ago: executing program 4 (id=981): socket(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000051) syz_open_dev$tty20(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x7ad82179598b3c, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback={0xffffffffffffffa4}, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000240)=0xa, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4020000000000006111480000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) 7m59.972045431s ago: executing program 4 (id=990): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0x8000e23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x9, 0xb}, {0xffe0, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x5, 0x4, 0x0, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 5m0.509294153s ago: executing program 3 (id=2150): wait4(0xffffffffffffffff, 0x0, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@nogrpid}, {@nodiscard}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000003010500000000000000000002000000240002800c000280040001003a0000001400018008000100"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex, 0xd, 0x1, 0x9, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b0000000000060001"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x82000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {0x1, 0x8001}}, './file1\x00'}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000900)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x20, r11, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r13) ptrace$getregs(0xc, r13, 0x800005, &(0x7f0000000100)=""/62) waitid(0x1, r13, 0x0, 0x20000000, &(0x7f0000000080)) r14 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r14, 0x107, 0x13, &(0x7f0000000000)=0x2047, 0x4) socket$igmp(0x2, 0x3, 0x2) 4m59.684309831s ago: executing program 3 (id=2154): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="340000000002010200000000000000000a000008040003801800028006000340000200000c00028005000100060000006f000180"], 0x34}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) r2 = memfd_create(&(0x7f0000001180)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) unshare(0x22020400) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x80, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket(0xa, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 4m56.266806079s ago: executing program 35 (id=2166): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000001c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa0f}}]}, 0x1, 0x4d3, &(0x7f0000000a00)="$eJzs209sFNUfAPDvbLe0hR8/+uOHKIhaRGOjsYWiwsELRhMTMTHiQY9NWwhSqKE1EUKkJAaPhsS78ejVg1f1ZjyZeIWjiSEhhgvgac3szLT7t7R1twX280m2fW/mzbz33Zk3+2bebgA9ayT9k0T8JyKuR8SOLFtfYCT7d/f2pal7ty9NxWKlcuKvpFruTprPFdttyzOjpYjSF0nDDjPzFy6emZydnTmf58cXzn4yPn/h4sunz06emjk1c27i6NFXDh868trEq2sPqkV9aVx39n4+t2/P2x9de3eqXCwfzP/XxtEpIzHSqilVz3e6sk22vSadlDexIaxJX0Skh6u/2v93RF84eNArKpVKZaD96sVKoytNS4CHVhIrrBzILxHAI6j4oE/vf4vXBg09Hgi3jmU3QGncd/NXtqYcpbxMf8P9bWGxA/UPRsSHi39/k76iS88hAABq/XSsGAnWjf8uHYiI3dnj4ar/5nMowxHxv4jYGRH/j4hdEfFYVjYej4gnGvY/kt5ArlD/SEO+efxTutmBMNtKx3+v53Nb9eO/YvQXw315bnt6L5wtmzmYvyej0T9w8vTszKHanSb1c1A/v/n7Vw0xLaVGasZ/6SutvxgL5mVvlhse0E1PLkx2JPg0/tGIveXG+JNyGkA2EzBU/bsnIvauYb/DNenTL363bynTX1+udfxNs2aV6pItDUs7MFVR+Tbihez4L0bd8V9uQ7Ly/OT4YMzOHBxPz4KDLev49ber77Wr/77H/4c/Gjd568iPJ/5t2EtuXYnYWnP+RzF/uxz/cBKRLM3Xzq+9jqs3vmx7T7O68/9y3Tbp+b8l+aCaLk6JzyYXFs4fitiSHG9ePrG8bZEvyqfxjx5o3f935tuk78STEZGexE9FxNMR8Uze9v0R8WxEHFgh/l/eeO7j9cffXWn80y2vf3XHf3m+fv54kbiw2kTfmf3X77W5eKzu+GdtGc2XtL7+JXUXjdU2sANvIQAAADzwSlH97n9pbCldKo2NZc+AdsXW0uzc/MJLJ+c+PTed/UZgOPpLxZOu7Hlwf1I8/xyuyU805A/nz42/7huq5sem5manNzt46HHbqn0+aer/qT/7Nrt1QNf5yQ/0rpb9v2Y6bfe1DWwMsKF8/kPvqun/7X7TsuibMvBoav3537/h7QA2Xqv+f3kd2wAPl4q+DD1N/4feVY73l9KlFcsBjxr9GnrS6n/Fv55EZaD1qsFoLhyD3WnGUIu6NiWRjqyaVt14JzsO3ax9aD1bFV//alsmSvfbT7nuHBuI5jJ9sSnH4tTujp/8lfy78p1u6vcr99NiuN6FN2oDL0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABd9E8AAAD//xbo0KU=") syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) unshare(0x22020400) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x80, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket(0xa, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 2m10.26446035s ago: executing program 6 (id=2846): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a0300"], 0x0, 0x56}, 0x28) getgroups(0x1, &(0x7f0000000180)=[0xee00]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5560}}, './file0\x00'}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000840)={0x4, 0xf, 0x2, 0xfff2, 0x0, 0x3, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) fchownat(r3, &(0x7f0000000940)='./file0\x00', r4, 0x0, 0x1000) setregid(r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r1}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "11cba021ab00d7c3d795bc8741153034523fb8ca053ba1a69ecb02d499b8503ce487d03abab1b53320f25c724fe0d32fce049bf65bdef89efbd833d173b77087ea4ea3a853df466fa7859f68e3de5c95"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 2m9.231740279s ago: executing program 6 (id=2849): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x800000, &(0x7f0000006680)) rt_sigsuspend(0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5b, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) lseek(0xffffffffffffffff, 0x0, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000100), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00002000000061118b000000000085000000cc00000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x30, 0x3a, 0x0, @local, @local, {[], @dest_unreach={0x1, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x8, 0x0, 0x0, @private1, @mcast2}}}}}}}, 0x0) r5 = socket(0x1e, 0x4, 0x0) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 2m8.905535049s ago: executing program 6 (id=2851): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=@can_newroute={0x12, 0x18, 0x1, 0x0, 0x25dfdbfc, {0x1d, 0x1, 0x8}, [@CGW_LIM_HOPS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m8.765147713s ago: executing program 6 (id=2852): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYRES32=r0], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") mkdir(&(0x7f0000000080)='./bus\x00', 0x4) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000680)=ANY=[@ANYBLOB="ec0f2d2a3b2eda96823eb8b38a973e991b03674e1bd846afb9ff9bf62bc799c2c14e1abdd6220b4d58370b", @ANYRESOCT=r2, @ANYRES32=r0, @ANYBLOB="381aeae9167a346fee4006c17d063daf9bc32e80765e574b9f39087a92247f160a3699ec92430154094bfc478fefddb03de1e72e10cf8be1a01b6e2c2243d992c99e877f500a6e97ef712283fe146bd2781698a34aa9ac4990632554b9fb6c674d7eaef525f215ed8c9f634c594441cf6f9f1e630bc11042f7a2ce9aa49b60870a3d3da7718e68a296e28ba3dcf5604b12ec2a8e8b74cc6b5d6ab589e37951f20ebfeca98c3720fb12a2de21935f6664165cfa3791ad2e89b57e51968c87fa19c95e3540918c47df5d634fc178d14b9db904cddc297db981", @ANYRESDEC=r3], 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) tkill(r6, 0x7) wait4(r6, 0x0, 0x2, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x80, 0x50) tgkill(r6, r6, 0x14) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r7, &(0x7f00000000c0)=[{0x0}], 0x1, 0x4000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xf, 0x200, &(0x7f0000003c40)="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"}) 2m7.054880587s ago: executing program 6 (id=2857): socket(0x11, 0x3, 0x10001) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8008, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004f7000/0x2000)=nil, 0x2000, 0x3000007, 0x8010, r3, 0xffffd000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800002018210000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x1002, &(0x7f0000002500)=""/4098, 0x41100}, 0x94) r4 = socket(0x28, 0x5, 0x0) r5 = syz_io_uring_setup(0x4f6, &(0x7f0000000680)={0x0, 0x80fd, 0x2, 0x3, 0x2cf}, &(0x7f0000000080)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x47bc, 0xf5, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) io_uring_setup(0x5b26, &(0x7f0000000040)={0x0, 0x18e3, 0x2, 0x3, 0x2cf}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2402, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x100000, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2m6.137615097s ago: executing program 6 (id=2861): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800ffd018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095", @ANYRES64=r0, @ANYBLOB="31d4ecd80816af04f0849863316bf7fa3ba962f835eeef62ff9453f1eb250b6640d0b96868c7b8a36a4f7ddd72d32c84f07fef43451da0e856733cfb2b525019133f3a67a4d27e8cc5fdc903ae98026b8533b4cb22e466ee8729d968323fbd4cb5b867e87d409842d43bb9df863372a4ab626d391b90916e1d75bf4707d68c8deeffcb0fa1d5536982dadbaba557ceba8fce713c2bdb6a9eacebe91eb320af90548f485aa16af1afd0e6833aab4e3c982f504fd578b75e5488e2d576b618c56709"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) 2m6.104201701s ago: executing program 36 (id=2861): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800ffd018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095", @ANYRES64=r0, @ANYBLOB="31d4ecd80816af04f0849863316bf7fa3ba962f835eeef62ff9453f1eb250b6640d0b96868c7b8a36a4f7ddd72d32c84f07fef43451da0e856733cfb2b525019133f3a67a4d27e8cc5fdc903ae98026b8533b4cb22e466ee8729d968323fbd4cb5b867e87d409842d43bb9df863372a4ab626d391b90916e1d75bf4707d68c8deeffcb0fa1d5536982dadbaba557ceba8fce713c2bdb6a9eacebe91eb320af90548f485aa16af1afd0e6833aab4e3c982f504fd578b75e5488e2d576b618c56709"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) 1m8.683003502s ago: executing program 9 (id=3175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) read(r0, &(0x7f0000000300)=""/207, 0xfdef) (fail_nth: 1) 1m7.892400276s ago: executing program 9 (id=3176): r0 = io_uring_setup(0x42cb, &(0x7f0000000280)={0x0, 0x7d67, 0x10000, 0x2, 0x100011}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20008004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) dup2(r1, r0) r4 = gettid() r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) unshare(0x22020400) ioctl$BTRFS_IOC_SNAP_CREATE(r5, 0x50009401, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) sigaltstack(&(0x7f00000000c0)={0x0, 0x180000001}, 0x0) 1m7.543855251s ago: executing program 9 (id=3178): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000700)="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", 0x107) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500"], 0x54}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000050000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f07"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x140480c7}, 0x4000050) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x33, 0x0, 0x4000000, 0x0, 0x0, 0x4, 0x2, 0x0, 0x20000000}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socket$inet6(0xa, 0x5, 0x7fff) 1m7.436007011s ago: executing program 9 (id=3180): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000480), 0x1, 0x566, &(0x7f00000015c0)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000380)={0x3, 0x2, 0x1, 0x3}) 1m6.907331183s ago: executing program 9 (id=3185): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x11004, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r2, 0x1, 0x1070bd0c, 0x4, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40811}, 0x10) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r4, @ANYBLOB="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"], 0xd0}}, 0x40000) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) close(0x4) 1m6.428292805s ago: executing program 9 (id=3188): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000001c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa0f}}]}, 0x1, 0x4d3, &(0x7f0000000a00)="$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") syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$eJzs3T9oJFUcB/Df7B/jJotGbQTxD4iIBkLsBJvYKAQkBBFBhYiIlSRCTLDLWtlYaK0SEGyC2BktxSbYKIJV1BS55uAuXHHhirtij9nZDZtkw132b9j5fGDZN3nvzXs7yfdNWJiZAHJrOiLmI6IYETMRUY6IpL3BM9lrurm5VdldjqjX37yRNNpl25lWv6mIqEXEyxGlVt3GzrsHt/Zef/7L9fJzP+y8UxnW52t3eLD/xtF3i1/8vPDSxl//XFtMYj6qzbr2z9FPSYeflZKIRwcx2CWRlEY9A+7H0mc//Zvm/rGIeLaR/3IUmpH9au2B38vx4rfn9f36+t9PDHOuQP/V6+X0HFirA7lTiIhqJIXZiMjKhcLsbPY//H/FycLHq2ufzny0ur7yYaMauKyqF2ma7L/268QvU6fyf7WY5R8YX9WI/beWtv9Py0fFUc8GGJj2b9ufzN7S/M+8v/lCyD/kjvxDfsk/5Jf8wxjoMrvyD/nVS/4fHNCcgOFw/ofx83CrUG4Vah3byT/kl/zDmPq+01WnJ8k/5Fd7/gGAfKlPjPoKZGBURr3+AAAAAAAAAAAAAAAAAAAAZ21Vdpdbr2GN+cc3EYevRkSp0/jF5gPHs7uNT95M0mbHkqxbT957uscd9OjHvl19Xemq10NX+jV+d/58ajD7/fzk5rkHZ3MlopY2niuVzv79JT0/8P6Re9SXP+hxgAs6fVfAV94e7vin3dke7fgLexG/pevPXHP9SQ/Q8e+/EI833juvP9X2Wyx36ZPbPe4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAobkbAAD//2SKbDc=") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x80, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE(r7, &(0x7f0000000200)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000140)=""/109, 0x6d, 0x4, 0x2, 0x80000001, 0x4, 0xfff}}, 0x120) 1m6.415626513s ago: executing program 37 (id=3188): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000001c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa0f}}]}, 0x1, 0x4d3, &(0x7f0000000a00)="$eJzs209sFNUfAPDvbLe0hR8/+uOHKIhaRGOjsYWiwsELRhMTMTHiQY9NWwhSqKE1EUKkJAaPhsS78ejVg1f1ZjyZeIWjiSEhhgvgac3szLT7t7R1twX280m2fW/mzbz33Zk3+2bebgA9ayT9k0T8JyKuR8SOLFtfYCT7d/f2pal7ty9NxWKlcuKvpFruTprPFdttyzOjpYjSF0nDDjPzFy6emZydnTmf58cXzn4yPn/h4sunz06emjk1c27i6NFXDh868trEq2sPqkV9aVx39n4+t2/P2x9de3eqXCwfzP/XxtEpIzHSqilVz3e6sk22vSadlDexIaxJX0Skh6u/2v93RF84eNArKpVKZaD96sVKoytNS4CHVhIrrBzILxHAI6j4oE/vf4vXBg09Hgi3jmU3QGncd/NXtqYcpbxMf8P9bWGxA/UPRsSHi39/k76iS88hAABq/XSsGAnWjf8uHYiI3dnj4ar/5nMowxHxv4jYGRH/j4hdEfFYVjYej4gnGvY/kt5ArlD/SEO+efxTutmBMNtKx3+v53Nb9eO/YvQXw315bnt6L5wtmzmYvyej0T9w8vTszKHanSb1c1A/v/n7Vw0xLaVGasZ/6SutvxgL5mVvlhse0E1PLkx2JPg0/tGIveXG+JNyGkA2EzBU/bsnIvauYb/DNenTL363bynTX1+udfxNs2aV6pItDUs7MFVR+Tbihez4L0bd8V9uQ7Ly/OT4YMzOHBxPz4KDLev49ber77Wr/77H/4c/Gjd568iPJ/5t2EtuXYnYWnP+RzF/uxz/cBKRLM3Xzq+9jqs3vmx7T7O68/9y3Tbp+b8l+aCaLk6JzyYXFs4fitiSHG9ePrG8bZEvyqfxjx5o3f935tuk78STEZGexE9FxNMR8Uze9v0R8WxEHFgh/l/eeO7j9cffXWn80y2vf3XHf3m+fv54kbiw2kTfmf3X77W5eKzu+GdtGc2XtL7+JXUXjdU2sANvIQAAADzwSlH97n9pbCldKo2NZc+AdsXW0uzc/MJLJ+c+PTed/UZgOPpLxZOu7Hlwf1I8/xyuyU805A/nz42/7huq5sem5manNzt46HHbqn0+aer/qT/7Nrt1QNf5yQ/0rpb9v2Y6bfe1DWwMsKF8/kPvqun/7X7TsuibMvBoav3537/h7QA2Xqv+f3kd2wAPl4q+DD1N/4feVY73l9KlFcsBjxr9GnrS6n/Fv55EZaD1qsFoLhyD3WnGUIu6NiWRjqyaVt14JzsO3ax9aD1bFV//alsmSvfbT7nuHBuI5jJ9sSnH4tTujp/8lfy78p1u6vcr99NiuN6FN2oDL0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABd9E8AAAD//xbo0KU=") syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x80, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE(r7, &(0x7f0000000200)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000140)=""/109, 0x6d, 0x4, 0x2, 0x80000001, 0x4, 0xfff}}, 0x120) 1m0.663290149s ago: executing program 8 (id=3228): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x2000000, 0x2, 0x2, 0x4}, 0x20) 1m0.532469014s ago: executing program 8 (id=3229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000081}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, r5, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffff7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x4c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4078}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4001}, 0x200008c1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) (async) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) iopl(0x3) 1m0.514026301s ago: executing program 8 (id=3230): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback={0xe0ff}, 0xc5f}, 0x1c) 1m0.440852488s ago: executing program 8 (id=3231): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000480), 0x1, 0x566, &(0x7f00000015c0)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000380)={0x3, 0x2, 0x1, 0x3}) 1m0.171213147s ago: executing program 8 (id=3232): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x1bc2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000bc0)=""/84, 0x54}], 0x1, 0x6, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x40, 0x4, 0x7}}, 0x14) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r4, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x0) 56.792201393s ago: executing program 8 (id=3239): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x1}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001114053819bd70000000000008004a000100000008004b0028000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000044) 56.786697042s ago: executing program 38 (id=3239): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x1}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001114053819bd70000000000008004a000100000008004b0028000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000044) 6.075082404s ago: executing program 0 (id=3616): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140), 0x3200841, 0x0) 6.039155797s ago: executing program 0 (id=3617): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x922, 0x12) 5.856513613s ago: executing program 0 (id=3619): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x65e, @remote, 0x9000000}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) 5.856232653s ago: executing program 0 (id=3620): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x8, @mcast1, 0x8}}}, 0x84) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TTL={0x5, 0x4, 0x1}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 5.637345913s ago: executing program 0 (id=3624): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x35903}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MAP={0x24, 0xe, {0x8, 0x4, 0x3, 0x1ff, 0xfc, 0xf9}}]}, 0x5c}}, 0x4048084) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 5.51648524s ago: executing program 5 (id=3626): socket$kcm(0x1e, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xea, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x30}, 0x1c) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x7, 0x7, 0x2}, 0x8) listen(r1, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000640)=0x652, 0x4) sendto$inet6(r3, &(0x7f0000000240)="c4", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x4e20, 0x0, @rand_addr, 0x5}, 0x1c) 5.51611031s ago: executing program 0 (id=3627): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000001c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa0f}}]}, 0x1, 0x4d3, &(0x7f0000000a00)="$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") syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) unshare(0x22020400) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x80, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f0000000200)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000140)=""/109, 0x6d, 0x4, 0x2, 0x80000001, 0x4, 0xfff}}, 0x120) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 5.496321037s ago: executing program 5 (id=3629): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x4, 0x7, 0x10001}, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) clock_gettime(0x6, &(0x7f0000000180)) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @broadcast}, 0x10) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYRESOCT=r2], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x11}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006b8f9127fb115daa403106a687d8dd7428e969602c9f9cf9b95e26c8dc653af6f3f128bfa736612e6e4c9577c229b1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="f55d66a99a47ad778fd94618fc3b05ba", 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, 0x0}, 0x1e) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{}, {0x0, 0x3ffffffe}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000480)={{0xa, 0x4e24, 0x101, @empty, 0x200}, {0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}}, 0x400, {[0x6, 0x3, 0xfd, 0x0, 0x899, 0xfffffffe]}}, 0x5c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r4, &(0x7f00000002c0), &(0x7f0000000840)=""/165}, 0x20) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0xf}, [0x0, 0xff000000], [], 'veth0_macvtap\x00', 'bridge0\x00', {0xff}}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0xe5, 0x4, 0x1, [0x4538, 0x1, 0x9, 0x3ff, 0x7, 0xa88d, 0x9, 0xb, 0x40, 0xe, 0xa, 0x3, 0x5, 0xdf, 0x0, 0xd7eb], 0x8}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff000000, 0xff000000], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x3c, 0x0, 0x4, 0x4b}, 0x0, 0x228, 0x248, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x95fb}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4b8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11e01e, 0x10002, 0x20da, 0x8, 0xa, 0x20007, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close(0x3) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.13374207s ago: executing program 5 (id=3631): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xca, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x88, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x2, 0x1946}, 0x0, 0x7, 0x0, 0x8, 0x1e2, 0xfcc9, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x6}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800600000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4.943626614s ago: executing program 1 (id=3635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x28044000}, 0xc0) (fail_nth: 1) 4.793330647s ago: executing program 1 (id=3636): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000004c0), 0x4, 0x2) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r2, 0x1, 0x4a, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59527bd7000000000000a400000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000ffff00000000080008000001"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 4.651990471s ago: executing program 5 (id=3637): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a0300"], 0x0, 0x56}, 0x28) getgroups(0x1, &(0x7f0000000180)=[0xee00]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5560}}, './file0\x00'}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000840)={0x4, 0xf, 0x2, 0xfff2, 0x0, 0x3, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) fchownat(r3, &(0x7f0000000940)='./file0\x00', r4, 0x0, 0x1000) setregid(r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r1}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") (fail_nth: 24) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x10040, &(0x7f00000002c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3c}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r8], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.656556572s ago: executing program 5 (id=3647): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x9, 0x294000) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') 2.621007715s ago: executing program 5 (id=3648): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000001c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa0f}}]}, 0x1, 0x4d3, &(0x7f0000000a00)="$eJzs209sFNUfAPDvbLe0hR8/+uOHKIhaRGOjsYWiwsELRhMTMTHiQY9NWwhSqKE1EUKkJAaPhsS78ejVg1f1ZjyZeIWjiSEhhgvgac3szLT7t7R1twX280m2fW/mzbz33Zk3+2bebgA9ayT9k0T8JyKuR8SOLFtfYCT7d/f2pal7ty9NxWKlcuKvpFruTprPFdttyzOjpYjSF0nDDjPzFy6emZydnTmf58cXzn4yPn/h4sunz06emjk1c27i6NFXDh868trEq2sPqkV9aVx39n4+t2/P2x9de3eqXCwfzP/XxtEpIzHSqilVz3e6sk22vSadlDexIaxJX0Skh6u/2v93RF84eNArKpVKZaD96sVKoytNS4CHVhIrrBzILxHAI6j4oE/vf4vXBg09Hgi3jmU3QGncd/NXtqYcpbxMf8P9bWGxA/UPRsSHi39/k76iS88hAABq/XSsGAnWjf8uHYiI3dnj4ar/5nMowxHxv4jYGRH/j4hdEfFYVjYej4gnGvY/kt5ArlD/SEO+efxTutmBMNtKx3+v53Nb9eO/YvQXw315bnt6L5wtmzmYvyej0T9w8vTszKHanSb1c1A/v/n7Vw0xLaVGasZ/6SutvxgL5mVvlhse0E1PLkx2JPg0/tGIveXG+JNyGkA2EzBU/bsnIvauYb/DNenTL363bynTX1+udfxNs2aV6pItDUs7MFVR+Tbihez4L0bd8V9uQ7Ly/OT4YMzOHBxPz4KDLev49ber77Wr/77H/4c/Gjd568iPJ/5t2EtuXYnYWnP+RzF/uxz/cBKRLM3Xzq+9jqs3vmx7T7O68/9y3Tbp+b8l+aCaLk6JzyYXFs4fitiSHG9ePrG8bZEvyqfxjx5o3f935tuk78STEZGexE9FxNMR8Uze9v0R8WxEHFgh/l/eeO7j9cffXWn80y2vf3XHf3m+fv54kbiw2kTfmf3X77W5eKzu+GdtGc2XtL7+JXUXjdU2sANvIQAAADzwSlH97n9pbCldKo2NZc+AdsXW0uzc/MJLJ+c+PTed/UZgOPpLxZOu7Hlwf1I8/xyuyU805A/nz42/7huq5sem5manNzt46HHbqn0+aer/qT/7Nrt1QNf5yQ/0rpb9v2Y6bfe1DWwMsKF8/kPvqun/7X7TsuibMvBoav3537/h7QA2Xqv+f3kd2wAPl4q+DD1N/4feVY73l9KlFcsBjxr9GnrS6n/Fv55EZaD1qsFoLhyD3WnGUIu6NiWRjqyaVt14JzsO3ax9aD1bFV//alsmSvfbT7nuHBuI5jJ9sSnH4tTujp/8lfy78p1u6vcr99NiuN6FN2oDL0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABd9E8AAAD//xbo0KU=") syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$eJzs3T9oJFUcB/Df7B/jJotGbQTxD4iIBkLsBJvYKAQkBBFBhYiIlSRCTLDLWtlYaK0SEGyC2BktxSbYKIJV1BS55uAuXHHhirtij9nZDZtkw132b9j5fGDZN3nvzXs7yfdNWJiZAHJrOiLmI6IYETMRUY6IpL3BM9lrurm5VdldjqjX37yRNNpl25lWv6mIqEXEyxGlVt3GzrsHt/Zef/7L9fJzP+y8UxnW52t3eLD/xtF3i1/8vPDSxl//XFtMYj6qzbr2z9FPSYeflZKIRwcx2CWRlEY9A+7H0mc//Zvm/rGIeLaR/3IUmpH9au2B38vx4rfn9f36+t9PDHOuQP/V6+X0HFirA7lTiIhqJIXZiMjKhcLsbPY//H/FycLHq2ufzny0ur7yYaMauKyqF2ma7L/268QvU6fyf7WY5R8YX9WI/beWtv9Py0fFUc8GGJj2b9ufzN7S/M+8v/lCyD/kjvxDfsk/5Jf8wxjoMrvyD/nVS/4fHNCcgOFw/ofx83CrUG4Vah3byT/kl/zDmPq+01WnJ8k/5Fd7/gGAfKlPjPoKZGBURr3+AAAAAAAAAAAAAAAAAAAAZ21Vdpdbr2GN+cc3EYevRkSp0/jF5gPHs7uNT95M0mbHkqxbT957uscd9OjHvl19Xemq10NX+jV+d/58ajD7/fzk5rkHZ3MlopY2niuVzv79JT0/8P6Re9SXP+hxgAs6fVfAV94e7vin3dke7fgLexG/pevPXHP9SQ/Q8e+/EI833juvP9X2Wyx36ZPbPe4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAobkbAAD//2SKbDc=") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) unshare(0x22020400) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x80, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f0000000200)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000140)=""/109, 0x6d, 0x4, 0x2, 0x80000001, 0x4, 0xfff}}, 0x120) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 2.585787069s ago: executing program 2 (id=3650): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x81, 0xfffffffb}) r1 = fcntl$dupfd(r0, 0x0, r0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe7}}}}}}, 0x0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x8}, @result={0x80000001, 0x1ff}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) 2.396507254s ago: executing program 7 (id=3651): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x4) socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000180)=0x2cf7) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x83}, {0x0, 0x0, 0xe}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private2, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x2, 0xb7, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (fail_nth: 3) 2.342973844s ago: executing program 2 (id=3652): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x9, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 2.261490918s ago: executing program 2 (id=3653): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xb, 0x8e}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) write$P9_RLERRORu(r4, 0x0, 0xd) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000070000000000000700000aa0628fb0d00a0b04000000000000f12c6bf1000074000476700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f00000900010073797a30000000000900020073797a320000000014000000110020000093b900000000000a00000a"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 2.146002957s ago: executing program 7 (id=3654): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x40000}, 0x14}, 0x1, 0x2b1e, 0x0, 0x1000000}, 0x0) 2.030599086s ago: executing program 7 (id=3655): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/rt_acct\x00') readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@barrier}, {@nodioread_nolock}, {@jqfmt_vfsv0}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (rerun: 64) pwrite64(r1, &(0x7f0000000100)="028d270efbc858000000433f4ba3db6df263bc0c590ffd8f001e90167bc050e28e6702928423", 0x26, 0x4fed0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 1.391097998s ago: executing program 1 (id=3656): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x11004, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, 0x0) writev(r0, &(0x7f0000000080), 0x0) 1.324463385s ago: executing program 2 (id=3657): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x2563, 0x4) sendto$inet(r0, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setresuid(0x0, 0xee01, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x5, 0x4, 0x7}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x240b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="120000000f0000000400000002"], 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r6) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c", @ANYRES16=r7, @ANYBLOB="01062abd7000ffdbdf"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r8, &(0x7f0000000040), 0x0}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101840, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 1.309820903s ago: executing program 1 (id=3658): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r4 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x40003be}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b040000000080000000020000005c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003100001800a00010072616e67650000000900010073797a30000000000900020073797a32"], 0xb0}}, 0x40880) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40, 0x14) file_getattr(r8, 0x0, &(0x7f0000000280), 0x18, 0x400) syz_open_dev$usbfs(&(0x7f0000000000), 0xfff, 0x0) sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000500)={[{@data_writeback}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@dioread_lock}, {@data_journal}, {@dax_always}, {@data_ordered}, {@discard}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}]}, 0x1, 0x5a8, &(0x7f0000000c40)="$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") ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x8, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) syz_open_dev$sg(0x0, 0x6f5e, 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x140, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r9, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x2000000, @b}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r4, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r4, 0x22d0, 0x20, 0x0, 0x0, 0x0) 1.017406448s ago: executing program 7 (id=3659): socket(0x22, 0x1, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r0, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004018}, 0x4010) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x40200, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x3, "03ce564f75518c219c1c25187023b59d0786a0bbed7e6a68cd000d10fb17f91a", "a77803c732f3eb16899832a15ba028c7", {"e8f2f19687b8140bae44614195f46e68", "82a744ad8bfc637d5b8e0bc7b595dfee"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x2a3, &(0x7f0000000440)="$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") r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) write$binfmt_aout(r6, &(0x7f00000009c0)={{0x10b, 0xfe, 0x3, 0x34b, 0x1f, 0x5, 0x1c3}, "5d6935824fd5fc4fbe9390ee589bd0049ed506de66a6dea03accd810e28a050f1c545bb353bf", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x646) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x40000000000020a, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x13) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1c00}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1406}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x1) 860.469859ms ago: executing program 1 (id=3660): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") fallocate(0xffffffffffffffff, 0x10, 0x6, 0x10001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) syz_open_procfs(r5, &(0x7f0000000200)='oom_score_adj\x00') r6 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34a}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x5fb, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) pwrite64(r4, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x2) fallocate(r8, 0x3, 0x4100, 0x8000c62) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000002200)='9', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000c81000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000db0a08fee10000007303f10100000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82882, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000003c0)={r9, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffe, 0x0, 0x0, 0xc, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}}) ioctl$TIOCGETD(r9, 0x5424, &(0x7f0000000040)) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) readv(r0, &(0x7f0000001840)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1) 501.013973ms ago: executing program 2 (id=3661): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x3, 0xffffffff}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5c}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="2190", 0x2}], 0x1}, 0x1) recvmsg$unix(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='X', 0x1}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r12, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(r2) 282.193272ms ago: executing program 2 (id=3662): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nolazytime}, {@dioread_lock}, {@grpquota}, {@noblock_validity}, {@lazytime}, {@nomblk_io_submit}, {@errors_remount}]}, 0x1, 0x553, &(0x7f00000009c0)="$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") pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r3, 0x0, 0x67, 0x0) io_setup(0x3fd, &(0x7f0000000500)=0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x36d}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_submit(r4, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) listen(r0, 0x8000) 84.474856ms ago: executing program 7 (id=3663): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x9, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r2, 0x160}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 51.75162ms ago: executing program 1 (id=3664): r0 = socket(0x10, 0x803, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r5, 0x1, 0x70bd2c, 0xa000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x36}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x48, r5, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x724c21d4ac5fea7e}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) sendmsg$can_j1939(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)="68025a40b67b25aa47de9e1fa2203eee16a2831e85865565fed4ccd559153497462ddb9d73e9cfd9814624579f9fa2c006f01d34ff5534ae0cc73f84c817ad0ac840c9c5c9e2e7d95dcd96c742b2385f90f916bc6f0ff7b4c8df5715b7d5", 0x5e}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000300), &(0x7f0000000380)=0x68) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000003000000000000040000000800020005"], 0x24}}, 0x0) 0s ago: executing program 7 (id=3665): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0x10, 0x10, 0x509}, 0x10}], 0x1}, 0x40040) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x80000000) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xb000000d}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0xfea6, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r5 = dup(r0) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={r6, 0x6}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in6={{0xa, 0x4e22, 0x2, @private0, 0x5}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r5, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x47, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x40054) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001380)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0xabb8, 0x67, 0xa4f, 0xc4, 0x28, 0xffffff85, 0xa9}, 0x9c) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f00000004c0)={0x0, 0x1c, "566d4e21f4b587f5ca07cdf9575a22cdb92f1d79512e4d2979d21032"}, &(0x7f00000000c0)=0x24) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) kernel console output (not intermixed with test programs): 650/0x7f0 [ 570.327119][T15369] ? copy_fpstate_to_sigframe+0xe5/0x7f0 [ 570.327161][T15369] ? x86_task_fpu+0x36/0x60 [ 570.327192][T15369] get_sigframe+0x34c/0x470 [ 570.327225][T15369] ? get_signal+0xdc3/0xf60 [ 570.327309][T15369] x64_setup_rt_frame+0xa7/0x4e0 [ 570.327341][T15369] arch_do_signal_or_restart+0x24b/0x450 [ 570.327406][T15369] exit_to_user_mode_loop+0x6a/0x6f0 [ 570.327439][T15369] do_syscall_64+0x249/0x370 [ 570.327466][T15369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.327525][T15369] RIP: 0033:0x7f5f132ec797 [ 570.327544][T15369] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 570.327562][T15369] RSP: 002b:00007f5f11d47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 570.327581][T15369] RAX: 0000000000000000 RBX: 00007f5f13565fa0 RCX: 00007f5f132ec799 [ 570.327596][T15369] RDX: 00000000000000ca RSI: 0000200000000200 RDI: 0000000000000003 [ 570.327621][T15369] RBP: 00007f5f11d47090 R08: 0000000000000000 R09: 0000000000000000 [ 570.327633][T15369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 570.327648][T15369] R13: 00007f5f13566038 R14: 00007f5f13565fa0 R15: 00007ffed503da78 [ 570.327673][T15369] [ 570.365823][ T5045] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 570.365900][ T5045] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 570.389114][T15202] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 570.389352][ T5045] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 570.392321][T15202] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 570.395015][T15202] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 570.397613][T15202] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 570.454098][T15377] bond2: option arp_missed_max: invalid value (0) [ 570.646034][T15377] bond2: option arp_missed_max: allowed values 1 - 255 [ 570.654452][T15377] bond2 (unregistering): Released all slaves [ 570.736173][T11373] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.754486][T15202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.795375][T15394] tipc: Enabling of bearer rejected, failed to enable media [ 570.826964][T15202] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.876259][T15401] loop8: detected capacity change from 0 to 512 [ 570.883751][T15401] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 570.895453][ T5045] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.902587][ T5045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.001893][ T5045] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.009083][ T5045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.020275][T15410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3223'. [ 571.040106][T15410] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 571.071755][T15408] lo speed is unknown, defaulting to 1000 [ 571.090500][T15408] lo speed is unknown, defaulting to 1000 [ 571.101207][T15408] lo speed is unknown, defaulting to 1000 [ 571.117716][T15412] xfrm0 speed is unknown, defaulting to 1000 [ 571.252576][T15408] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 571.257904][T15202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.346155][T15408] lo speed is unknown, defaulting to 1000 [ 571.362914][T15408] lo speed is unknown, defaulting to 1000 [ 571.392249][ T7257] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.413694][T15408] lo speed is unknown, defaulting to 1000 [ 571.446449][T15408] lo speed is unknown, defaulting to 1000 [ 571.452578][T15408] lo speed is unknown, defaulting to 1000 [ 571.491093][T14220] hid_parser_main: 202 callbacks suppressed [ 571.491163][T14220] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 571.505789][T15435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.525069][T15435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.536592][T14220] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 571.566373][T15408] lo speed is unknown, defaulting to 1000 [ 571.572564][T15408] lo speed is unknown, defaulting to 1000 [ 571.632626][T15202] veth0_vlan: entered promiscuous mode [ 571.656249][T15444] fido_id[15444]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 571.669958][T15202] veth1_vlan: entered promiscuous mode [ 571.724088][T15408] lo speed is unknown, defaulting to 1000 [ 571.732635][T15202] veth0_macvtap: entered promiscuous mode [ 571.751169][T15453] loop8: detected capacity change from 0 to 1024 [ 571.759523][T15202] veth1_macvtap: entered promiscuous mode [ 571.775061][T15202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.786697][T15202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.798833][ T5045] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.808925][T15453] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.848619][ T5045] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.900980][ T5045] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.938901][ T5045] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.685836][T15478] loop2: detected capacity change from 0 to 512 [ 573.698146][T15478] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 574.167038][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 574.167117][ T28] audit: type=1400 audit(1772561173.190:1787): avc: denied { map } for pid=15472 comm="syz.2.3189" path="socket:[49339]" dev="sockfs" ino=49339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 574.499375][ T28] audit: type=1326 audit(1772561173.530:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15493 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dde0c799 code=0x7ffc0000 [ 574.537446][T15495] FAULT_INJECTION: forcing a failure. [ 574.537446][T15495] name failslab, interval 1, probability 0, space 0, times 0 [ 574.610564][T15495] CPU: 0 UID: 0 PID: 15495 Comm: syz.7.3236 Not tainted syzkaller #0 PREEMPT(full) [ 574.610629][T15495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 574.610642][T15495] Call Trace: [ 574.610649][T15495] [ 574.610658][T15495] __dump_stack+0x1d/0x30 [ 574.610732][T15495] dump_stack_lvl+0x95/0xd0 [ 574.610755][T15495] dump_stack+0x15/0x1b [ 574.610861][T15495] should_fail_ex+0x263/0x280 [ 574.610892][T15495] should_failslab+0x8c/0xb0 [ 574.610919][T15495] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 574.610976][T15495] ? __alloc_skb+0x2d6/0x690 [ 574.611005][T15495] __alloc_skb+0x2d6/0x690 [ 574.611034][T15495] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 574.611114][T15495] ? __alloc_skb+0x200/0x690 [ 574.611144][T15495] audit_log_start+0x3aa/0x730 [ 574.611176][T15495] audit_seccomp+0x47/0x100 [ 574.611311][T15495] ? __seccomp_filter+0x8db/0x1350 [ 574.611357][T15495] __seccomp_filter+0x8ec/0x1350 [ 574.611385][T15495] ? idr_find+0x2d/0x40 [ 574.611409][T15495] ? __rcu_read_unlock+0x4e/0x70 [ 574.611447][T15495] ? do_shmat+0x2d6/0x800 [ 574.611546][T15495] ? mutex_unlock+0x4e/0x90 [ 574.611641][T15495] __secure_computing+0x81/0x150 [ 574.611673][T15495] do_syscall_64+0xd3/0x370 [ 574.611699][T15495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.611744][T15495] RIP: 0033:0x7f93dddccfce [ 574.611760][T15495] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 574.611818][T15495] RSP: 002b:00007f93dc85efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 574.611843][T15495] RAX: ffffffffffffffda RBX: 00007f93dc85f6c0 RCX: 00007f93dddccfce [ 574.611857][T15495] RDX: 000000000000000f RSI: 00007f93dc85f0a0 RDI: 0000000000000004 [ 574.611869][T15495] RBP: 00007f93dc85f090 R08: 0000000000000000 R09: 0000000000000000 [ 574.611943][T15495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.611956][T15495] R13: 00007f93de086038 R14: 00007f93de085fa0 R15: 00007ffcfc8fd758 [ 574.612011][T15495] [ 574.612019][T15495] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 574.843419][T15498] loop2: detected capacity change from 0 to 512 [ 574.857892][ T28] audit: type=1326 audit(1772561173.530:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15493 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dde0c799 code=0x7ffc0000 [ 574.913562][ T28] audit: type=1326 audit(1772561173.530:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15493 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dde0c799 code=0x7ffc0000 [ 574.948893][T15498] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 574.976053][ T28] audit: type=1326 audit(1772561173.530:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15493 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93dde0c799 code=0x7ffc0000 [ 575.027048][ T28] audit: type=1326 audit(1772561173.530:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15493 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dde0c799 code=0x7ffc0000 [ 575.096040][ T28] audit: type=1326 audit(1772561173.530:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15493 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dde0c799 code=0x7ffc0000 [ 575.156466][T15463] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.189386][ T28] audit: type=1326 audit(1772561173.530:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15493 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dde0c799 code=0x7ffc0000 [ 575.219699][T15495] audit: out of memory in audit_log_start [ 575.234278][T15498] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3237: bad orphan inode 11 [ 575.244960][T15498] loop2: lost filesystem error report for type 5 error -117 [ 575.245950][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 575.259845][ C0] EXT4-fs (loop2): initial error at time 1772561174: ext4_orphan_get:1417 [ 575.261600][T15506] validate_nla: 45 callbacks suppressed [ 575.261710][T15506] netlink: 'syz.0.3238': attribute type 4 has an invalid length. [ 575.268527][ C0] EXT4-fs (loop2): last error at time 1772561174: ext4_orphan_get:1417 [ 575.296051][T15498] ext4_test_bit(bit=10, block=4) = 1 [ 575.312490][T15506] netlink: 'syz.0.3238': attribute type 4 has an invalid length. [ 575.318629][T15498] is_bad_inode(inode)=0 [ 575.325135][T15506] netlink: 'syz.0.3238': attribute type 4 has an invalid length. [ 575.336269][T15498] NEXT_ORPHAN(inode)=2080374784 [ 575.347715][T15498] max_ino=32 [ 575.350968][T15498] i_nlink=0 [ 575.354414][T15498] EXT4-fs (loop2): 1 truncate cleaned up [ 575.356251][T15506] netlink: 'syz.0.3238': attribute type 4 has an invalid length. [ 575.401413][T15498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.406742][T15506] netlink: 'syz.0.3238': attribute type 4 has an invalid length. [ 575.433285][T15506] netlink: 'syz.0.3238': attribute type 4 has an invalid length. [ 575.521720][T15506] netlink: 'syz.0.3238': attribute type 4 has an invalid length. [ 575.530133][T15506] netlink: 'syz.0.3238': attribute type 4 has an invalid length. [ 575.546197][T15506] netlink: 'syz.0.3238': attribute type 4 has an invalid length. [ 575.567220][T15506] netlink: 'syz.0.3238': attribute type 4 has an invalid length. [ 575.637352][ T3396] hid-generic 0004:0002:80000001.0025: unknown main item tag 0x0 [ 575.648651][ T3396] hid-generic 0004:0002:80000001.0025: unknown main item tag 0x0 [ 575.656625][ T3396] hid-generic 0004:0002:80000001.0025: unknown main item tag 0x0 [ 575.682187][ T3396] hid-generic 0004:0002:80000001.0025: unknown main item tag 0x0 [ 575.736600][ T3396] hid-generic 0004:0002:80000001.0025: unknown main item tag 0x0 [ 575.748878][ T3396] hid-generic 0004:0002:80000001.0025: unknown main item tag 0x0 [ 575.757722][ T3396] hid-generic 0004:0002:80000001.0025: unknown main item tag 0x0 [ 575.765735][ T3396] hid-generic 0004:0002:80000001.0025: unknown main item tag 0x0 [ 575.773767][ T3396] hid-generic 0004:0002:80000001.0025: unknown main item tag 0x0 [ 575.783251][ T3396] hid-generic 0004:0002:80000001.0025: hidraw0: HID v0.04 Device [syz1] on syz0 [ 575.823034][T15513] xfrm0 speed is unknown, defaulting to 1000 [ 575.908589][T15202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.911244][T15545] fido_id[15545]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 575.978580][ T5061] bridge_slave_1: left allmulticast mode [ 575.989366][T15550] loop2: detected capacity change from 0 to 512 [ 576.006873][T15550] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 576.011937][ T5061] bridge_slave_1: left promiscuous mode [ 576.027309][ T5061] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.060960][ T5061] bridge_slave_0: left allmulticast mode [ 576.067698][T15550] EXT4-fs (loop2): 1 truncate cleaned up [ 576.073746][T15550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.076764][ T5061] bridge_slave_0: left promiscuous mode [ 576.122562][ T5061] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.187240][T15202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.230535][T15564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3249'. [ 576.291106][ T5061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.309953][ T5061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.322058][ T5061] bond0 (unregistering): Released all slaves [ 576.337798][T15567] loop2: detected capacity change from 0 to 512 [ 576.348688][T15567] EXT4-fs: Ignoring removed oldalloc option [ 576.356038][ T5061] bond1 (unregistering): Released all slaves [ 576.367883][T15567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 576.390503][T15513] lo speed is unknown, defaulting to 1000 [ 576.434128][ T5061] tipc: Left network mode [ 576.534326][ T5061] hsr_slave_0: left promiscuous mode [ 576.556638][ T5061] hsr_slave_1: left promiscuous mode [ 576.567394][T15202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.576824][ T5061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.619444][ T5061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.661756][T15579] loop2: detected capacity change from 0 to 128 [ 576.677566][T15579] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 576.692978][T15579] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 576.781409][ T5061] team0 (unregistering): Port device team_slave_1 removed [ 576.803545][T15586] loop7: detected capacity change from 0 to 1764 [ 576.820963][ T5061] team0 (unregistering): Port device team_slave_0 removed [ 576.841960][T15586] ISOFS: Unable to identify CD-ROM format. [ 577.283348][T15513] chnl_net:caif_netlink_parms(): no params data found [ 577.412996][T15626] loop7: detected capacity change from 0 to 256 [ 577.427584][T15626] msdos: Unknown parameter 'appra' [ 577.465740][T15513] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.499014][T15513] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.525037][T15513] bridge_slave_0: entered allmulticast mode [ 577.554404][T15513] bridge_slave_0: entered promiscuous mode [ 577.578535][T15513] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.599152][T15513] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.609448][T15513] bridge_slave_1: entered allmulticast mode [ 577.622695][T15513] bridge_slave_1: entered promiscuous mode [ 577.679204][T15513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.698655][T15513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.725227][T15513] team0: Port device team_slave_0 added [ 577.740008][T15513] team0: Port device team_slave_1 added [ 577.758523][T15513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.765670][T15513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.792081][T15513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.804159][T15513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.811494][T15513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.838802][T15513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.869377][T15513] hsr_slave_0: entered promiscuous mode [ 577.875689][T15513] hsr_slave_1: entered promiscuous mode [ 577.881790][T15513] debugfs: 'hsr0' already exists in 'hsr' [ 577.887728][T15513] Cannot create hsr debugfs directory [ 578.316020][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 578.743919][T15540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 578.755676][T15513] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 578.816099][ T3396] lo speed is unknown, defaulting to 1000 [ 578.818921][T15513] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 578.837384][T15513] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 578.848177][T15697] loop7: detected capacity change from 0 to 2048 [ 578.866890][T15513] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 578.909001][T15697] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3266'. [ 578.999119][T15709] xfrm0 speed is unknown, defaulting to 1000 [ 579.034457][T15513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.090538][T15709] lo speed is unknown, defaulting to 1000 [ 579.128519][T15513] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.168127][ T4666] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.175270][ T4666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.196825][T15721] loop7: detected capacity change from 0 to 512 [ 579.269003][ T4666] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.276333][ T4666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.286676][ T28] kauditd_printk_skb: 165 callbacks suppressed [ 579.286691][ T28] audit: type=1326 audit(1772561178.320:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15708 comm="syz.0.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5f132ec799 code=0x7ffc0000 [ 579.321396][T15513] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 579.348551][T15513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 579.633085][T15721] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.674052][T15721] ext4 filesystem being mounted at /440/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 579.974412][T15513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.008169][T15747] xfrm0 speed is unknown, defaulting to 1000 [ 580.055190][T15747] lo speed is unknown, defaulting to 1000 [ 580.067120][ T7257] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.290560][T15513] veth0_vlan: entered promiscuous mode [ 580.343736][T15770] loop7: detected capacity change from 0 to 128 [ 580.350406][T15770] msdos: Unknown parameter 'ÿÿÿÿ ' [ 580.389961][ T28] audit: type=1400 audit(1772561179.390:1961): avc: denied { map } for pid=15763 comm="syz.7.3274" path="socket:[49731]" dev="sockfs" ino=49731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 580.844280][T15513] veth1_vlan: entered promiscuous mode [ 580.909671][T15513] veth0_macvtap: entered promiscuous mode [ 580.927820][T15513] veth1_macvtap: entered promiscuous mode [ 580.934416][T15803] validate_nla: 100 callbacks suppressed [ 580.934434][T15803] netlink: 'syz.2.3279': attribute type 4 has an invalid length. [ 580.948428][T15803] netlink: 'syz.2.3279': attribute type 4 has an invalid length. [ 581.031817][T15803] netlink: 'syz.2.3279': attribute type 4 has an invalid length. [ 581.080634][T15803] netlink: 'syz.2.3279': attribute type 4 has an invalid length. [ 581.113366][T15803] netlink: 'syz.2.3279': attribute type 4 has an invalid length. [ 581.138922][T15803] netlink: 'syz.2.3279': attribute type 4 has an invalid length. [ 581.230086][T15803] netlink: 'syz.2.3279': attribute type 4 has an invalid length. [ 581.238074][T15803] netlink: 'syz.2.3279': attribute type 4 has an invalid length. [ 581.246001][T15803] netlink: 'syz.2.3279': attribute type 4 has an invalid length. [ 581.253807][T15803] netlink: 'syz.2.3279': attribute type 4 has an invalid length. [ 581.439305][T15513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.518948][T15513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.554094][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.603335][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.617061][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.689486][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.699540][T15835] loop2: detected capacity change from 0 to 128 [ 581.865357][T15851] hub 9-0:1.0: USB hub found [ 581.878350][T15851] hub 9-0:1.0: 8 ports detected [ 581.953652][ T28] audit: type=1400 audit(1772561180.980:1962): avc: denied { write } for pid=15857 comm="syz.7.3288" path="socket:[49919]" dev="sockfs" ino=49919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 582.038677][T15866] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3289'. [ 582.048050][T15866] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3289'. [ 582.062135][T15866] loop1: detected capacity change from 0 to 512 [ 582.124357][T15866] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.3289: inode has both inline data and extents flags [ 582.145619][T15866] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 582.145774][T15866] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3289: couldn't read orphan inode 15 (err -117) [ 582.155054][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 582.155078][ C1] EXT4-fs (loop1): initial error at time 1772561181: ext4_orphan_get:1391: inode 15 [ 582.155110][ C1] EXT4-fs (loop1): last error at time 1772561181: ext4_orphan_get:1391: inode 15 [ 582.206016][T15866] loop1: lost filesystem error report for type 5 error -117 [ 582.206607][T15866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.264532][T15866] EXT4-fs error (device loop1): ext4_check_dx_root:2201: inode #2: comm syz.1.3289: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 582.281528][ T28] audit: type=1400 audit(1772561181.320:1963): avc: denied { lock } for pid=15865 comm="syz.1.3289" path="/1/file0/file0" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 582.334060][T15880] EXT4-fs error (device loop1): ext4_check_dx_root:2201: inode #2: comm syz.1.3289: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 582.436282][ T36] bio_check_eod: 19 callbacks suppressed [ 582.436317][ T36] kworker/u8:2: attempt to access beyond end of device [ 582.436317][ T36] loop2: rw=1, sector=129, nr_sectors = 8 limit=128 [ 582.480865][T15890] Cannot find del_set index 2 as target [ 582.485443][T15883] xfrm0 speed is unknown, defaulting to 1000 [ 582.508533][ T36] kworker/u8:2: attempt to access beyond end of device [ 582.508533][ T36] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 582.556122][ T36] kworker/u8:2: attempt to access beyond end of device [ 582.556122][ T36] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 582.576118][ T36] kworker/u8:2: attempt to access beyond end of device [ 582.576118][ T36] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 582.595162][ T36] kworker/u8:2: attempt to access beyond end of device [ 582.595162][ T36] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 582.654624][T15883] lo speed is unknown, defaulting to 1000 [ 582.663537][T15893] xfrm0 speed is unknown, defaulting to 1000 [ 582.694071][T15513] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.720599][ T36] kworker/u8:2: attempt to access beyond end of device [ 582.720599][ T36] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 582.734300][ T36] kworker/u8:2: attempt to access beyond end of device [ 582.734300][ T36] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 582.768564][ T36] kworker/u8:2: attempt to access beyond end of device [ 582.768564][ T36] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 582.792128][ T36] kworker/u8:2: attempt to access beyond end of device [ 582.792128][ T36] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 582.819812][ T36] kworker/u8:2: attempt to access beyond end of device [ 582.819812][ T36] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 583.152481][T15903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3295'. [ 583.472300][T15893] lo speed is unknown, defaulting to 1000 [ 583.486968][T15903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3295'. [ 583.551216][T15903] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3295'. [ 583.767260][T15916] syz.7.3290 (15916): attempted to duplicate a private mapping with mremap. This is not supported. [ 584.181811][T15918] loop1: detected capacity change from 0 to 512 [ 584.238104][T15918] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #3: comm syz.1.3296: corrupted inode contents [ 584.249918][T15918] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 584.250198][T15918] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #3: comm syz.1.3296: mark_inode_dirty error [ 584.259264][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 584.259289][ C0] EXT4-fs (loop1): initial error at time 1772561183: ext4_do_update_inode:5569: inode 3 [ 584.259326][ C0] EXT4-fs (loop1): last error at time 1772561183: ext4_do_update_inode:5569: inode 3 [ 584.296299][T15918] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 584.296991][T15918] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #3: comm syz.1.3296: corrupted inode contents [ 584.317947][T15918] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 584.318256][T15918] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.3296: mark_inode_dirty error [ 584.338696][T15918] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 584.341508][T15918] Quota error (device loop1): write_blk: dquota write failed [ 584.357998][T15918] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 584.368044][T15918] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.3296: Failed to acquire dquot type 0 [ 584.379303][T15918] loop1: lost filesystem error report for type 5 error -117 [ 584.379810][T15918] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.3296: corrupted inode contents [ 584.399178][T15918] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 584.399430][T15918] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #16: comm syz.1.3296: mark_inode_dirty error [ 584.419917][T15918] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 584.420116][T15918] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.3296: corrupted inode contents [ 584.441100][T15918] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 584.441340][T15918] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.3296: mark_inode_dirty error [ 584.461847][T15918] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 584.464999][T15918] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.3296: corrupted inode contents [ 584.486069][T15918] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 584.486263][T15918] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 584.503960][T15918] loop1: lost filesystem error report for type 5 error -117 [ 584.504227][T15918] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.3296: corrupted inode contents [ 584.523656][T15918] EXT4-fs error (device loop1): ext4_truncate:4587: inode #16: comm syz.1.3296: mark_inode_dirty error [ 584.534891][T15918] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 584.543781][T15918] loop1: lost filesystem error report for type 5 error -117 [ 584.544218][T15918] EXT4-fs (loop1): 1 truncate cleaned up [ 584.557894][T15918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.570536][T15918] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 584.596121][ T5058] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 584.612748][T15868] __vm_enough_memory: pid: 15868, comm: syz.7.3290, bytes: 11728110481408 not enough memory for the allocation [ 584.646812][ T5058] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:32: Failed to release dquot type 1 [ 585.541072][T15513] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.701887][T15968] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.709234][T15968] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.922782][T15994] Bluetooth: hci0: Frame reassembly failed (-84) [ 585.931487][T15968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.935096][ T4934] Bluetooth: hci0: Frame reassembly failed (-84) [ 585.965859][T15975] loop2: detected capacity change from 0 to 512 [ 585.967082][T15968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.021568][T15975] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 586.085273][T15975] EXT4-fs (loop2): 1 truncate cleaned up [ 586.129294][T15975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.173469][ T5061] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.196653][ T5045] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.220325][ T5045] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.247814][ T28] audit: type=1400 audit(1772561185.280:1964): avc: denied { execute } for pid=15974 comm="syz.2.3301" path="/18/file2/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 586.275057][ T5045] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.513620][T16019] FAULT_INJECTION: forcing a failure. [ 586.513620][T16019] name failslab, interval 1, probability 0, space 0, times 0 [ 586.531708][T16019] CPU: 0 UID: 0 PID: 16019 Comm: syz.5.3309 Not tainted syzkaller #0 PREEMPT(full) [ 586.531744][T16019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 586.531761][T16019] Call Trace: [ 586.531767][T16019] [ 586.531774][T16019] __dump_stack+0x1d/0x30 [ 586.531873][T16019] dump_stack_lvl+0x95/0xd0 [ 586.531900][T16019] dump_stack+0x15/0x1b [ 586.531930][T16019] should_fail_ex+0x263/0x280 [ 586.531966][T16019] should_failslab+0x8c/0xb0 [ 586.531989][T16019] kmem_cache_alloc_noprof+0x66/0x400 [ 586.532086][T16019] ? __anon_vma_prepare+0xcd/0x2f0 [ 586.532140][T16019] __anon_vma_prepare+0xcd/0x2f0 [ 586.532177][T16019] do_wp_page+0x196b/0x2590 [ 586.532237][T16019] ? css_rstat_updated+0xbb/0x280 [ 586.532262][T16019] ? __rcu_read_lock+0x36/0x50 [ 586.532292][T16019] handle_mm_fault+0x8c7/0x3020 [ 586.532379][T16019] ? vma_start_read+0x1c7/0x2c0 [ 586.532419][T16019] do_user_addr_fault+0x62f/0x1050 [ 586.532506][T16019] ? ksys_mmap_pgoff+0xc1/0x310 [ 586.532538][T16019] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 586.532635][T16019] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 586.532672][T16019] ? trace_page_fault_user+0x1f/0xe0 [ 586.532723][T16019] exc_page_fault+0x62/0xa0 [ 586.532816][T16019] asm_exc_page_fault+0x26/0x30 [ 586.532843][T16019] RIP: 0033:0x7f5fa2fe3a63 [ 586.532917][T16019] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 586.532940][T16019] RSP: 002b:00007f5fa1b86470 EFLAGS: 00010206 [ 586.532963][T16019] RAX: 00000000000001b1 RBX: 00007f5fa1b86530 RCX: 00007f5f99767000 [ 586.532978][T16019] RDX: 00007f5fa1b866d0 RSI: 0000000000000007 RDI: 00007f5fa1b865d0 [ 586.533045][T16019] RBP: 00000000000000ae R08: 0000000000000008 R09: 00000000000000af [ 586.533061][T16019] R10: 00000000000000bc R11: 00007f5fa1b86530 R12: 0000000000000001 [ 586.533076][T16019] R13: 00007f5fa31e2320 R14: 00000000000000ff R15: 00007f5fa1b865d0 [ 586.533102][T16019] [ 586.533154][T16019] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 586.747479][T15202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.767532][T16019] loop5: detected capacity change from 0 to 1764 [ 586.781401][T16027] loop7: detected capacity change from 0 to 128 [ 586.789384][T16027] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 586.925024][T16035] loop2: detected capacity change from 0 to 512 [ 586.947114][T16035] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.3314: inode has both inline data and extents flags [ 586.965293][T16035] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3314: couldn't read orphan inode 15 (err -117) [ 586.977235][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 586.977261][ C0] EXT4-fs (loop2): initial error at time 1772561186: ext4_orphan_get:1391: inode 15 [ 586.977312][ C0] EXT4-fs (loop2): last error at time 1772561186: ext4_orphan_get:1391: inode 15 [ 587.002972][T16035] loop2: lost filesystem error report for type 5 error -117 [ 587.007938][T16035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.066841][T15202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.124072][T16062] loop2: detected capacity change from 0 to 256 [ 587.158975][T16062] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 587.166516][T16062] FAT-fs (loop2): Filesystem has been set read-only [ 587.183413][T16062] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 587.210200][T16069] loop1: detected capacity change from 0 to 512 [ 587.239198][T16069] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 587.253386][T16070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 587.274529][T16070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 587.284708][T16070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 587.293844][T16069] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.3323: bad orphan inode 11 [ 587.304186][T16069] loop1: lost filesystem error report for type 5 error -117 [ 587.304431][T16069] ext4_test_bit(bit=10, block=4) = 1 [ 587.311881][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 587.311906][ C1] EXT4-fs (loop1): initial error at time 1772561186: ext4_orphan_get:1417 [ 587.311933][ C1] EXT4-fs (loop1): last error at time 1772561186: ext4_orphan_get:1417 [ 587.340604][T16069] is_bad_inode(inode)=0 [ 587.345013][T16069] NEXT_ORPHAN(inode)=2080374784 [ 587.345263][T16070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 587.350169][T16069] max_ino=32 [ 587.361799][T16069] i_nlink=0 [ 587.364105][T16070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 587.365152][T16069] EXT4-fs (loop1): 1 truncate cleaned up [ 587.379670][T16069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.613044][T14821] hid_parser_main: 97 callbacks suppressed [ 587.613126][T14821] hid-generic 0004:0002:80000001.0026: unknown main item tag 0x0 [ 587.636486][T14821] hid-generic 0004:0002:80000001.0026: unknown main item tag 0x0 [ 587.648711][T14821] hid-generic 0004:0002:80000001.0026: unknown main item tag 0x0 [ 587.661114][T14821] hid-generic 0004:0002:80000001.0026: unknown main item tag 0x0 [ 587.818631][T16093] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3324'. [ 588.073711][T13464] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 588.501790][T16105] loop5: detected capacity change from 0 to 4096 [ 588.540546][T16105] EXT4-fs: Ignoring removed bh option [ 588.586259][T16105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.714507][T14821] hid-generic 0004:0002:80000001.0026: unknown main item tag 0x0 [ 588.722804][T14821] hid-generic 0004:0002:80000001.0026: unknown main item tag 0x0 [ 588.730730][T14821] hid-generic 0004:0002:80000001.0026: unknown main item tag 0x0 [ 588.738542][T14821] hid-generic 0004:0002:80000001.0026: unknown main item tag 0x0 [ 588.746528][T14821] hid-generic 0004:0002:80000001.0026: unknown main item tag 0x0 [ 588.752379][T16105] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3327'. [ 588.754288][T14821] hid-generic 0004:0002:80000001.0026: unknown main item tag 0x0 [ 588.772718][T14821] hid-generic 0004:0002:80000001.0026: hidraw0: HID v0.04 Device [syz1] on syz0 [ 588.823651][T16118] xt_hashlimit: size too large, truncated to 1048576 [ 589.015625][ T5613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.538779][T16151] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3331'. [ 589.550209][T15513] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.653442][T16156] loop5: detected capacity change from 0 to 512 [ 589.677011][T16153] xfrm0 speed is unknown, defaulting to 1000 [ 589.685785][T16156] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.3330: inode has both inline data and extents flags [ 589.760785][T16155] validate_nla: 47 callbacks suppressed [ 589.760804][T16155] netlink: 'syz.2.3332': attribute type 16 has an invalid length. [ 589.786706][T16160] loop7: detected capacity change from 0 to 512 [ 589.791506][T16156] fserror_report: 3 callbacks suppressed [ 589.791550][T16156] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 589.825216][T16156] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3330: couldn't read orphan inode 15 (err -117) [ 589.834436][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 589.834476][ C0] EXT4-fs (loop5): initial error at time 1772561188: ext4_orphan_get:1391 [ 589.834482][T16155] netlink: 'syz.2.3332': attribute type 17 has an invalid length. [ 589.834502][ C0] : inode 15 [ 589.834517][ C0] EXT4-fs (loop5): last error at time 1772561188: ext4_orphan_get:1391: inode 15 [ 589.883684][T16156] loop5: lost filesystem error report for type 5 error -117 [ 589.901844][T16156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.944288][T16155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 589.963666][T16160] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.977159][T16153] lo speed is unknown, defaulting to 1000 [ 589.988932][T16161] xfrm0 speed is unknown, defaulting to 1000 [ 589.990161][T16160] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.026790][ T5613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.046895][T16160] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.139027][T16161] lo speed is unknown, defaulting to 1000 [ 590.198169][ T28] audit: type=1400 audit(1772561189.220:1965): avc: denied { write } for pid=16158 comm="syz.7.3334" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 590.433992][T16187] loop1: detected capacity change from 0 to 1764 [ 590.811289][T16195] xfrm0 speed is unknown, defaulting to 1000 [ 591.031578][T16195] lo speed is unknown, defaulting to 1000 [ 591.216983][T16195] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3341'. [ 591.487529][T16206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3343'. [ 591.497495][T16206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3343'. [ 592.683988][T16215] loop5: detected capacity change from 0 to 512 [ 592.794576][T16215] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.3346: inode has both inline data and extents flags [ 592.867605][T16215] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 592.867769][T16215] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3346: couldn't read orphan inode 15 (err -117) [ 592.876975][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 592.877004][ C1] EXT4-fs (loop5): initial error at time 1772561191: ext4_orphan_get:1391: inode 15 [ 592.877057][ C1] EXT4-fs (loop5): last error at time 1772561191: ext4_orphan_get:1391: inode 15 [ 593.003022][T16215] loop5: lost filesystem error report for type 5 error -117 [ 593.007821][T16215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.083699][ T5613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.321862][T16260] syzkaller0: entered promiscuous mode [ 593.327651][T16260] syzkaller0: entered allmulticast mode [ 593.516519][T16269] openvswitch: netlink: EtherType 0 is less than min 600 [ 593.565106][T16271] loop2: detected capacity change from 0 to 128 [ 593.680520][T16272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.710055][T16284] FAULT_INJECTION: forcing a failure. [ 593.710055][T16284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.723378][T16284] CPU: 0 UID: 0 PID: 16284 Comm: syz.0.3361 Not tainted syzkaller #0 PREEMPT(full) [ 593.723475][T16284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 593.723493][T16284] Call Trace: [ 593.723500][T16284] [ 593.723507][T16284] __dump_stack+0x1d/0x30 [ 593.723542][T16284] dump_stack_lvl+0x95/0xd0 [ 593.723646][T16284] dump_stack+0x15/0x1b [ 593.723730][T16284] should_fail_ex+0x263/0x280 [ 593.723759][T16284] should_fail+0xb/0x20 [ 593.723783][T16284] should_fail_usercopy+0x1a/0x20 [ 593.723879][T16284] _copy_from_user+0x1c/0xb0 [ 593.723906][T16284] ___sys_sendmsg+0xc1/0x1e0 [ 593.723952][T16284] __x64_sys_sendmsg+0xd4/0x160 [ 593.723993][T16284] x64_sys_call+0x194c/0x3020 [ 593.724094][T16284] do_syscall_64+0x12c/0x370 [ 593.724170][T16284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.724191][T16284] RIP: 0033:0x7f5f132ec799 [ 593.724211][T16284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.724234][T16284] RSP: 002b:00007f5f11d47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.724323][T16284] RAX: ffffffffffffffda RBX: 00007f5f13565fa0 RCX: 00007f5f132ec799 [ 593.724341][T16284] RDX: 0000000000084080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 593.724371][T16284] RBP: 00007f5f11d47090 R08: 0000000000000000 R09: 0000000000000000 [ 593.724386][T16284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.724398][T16284] R13: 00007f5f13566038 R14: 00007f5f13565fa0 R15: 00007ffed503da78 [ 593.724524][T16284] [ 593.736203][T16282] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3360'. [ 593.763470][T16272] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.960839][T16272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 594.378469][T16298] loop5: detected capacity change from 0 to 512 [ 594.554154][T16298] FAT-fs (loop5): Directory bread(block 199916) failed [ 594.591810][T16298] FAT-fs (loop5): Directory bread(block 199917) failed [ 594.628089][T16298] FAT-fs (loop5): Directory bread(block 199918) failed [ 594.646729][T16298] FAT-fs (loop5): Directory bread(block 199919) failed [ 594.655381][T16298] FAT-fs (loop5): Directory bread(block 199920) failed [ 594.664135][T16298] FAT-fs (loop5): Directory bread(block 199921) failed [ 594.672310][T16298] FAT-fs (loop5): Directory bread(block 199922) failed [ 594.680194][T16298] FAT-fs (loop5): Directory bread(block 199923) failed [ 594.768349][T16298] FAT-fs (loop5): Directory bread(block 199916) failed [ 594.796545][T16298] FAT-fs (loop5): Directory bread(block 199917) failed [ 595.190035][T16333] xfrm0 speed is unknown, defaulting to 1000 [ 595.271112][T16337] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 595.482274][T16333] lo speed is unknown, defaulting to 1000 [ 595.782699][T16336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3377'. [ 595.806566][T16347] loop2: detected capacity change from 0 to 512 [ 595.820971][ T28] audit: type=1400 audit(1772561194.850:1966): avc: denied { shutdown } for pid=16335 comm="syz.0.3377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 595.872515][T16347] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 595.944048][ T28] audit: type=1400 audit(1772561194.970:1967): avc: denied { ioctl } for pid=16350 comm="syz.1.3380" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 596.007922][T16355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 596.100107][ T28] audit: type=1400 audit(1772561195.070:1968): avc: denied { getopt } for pid=16335 comm="syz.0.3377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 596.105733][T16347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.146172][T16347] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 596.249001][ T28] audit: type=1400 audit(1772561195.280:1969): avc: denied { create } for pid=16351 comm="syz.5.3381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 596.346586][T16364] loop1: detected capacity change from 0 to 512 [ 596.362203][T16366] loop7: detected capacity change from 0 to 1024 [ 596.404705][T16366] EXT4-fs: Ignoring removed orlov option [ 596.698376][T16366] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 596.738390][T16364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.758873][T15202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.778182][T16366] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.803176][T16364] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 596.888134][T16379] loop5: detected capacity change from 0 to 512 [ 596.895608][T16379] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 596.917459][T16379] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3388: bad orphan inode 11 [ 596.932286][ T28] audit: type=1400 audit(1772561195.960:1970): avc: denied { create } for pid=16362 comm="syz.1.3383" name="mnt" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 596.959199][T16366] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #12: block 7: comm syz.7.3384: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 596.964925][T16364] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.3383: corrupted inode contents [ 596.996642][T16364] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.3383: mark_inode_dirty error [ 597.008428][T16364] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.3383: corrupted inode contents [ 597.009213][T16379] loop5: lost filesystem error report for type 5 error -117 [ 597.021640][T16364] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.3383: mark_inode_dirty error [ 597.046612][T16379] ext4_test_bit(bit=10, block=4) = 1 [ 597.051946][T16379] is_bad_inode(inode)=0 [ 597.065922][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 597.072410][ C1] EXT4-fs (loop5): initial error at time 1772561196: ext4_orphan_get:1417 [ 597.081005][ C1] EXT4-fs (loop5): last error at time 1772561196: ext4_orphan_get:1417 [ 597.096724][T16387] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.3383: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 597.096724][T16387] [ 597.102358][ T28] audit: type=1400 audit(1772561196.130:1971): avc: denied { create } for pid=16362 comm="syz.1.3383" name="mnt" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 597.146036][T16379] NEXT_ORPHAN(inode)=2080374784 [ 597.151214][T16379] max_ino=32 [ 597.154880][T16379] i_nlink=0 [ 597.158613][T16379] EXT4-fs (loop5): 1 truncate cleaned up [ 597.166977][T16379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.201956][ T7257] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.217346][T15513] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.856405][T16222] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 599.107527][ T5613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.187000][T16404] erspan1: entered allmulticast mode [ 599.374908][T16416] FAULT_INJECTION: forcing a failure. [ 599.374908][T16416] name failslab, interval 1, probability 0, space 0, times 0 [ 599.424173][T16419] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3399'. [ 599.456903][T16416] CPU: 0 UID: 0 PID: 16416 Comm: syz.1.3397 Not tainted syzkaller #0 PREEMPT(full) [ 599.456950][T16416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 599.456967][T16416] Call Trace: [ 599.456976][T16416] [ 599.456985][T16416] __dump_stack+0x1d/0x30 [ 599.457019][T16416] dump_stack_lvl+0x95/0xd0 [ 599.457051][T16416] dump_stack+0x15/0x1b [ 599.457084][T16416] should_fail_ex+0x263/0x280 [ 599.457173][T16416] should_failslab+0x8c/0xb0 [ 599.457201][T16416] kmem_cache_alloc_noprof+0x66/0x400 [ 599.457293][T16416] ? do_getname+0x2e/0x1c0 [ 599.457325][T16416] do_getname+0x2e/0x1c0 [ 599.457364][T16416] __se_sys_linkat+0x2f/0x1d0 [ 599.457400][T16416] __x64_sys_linkat+0x67/0x80 [ 599.457431][T16416] x64_sys_call+0x20e4/0x3020 [ 599.457543][T16416] do_syscall_64+0x12c/0x370 [ 599.457568][T16416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.457670][T16416] RIP: 0033:0x7fede1b0c799 [ 599.457691][T16416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.457715][T16416] RSP: 002b:00007fede0567028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 599.457780][T16416] RAX: ffffffffffffffda RBX: 00007fede1d85fa0 RCX: 00007fede1b0c799 [ 599.457799][T16416] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 599.457817][T16416] RBP: 00007fede0567090 R08: 0000000000001000 R09: 0000000000000000 [ 599.457835][T16416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.457879][T16416] R13: 00007fede1d86038 R14: 00007fede1d85fa0 R15: 00007ffc0757e298 [ 599.457906][T16416] [ 599.629116][T16419] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3399'. [ 599.662073][T16419] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3399'. [ 599.686381][T16419] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3399'. [ 599.738628][T16423] xfrm0 speed is unknown, defaulting to 1000 [ 599.818907][T16426] loop1: detected capacity change from 0 to 1024 [ 599.921617][T16426] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 599.991564][T16426] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 600.132426][T16435] xfrm0 speed is unknown, defaulting to 1000 [ 600.146262][T16423] lo speed is unknown, defaulting to 1000 [ 601.220513][T16426] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 602.922748][T16426] EXT4-fs error (device loop1): ext4_get_journal_inode:5863: inode #5: comm syz.1.3401: unexpected bad inode w/o EXT4_IGET_BAD [ 603.300004][T16426] loop1: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 603.302045][T16426] EXT4-fs (loop1): no journal found [ 603.311151][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 603.311173][ C0] EXT4-fs (loop1): initial error at time 1772561202: ext4_get_journal_inode:5863: inode 5 [ 603.311208][ C0] EXT4-fs (loop1): last error at time 1772561202: ext4_get_journal_inode:5863: inode 5 [ 603.752178][T16426] EXT4-fs (loop1): can't get journal size [ 603.763286][T16450] netlink: 'syz.2.3404': attribute type 4 has an invalid length. [ 603.778716][T16450] netlink: 'syz.2.3404': attribute type 4 has an invalid length. [ 603.803128][T16426] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 603.803245][T16426] EXT4-fs: failed to create workqueue [ 603.830939][T16450] netlink: 'syz.2.3404': attribute type 4 has an invalid length. [ 603.968200][T16426] EXT4-fs (loop1): mount failed [ 603.979154][T16450] netlink: 'syz.2.3404': attribute type 4 has an invalid length. [ 604.012569][T16450] netlink: 'syz.2.3404': attribute type 4 has an invalid length. [ 604.039015][T16450] netlink: 'syz.2.3404': attribute type 4 has an invalid length. [ 604.071047][T16450] netlink: 'syz.2.3404': attribute type 4 has an invalid length. [ 604.091015][T16450] netlink: 'syz.2.3404': attribute type 4 has an invalid length. [ 604.108835][T16450] netlink: 'syz.2.3404': attribute type 4 has an invalid length. [ 604.130989][T16450] netlink: 'syz.2.3404': attribute type 4 has an invalid length. [ 604.149885][T16437] xfrm0 speed is unknown, defaulting to 1000 [ 604.165967][T16435] lo speed is unknown, defaulting to 1000 [ 604.270860][T16464] loop2: detected capacity change from 0 to 512 [ 604.320497][T16464] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 604.371676][T16464] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3405: bad orphan inode 11 [ 604.414964][T16464] loop2: lost filesystem error report for type 5 error -117 [ 604.415123][T16464] ext4_test_bit(bit=10, block=4) = 1 [ 604.422581][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 604.422600][ C0] EXT4-fs (loop2): initial error at time 1772561203: ext4_orphan_get:1417 [ 604.422631][ C0] EXT4-fs (loop2): last error at time 1772561203: ext4_orphan_get:1417 [ 604.476038][T16437] lo speed is unknown, defaulting to 1000 [ 604.586329][T16464] is_bad_inode(inode)=0 [ 604.590545][T16464] NEXT_ORPHAN(inode)=2080374784 [ 604.595772][T16464] max_ino=32 [ 604.637359][T16464] i_nlink=0 [ 604.663912][T16464] EXT4-fs (loop2): 1 truncate cleaned up [ 604.684925][T16464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.958730][ T3396] hid_parser_main: 96 callbacks suppressed [ 604.958754][ T3396] hid-generic 0004:0002:80000001.0027: unknown main item tag 0x0 [ 604.993286][ T3396] hid-generic 0004:0002:80000001.0027: unknown main item tag 0x0 [ 605.001307][ T3396] hid-generic 0004:0002:80000001.0027: unknown main item tag 0x0 [ 605.009210][ T3396] hid-generic 0004:0002:80000001.0027: unknown main item tag 0x0 [ 605.017210][ T3396] hid-generic 0004:0002:80000001.0027: unknown main item tag 0x0 [ 605.025006][ T3396] hid-generic 0004:0002:80000001.0027: unknown main item tag 0x0 [ 605.033039][ T3396] hid-generic 0004:0002:80000001.0027: unknown main item tag 0x0 [ 605.042902][ T3396] hid-generic 0004:0002:80000001.0027: unknown main item tag 0x0 [ 605.050861][ T3396] hid-generic 0004:0002:80000001.0027: unknown main item tag 0x0 [ 605.061264][ T3396] hid-generic 0004:0002:80000001.0027: unknown main item tag 0x0 [ 605.853617][T16518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3410'. [ 605.907397][ T3396] hid-generic 0004:0002:80000001.0027: hidraw0: HID v0.04 Device [syz1] on syz0 [ 605.932503][T16493] loop5: detected capacity change from 0 to 1024 [ 605.944493][T16518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 606.037566][T16522] fido_id[16522]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 606.061106][T15202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.098366][T16493] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 606.132305][T16493] System zones: 0-1, 3-36 [ 606.153239][T16493] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3408: bad orphan inode 134217728 [ 606.181242][T16493] loop5: lost filesystem error report for type 5 error -117 [ 606.186199][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 606.201789][ C0] EXT4-fs (loop5): initial error at time 1772561205: ext4_orphan_get:1417 [ 606.211069][ C0] EXT4-fs (loop5): last error at time 1772561205: ext4_orphan_get:1417 [ 606.297928][T16493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.518811][ T5613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.770839][T16531] 9pnet_fd: p9_fd_create_unix (16531): problem connecting socket: ./file0: -2 [ 606.811362][T16536] FAULT_INJECTION: forcing a failure. [ 606.811362][T16536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.825045][T16536] CPU: 0 UID: 0 PID: 16536 Comm: syz.1.3416 Not tainted syzkaller #0 PREEMPT(full) [ 606.825105][T16536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 606.825176][T16536] Call Trace: [ 606.825184][T16536] [ 606.825193][T16536] __dump_stack+0x1d/0x30 [ 606.825228][T16536] dump_stack_lvl+0x95/0xd0 [ 606.825260][T16536] dump_stack+0x15/0x1b [ 606.825343][T16536] should_fail_ex+0x263/0x280 [ 606.825368][T16536] should_fail+0xb/0x20 [ 606.825426][T16536] should_fail_usercopy+0x1a/0x20 [ 606.825458][T16536] _copy_to_user+0x20/0xa0 [ 606.825495][T16536] simple_read_from_buffer+0xb5/0x130 [ 606.825527][T16536] proc_fail_nth_read+0x10e/0x150 [ 606.825649][T16536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 606.825688][T16536] vfs_read+0x1ab/0x7f0 [ 606.825729][T16536] ? mutex_unlock+0x4e/0x90 [ 606.825765][T16536] ? __rcu_read_unlock+0x4e/0x70 [ 606.825902][T16536] ? __fget_files+0x184/0x1c0 [ 606.825935][T16536] ? mutex_lock+0x57/0x90 [ 606.825972][T16536] ksys_read+0xdc/0x1a0 [ 606.826074][T16536] __x64_sys_read+0x40/0x50 [ 606.826142][T16536] x64_sys_call+0x2886/0x3020 [ 606.826178][T16536] do_syscall_64+0x12c/0x370 [ 606.826228][T16536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.826256][T16536] RIP: 0033:0x7fede1accfce [ 606.826276][T16536] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 606.826298][T16536] RSP: 002b:00007fede0566fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 606.826319][T16536] RAX: ffffffffffffffda RBX: 00007fede05676c0 RCX: 00007fede1accfce [ 606.826384][T16536] RDX: 000000000000000f RSI: 00007fede05670a0 RDI: 0000000000000003 [ 606.826402][T16536] RBP: 00007fede0567090 R08: 0000000000000000 R09: 0000000000000000 [ 606.826417][T16536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.826479][T16536] R13: 00007fede1d86038 R14: 00007fede1d85fa0 R15: 00007ffc0757e298 [ 606.826506][T16536] [ 607.094623][T16540] loop1: detected capacity change from 0 to 512 [ 607.147248][T16542] tipc: Enabled bearer , priority 10 [ 607.154606][T16540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 607.185648][T16540] ext4 filesystem being mounted at /37/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.202899][T16540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.212549][T16540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.287722][T16540] ip6gretap0: entered promiscuous mode [ 607.293340][T16540] vlan2: entered promiscuous mode [ 607.921600][ T28] audit: type=1326 audit(1772561206.950:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16549 comm="syz.0.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f132ec799 code=0x7ffc0000 [ 607.948689][ T28] audit: type=1326 audit(1772561206.980:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16549 comm="syz.0.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f132ec799 code=0x7ffc0000 [ 608.070371][ T28] audit: type=1326 audit(1772561206.980:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16549 comm="syz.0.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f132ec799 code=0x7ffc0000 [ 608.146020][T14220] tipc: Node number set to 2583882543 [ 608.160786][ T28] audit: type=1326 audit(1772561206.980:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16549 comm="syz.0.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f132ec799 code=0x7ffc0000 [ 608.249500][T16566] hub 9-0:1.0: USB hub found [ 608.283619][ T28] audit: type=1326 audit(1772561206.980:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16549 comm="syz.0.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f132ec799 code=0x7ffc0000 [ 608.310896][T16572] netlink: 54775 bytes leftover after parsing attributes in process `syz.0.3423'. [ 608.341055][T16566] hub 9-0:1.0: 8 ports detected [ 608.423408][ T28] audit: type=1326 audit(1772561206.980:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16549 comm="syz.0.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f132ec799 code=0x7ffc0000 [ 608.473136][T16577] loop5: detected capacity change from 0 to 512 [ 608.496744][T16577] EXT4-fs: Ignoring removed bh option [ 608.536016][T16577] EXT4-fs: inline encryption not supported [ 608.587216][ T28] audit: type=1326 audit(1772561206.980:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16549 comm="syz.0.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f132ec799 code=0x7ffc0000 [ 608.623076][T16577] ext4: block size(8192) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 608.662870][T15513] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 608.680177][T16577] EXT4-fs (loop5): bad block size 8192 [ 608.697210][T16586] program syz.2.3430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 608.735957][ T28] audit: type=1326 audit(1772561206.980:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16549 comm="syz.0.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5f132ec799 code=0x7ffc0000 [ 608.828321][T16591] loop2: detected capacity change from 0 to 512 [ 608.848582][ T28] audit: type=1326 audit(1772561206.980:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16549 comm="syz.0.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f132ec799 code=0x7ffc0000 [ 608.876477][T16591] EXT4-fs: inline encryption not supported [ 608.913340][T16591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.956550][ T28] audit: type=1326 audit(1772561206.980:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16549 comm="syz.0.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f132ec799 code=0x7ffc0000 [ 609.005318][T16591] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 609.265523][T16619] loop5: detected capacity change from 0 to 512 [ 609.320442][T16619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 609.598275][T16619] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3439: bad orphan inode 11 [ 609.628729][T16619] loop5: lost filesystem error report for type 5 error -117 [ 609.629014][T16619] ext4_test_bit(bit=10, block=4) = 1 [ 609.636684][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 609.636709][ C1] EXT4-fs (loop5): initial error at time 1772561208: ext4_orphan_get:1417 [ 609.636738][ C1] EXT4-fs (loop5): last error at time 1772561208: ext4_orphan_get:1417 [ 609.721533][T16619] is_bad_inode(inode)=0 [ 609.726056][T16619] NEXT_ORPHAN(inode)=2080374784 [ 609.730936][T16619] max_ino=32 [ 609.734198][T16619] i_nlink=0 [ 609.737687][T16619] EXT4-fs (loop5): 1 truncate cleaned up [ 609.744046][T16619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.770096][T15202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.943691][ T3396] hid-generic 0004:0002:80000001.0028: hidraw0: HID v0.04 Device [syz1] on syz0 [ 609.981430][ T5613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.102736][T16631] fido_id[16631]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 610.217606][T16633] loop1: detected capacity change from 0 to 8192 [ 610.240898][T16633] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 610.371523][T16642] loop1: detected capacity change from 0 to 256 [ 610.380814][T16644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3448'. [ 610.393940][T16642] vfat: Deprecated parameter 'posix' [ 610.401165][T16642] FAT-fs: "posix" option is obsolete, not supported now [ 610.423090][T16642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.467288][T16644] xfrm0 speed is unknown, defaulting to 1000 [ 610.478823][T16653] dns_resolver: Unsupported content type (2) [ 610.483811][T16642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.506717][T16653] libceph: secret too big 289 [ 610.519162][T16642] loop1: detected capacity change from 0 to 128 [ 610.530154][T16642] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 610.538965][T16642] FAT-fs (loop1): Filesystem has been set read-only [ 610.548305][T16642] bio_check_eod: 38 callbacks suppressed [ 610.548323][T16642] syz.1.3445: attempt to access beyond end of device [ 610.548323][T16642] loop1: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 610.590027][T16642] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 610.600600][T16642] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 610.609232][T16642] syz.1.3445: attempt to access beyond end of device [ 610.609232][T16642] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 610.624469][T16658] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 610.634668][T16658] syz.1.3445: attempt to access beyond end of device [ 610.634668][T16658] loop1: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 610.650791][T16642] syz.1.3445: attempt to access beyond end of device [ 610.650791][T16642] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 610.665082][T16658] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 610.673076][T16658] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 610.689325][T16641] syz.1.3445: attempt to access beyond end of device [ 610.689325][T16641] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 610.707261][T16642] syz.1.3445: attempt to access beyond end of device [ 610.707261][T16642] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 610.723846][T16658] syz.1.3445: attempt to access beyond end of device [ 610.723846][T16658] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 610.738298][T16641] syz.1.3445: attempt to access beyond end of device [ 610.738298][T16641] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 610.746420][T16661] loop5: detected capacity change from 0 to 512 [ 610.753531][T16642] syz.1.3445: attempt to access beyond end of device [ 610.753531][T16642] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 610.772672][T16644] lo speed is unknown, defaulting to 1000 [ 610.775491][T16641] syz.1.3445: attempt to access beyond end of device [ 610.775491][T16641] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 610.792511][T16661] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 610.843077][T16661] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3453: bad orphan inode 11 [ 610.853787][T16661] loop5: lost filesystem error report for type 5 error -117 [ 610.855915][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 610.856191][T16661] ext4_test_bit(bit=10, block=4) = 1 [ 610.863350][ C0] EXT4-fs (loop5): initial error at time 1772561209: ext4_orphan_get:1417 [ 610.872092][T16661] is_bad_inode(inode)=0 [ 610.875114][ C0] [ 610.875125][ C0] EXT4-fs (loop5): last error at time 1772561209: ext4_orphan_get:1417 [ 610.894597][T16661] NEXT_ORPHAN(inode)=2080374784 [ 610.922875][T16661] max_ino=32 [ 610.926455][T16661] i_nlink=0 [ 610.929841][T16661] EXT4-fs (loop5): 1 truncate cleaned up [ 610.936438][T16661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.070628][ T3423] hid_parser_main: 202 callbacks suppressed [ 611.070651][ T3423] hid-generic 0004:0002:80000001.0029: unknown main item tag 0x0 [ 611.085030][ T3423] hid-generic 0004:0002:80000001.0029: unknown main item tag 0x0 [ 611.097710][ T3423] hid-generic 0004:0002:80000001.0029: unknown main item tag 0x0 [ 611.170325][ T3423] hid-generic 0004:0002:80000001.0029: unknown main item tag 0x0 [ 611.193013][ T3423] hid-generic 0004:0002:80000001.0029: unknown main item tag 0x0 [ 611.254332][T16669] loop7: detected capacity change from 0 to 512 [ 611.266066][ T3423] hid-generic 0004:0002:80000001.0029: unknown main item tag 0x0 [ 611.276984][T16665] loop2: detected capacity change from 0 to 512 [ 611.284065][ T3423] hid-generic 0004:0002:80000001.0029: unknown main item tag 0x0 [ 611.293512][T16665] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 611.322147][T16665] EXT4-fs (loop2): inodes count not valid: 23 vs 32 [ 611.323120][ T3423] hid-generic 0004:0002:80000001.0029: unknown main item tag 0x0 [ 611.323153][ T3423] hid-generic 0004:0002:80000001.0029: unknown main item tag 0x0 [ 611.361729][ T3423] hid-generic 0004:0002:80000001.0029: unknown main item tag 0x0 [ 611.370966][T16669] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.395470][ T3423] hid-generic 0004:0002:80000001.0029: hidraw0: HID v0.04 Device [syz1] on syz0 [ 611.406177][T16669] ext4 filesystem being mounted at /463/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 611.440451][ T5613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.476448][ T7257] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.515792][T16678] fido_id[16678]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 611.689363][T16708] rdma_op ffff8881196dfd80 conn xmit_rdma 0000000000000000 [ 611.806699][T16723] loop7: detected capacity change from 0 to 512 [ 611.822110][T16726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3467'. [ 611.831439][T16723] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 611.868755][T16723] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.3466: bad orphan inode 11 [ 611.884809][T16726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 611.902047][T16723] loop7: lost filesystem error report for type 5 error -117 [ 611.904914][T16723] ext4_test_bit(bit=10, block=4) = 1 [ 611.912269][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 611.912296][ C1] EXT4-fs (loop7): initial error at time 1772561210: ext4_orphan_get:1417 [ 611.912316][ C1] EXT4-fs (loop7): last error at time 1772561210: ext4_orphan_get:1417 [ 612.021758][T16723] is_bad_inode(inode)=0 [ 612.042541][T16723] NEXT_ORPHAN(inode)=2080374784 [ 612.057954][T16723] max_ino=32 [ 612.061256][T16723] i_nlink=0 [ 612.072288][T16723] EXT4-fs (loop7): 1 truncate cleaned up [ 612.092125][T16723] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.160886][ T7257] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.228205][T16753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3475'. [ 612.246090][T16740] loop2: detected capacity change from 0 to 1024 [ 612.278213][T16740] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 612.295912][T16740] System zones: 0-1, 3-36 [ 612.333971][T16759] team0: Device macvtap1 is already an upper device of the team interface [ 612.356721][T16740] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3470: bad orphan inode 134217728 [ 612.372976][T16740] loop2: lost filesystem error report for type 5 error -117 [ 612.381245][T16740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.519947][T16769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3470'. [ 612.543723][T16768] validate_nla: 45 callbacks suppressed [ 612.543740][T16768] netlink: 'syz.7.3481': attribute type 62 has an invalid length. [ 612.657564][T16774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=16774 comm=syz.0.3484 [ 612.695516][T16781] xt_hashlimit: size too large, truncated to 1048576 [ 612.961732][T15202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.001949][T16788] team0 (unregistering): Port device team_slave_0 removed [ 613.087603][T16788] team0 (unregistering): Port device team_slave_1 removed [ 613.133077][T16793] bond0: Caught tx_queue_len zero misconfig [ 613.630639][T16812] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3495'. [ 613.672345][T16810] FAULT_INJECTION: forcing a failure. [ 613.672345][T16810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.702190][ T3516] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 613.740036][T16810] CPU: 0 UID: 0 PID: 16810 Comm: syz.1.3492 Not tainted syzkaller #0 PREEMPT(full) [ 613.740071][T16810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 613.740157][T16810] Call Trace: [ 613.740165][T16810] [ 613.740176][T16810] __dump_stack+0x1d/0x30 [ 613.740211][T16810] dump_stack_lvl+0x95/0xd0 [ 613.740302][T16810] dump_stack+0x15/0x1b [ 613.740364][T16810] should_fail_ex+0x263/0x280 [ 613.740402][T16810] should_fail+0xb/0x20 [ 613.740491][T16810] should_fail_usercopy+0x1a/0x20 [ 613.740581][T16810] _copy_from_user+0x1c/0xb0 [ 613.740619][T16810] ___sys_sendmsg+0xc1/0x1e0 [ 613.740694][T16810] __x64_sys_sendmsg+0xd4/0x160 [ 613.740736][T16810] x64_sys_call+0x194c/0x3020 [ 613.740767][T16810] do_syscall_64+0x12c/0x370 [ 613.740842][T16810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.740865][T16810] RIP: 0033:0x7fede1b0c799 [ 613.740958][T16810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.740982][T16810] RSP: 002b:00007fede0525028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 613.741006][T16810] RAX: ffffffffffffffda RBX: 00007fede1d86180 RCX: 00007fede1b0c799 [ 613.741021][T16810] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: 0000000000000007 [ 613.741038][T16810] RBP: 00007fede0525090 R08: 0000000000000000 R09: 0000000000000000 [ 613.741055][T16810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.741132][T16810] R13: 00007fede1d86218 R14: 00007fede1d86180 R15: 00007ffc0757e298 [ 613.741153][T16810] [ 613.972295][T16816] loop2: detected capacity change from 0 to 4096 [ 614.041630][T16816] EXT4-fs: Ignoring removed mblk_io_submit option [ 614.060470][T16816] EXT4-fs: test_dummy_encryption option not supported [ 614.123326][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3500'. [ 614.372181][T16833] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 614.385240][T16833] block device autoloading is deprecated and will be removed. [ 614.440480][T16838] wireguard0: entered promiscuous mode [ 614.446470][T16838] wireguard0: entered allmulticast mode [ 614.490820][T16822] xfrm0 speed is unknown, defaulting to 1000 [ 614.603012][T16822] lo speed is unknown, defaulting to 1000 [ 614.821391][T16822] chnl_net:caif_netlink_parms(): no params data found [ 615.226189][ T5045] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 615.258623][ T4934] smc: removing ib device syz1 [ 615.306844][T16867] netlink: 'syz.7.3509': attribute type 1 has an invalid length. [ 615.356170][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3510'. [ 615.387615][ T5045] bond0 (unregistering): Released all slaves [ 615.396084][T16871] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3509'. [ 615.410523][ T5045] bond1 (unregistering): Released all slaves [ 615.654021][T16871] 8021q: adding VLAN 0 to HW filter on device bond1 [ 615.765089][T16822] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.772492][T16822] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.779974][T16822] bridge_slave_0: entered allmulticast mode [ 615.787934][T16822] bridge_slave_0: entered promiscuous mode [ 615.794991][T16822] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.802442][T16822] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.809783][T16822] bridge_slave_1: entered allmulticast mode [ 615.816964][T16822] bridge_slave_1: entered promiscuous mode [ 615.828282][ T5045] tipc: Left network mode [ 615.851233][T16822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.867346][T16822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.892261][ T5045] hsr_slave_0: left promiscuous mode [ 615.909224][ T5045] hsr_slave_1: left promiscuous mode [ 615.973635][T16905] hub 9-0:1.0: USB hub found [ 615.986215][T16905] hub 9-0:1.0: 8 ports detected [ 616.096319][T16822] team0: Port device team_slave_0 added [ 616.103468][T16822] team0: Port device team_slave_1 added [ 616.135974][T16822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.149528][T16822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.178751][T16914] loop2: detected capacity change from 0 to 512 [ 616.196426][T16914] EXT4-fs: Ignoring removed orlov option [ 616.223469][T16917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3520'. [ 616.256810][T16914] EXT4-fs (loop2): 1 truncate cleaned up [ 616.262956][T16914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.281948][T16822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.318804][T16822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.330543][T16822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.358225][T16928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3522'. [ 616.399592][T16912] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3519: bg 0: block 465: padding at end of block bitmap is not set [ 616.406503][T16822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.433707][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3522'. [ 616.470106][T16912] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 64 with error 28 [ 616.517837][T16912] EXT4-fs (loop2): This should not happen!! Data will be lost [ 616.517837][T16912] [ 616.565852][T16912] EXT4-fs (loop2): Total free blocks count 0 [ 616.594122][T16822] hsr_slave_0: entered promiscuous mode [ 616.604315][T16912] EXT4-fs (loop2): Free/Dirty block details [ 616.625640][T16822] hsr_slave_1: entered promiscuous mode [ 616.635910][T16912] EXT4-fs (loop2): free_blocks=0 [ 616.640921][T16912] EXT4-fs (loop2): dirty_blocks=65 [ 616.656301][T16822] debugfs: 'hsr0' already exists in 'hsr' [ 616.662201][T16822] Cannot create hsr debugfs directory [ 616.668100][T16912] EXT4-fs (loop2): Block reservation details [ 616.674121][T16912] EXT4-fs (loop2): i_reserved_data_blocks=65 [ 616.689953][T16942] vlan2: entered allmulticast mode [ 616.695104][T16942] bond0: entered allmulticast mode [ 616.707964][T16942] bond_slave_0: entered allmulticast mode [ 616.721448][T16942] bond_slave_1: entered allmulticast mode [ 616.733148][ T5051] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 616.793869][T16942] loop7: detected capacity change from 0 to 256 [ 616.842592][T16947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.858986][T16947] bond_slave_0: left allmulticast mode [ 616.869606][T16947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.870950][T16953] hub 9-0:1.0: USB hub found [ 616.883066][T16953] hub 9-0:1.0: 8 ports detected [ 616.892775][T16947] bond_slave_1: left allmulticast mode [ 616.903827][T16947] bond0 (unregistering): Released all slaves [ 617.091696][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 617.091712][ T28] audit: type=1400 audit(1772561216.120:2012): avc: denied { listen } for pid=16974 comm="syz.7.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 617.288467][T16822] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 617.308836][T16822] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 617.320436][T16990] __nla_validate_parse: 1 callbacks suppressed [ 617.320455][T16990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3534'. [ 617.337451][T16822] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 617.352192][T16822] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 617.381267][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3534'. [ 617.520070][T17000] lo speed is unknown, defaulting to 1000 [ 617.574779][T17004] loop7: detected capacity change from 0 to 512 [ 617.616860][T17016] hub 9-0:1.0: USB hub found [ 617.626595][T17016] hub 9-0:1.0: 8 ports detected [ 617.635662][T16822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.724560][T16822] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.812704][ T5058] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.819932][ T5058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.891248][ T4934] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.891286][ T4934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.934971][T16822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 617.934998][T16822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 618.481704][T16822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.762360][ T28] audit: type=1400 audit(1772561217.780:2013): avc: denied { accept } for pid=17076 comm="syz.2.3545" path="socket:[54529]" dev="sockfs" ino=54529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 618.854480][T17089] loop2: detected capacity change from 0 to 512 [ 618.869315][T16822] veth0_vlan: entered promiscuous mode [ 618.880278][T17089] EXT4-fs: Ignoring removed nobh option [ 618.886991][ T28] audit: type=1400 audit(1772561217.920:2014): avc: denied { ioctl } for pid=17074 comm="syz.1.3544" path="socket:[53770]" dev="sockfs" ino=53770 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 618.922615][T17079] tipc: Invalid UDP bearer configuration [ 618.922633][T17079] tipc: Enabling of bearer rejected, failed to enable media [ 618.950036][T17089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.966267][T17089] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.988134][T16822] veth1_vlan: entered promiscuous mode [ 619.001718][T16822] veth0_macvtap: entered promiscuous mode [ 619.009240][T16822] veth1_macvtap: entered promiscuous mode [ 619.039205][T16822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.058704][T16822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.078161][ T5061] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.092638][T17097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3548'. [ 619.097018][ T5061] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.117739][T15202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.146697][ T5061] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.155950][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3548'. [ 619.190120][ T5061] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.201601][T17104] netlink: 'syz.2.3549': attribute type 5 has an invalid length. [ 619.209502][T17104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3549'. [ 619.478583][T17117] loop5: detected capacity change from 0 to 512 [ 619.515779][T17117] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.3498: inode has both inline data and extents flags [ 619.619132][T17121] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3552'. [ 619.636866][ T28] audit: type=1326 audit(1772561218.610:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.1.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede1b0c799 code=0x7ffc0000 [ 619.705646][T17119] batadv1: entered promiscuous mode [ 619.761869][T17117] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 619.762205][T17117] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3498: couldn't read orphan inode 15 (err -117) [ 619.771408][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 619.771424][ C0] EXT4-fs (loop5): initial error at time 1772561218: ext4_orphan_get:1391: inode 15 [ 619.771450][ C0] EXT4-fs (loop5): last error at time 1772561218: ext4_orphan_get:1391: inode 15 [ 619.932529][ T28] audit: type=1326 audit(1772561218.620:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.1.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede1b0c799 code=0x7ffc0000 [ 619.959050][T17124] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3553'. [ 620.036029][T17117] loop5: lost filesystem error report for type 5 error -117 [ 620.066350][T17117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.090429][ T28] audit: type=1326 audit(1772561218.620:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.1.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fede1b0c799 code=0x7ffc0000 [ 620.122810][ T28] audit: type=1326 audit(1772561218.620:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.1.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede1b0c799 code=0x7ffc0000 [ 620.164331][ T28] audit: type=1326 audit(1772561218.620:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.1.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede1b0c799 code=0x7ffc0000 [ 620.230701][ T28] audit: type=1326 audit(1772561218.620:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.1.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fede1accfce code=0x7ffc0000 [ 620.255176][T16822] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.268275][ T28] audit: type=1326 audit(1772561218.630:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.1.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fede1accfce code=0x7ffc0000 [ 620.357263][T17129] netlink: 'syz.1.3555': attribute type 1 has an invalid length. [ 620.370176][T17129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3555'. [ 620.386969][T17130] netlink: 'syz.5.3554': attribute type 16 has an invalid length. [ 620.394900][T17130] netlink: 'syz.5.3554': attribute type 17 has an invalid length. [ 620.404633][T17107] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3550'. [ 620.529402][T17130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 620.906782][T17154] lo speed is unknown, defaulting to 1000 [ 620.927931][ T3516] hid_parser_main: 97 callbacks suppressed [ 620.927954][ T3516] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 621.047464][T17155] loop2: detected capacity change from 0 to 4096 [ 621.081759][T17155] EXT4-fs: Ignoring removed mblk_io_submit option [ 621.125863][T17155] EXT4-fs: test_dummy_encryption option not supported [ 621.135952][ T3516] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 621.142684][T17162] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3562'. [ 621.206276][T17165] FAULT_INJECTION: forcing a failure. [ 621.206276][T17165] name failslab, interval 1, probability 0, space 0, times 0 [ 621.228345][T17165] CPU: 1 UID: 0 PID: 17165 Comm: syz.7.3563 Not tainted syzkaller #0 PREEMPT(full) [ 621.228462][T17165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 621.228479][T17165] Call Trace: [ 621.228487][T17165] [ 621.228498][T17165] __dump_stack+0x1d/0x30 [ 621.228532][T17165] dump_stack_lvl+0x95/0xd0 [ 621.228642][T17165] dump_stack+0x15/0x1b [ 621.228671][T17165] should_fail_ex+0x263/0x280 [ 621.228697][T17165] ? __se_sys_mount+0xef/0x2e0 [ 621.228793][T17165] should_failslab+0x8c/0xb0 [ 621.228820][T17165] __kmalloc_cache_noprof+0x5f/0x410 [ 621.228852][T17165] ? memdup_user+0x99/0xd0 [ 621.228878][T17165] __se_sys_mount+0xef/0x2e0 [ 621.228958][T17165] ? fput+0x8f/0xc0 [ 621.228983][T17165] ? ksys_write+0x194/0x1a0 [ 621.229019][T17165] __x64_sys_mount+0x67/0x80 [ 621.229068][T17165] x64_sys_call+0x2d61/0x3020 [ 621.229216][T17165] do_syscall_64+0x12c/0x370 [ 621.229244][T17165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.229273][T17165] RIP: 0033:0x7f93dde0c799 [ 621.229294][T17165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.229314][T17165] RSP: 002b:00007f93dc85f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 621.229390][T17165] RAX: ffffffffffffffda RBX: 00007f93de085fa0 RCX: 00007f93dde0c799 [ 621.229408][T17165] RDX: 0000200000000140 RSI: 0000200000000000 RDI: 0000000000000000 [ 621.229423][T17165] RBP: 00007f93dc85f090 R08: 0000200000000040 R09: 0000000000000000 [ 621.229446][T17165] R10: 0000000003200841 R11: 0000000000000246 R12: 0000000000000001 [ 621.229495][T17165] R13: 00007f93de086038 R14: 00007f93de085fa0 R15: 00007ffcfc8fd758 [ 621.229523][T17165] [ 621.451353][T17168] loop7: detected capacity change from 0 to 512 [ 621.462715][T17168] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.3564: inode has both inline data and extents flags [ 621.478832][T17168] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 621.479704][T17168] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3564: couldn't read orphan inode 15 (err -117) [ 621.488918][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 621.488940][ C0] EXT4-fs (loop7): initial error at time 1772561220: ext4_orphan_get:1391: inode 15 [ 621.488966][ C0] EXT4-fs (loop7): last error at time 1772561220: ext4_orphan_get:1391: inode 15 [ 621.528243][T17168] loop7: lost filesystem error report for type 5 error -117 [ 621.528794][T17168] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.596101][ T3516] page_pool_release_retry() stalled pool shutdown: id 72, 51 inflight 362 sec [ 621.624145][ T7257] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.659054][T17180] FAULT_INJECTION: forcing a failure. [ 621.659054][T17180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.688849][T17180] CPU: 1 UID: 0 PID: 17180 Comm: syz.0.3565 Not tainted syzkaller #0 PREEMPT(full) [ 621.688884][T17180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 621.688901][T17180] Call Trace: [ 621.688910][T17180] [ 621.688921][T17180] __dump_stack+0x1d/0x30 [ 621.689105][T17180] dump_stack_lvl+0x95/0xd0 [ 621.689205][T17180] dump_stack+0x15/0x1b [ 621.689236][T17180] should_fail_ex+0x263/0x280 [ 621.689311][T17180] should_fail+0xb/0x20 [ 621.689385][T17180] should_fail_usercopy+0x1a/0x20 [ 621.689492][T17180] _copy_to_user+0x20/0xa0 [ 621.689586][T17180] simple_read_from_buffer+0xb5/0x130 [ 621.689690][T17180] proc_fail_nth_read+0x10e/0x150 [ 621.689814][T17180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 621.689978][T17180] vfs_read+0x1ab/0x7f0 [ 621.690153][T17180] ? __fget_files+0x184/0x1c0 [ 621.690315][T17180] ? __rcu_read_unlock+0x4e/0x70 [ 621.690387][T17180] ? __fget_files+0x184/0x1c0 [ 621.690454][T17180] ? mutex_lock+0x57/0x90 [ 621.690547][T17180] ksys_read+0xdc/0x1a0 [ 621.690690][T17180] __x64_sys_read+0x40/0x50 [ 621.690805][T17180] x64_sys_call+0x2886/0x3020 [ 621.690981][T17180] do_syscall_64+0x12c/0x370 [ 621.691060][T17180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.691132][T17180] RIP: 0033:0x7f5f132acfce [ 621.691191][T17180] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 621.691246][T17180] RSP: 002b:00007f5f11d25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 621.691359][T17180] RAX: ffffffffffffffda RBX: 00007f5f11d266c0 RCX: 00007f5f132acfce [ 621.691404][T17180] RDX: 000000000000000f RSI: 00007f5f11d260a0 RDI: 0000000000000008 [ 621.691450][T17180] RBP: 00007f5f11d26090 R08: 0000000000000000 R09: 0000000000000000 [ 621.691492][T17180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.691540][T17180] R13: 00007f5f13566128 R14: 00007f5f13566090 R15: 00007ffed503da78 [ 621.691623][T17180] [ 621.735844][T17179] loop5: detected capacity change from 0 to 8192 [ 621.957566][T17187] netlink: 'syz.2.3570': attribute type 1 has an invalid length. [ 622.056784][T17194] loop7: detected capacity change from 0 to 1024 [ 622.073698][T17194] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.119437][T17201] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 622.170669][ T7257] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.260524][T17205] loop2: detected capacity change from 0 to 1024 [ 622.299088][T17207] loop7: detected capacity change from 0 to 512 [ 622.304912][T17205] EXT4-fs: Ignoring removed orlov option [ 622.344582][T17205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.387804][T17207] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.3577: inode has both inline data and extents flags [ 622.410539][T17207] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 622.410672][T17207] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3577: couldn't read orphan inode 15 (err -117) [ 622.419926][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 622.419943][ C1] EXT4-fs (loop7): initial error at time 1772561221: ext4_orphan_get:1391: inode 15 [ 622.419968][ C1] EXT4-fs (loop7): last error at time 1772561221: ext4_orphan_get:1391: inode 15 [ 622.458162][T17207] loop7: lost filesystem error report for type 5 error -117 [ 622.458757][T17207] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.526239][ T7257] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.585065][T17219] FAULT_INJECTION: forcing a failure. [ 622.585065][T17219] name failslab, interval 1, probability 0, space 0, times 0 [ 622.620324][T15202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.632797][T17219] CPU: 0 UID: 0 PID: 17219 Comm: syz.7.3580 Not tainted syzkaller #0 PREEMPT(full) [ 622.632883][T17219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 622.632900][T17219] Call Trace: [ 622.632909][T17219] [ 622.632919][T17219] __dump_stack+0x1d/0x30 [ 622.632949][T17219] dump_stack_lvl+0x95/0xd0 [ 622.632979][T17219] dump_stack+0x15/0x1b [ 622.633034][T17219] should_fail_ex+0x263/0x280 [ 622.633167][T17219] should_failslab+0x8c/0xb0 [ 622.633195][T17219] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 622.633226][T17219] ? __alloc_skb+0x2d6/0x690 [ 622.633258][T17219] __alloc_skb+0x2d6/0x690 [ 622.633347][T17219] ? __alloc_skb+0x200/0x690 [ 622.633375][T17219] netlink_alloc_large_skb+0xbf/0xf0 [ 622.633409][T17219] netlink_sendmsg+0x40c/0x6f0 [ 622.633449][T17219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.633489][T17219] ____sys_sendmsg+0x5af/0x600 [ 622.633531][T17219] ___sys_sendmsg+0x195/0x1e0 [ 622.633566][T17219] ? path_openat+0x1b01/0x2050 [ 622.633682][T17219] __sys_sendmmsg+0x185/0x320 [ 622.633778][T17219] __x64_sys_sendmmsg+0x57/0x70 [ 622.633868][T17219] x64_sys_call+0x27aa/0x3020 [ 622.633971][T17219] do_syscall_64+0x12c/0x370 [ 622.633998][T17219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.634027][T17219] RIP: 0033:0x7f93dde0c799 [ 622.634111][T17219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.634136][T17219] RSP: 002b:00007f93dc85f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 622.634162][T17219] RAX: ffffffffffffffda RBX: 00007f93de085fa0 RCX: 00007f93dde0c799 [ 622.634181][T17219] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 622.634251][T17219] RBP: 00007f93dc85f090 R08: 0000000000000000 R09: 0000000000000000 [ 622.634269][T17219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.634335][T17219] R13: 00007f93de086038 R14: 00007f93de085fa0 R15: 00007ffcfc8fd758 [ 622.634356][T17219] [ 622.858160][T17225] netlink: 'syz.5.3583': attribute type 4 has an invalid length. [ 622.879769][T17225] netlink: 'syz.5.3583': attribute type 4 has an invalid length. [ 622.881566][T14822] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 622.896553][T17225] netlink: 'syz.5.3583': attribute type 4 has an invalid length. [ 622.915101][T17225] netlink: 'syz.5.3583': attribute type 4 has an invalid length. [ 622.925347][T14822] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 622.935061][T17225] netlink: 'syz.5.3583': attribute type 4 has an invalid length. [ 622.960186][T17229] loop7: detected capacity change from 0 to 4096 [ 622.992068][T17229] EXT4-fs: Ignoring removed mblk_io_submit option [ 623.000249][T17229] EXT4-fs: test_dummy_encryption option not supported [ 623.057987][T17238] __nla_validate_parse: 5 callbacks suppressed [ 623.058009][T17238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3589'. [ 623.080731][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 623.080749][ T28] audit: type=1400 audit(1772561222.110:2036): avc: denied { read } for pid=17236 comm="syz.5.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 623.097670][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3589'. [ 623.270988][T17250] FAULT_INJECTION: forcing a failure. [ 623.270988][T17250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.284360][T17250] CPU: 0 UID: 0 PID: 17250 Comm: syz.2.3592 Not tainted syzkaller #0 PREEMPT(full) [ 623.284394][T17250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 623.284414][T17250] Call Trace: [ 623.284421][T17250] [ 623.284429][T17250] __dump_stack+0x1d/0x30 [ 623.284462][T17250] dump_stack_lvl+0x95/0xd0 [ 623.284489][T17250] dump_stack+0x15/0x1b [ 623.284551][T17250] should_fail_ex+0x263/0x280 [ 623.284572][T17250] should_fail+0xb/0x20 [ 623.284590][T17250] should_fail_usercopy+0x1a/0x20 [ 623.284613][T17250] _copy_from_iter+0xcf/0xea0 [ 623.284700][T17250] ? __alloc_skb+0x4f6/0x690 [ 623.284722][T17250] ? __alloc_skb+0x200/0x690 [ 623.284744][T17250] netlink_sendmsg+0x4ae/0x6f0 [ 623.284818][T17250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 623.284843][T17250] ____sys_sendmsg+0x5af/0x600 [ 623.284900][T17250] ___sys_sendmsg+0x195/0x1e0 [ 623.284939][T17250] __x64_sys_sendmsg+0xd4/0x160 [ 623.284968][T17250] x64_sys_call+0x194c/0x3020 [ 623.284992][T17250] do_syscall_64+0x12c/0x370 [ 623.285069][T17250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.285089][T17250] RIP: 0033:0x7fba5aa5c799 [ 623.285103][T17250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.285176][T17250] RSP: 002b:00007fba594af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 623.285269][T17250] RAX: ffffffffffffffda RBX: 00007fba5acd5fa0 RCX: 00007fba5aa5c799 [ 623.285301][T17250] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 623.285313][T17250] RBP: 00007fba594af090 R08: 0000000000000000 R09: 0000000000000000 [ 623.285324][T17250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.285353][T17250] R13: 00007fba5acd6038 R14: 00007fba5acd5fa0 R15: 00007ffe0c2dde58 [ 623.285371][T17250] [ 623.521928][T17253] serio: Serial port ptm1 [ 623.606010][ T7576] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 623.841189][T17267] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3594'. [ 623.956926][T17269] lo speed is unknown, defaulting to 1000 [ 624.023042][T17264] lo speed is unknown, defaulting to 1000 [ 624.193005][T17273] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3597'. [ 624.218501][T17276] validate_nla: 48 callbacks suppressed [ 624.218521][T17276] netlink: 'syz.5.3598': attribute type 4 has an invalid length. [ 624.218539][T17276] netlink: 'syz.5.3598': attribute type 4 has an invalid length. [ 624.218552][T17276] netlink: 'syz.5.3598': attribute type 4 has an invalid length. [ 624.218564][T17276] netlink: 'syz.5.3598': attribute type 4 has an invalid length. [ 624.218576][T17276] netlink: 'syz.5.3598': attribute type 4 has an invalid length. [ 624.218591][T17276] netlink: 'syz.5.3598': attribute type 4 has an invalid length. [ 624.218673][T17276] netlink: 'syz.5.3598': attribute type 4 has an invalid length. [ 624.218686][T17276] netlink: 'syz.5.3598': attribute type 4 has an invalid length. [ 624.218698][T17276] netlink: 'syz.5.3598': attribute type 4 has an invalid length. [ 624.218709][T17276] netlink: 'syz.5.3598': attribute type 4 has an invalid length. [ 624.487832][ T28] audit: type=1400 audit(1772561223.510:2037): avc: denied { create } for pid=17279 comm="syz.7.3600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 624.487866][ T28] audit: type=1400 audit(1772561223.510:2038): avc: denied { write } for pid=17279 comm="syz.7.3600" path="socket:[54146]" dev="sockfs" ino=54146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 624.996357][T17290] syzkaller1: entered allmulticast mode [ 625.116076][T17294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.124568][T17294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.182334][ T28] audit: type=1400 audit(1772561224.210:2039): avc: denied { setattr } for pid=17296 comm="syz.7.3606" name="task" dev="proc" ino=54204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 625.299909][T17293] 8021q: VLANs not supported on nlmon0 [ 625.313479][T17302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.341348][T17302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.999117][T17317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3614'. [ 626.016923][ T28] audit: type=1326 audit(1772561225.050:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17319 comm="syz.7.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dde0c799 code=0x7ffc0000 [ 626.047697][ T28] audit: type=1326 audit(1772561225.060:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17319 comm="syz.7.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dde0c799 code=0x7ffc0000 [ 626.072919][T17318] netlink: 182 bytes leftover after parsing attributes in process `syz.2.3614'. [ 626.095974][ T28] audit: type=1326 audit(1772561225.060:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17319 comm="syz.7.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dde0c799 code=0x7ffc0000 [ 626.136529][ T28] audit: type=1326 audit(1772561225.060:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17319 comm="syz.7.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dde0c799 code=0x7ffc0000 [ 626.168144][ T28] audit: type=1326 audit(1772561225.060:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17319 comm="syz.7.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f93dde0c799 code=0x7ffc0000 [ 626.193723][ T28] audit: type=1326 audit(1772561225.060:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17319 comm="syz.7.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dde0c799 code=0x7ffc0000 [ 626.201325][T17317] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.224660][T17317] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.359493][T17335] loop7: detected capacity change from 0 to 128 [ 626.390925][T17317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.401513][T17317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.486222][ T5051] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.506964][ T5051] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.517452][T17341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3625'. [ 626.526205][ T5051] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.547861][T17341] bridge1: entered promiscuous mode [ 626.553355][T17341] bridge1: entered allmulticast mode [ 626.573962][T17347] loop1: detected capacity change from 0 to 1024 [ 626.727167][T17356] loop2: detected capacity change from 0 to 1024 [ 626.744395][T17356] EXT4-fs: inline encryption not supported [ 626.756617][ T5051] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.768947][T17347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.784218][T17335] loop7: detected capacity change from 0 to 1024 [ 626.808052][T17356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.808085][T17335] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 626.856099][T17356] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.3628: Allocating blocks 385-513 which overlap fs metadata [ 626.870508][T17356] EXT4-fs (loop2): Remounting filesystem read-only [ 626.878374][T17354] EXT4-fs (loop2): pa ffff888107e93770: logic 16, phys. 129, len 24 [ 626.896504][T15513] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.973061][ T3516] hid-generic 0004:0002:80000001.002D: unknown main item tag 0x0 [ 626.996646][T15202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.997481][ T3516] hid-generic 0004:0002:80000001.002D: unknown main item tag 0x0 [ 627.017902][ T3516] hid-generic 0004:0002:80000001.002D: unknown main item tag 0x0 [ 627.025813][ T3516] hid-generic 0004:0002:80000001.002D: unknown main item tag 0x0 [ 627.035302][ T3516] hid-generic 0004:0002:80000001.002D: unknown main item tag 0x0 [ 627.045199][ T3516] hid-generic 0004:0002:80000001.002D: unknown main item tag 0x0 [ 627.054146][ T3516] hid-generic 0004:0002:80000001.002D: unknown main item tag 0x0 [ 627.062985][ T3516] hid-generic 0004:0002:80000001.002D: unknown main item tag 0x0 [ 627.109829][ T3516] hid-generic 0004:0002:80000001.002D: unknown main item tag 0x0 [ 627.131906][ T3516] hid-generic 0004:0002:80000001.002D: unknown main item tag 0x0 [ 627.196031][T17375] FAULT_INJECTION: forcing a failure. [ 627.196031][T17375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.215361][T17375] CPU: 1 UID: 0 PID: 17375 Comm: syz.1.3635 Not tainted syzkaller #0 PREEMPT(full) [ 627.215391][T17375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 627.215423][T17375] Call Trace: [ 627.215430][T17375] [ 627.215439][T17375] __dump_stack+0x1d/0x30 [ 627.215470][T17375] dump_stack_lvl+0x95/0xd0 [ 627.215497][T17375] dump_stack+0x15/0x1b [ 627.215545][T17375] should_fail_ex+0x263/0x280 [ 627.215571][T17375] should_fail+0xb/0x20 [ 627.215594][T17375] should_fail_usercopy+0x1a/0x20 [ 627.215621][T17375] _copy_from_user+0x1c/0xb0 [ 627.215681][T17375] ___sys_sendmsg+0xc1/0x1e0 [ 627.215732][T17375] __x64_sys_sendmsg+0xd4/0x160 [ 627.215769][T17375] x64_sys_call+0x194c/0x3020 [ 627.215840][T17375] do_syscall_64+0x12c/0x370 [ 627.215949][T17375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.215987][T17375] RIP: 0033:0x7fede1b0c799 [ 627.216006][T17375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.216027][T17375] RSP: 002b:00007fede0567028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.216103][T17375] RAX: ffffffffffffffda RBX: 00007fede1d85fa0 RCX: 00007fede1b0c799 [ 627.216148][T17375] RDX: 00000000000000c0 RSI: 0000200000000180 RDI: 0000000000000003 [ 627.216163][T17375] RBP: 00007fede0567090 R08: 0000000000000000 R09: 0000000000000000 [ 627.216178][T17375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.216193][T17375] R13: 00007fede1d86038 R14: 00007fede1d85fa0 R15: 00007ffc0757e298 [ 627.216216][T17375] [ 627.248419][ T3516] hid-generic 0004:0002:80000001.002D: hidraw0: HID v0.04 Device [syz1] on syz0 [ 627.639876][T17386] loop7: detected capacity change from 0 to 512 [ 627.702722][T17388] FAULT_INJECTION: forcing a failure. [ 627.702722][T17388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.715927][T17388] CPU: 0 UID: 0 PID: 17388 Comm: syz.5.3637 Not tainted syzkaller #0 PREEMPT(full) [ 627.715982][T17388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 627.715997][T17388] Call Trace: [ 627.716004][T17388] [ 627.716012][T17388] __dump_stack+0x1d/0x30 [ 627.716092][T17388] dump_stack_lvl+0x95/0xd0 [ 627.716124][T17388] dump_stack+0x15/0x1b [ 627.716211][T17388] should_fail_ex+0x263/0x280 [ 627.716284][T17388] should_fail+0xb/0x20 [ 627.716304][T17388] should_fail_usercopy+0x1a/0x20 [ 627.716402][T17388] copy_folio_from_iter_atomic+0x269/0x1170 [ 627.716436][T17388] ? shmem_write_begin+0xfc/0x1f0 [ 627.716537][T17388] ? shmem_write_begin+0x135/0x1f0 [ 627.716569][T17388] generic_perform_write+0x2c1/0x490 [ 627.716611][T17388] shmem_file_write_iter+0xc5/0xf0 [ 627.716702][T17388] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 627.716733][T17388] vfs_write+0x5a6/0x9f0 [ 627.716813][T17388] ksys_write+0xdc/0x1a0 [ 627.716852][T17388] __x64_sys_write+0x40/0x50 [ 627.716869][T17388] x64_sys_call+0x27e1/0x3020 [ 627.716959][T17388] do_syscall_64+0x12c/0x370 [ 627.716981][T17388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.717002][T17388] RIP: 0033:0x7f8b4332cfce [ 627.717017][T17388] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 627.717116][T17388] RSP: 002b:00007f8b41d7cda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 627.717137][T17388] RAX: ffffffffffffffda RBX: 00007f8b41d7d6c0 RCX: 00007f8b4332cfce [ 627.717156][T17388] RDX: 0000000000020000 RSI: 00007f8b3995d000 RDI: 0000000000000006 [ 627.717173][T17388] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 627.717189][T17388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 627.717205][T17388] R13: 00007f8b41d7cee0 R14: 00007f8b41d7cea0 R15: 00007f8b3995d000 [ 627.717230][T17388] [ 627.718889][T17388] loop5: detected capacity change from 0 to 256 [ 628.054326][T17386] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3639: invalid indirect mapped block 256 (level 2) [ 628.071662][T17388] FAT-fs (loop5): Directory bread(block 64) failed [ 628.078410][T17388] FAT-fs (loop5): Directory bread(block 65) failed [ 628.085090][T17388] FAT-fs (loop5): Directory bread(block 66) failed [ 628.091735][T17388] FAT-fs (loop5): Directory bread(block 67) failed [ 628.098367][T17388] FAT-fs (loop5): Directory bread(block 68) failed [ 628.104916][T17388] FAT-fs (loop5): Directory bread(block 69) failed [ 628.111684][T17388] FAT-fs (loop5): Directory bread(block 70) failed [ 628.118276][T17388] FAT-fs (loop5): Directory bread(block 71) failed [ 628.125021][T17388] FAT-fs (loop5): Directory bread(block 72) failed [ 628.131628][T17388] FAT-fs (loop5): Directory bread(block 73) failed [ 628.289002][T17388] bridge_slave_0: left allmulticast mode [ 628.295393][T17388] bridge_slave_0: left promiscuous mode [ 628.303080][T17388] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.333839][T17388] bridge_slave_1: left allmulticast mode [ 628.340063][T17388] bridge_slave_1: left promiscuous mode [ 628.347646][T17388] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.381686][T17388] bond0: (slave bond_slave_0): Releasing backup interface [ 628.418205][T17388] bond0: (slave bond_slave_1): Releasing backup interface [ 628.472289][T17388] team0: Port device team_slave_0 removed [ 628.531253][T17386] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 628.531787][T17386] EXT4-fs (loop7): 2 truncates cleaned up [ 628.541010][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 628.541032][ C0] EXT4-fs (loop7): initial error at time 1772561227: ext4_free_branches:1023: inode 11 [ 628.541057][ C0] EXT4-fs (loop7): last error at time 1772561227: ext4_free_branches:1023: inode 11 [ 628.613723][T17388] team0: Port device team_slave_1 removed [ 628.629101][T17388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.637133][T17388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.671467][T17388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.679571][T17388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.739000][T17388] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 628.779402][T17394] ip6gre0: Caught tx_queue_len zero misconfig [ 628.815131][T17394] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 628.869831][T17386] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.963448][ T7257] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.033252][ T28] kauditd_printk_skb: 131 callbacks suppressed [ 629.033269][ T28] audit: type=1400 audit(1772561228.060:2177): avc: denied { create } for pid=17395 comm="syz.2.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 629.093360][T17396] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28 sclass=netlink_audit_socket pid=17396 comm=syz.2.3643 [ 629.197966][T17399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3644'. [ 629.520499][T17411] loop5: detected capacity change from 0 to 512 [ 629.542044][T17411] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 629.568756][T17411] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3648: bad orphan inode 11 [ 629.585956][T17411] loop5: lost filesystem error report for type 5 error -117 [ 629.587461][T17411] ext4_test_bit(bit=10, block=4) = 1 [ 629.587886][T17415] sg_write: process 285 (syz.2.3650) changed security contexts after opening file descriptor, this is not allowed. [ 629.600667][T17411] is_bad_inode(inode)=0 [ 629.612274][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 629.612295][ C1] EXT4-fs (loop5): initial error at time 1772561228: ext4_orphan_get:1417 [ 629.612319][ C1] EXT4-fs (loop5): last error at time 1772561228: ext4_orphan_get:1417 [ 629.639935][T17411] NEXT_ORPHAN(inode)=2080374784 [ 629.644810][T17411] max_ino=32 [ 629.648078][T17411] i_nlink=0 [ 629.651267][T17411] EXT4-fs (loop5): 1 truncate cleaned up [ 629.657393][T17411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.768240][T17417] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 629.886643][T17359] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 630.146835][ T3403] hid-generic 0004:0002:80000001.002E: hidraw0: HID v0.04 Device [syz1] on syz0 [ 630.223813][T17430] loop7: detected capacity change from 0 to 1024 [ 630.423860][T17430] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 630.437849][T17430] ext4 filesystem being mounted at /513/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.472041][T17430] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 630.612558][T17430] loop7: detected capacity change from 0 to 1024 [ 630.669630][T17430] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 630.758662][T17430] ext4 filesystem being mounted at /513/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.819260][T17430] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 630.851190][ T28] audit: type=1400 audit(1772561229.880:2178): avc: denied { setopt } for pid=17443 comm="syz.1.3658" lport=33935 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 630.889246][T17430] loop7: detected capacity change from 0 to 1024 [ 630.926735][T17430] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 630.960082][T17430] ext4 filesystem being mounted at /513/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.985270][T17448] loop1: detected capacity change from 0 to 512 [ 631.006239][T17448] EXT4-fs: dax option not supported [ 631.023405][T17430] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 631.035988][ T28] audit: type=1400 audit(1772561230.070:2179): avc: denied { ioctl } for pid=17443 comm="syz.1.3658" path="socket:[55465]" dev="sockfs" ino=55465 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 631.166468][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3659'. [ 631.179570][T17450] loop7: detected capacity change from 0 to 512 [ 631.186800][T17450] FAT-fs (loop7): Directory bread(block 199916) failed [ 631.198214][T17450] FAT-fs (loop7): Directory bread(block 199917) failed [ 631.245130][T17450] FAT-fs (loop7): Directory bread(block 199918) failed [ 631.274802][T17450] FAT-fs (loop7): Directory bread(block 199919) failed [ 631.274824][T17452] loop1: detected capacity change from 0 to 4096 [ 631.290755][T17450] FAT-fs (loop7): Directory bread(block 199920) failed [ 631.315757][T17452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.316049][T17450] FAT-fs (loop7): Directory bread(block 199921) failed [ 631.355339][T17450] FAT-fs (loop7): Directory bread(block 199922) failed [ 631.362374][T17450] FAT-fs (loop7): Directory bread(block 199923) failed [ 631.698313][T17460] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3661'. [ 631.707952][T17460] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3661'. [ 631.854681][T17463] loop2: detected capacity change from 0 to 1024 [ 631.950766][T17463] EXT4-fs: inline encryption not supported [ 631.964202][T17463] EXT4-fs: Ignoring removed nomblk_io_submit option [ 632.019729][T17463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.039890][T17467] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3663'. [ 632.099353][T15513] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.136316][T15372] ================================================================== [ 632.144879][T15372] BUG: KCSAN: data-race in set_nlink / set_nlink [ 632.151243][T15372] [ 632.153593][T15372] read to 0xffff888107d46048 of 4 bytes by task 3000 on cpu 1: [ 632.161151][T15372] set_nlink+0x29/0xb0 [ 632.165259][T15372] kernfs_iop_permission+0x1e2/0x220 [ 632.170597][T15372] inode_permission+0x31f/0x3b0 [ 632.175572][T15372] link_path_walk+0x779/0xe30 [ 632.180465][T15372] path_lookupat+0x8c/0x500 [ 632.185015][T15372] filename_lookup+0x190/0x390 [ 632.189819][T15372] vfs_statx+0x96/0x170 [ 632.194054][T15372] vfs_fstatat+0x118/0x170 [ 632.198506][T15372] __se_sys_newfstatat+0x55/0x3e0 [ 632.203656][T15372] __x64_sys_newfstatat+0x55/0x70 [ 632.208753][T15372] x64_sys_call+0x2c64/0x3020 [ 632.213482][T15372] do_syscall_64+0x12c/0x370 [ 632.218106][T15372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.224023][T15372] [ 632.226364][T15372] write to 0xffff888107d46048 of 4 bytes by task 15372 on cpu 0: [ 632.234096][T15372] set_nlink+0x99/0xb0 [ 632.238200][T15372] kernfs_iop_permission+0x1e2/0x220 [ 632.243514][T15372] inode_permission+0x31f/0x3b0 [ 632.248490][T15372] link_path_walk+0x779/0xe30 [ 632.253194][T15372] path_openat+0x1c6/0x2050 [ 632.257724][T15372] do_file_open+0x16c/0x290 [ 632.262266][T15372] do_sys_openat2+0x94/0x130 [ 632.266884][T15372] __x64_sys_openat+0xf2/0x120 [ 632.271718][T15372] x64_sys_call+0x1e39/0x3020 [ 632.276422][T15372] do_syscall_64+0x12c/0x370 [ 632.281026][T15372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.286949][T15372] [ 632.289287][T15372] value changed: 0x00000009 -> 0x00000008 [ 632.295013][T15372] [ 632.297350][T15372] Reported by Kernel Concurrency Sanitizer on: [ 632.303513][T15372] CPU: 0 UID: 0 PID: 15372 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 632.312466][T15372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 632.322565][T15372] ================================================================== [ 632.366984][T17463] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.3662: Allocating blocks 465-513 which overlap fs metadata [ 632.406561][T17463] EXT4-fs (loop2): Remounting filesystem read-only [ 632.437932][T17462] EXT4-fs (loop2): pa ffff888107e0ce00: logic 256, phys. 369, len 9 [ 632.546485][T15202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.206114][T16822] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.476031][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!