last executing test programs: 6m42.339591118s ago: executing program 3 (id=6386): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000003500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000034c0)={&(0x7f0000001340)={0x128c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe000}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x504a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x1198, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x594, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xbfc, 0x3, "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"}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x128c}, 0x1, 0x0, 0x0, 0x4810}, 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x8, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0)=0x12, &(0x7f0000000700)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xcb}, 0x38) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@can_newroute={0x34, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "df5f604cd91b224d"}, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6m42.134910342s ago: executing program 3 (id=6390): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@srh={0x2f, 0x0, 0x4, 0x0, 0x3, 0x28, 0x2}], "13d86558da0a7f6b"}}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x2c, 0xef, &(0x7f0000000100)="910c3fd9a7ef6bc2d6f2323935a17454a251949b679f5020e2af1e33089aab3be6446fa52fc89760c4ae6c88", &(0x7f00000004c0)=""/239, 0x0, 0x0, 0xa2, 0x98, &(0x7f0000000780)="45612b6c8528647286ce931415b98115927467a14d6738a4b8e75f17cf194076106438a3b0d2dac9b0c678da82015920bf92e2d33999ac11fc0d000c8b09bf4db2f52bc3a2ab23a10b1d9e4454b91bebe7bdb476df9483fdc49bf82e8916ff3d42de9816b37aeb1ddc1191d1bee0712fdeb85d7a9fa48645ce952933c1ca9c7e89fb8b413659a21dba04d40ad8632de9855d87c2a8d871fcf04aacc8701c197c8a3b", &(0x7f0000000840)="217befedc63e11787b6f0a23a28d5c919f31f88cf7f70487a0e62e0130ab13e26be26676ee19f29d13de28c2349b4b93989044f1296c6642a8ebcd1f94193dcaee9124a0df475d8da164ffda34ad48fa8831da74b41417d19c05af50ba4ca45a8023c1f8974e71ff538b5738189054475e811282f0ec0fb7d281a07eb420feff721dc1fdd3cb52348a1cffedb11c12b1884533d2bbcdf01a", 0x4, 0x0, 0x6}, 0x50) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000980)={0x2, 0x80, 0xff, 0x2, 0x2, 0x7, 0x0, 0x1, 0x1, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x101, 0x7, 0x9, 0x2, 0x80000000, 0x5, 0x5, 0x0, 0x344, 0x0, 0x8}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = dup2(r2, r2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f00000001c0)) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) socket$inet6(0xa, 0x0, 0xff) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) unshare(0x22020400) fcntl$lock(r5, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r4}, 0x4) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x505, &(0x7f0000001f40)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x0) fdatasync(r7) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 6m40.465030107s ago: executing program 3 (id=6398): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@srh={0x2f, 0x0, 0x4, 0x0, 0x3, 0x28, 0x2}], "13d86558da0a7f6b"}}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x2c, 0xef, &(0x7f0000000100)="910c3fd9a7ef6bc2d6f2323935a17454a251949b679f5020e2af1e33089aab3be6446fa52fc89760c4ae6c88", &(0x7f00000004c0)=""/239, 0x0, 0x0, 0xa2, 0x98, &(0x7f0000000780)="45612b6c8528647286ce931415b98115927467a14d6738a4b8e75f17cf194076106438a3b0d2dac9b0c678da82015920bf92e2d33999ac11fc0d000c8b09bf4db2f52bc3a2ab23a10b1d9e4454b91bebe7bdb476df9483fdc49bf82e8916ff3d42de9816b37aeb1ddc1191d1bee0712fdeb85d7a9fa48645ce952933c1ca9c7e89fb8b413659a21dba04d40ad8632de9855d87c2a8d871fcf04aacc8701c197c8a3b", &(0x7f0000000840)="217befedc63e11787b6f0a23a28d5c919f31f88cf7f70487a0e62e0130ab13e26be26676ee19f29d13de28c2349b4b93989044f1296c6642a8ebcd1f94193dcaee9124a0df475d8da164ffda34ad48fa8831da74b41417d19c05af50ba4ca45a8023c1f8974e71ff538b5738189054475e811282f0ec0fb7d281a07eb420feff721dc1fdd3cb52348a1cffedb11c12b1884533d2bbcdf01a", 0x4, 0x0, 0x6}, 0x50) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000980)={0x2, 0x80, 0xff, 0x2, 0x2, 0x7, 0x0, 0x1, 0x1, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x101, 0x7, 0x9, 0x2, 0x80000000, 0x5, 0x5, 0x0, 0x344, 0x0, 0x8}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = dup2(r2, r2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f00000001c0)) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000180)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) socket$inet6(0xa, 0x0, 0xff) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) unshare(0x22020400) fcntl$lock(r5, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x505, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwKWJISHKBjAxGXNn7p1O50dnWmpr288nGTjnzr3n3O/cc2bOvaf3BrBrjaf/JBF/i4j7EXGgnl25wnj9vyePlmafPlqajUq1euGXpLbe4zSfybfbl2UmChGFj5KWAusWbt66MlMul25EpZafWrz6/tTCzVsvzl+duVy6XLo2fe7cmdOnzr48/dKKsiNiuGdQHepL43o89uH1o0dev3jvzdnB1sKa4+gq3+rXSs9VI/9su3iuubwdYH9TOmmP6/am7gx9G86aYTHt/0vl4xe3eoeATVOtVqtD3d+uVFvdaVsCbFtJbPUeAFsj/6FPz3/zV31JcTOGH1vu4fn6CdDjR0vV2zE4+6QR/2AUsnWKLee3qVXGTGsyHhHvVn77NH1Fv9chAACewbfns2FgEi3jv0Icblrv79kcymhE/CMiDkbEPyPiUET8K2LFuiskEdVV6j/UuqBR/1fZLELhwXpj60c6/nslm9vKX1m9+SqjA1luf0Q+YC6dzD6TiSgOXZovl051KX9Pj/qbx3/pK60/Hwtm+/FgsGWwOTezOLO+aNs9vBMxNtgafzKYHrh8GieJiCMRMbaGckeb0vMvfH60kWk5regdf021w5TehsyfVT+LeL5+/CvRiH9kxSRi0jw/WWibn5wajnLp5FTaCk523Mnvf7j7Vrf6e8b/9U+tm7x29psLzx54Jj3+e5vaf+Tzt8vxjyYRSWO+diGiOrC2Ou7++HGt3PET7e+tt/3vSd6ppfP+9cHM4uKNUxF7kjfal08vb5vn8/XT+CdOdO7/B7Nt0k/i3xGRNuL/RMR/IwbyfT8WEccjokNoDd+9+v/3ur3XZ/v/06Txz3X8/kuydlA7/svz9X0m8vLTJQNXjt1/OtZ54j6L/8Dqx/9MLTWRLen8/Zes+Irod0834CMEAACAv7xC1P72vzDZSBcKk5P1a0CHYm+hfH1h8X8RcW2ufo/AaBQLl+bLpfyC3GgUk/z652hTfrolfzq7bvzJwEgtPzl7vTy31cHDLrev1ueTtv6f+nmN13mBbWgH3YcGrFGv/n/43ibtCLDp/P7D7tXU/7s92aLiL2VgZ/L7D7tXp/5/O75Y9d4F3xmw/VX1ZdjVVu//vZ+3CWxfg/F2I1277bnj3bbATtT999+ZAexgvW+SH1rzvf/LiepQ57eGo8MTA4bXVUXPxEiHurYkkY6sNrDAYkT0t/LIeqrIh4Ddn/BQWFuBQ9H+1kCstlXS+TkOEVHpulX6qfTcn8uH+238pRvJ0/qDMnsEmD8TZaObzZfL/bTY5+Hukvi93+bnfB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhR/ggAAP//EXfPWQ==") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x0) fdatasync(r8) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 6m39.140988655s ago: executing program 3 (id=6406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x2f0}, 0x1, 0x0, 0x0, 0x200400e4}, 0x20000000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x40, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x1000, 0x20da, 0x3, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x1000414, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYRES8], 0x1, 0x801, &(0x7f0000001540)="$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") fcntl$setsig(r2, 0xa, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = syz_ublk_setup_io_uring(0x2869, &(0x7f00000002c0)={0x0, 0xd747, 0x1000, 0x0, 0x1a0}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0x9, 0x80000000, 0x80000001}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r6) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r4) inotify_init1(0x0) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x18, {0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000062fef5a48541aa8e776110c6ddddad000000000018c458dc8900000010011000012200"/48], 0x30}, 0x0) utimes(&(0x7f0000000000)='./file1\x00', 0x0) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) 6m39.057135917s ago: executing program 3 (id=6407): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000050000000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r1, &(0x7f0000000080), 0x0}, 0x20) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x7, 0xff, 0x9, 0x9, 0x0, 0x100000000004, 0x68ad3ee8825332e5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x56, 0xe75}, 0x10444, 0x4, 0x4a38, 0x4, 0xa61, 0x1000, 0x9, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x2003, r0, 0x1) perf_event_open(&(0x7f0000000800)={0x4, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000000008, 0x0, 0x5, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x0, 0xff7fffffffffffff, r2, 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)="02042700ea0e0300000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824", 0x2c}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e412", 0x28}], 0x2}, 0x40000) ppoll(0x0, 0x0, &(0x7f0000001240), 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) sendto$inet(r4, &(0x7f0000000240)="6bb41d", 0x3, 0xc0400c0, 0x0, 0x0) sendto(r4, &(0x7f0000001e00)="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", 0xc9d, 0x2000c010, 0x0, 0x0) 6m38.756939963s ago: executing program 3 (id=6408): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRESOCT=r0, @ANYRES16=r0], 0x50) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)="4843bf0f69e444eac0c1789709a51d63990a1ae1e664da438d20d4422ef75a2d8db0580ab30f58b018867061647b006c004cf24e00059742f71efe460bc5bd7c5ae5e920cfb2a4ecdd66f10fed837d1955c045236b76d852a3404a4693191d25a60f9a8298f5fe397c78", 0x6a}], 0x1, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010101, @remote}}}], 0x38}}], 0x1, 0x800) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4e0e7b2abb8edb28, @perf_config_ext={0xc8d, 0x9}, 0x11eca8, 0x201224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000100), 0x0) r4 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x1ec5, 0x40, 0x8000003, 0x184}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000002c0), 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) ioctl$XFS_IOC_OPEN_BY_HANDLE(r4, 0xc038586b, 0x0) close(0x3) r7 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r7, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(r7, &(0x7f00000001c0)=""/105, 0x69, 0x8001, &(0x7f0000000240)={r8, r9+60000000}) io_setup(0x1, 0x0) 6m38.756505453s ago: executing program 32 (id=6408): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRESOCT=r0, @ANYRES16=r0], 0x50) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)="4843bf0f69e444eac0c1789709a51d63990a1ae1e664da438d20d4422ef75a2d8db0580ab30f58b018867061647b006c004cf24e00059742f71efe460bc5bd7c5ae5e920cfb2a4ecdd66f10fed837d1955c045236b76d852a3404a4693191d25a60f9a8298f5fe397c78", 0x6a}], 0x1, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010101, @remote}}}], 0x38}}], 0x1, 0x800) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4e0e7b2abb8edb28, @perf_config_ext={0xc8d, 0x9}, 0x11eca8, 0x201224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000100), 0x0) r4 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x1ec5, 0x40, 0x8000003, 0x184}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000002c0), 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) ioctl$XFS_IOC_OPEN_BY_HANDLE(r4, 0xc038586b, 0x0) close(0x3) r7 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r7, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(r7, &(0x7f00000001c0)=""/105, 0x69, 0x8001, &(0x7f0000000240)={r8, r9+60000000}) io_setup(0x1, 0x0) 4m28.691893453s ago: executing program 5 (id=7220): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRESOCT=r0, @ANYRES16=r0], 0x50) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)="4843bf0f69e444eac0c1789709a51d63990a1ae1e664da438d20d4422ef75a2d8db0580ab30f58b018867061647b006c004cf24e00059742f71efe460bc5bd7c5ae5e920cfb2a4ecdd66f10fed837d1955c045236b76d852a3404a4693191d25a60f9a8298f5fe397c78", 0x6a}], 0x1, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010101, @remote}}}], 0x38}}], 0x1, 0x800) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4e0e7b2abb8edb28, @perf_config_ext={0xc8d, 0x9}, 0x11eca8, 0x201224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000100), 0x0) r4 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x1ec5, 0x40, 0x8000003, 0x184}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000002c0), 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) ioctl$XFS_IOC_OPEN_BY_HANDLE(r4, 0xc038586b, 0x0) close(0x3) r7 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r7, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(r7, &(0x7f00000001c0)=""/105, 0x69, 0x8001, &(0x7f0000000240)={r8, r9+60000000}) io_submit(0x0, 0x0, 0x0) 4m28.521547836s ago: executing program 5 (id=7221): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4000004, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0x4, 0xa}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x1c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, 0x0) accept$unix(r2, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x200, 0x501, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2285}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) mmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x11, 0x110, r3, 0x8e2c7000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f"}, 0xd) 4m26.204896725s ago: executing program 5 (id=7232): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@srh={0x2f, 0x0, 0x4, 0x0, 0x3, 0x28, 0x2}], "13d86558da0a7f6b"}}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000980)={0x2, 0x80, 0xff, 0x2, 0x2, 0x7, 0x0, 0x1, 0x1, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x101, 0x7, 0x9, 0x2, 0x80000000, 0x5, 0x5, 0x0, 0x344, 0x0, 0x8}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = dup2(r2, r2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f00000001c0)) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) socket$inet6(0xa, 0x0, 0xff) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) unshare(0x22020400) fcntl$lock(r5, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x505, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwKWJISHKBjAxGXNn7p1O50dnWmpr288nGTjnzr3n3O/cc2bOvaf3BrBrjaf/JBF/i4j7EXGgnl25wnj9vyePlmafPlqajUq1euGXpLbe4zSfybfbl2UmChGFj5KWAusWbt66MlMul25EpZafWrz6/tTCzVsvzl+duVy6XLo2fe7cmdOnzr48/dKKsiNiuGdQHepL43o89uH1o0dev3jvzdnB1sKa4+gq3+rXSs9VI/9su3iuubwdYH9TOmmP6/am7gx9G86aYTHt/0vl4xe3eoeATVOtVqtD3d+uVFvdaVsCbFtJbPUeAFsj/6FPz3/zV31JcTOGH1vu4fn6CdDjR0vV2zE4+6QR/2AUsnWKLee3qVXGTGsyHhHvVn77NH1Fv9chAACewbfns2FgEi3jv0Icblrv79kcymhE/CMiDkbEPyPiUET8K2LFuiskEdVV6j/UuqBR/1fZLELhwXpj60c6/nslm9vKX1m9+SqjA1luf0Q+YC6dzD6TiSgOXZovl051KX9Pj/qbx3/pK60/Hwtm+/FgsGWwOTezOLO+aNs9vBMxNtgafzKYHrh8GieJiCMRMbaGckeb0vMvfH60kWk5regdf021w5TehsyfVT+LeL5+/CvRiH9kxSRi0jw/WWibn5wajnLp5FTaCk523Mnvf7j7Vrf6e8b/9U+tm7x29psLzx54Jj3+e5vaf+Tzt8vxjyYRSWO+diGiOrC2Ou7++HGt3PET7e+tt/3vSd6ppfP+9cHM4uKNUxF7kjfal08vb5vn8/XT+CdOdO7/B7Nt0k/i3xGRNuL/RMR/IwbyfT8WEccjokNoDd+9+v/3ur3XZ/v/06Txz3X8/kuydlA7/svz9X0m8vLTJQNXjt1/OtZ54j6L/8Dqx/9MLTWRLen8/Zes+Irod0834CMEAACAv7xC1P72vzDZSBcKk5P1a0CHYm+hfH1h8X8RcW2ufo/AaBQLl+bLpfyC3GgUk/z652hTfrolfzq7bvzJwEgtPzl7vTy31cHDLrev1ueTtv6f+nmN13mBbWgH3YcGrFGv/n/43ibtCLDp/P7D7tXU/7s92aLiL2VgZ/L7D7tXp/5/O75Y9d4F3xmw/VX1ZdjVVu//vZ+3CWxfg/F2I1277bnj3bbATtT999+ZAexgvW+SH1rzvf/LiepQ57eGo8MTA4bXVUXPxEiHurYkkY6sNrDAYkT0t/LIeqrIh4Ddn/BQWFuBQ9H+1kCstlXS+TkOEVHpulX6qfTcn8uH+238pRvJ0/qDMnsEmD8TZaObzZfL/bTY5+Hukvi93+bnfB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhR/ggAAP//EXfPWQ==") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x0) fdatasync(r8) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4m24.706638697s ago: executing program 5 (id=7238): futex(&(0x7f0000000080), 0x3, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x2, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{}]}, 0x3, 0x5fe, &(0x7f0000000d40)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$eJzs3U1vG1UXAODTvM1H85I6C4QECHFVNrCxkvAHGqFWQkQChRoVFkhTMgEr0zjyWEGuEHTHlt9RsWSHhPgDWcCeHbtsWHZRdVDsuPloCIvUHgrPI0X3xPce+4zHM7qb0dm//d3drc2yuZn1Yup6iqmImHoYsTiIhi4djlODeCaOux9vNW7/9tqHH3/y3ura2o31lG6u3np7JaV09fWfvvzq+2s/9/7/0Q9Xf5yNvcVP9/9Y+X3vpb2X9x/f+qJdpnaZtju9lKU7nU4vu1PkaaNdbjVT+qDIszJP7e0y756Y3yw6Ozv9lG1vLMzvdPOyTNl2P23l/dTrpF63n7LPs/Z2ajabaWE++DutB+vr2eownjtn3fVJFcQYdLur2cE1PPvUTOtBLQUBALW66P5/5pnu/6fD/n+Sju//+bc62P/PHF6/J9n/AwAAAAAAAAAAAADA8+BhVTWqqmqMxmr0kPDh/zWXx5g9df5P/dVdH+N17MG9uYji293Wbms4DudXN6MdReSxFI14dHBbGBnGN99du7GUBhZj4e43g/xrv0S0/ncyfzkasXh2/vIwPz3Jj4NxOuaP569EI148O3/lzPyZePONY/nNaMSvn0UnitgY3N6O8r9eTumd99dO5c8O1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw39BMI6/GsO/9biviSuwe9u9vHi1YPNkff5j/pL/+UjTi0dn9+ZfO7M9/OV65XO+xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBI2b+3lRVF3p1UMOr5P3hlZhT8ddal4fL7p6auxARrLop86lm94eOqqsZV6txkT+VFgumI885gdfgrufhnvRAR56yZjYj6v41/YlDXHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqc9T0u+5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqFPZv7eVFUXeHWNQ9zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8T/4MAAD//yeQEY0=") lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, 0x0, r2, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x1, &(0x7f00000003c0)={[{@gid={'gid', 0x3d, r1}}], [{@euid_eq={'euid', 0x3d, r2}}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) open_by_handle_at(r3, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850) 4m24.405148393s ago: executing program 5 (id=7241): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000018) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00 \x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000000000000100000008000100", @ANYRES32, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3], 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000840)={[{@barrier}, {@journal_async_commit}, {@norecovery}, {@noinit_itable}, {@jqfmt_vfsv0}, {@data_err_abort}, {@usrjquota}, {@nobarrier}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@data_err_abort}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='check=relaxed,unhide\x00uid=', @ANYRESHEX, @ANYRESHEX, @ANYRESHEX=0x0, @ANYBLOB="41757466382c686964652c757466382c6f76657272696465726f636b7065726d2c63727566742c6d61703d6e6f726d616c2c6e6f636f6d70726573732c636865636b3d72ed6c617865642c7375626a5f726f6c653d757466382c00"], 0x2, 0x6b8, &(0x7f0000000180)="$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") creat(&(0x7f0000000080)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendto$inet6(r1, &(0x7f00000004c0)="99b9b558", 0x4, 0x2000c851, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x2}, 0x8) 4m23.60442006s ago: executing program 33 (id=7245): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001d40)=@raw={'raw\x00', 0x64, 0x3, 0x310, 0x0, 0xffffffad, 0x190, 0x0, 0x190, 0x278, 0x268, 0x268, 0x278, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x178, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x7fffffff, 0x400, 'syz0\x00', {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x0, 0x111, 0x4b4, 0x158, 0x700, 0x3b8, 0x278, 0x278, 0x3b8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [0x0, 0xff000000], 'vlan0\x00', 'geneve1\x00', {0xff}, {}, 0x84, 0x0, 0x0, 0x4}, 0x0, 0x130, 0x158, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x4, 0x1], [0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfe]}}, @common=@unspec=@time={{0x38}, {0xf546, 0x401, 0x515, 0xb7da, 0x10000, 0x0, 0x3}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x0, 0x5}, {0x4, 0x6, 0x2}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0x0, 0xff, 0xff000000], [0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'veth0_to_team\x00', {}, {}, 0x32}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth1_to_batadv\x00', {0xe, 0xfffffffffffffffa, 0xb, 0x8, 0x1fc, 0x7, 0x2, 0x0, 0x80}, {0x8}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xf, 0x0, 0x46c7, 0x0, 'syz0\x00', 'syz0\x00', {0x800}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x5a, &(0x7f0000000980)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x4a9544369168e754, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) sendto$inet(0xffffffffffffffff, &(0x7f0000000bc0)="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", 0x7f0, 0x81, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000000000000100000008000100", @ANYRES32, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3], 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000840)={[{@barrier}, {@journal_async_commit}, {@norecovery}, {@noinit_itable}, {@jqfmt_vfsv0}, {@data_err_abort}, {@usrjquota}, {@nobarrier}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@data_err_abort}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='check=relaxed,unhide\x00uid=', @ANYRESHEX, @ANYRESHEX, @ANYRESHEX=0x0, @ANYBLOB="41757466382c686964652c757466382c6f76657272696465726f636b7065726d2c63727566742c6d61703d6e6f726d616c2c6e6f636f6d70726573732c636865636b3d72ed6c617865642c7375626a5f726f6c653d757466382c00"], 0x2, 0x6b8, &(0x7f0000000180)="$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") creat(&(0x7f0000000080)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendto$inet6(r1, &(0x7f00000004c0)="99b9b558", 0x4, 0x2000c851, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x2}, 0x8) 2.932648367s ago: executing program 1 (id=8571): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@srh={0x2f, 0x0, 0x4, 0x0, 0x3, 0x28, 0x2}], "13d86558da0a7f6b"}}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x14, 0xef, &(0x7f0000000100)="910c3fd9a7ef6bc2d6f2323935a17454a251949b", &(0x7f00000004c0)=""/239, 0x0, 0x0, 0x9d, 0x8f, &(0x7f0000000780)="45612b6c8528647286ce931415b98115927467a14d6738a4b8e75f17cf194076106438a3b0d2dac9b0c678da82015920bf92e2d33999ac11fc0d000c8b09bf4db2f52bc3a2ab23a10b1d9e4454b91bebe7bdb476df9483fdc49bf82e8916ff3d42de9816b37aeb1ddc1191d1bee0712fdeb85d7a9fa48645ce952933c1ca9c7e89fb8b413659a21dba04d40ad8632de9855d87c2a8d871fcf04aacc870", &(0x7f0000000840)="217befedc63e11787b6f0a23a28d5c919f31f88cf7f70487a0e62e0130ab13e26be26676ee19f29d13de28c2349b4b93989044f1296c6642a8ebcd1f94193dcaee9124a0df475d8da164ffda34ad48fa8831da74b41417d19c05af50ba4ca45a8023c1f8974e71ff538b5738189054475e811282f0ec0fb7d281a07eb420feff721dc1fdd3cb52348a1cffedb11c12", 0x4, 0x0, 0x6}, 0x50) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = dup2(r2, r2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f00000001c0)) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) fdatasync(r5) 2.594983454s ago: executing program 1 (id=8575): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020400000a0000000000008000000000030006002b0000000200000400400000000000000000000002000100000000000000fb0200000000030005003200000002004e247f0000010000000000000000"], 0x50}, 0x1, 0x7}, 0x0) get_mempolicy(0x0, 0x0, 0x9b, &(0x7f0000ffc000/0x1000)=nil, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2c, 0x5, 0x1, 0x0, 0x0, 0x9, 0x87e64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x4, @perf_bp={0x0}, 0x11a0d, 0x0, 0x43a1bd76, 0x3, 0x9, 0x5, 0x3, 0x0, 0x200000, 0x0, 0x200c}, r1, 0x0, 0xffffffffffffffff, 0x9) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @void}, 0x10) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000bd", @ANYRES16, @ANYBLOB="390726bd700000dcdf250100000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000001100)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x209, &(0x7f0000000840)="$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") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x27, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) 2.511000526s ago: executing program 6 (id=8578): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00'}) listen(r0, 0x9a84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000bc0)="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", 0x1be) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/77, 0x4d) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000002180), &(0x7f0000000100)=0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x8, 0x9, 0xa, @vifc_lcl_ifindex=r6, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000104feffffff0002000000000000", @ANYRES32=0x0, @ANYBLOB="2702012000000a0000000000", @ANYRES32=0x0, @ANYBLOB="1800128008000100677470000c00028008000700ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c010000190001000000000000000000ac1414aa0000000040000000000000000000000000000000000000000000000000000003000000000200002008000000c473ebb6c97ef7547b2e169d945a2047fdc8bcde7e9d05c4c2da6d815bee", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084000500ac1414aa000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00fcffffff000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000005030000000000000700000000000000"], 0x13c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100085060000cea49b0300000000000037f2d9d33badece3f084b137b157", @ANYRES32=r7, @ANYBLOB="01030000020008000100020000"], 0x3c}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) socket$netlink(0x10, 0x3, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000002400), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) 2.509925106s ago: executing program 1 (id=8579): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x30, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local}}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0xef, &(0x7f0000000100), &(0x7f00000004c0)=""/239, 0x0, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000000840)="217befedc63e11787b6f0a23a28d5c919f31f88cf7f70487a0e62e0130ab13e26be26676ee19f29d13de28c2349b4b93989044f1296c6642a8ebcd1f94193dcaee9124a0df475d8da164ffda", 0x4, 0x0, 0x6}, 0x50) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000980)={0x2, 0x80, 0xff, 0x2, 0x2, 0x7, 0x0, 0x1, 0x1, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x101, 0x7, 0x9, 0x2, 0x80000000, 0x5, 0x5, 0x0, 0x344, 0x0, 0x8}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = dup2(r2, r2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f00000001c0)) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) unshare(0x22020400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.152949944s ago: executing program 2 (id=8581): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x30, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local}}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0xef, &(0x7f0000000100), &(0x7f00000004c0)=""/239, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x50) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000980)={0x2, 0x80, 0xff, 0x2, 0x2, 0x7, 0x0, 0x1, 0x1, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x101, 0x7, 0x9, 0x2, 0x80000000, 0x5, 0x5, 0x0, 0x344, 0x0, 0x8}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = dup2(r2, r2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f00000001c0)) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) unshare(0x22020400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.975969817s ago: executing program 4 (id=8582): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) getuid() r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x629}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c081}, 0x4000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4c8, &(0x7f0000000fc0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x102) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000000c0)=""/110) socket$netlink(0x10, 0x3, 0x8000000004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x200000f) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 1.947290648s ago: executing program 1 (id=8583): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4008080) socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain) pread64(r2, &(0x7f00000024c0)=""/209, 0xd1, 0xa) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000300)={[{@nodots}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@nodots}, {@dots}, {@nodots}, {@fat=@dos1xfloppy}, {@fat=@discard}, {@dots}, {@dots}, {@nodots}, {@fat=@usefree}, {@fat=@quiet}, {@fat=@errors_continue}, {@fat=@sys_immutable}, {@dots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x5}}, {@fat=@nocase}, {@fat=@time_offset={'time_offset', 0x3d, 0xf6}}, {@nodots}]}, 0x1, 0x224, &(0x7f0000000840)="$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") 1.776084231s ago: executing program 4 (id=8584): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x4, 0x1000, 0x8, 0x1, 0xa84, 0xe0, 0xa, 0x3}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 1.758858902s ago: executing program 4 (id=8585): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@srh={0x2f, 0x0, 0x4, 0x0, 0x3, 0x28, 0x2}], "13d86558da0a7f6b"}}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x14, 0xef, &(0x7f0000000100)="910c3fd9a7ef6bc2d6f2323935a17454a251949b", &(0x7f00000004c0)=""/239, 0x0, 0x0, 0x9d, 0x8f, &(0x7f0000000780)="45612b6c8528647286ce931415b98115927467a14d6738a4b8e75f17cf194076106438a3b0d2dac9b0c678da82015920bf92e2d33999ac11fc0d000c8b09bf4db2f52bc3a2ab23a10b1d9e4454b91bebe7bdb476df9483fdc49bf82e8916ff3d42de9816b37aeb1ddc1191d1bee0712fdeb85d7a9fa48645ce952933c1ca9c7e89fb8b413659a21dba04d40ad8632de9855d87c2a8d871fcf04aacc870", &(0x7f0000000840)="217befedc63e11787b6f0a23a28d5c919f31f88cf7f70487a0e62e0130ab13e26be26676ee19f29d13de28c2349b4b93989044f1296c6642a8ebcd1f94193dcaee9124a0df475d8da164ffda34ad48fa8831da74b41417d19c05af50ba4ca45a8023c1f8974e71ff538b5738189054475e811282f0ec0fb7d281a07eb420feff721dc1fdd3cb52348a1cffedb11c12", 0x4, 0x0, 0x6}, 0x50) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = dup2(r2, r2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f00000001c0)) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) fdatasync(r5) 1.475821138s ago: executing program 2 (id=8590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc000000000000000000000000000000000000001000000002002000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea4400000000000000000000000000000000000000000000000001000000000000000900000000000000020020ffffffffffffff000000000000010000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$NILFS_IOCTL_GET_SUINFO(r2, 0x80186e84, &(0x7f0000000100)={&(0x7f0000000040)=[{0x5, 0x6}, {0x855, 0x8}, {0x1, 0x9}, {0xdfb, 0x14000000}], 0x4, 0x10, 0x7, 0x101}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d09", 0x19}], 0x2) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x40000) 1.473530348s ago: executing program 6 (id=8591): syz_open_procfs(0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x24108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x9, 0x3}, 0x1041c1, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8001, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x20008, &(0x7f0000000440)='\x14st\v\x88O\xc2\x9d\xf8\x12\xd6\x15\xe0\xe2\xbd-!\xef\x83b5\xb3\x00\x00\x00\x00\x80\x00\x00\x01\xf8\"\xf71\xe4\xd8K\x83\x96\x85\xa4\x81\xf7\xce\x9d\x06\xc8\xdb\xd1,A\xc6q\xfd\r\xc9?\xadt\xaa\x8b\xc1\'\xdbH\x9en\x8b\x82\x9f\xeb\xbc\xae \fP\xfa\x17\x1e\xbd\xe7nn\x18u@@>\xd6\xafnjSG\xff\x9a\x9ee\xb2\xbbM\xb4\x1b\xe2\x060CW\x85\x9d\x9a\xf6d\x89\x9dl\xe4\xda\x9d\xb7\x85\xaeK}\x19\xf8\x19A\x15\xdb\xd7H\x8f \xa5\xe9B\xc4.\xb3\xe0\xab\x1dE\x05\xaf\x99\xac\xc7\xa3\xa9:&\xe3\xba\x90\x8e\x975\xf2\x17}!R\n\x01}Z\xba]\x83\x1eB\x9d\t\xcdM-\xa3\xff\xa4\xc0\xa5\n\xfd\xbd\xb5\xc0\xd2\xa3\xcd]\xb2\x91\xd2\xe1\x8ak\xe3\x15\xc8[\x00\xc2\x16d\x1f\x92H\x86\xd1\x04\x9e\xc8\x98\x97\xabz4\xb1\xda~;\x95@\x8d\xe69\xe5\xdf%h') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) 1.37714093s ago: executing program 2 (id=8592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@fwd={0x7}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @const={0x7, 0x0, 0x0, 0xa, 0x1}]}}, 0x0, 0x3e, 0x0, 0x0, 0x2, 0x10000}, 0x28) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x190) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r4) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x8000844) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r6, 0x121, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004081) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a410100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) writev(r0, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000100)={'gretap0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a40000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fc0000000000000000000000000000010800074000000000100006800c0003"], 0xa4}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000002d, &(0x7f0000000380), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa4, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xb6, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x8010, r1, 0x0) 1.338544021s ago: executing program 4 (id=8593): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x30, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local}}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0xef, &(0x7f0000000100), &(0x7f00000004c0)=""/239, 0x0, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000000840)="217befedc63e11787b6f0a23a28d5c919f31f88cf7f70487a0e62e0130ab13e26be26676ee19f29d13de28c2349b4b93989044f1296c6642a8ebcd1f94193dcaee9124a0df475d8da164ffda", 0x4, 0x0, 0x6}, 0x50) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000980)={0x2, 0x80, 0xff, 0x2, 0x2, 0x7, 0x0, 0x1, 0x1, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x101, 0x7, 0x9, 0x2, 0x80000000, 0x5, 0x5, 0x0, 0x344, 0x0, 0x8}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = dup2(r2, r2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f00000001c0)) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) unshare(0x22020400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.312907221s ago: executing program 2 (id=8594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') write$UHID_INPUT(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r1, r4, 0x25, 0x0, @val=@perf_event={0x8001}}, 0x18) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x500, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x29, 0x0, 0x64, 0x0, 0x1, 0x11, 0x6, @local, @multicast1}}}}}}, 0x0) 1.269575862s ago: executing program 2 (id=8596): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x84742, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r2, 0x211d9572}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000300)={r3}, &(0x7f00000003c0)=0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x2010, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r5, &(0x7f0000000100)=@other={'unlock', ' ', 'none'}, 0xc) write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x10428f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 919.281689ms ago: executing program 1 (id=8601): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00'}) listen(r0, 0x9a84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000bc0)="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", 0x1be) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000002180), &(0x7f0000000100)=0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x8, 0x9, 0xa, @vifc_lcl_ifindex=r7, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000104feffffff0002000000000000", @ANYRES32=0x0, @ANYBLOB="2702012000000a0000000000", @ANYRES32=0x0, @ANYBLOB="1800128008000100677470000c00028008000700ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c010000190001000000000000000000ac1414aa0000000040000000000000000000000000000000000000000000000000000003000000000200002008000000c473ebb6c97ef7547b2e169d945a2047fdc8bcde7e9d05c4c2da6d815bee", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084000500ac1414aa000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00fcffffff000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000005030000000000000700000000000000"], 0x13c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100085060000cea49b0300000000000037f2d9d33badece3f084b137b157", @ANYRES32=r8, @ANYBLOB="01030000020008000100020000"], 0x3c}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) socket$netlink(0x10, 0x3, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000002400), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) 744.021173ms ago: executing program 4 (id=8604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@fwd={0x7}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @const={0x7, 0x0, 0x0, 0xa, 0x1}]}}, 0x0, 0x3e, 0x0, 0x0, 0x2, 0x10000}, 0x28) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x190) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r4) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x8000844) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r6, 0x121, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004081) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a410100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) writev(r0, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000100)={'gretap0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a40000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fc0000000000000000000000000000010800074000000000100006800c0003"], 0xa4}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000002d, &(0x7f0000000380), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa4, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xb6, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x8010, r1, 0x0) 659.212295ms ago: executing program 4 (id=8605): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="03e900"/18, @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x2000c810}, 0x80) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) perf_event_open(&(0x7f0000000a40)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x430c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x9}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x8fc, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r5, &(0x7f00000094c0)=[{{&(0x7f00000007c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000880)="f3", 0x1}], 0x1}}, {{&(0x7f00000011c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000001240)="1f", 0x1}], 0x1, &(0x7f0000004400)=ANY=[], 0x10}}], 0x2, 0x8014) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="9c84c08feba4abcf84035cef"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000940)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f0000000500)=ANY=[@ANYBLOB="200734dddea7044cfa759d6b186db92985093395db5913c8ff0b0e47fd10964f805ca5fad6a9a283102c62c2ae801fbbdc398776210e4550bc10b984c3a151bf5e04981785cb51406c0c2e648322cb61d48521cd", @ANYRES16=0x0, @ANYBLOB="010025bd7000fbdbdf250f00000088fe0180080003000100000008000100", @ANYRES32=r4, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4044040}, 0x884) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000004c0)='./file0\x00', 0x1000c00, &(0x7f0000000b00)=ANY=[], 0x0, 0x263, &(0x7f0000000580)="$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") openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x40100) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x64, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) write$sndseq(r6, &(0x7f0000000080)=[{0x32, 0x8, 0x0, 0xfd, @tick, {}, {0xe}, @connect}], 0x1c) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 621.201496ms ago: executing program 6 (id=8606): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') write$UHID_INPUT(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r1, r4, 0x25, 0x0, @val=@perf_event={0x8001}}, 0x18) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x500, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x29, 0x0, 0x64, 0x0, 0x1, 0x11, 0x6, @local, @multicast1}}}}}}, 0x0) 564.938077ms ago: executing program 6 (id=8607): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000001, &(0x7f0000000340)={[{@nojournal_checksum}, {@user_xattr}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}], [{@subj_type={'subj_type', 0x3d, 'team0\x00'}}, {@uid_gt}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syz0\x00'}}, {@flag='posixacl'}, {@euid_lt}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xb) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df715", 0x35, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000000000000005100020207825cf0000000000bfa104000700000000000000f8ffffffb702010008000000b70300000000bc008500"/82], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f00000017c0)=@urb_type_control={0x2, {}, 0x2000006, 0xc1, &(0x7f00000002c0)={0x9a, 0x8, 0x9, 0x7}, 0x8, 0x1ec, 0xa, 0x0, 0x313, 0x3, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001800)=@filter={'filter\x00', 0x4, 0x4, 0x5b0, 0xffffffff, 0x0, 0x0, 0x230, 0xfeffffff, 0xffffffff, 0x4e0, 0x4e0, 0x4e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x208, 0x230, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x2}}, @common=@rt={{0x138}, {0x47b, [0x9, 0xa3a], 0x420d, 0x4, 0x1, [@empty, @private1, @private2, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @empty, @mcast1, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private2, @empty, @private1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback], 0xc}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x130, 0x178, 0x0, {}, [@common=@srh={{0x30}, {0x89, 0x8, 0x5, 0x7, 0x1, 0x80, 0x200}}, @common=@inet=@hashlimit1={{0x58}, {'sit0\x00', {0x52, 0x3, 0xfffffffc, 0x7, 0x80000001, 0x9, 0x5d, 0x8, 0x20}, {0x9}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x10}}}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, [0xff, 0x0, 0xffffffff, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x5e, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x8, 0x1, [0x3, 0x5b, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x15e, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) 418.80458ms ago: executing program 0 (id=8608): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8], 0x66) sched_getparam(0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001280), 0xffffffff, r0}, 0x38) keyctl$clear(0x5, 0xfffffffffffffffe) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x44c, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x438, 0x1, [@m_police={0x434, 0x2, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0xd, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x1, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x365, 0x7, 0x20, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x8, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x7, 0x5, 0xc56, 0xe, 0x9f31, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x4, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xf]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x4280000, 0x0, 0x0, 0x10000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="18", 0x1, 0x80, &(0x7f00000000c0)={0x11, 0xe, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000) 409.51658ms ago: executing program 6 (id=8609): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x327e, 0x1c080, 0xa, 0x20002f7}) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000031000/0x2000)=nil, 0x2000) socket(0x29, 0x5, 0x0) add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0xfff8000000000001, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r2, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', r2, 0x0, 0x0, 0x0, 0x0, 0xd, @private2, @loopback, 0x40, 0x7800, 0xfffffffc}}) ioctl$TCSETSW2(0xffffffffffffffff, 0x5435, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xf, 0x17, 0xf6, 0x7, 0x0, 0x3, 0x10120, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x3, @perf_config_ext={0x9b, 0x2}, 0x400, 0xc, 0xac1c, 0x1, 0x77, 0x9, 0xff, 0x0, 0x2, 0x0, 0x6}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendfile(r0, r3, 0x0, 0xfffa83) 343.972982ms ago: executing program 0 (id=8610): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x4, 0x1000, 0x8, 0x1, 0xa84, 0xe0, 0xa, 0x3}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 341.979262ms ago: executing program 2 (id=8611): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4008080) socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain) pread64(r2, &(0x7f00000024c0)=""/209, 0xd1, 0xa) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000300)={[{@nodots}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@nodots}, {@dots}, {@nodots}, {@fat=@dos1xfloppy}, {@fat=@discard}, {@dots}, {@dots}, {@nodots}, {@fat=@usefree}, {@fat=@quiet}, {@fat=@errors_continue}, {@fat=@sys_immutable}, {@dots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x5}}, {@fat=@nocase}, {@fat=@time_offset={'time_offset', 0x3d, 0xf6}}, {@nodots}]}, 0x1, 0x224, &(0x7f0000000840)="$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") 318.512082ms ago: executing program 0 (id=8612): socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@fwd={0x7}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @const={0x7, 0x0, 0x0, 0xa, 0x1}]}}, 0x0, 0x3e, 0x0, 0x0, 0x2, 0x10000}, 0x28) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x190) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x8000844) 293.740973ms ago: executing program 0 (id=8613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc0000000000000000000000000000000000000010000000020020000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea4400000000000000000000000000000000000000000000000001000000000000000900000000000000020020ffffffffffffff000000000000010000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$NILFS_IOCTL_GET_SUINFO(r2, 0x80186e84, &(0x7f0000000100)={&(0x7f0000000040)=[{0x5, 0x6}, {0x855, 0x8}, {0x1, 0x9}, {0xdfb, 0x14000000}], 0x4, 0x10, 0x7, 0x101}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d09", 0x19}], 0x2) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x40000) 206.051155ms ago: executing program 6 (id=8614): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x30, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local}}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0xef, &(0x7f0000000100), &(0x7f00000004c0)=""/239, 0x0, 0x0, 0x0, 0x72, 0x0, &(0x7f0000000840)="217befedc63e11787b6f0a23a28d5c919f31f88cf7f70487a0e62e0130ab13e26be26676ee19f29d13de28c2349b4b93989044f1296c6642a8ebcd1f94193dcaee9124a0df475d8da164ffda34ad48fa8831da74b41417d19c05af50ba4ca45a8023c1f8974e71ff538b5738189054475e81", 0x4, 0x0, 0x6}, 0x50) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000980)={0x2, 0x80, 0xff, 0x2, 0x2, 0x7, 0x0, 0x1, 0x1, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x101, 0x7, 0x9, 0x2, 0x80000000, 0x5, 0x5, 0x0, 0x344, 0x0, 0x8}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = dup2(r2, r2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f00000001c0)) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) unshare(0x22020400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 205.304875ms ago: executing program 0 (id=8615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@fwd={0x7}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @const={0x7, 0x0, 0x0, 0xa, 0x1}]}}, 0x0, 0x3e, 0x0, 0x0, 0x2, 0x10000}, 0x28) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x190) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r4) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x8000844) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r6, 0x121, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004081) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a410100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) writev(r0, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000100)={'gretap0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a40000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fc0000000000000000000000000000010800074000000000100006800c0003"], 0xa4}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000002d, &(0x7f0000000380), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa4, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xb6, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x8010, r1, 0x0) 86.569357ms ago: executing program 0 (id=8616): syz_open_procfs(0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x24108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x9, 0x3}, 0x1041c1, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8001, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x20008, &(0x7f0000000440)='\x14st\v\x88O\xc2\x9d\xf8\x12\xd6\x15\xe0\xe2\xbd-!\xef\x83b5\xb3\x00\x00\x00\x00\x80\x00\x00\x01\xf8\"\xf71\xe4\xd8K\x83\x96\x85\xa4\x81\xf7\xce\x9d\x06\xc8\xdb\xd1,A\xc6q\xfd\r\xc9?\xadt\xaa\x8b\xc1\'\xdbH\x9en\x8b\x82\x9f\xeb\xbc\xae \fP\xfa\x17\x1e\xbd\xe7nn\x18u@@>\xd6\xafnjSG\xff\x9a\x9ee\xb2\xbbM\xb4\x1b\xe2\x060CW\x85\x9d\x9a\xf6d\x89\x9dl\xe4\xda\x9d\xb7\x85\xaeK}\x19\xf8\x19A\x15\xdb\xd7H\x8f \xa5\xe9B\xc4.\xb3\xe0\xab\x1dE\x05\xaf\x99\xac\xc7\xa3\xa9:&\xe3\xba\x90\x8e\x975\xf2\x17}!R\n\x01}Z\xba]\x83\x1eB\x9d\t\xcdM-\xa3\xff\xa4\xc0\xa5\n\xfd\xbd\xb5\xc0\xd2\xa3\xcd]\xb2\x91\xd2\xe1\x8ak\xe3\x15\xc8[\x00\xc2\x16d\x1f\x92H\x86\xd1\x04\x9e\xc8\x98\x97\xabz4\xb1\xda~;\x95@\x8d\xe69\xe5\xdf%h') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) 0s ago: executing program 1 (id=8617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') write$UHID_INPUT(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r1, r4, 0x25, 0x0, @val=@perf_event={0x8001}}, 0x18) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x500, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x29, 0x0, 0x64, 0x0, 0x1, 0x11, 0x6, @local, @multicast1}}}}}}, 0x0) kernel console output (not intermixed with test programs): 1143.763745][T31242] EXT4-fs (loop1): free_blocks=0 [ 1143.778177][T31242] EXT4-fs (loop1): dirty_blocks=180 [ 1143.795513][T31242] EXT4-fs (loop1): Block reservation details [ 1143.814293][T31242] EXT4-fs (loop1): i_reserved_data_blocks=180 [ 1143.836913][ T310] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 176 with max blocks 4 with error 28 [ 1143.887889][T24777] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1144.011909][T31249] loop1: detected capacity change from 0 to 512 [ 1144.046186][T31249] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1144.061601][T31249] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.8066: iget: bad i_size value: 38620345925642 [ 1144.087230][T31249] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1144.087880][T31249] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.8066: couldn't read orphan inode 15 (err -117) [ 1144.097203][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1144.097290][ C0] EXT4-fs (loop1): initial error at time 1783351367: ext4_orphan_get:1399: inode 15 [ 1144.097469][ C0] EXT4-fs (loop1): last error at time 1783351367: ext4_orphan_get:1399: inode 15 [ 1144.139890][T31249] loop1: lost filesystem error report for type 5 error -117 [ 1144.158717][T31249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1144.213296][T31255] loop4: detected capacity change from 0 to 512 [ 1144.266120][T31255] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1144.288806][T31255] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.8067: iget: bad i_size value: 38620345925642 [ 1144.306579][T31261] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.8066: bg 0: block 5: invalid block bitmap [ 1144.306908][T31255] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1144.321258][T31255] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.8067: couldn't read orphan inode 15 (err -117) [ 1144.330930][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1144.330982][ C1] EXT4-fs (loop4): initial error at time 1783351367: ext4_orphan_get:1399: inode 15 [ 1144.331134][ C1] EXT4-fs (loop4): last error at time 1783351367: ext4_orphan_get:1399: inode 15 [ 1144.370154][T31255] loop4: lost filesystem error report for type 5 error -117 [ 1144.370412][T31261] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 104 with error 28 [ 1144.376127][T31255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1144.390193][T31261] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1144.390193][T31261] [ 1144.390223][T31261] EXT4-fs (loop1): Total free blocks count 0 [ 1144.390237][T31261] EXT4-fs (loop1): Free/Dirty block details [ 1144.390319][T31261] EXT4-fs (loop1): free_blocks=0 [ 1144.390333][T31261] EXT4-fs (loop1): dirty_blocks=108 [ 1144.390347][T31261] EXT4-fs (loop1): Block reservation details [ 1144.390383][T31261] EXT4-fs (loop1): i_reserved_data_blocks=108 [ 1144.480693][ T310] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 104 with max blocks 4 with error 28 [ 1144.582049][T24777] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1144.733384][T31269] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8070'. [ 1144.743705][T31269] tipc: Enabling of bearer rejected, failed to enable media [ 1144.982673][T31291] sctp: [Deprecated]: syz.1.8076 (pid 31291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1144.982673][T31291] Use struct sctp_sack_info instead [ 1145.060928][T26140] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 1145.174196][T26140] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1145.187366][T26140] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1145.187366][T26140] [ 1145.201000][T26140] EXT4-fs (loop4): Total free blocks count 0 [ 1145.207443][T26140] EXT4-fs (loop4): Free/Dirty block details [ 1145.214992][T26140] EXT4-fs (loop4): free_blocks=0 [ 1145.220307][T26140] EXT4-fs (loop4): dirty_blocks=10020 [ 1145.226457][T26140] EXT4-fs (loop4): Block reservation details [ 1145.233726][T26140] EXT4-fs (loop4): i_reserved_data_blocks=10020 [ 1145.250906][T26140] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 1145.323527][T31255] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz.4.8067: data will be lost [ 1145.765904][T22812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.818928][T31316] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8085'. [ 1146.860462][T31316] tipc: Enabling of bearer rejected, failed to enable media [ 1147.246711][T31320] loop2: detected capacity change from 0 to 256 [ 1147.420636][T31329] loop6: detected capacity change from 0 to 8192 [ 1147.466837][T31329] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1147.506763][T31334] sctp: [Deprecated]: syz.2.8091 (pid 31334) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1147.506763][T31334] Use struct sctp_sack_info instead [ 1147.587438][T31338] sctp: [Deprecated]: syz.6.8092 (pid 31338) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1147.587438][T31338] Use struct sctp_sack_info instead [ 1148.218233][T31343] sctp: [Deprecated]: syz.1.8094 (pid 31343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1148.218233][T31343] Use struct sctp_sack_info instead [ 1148.291571][T31348] tipc: Enabling of bearer rejected, failed to enable media [ 1148.388718][T31355] loop0: detected capacity change from 0 to 512 [ 1148.396719][T31355] ext4: Unknown parameter 'subj_type' [ 1148.549673][T31358] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1148.557083][T31358] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1148.564463][T31358] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1148.579053][T31355] xt_hashlimit: max too large, truncated to 1048576 [ 1148.705469][T31361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8099'. [ 1148.777442][T31361] tipc: Enabling of bearer rejected, failed to enable media [ 1148.854520][T31367] loop0: detected capacity change from 0 to 256 [ 1149.843999][T31375] loop2: detected capacity change from 0 to 128 [ 1149.850689][T31375] msdos: Bad value for 'gid' [ 1149.855352][T31375] msdos: Bad value for 'gid' [ 1149.864441][T31375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8102'. [ 1149.874103][T31375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8102'. [ 1149.883403][T31375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8102'. [ 1149.893071][T31375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8102'. [ 1150.156332][T31379] hub 8-0:1.0: USB hub found [ 1150.162354][T31379] hub 8-0:1.0: 8 ports detected [ 1150.189666][T31381] FAULT_INJECTION: forcing a failure. [ 1150.189666][T31381] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.202384][T31381] CPU: 0 UID: 0 PID: 31381 Comm: syz.2.8105 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1150.202417][T31381] Tainted: [W]=WARN [ 1150.202423][T31381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1150.202435][T31381] Call Trace: [ 1150.202442][T31381] [ 1150.202451][T31381] __dump_stack+0x1d/0x30 [ 1150.202477][T31381] dump_stack_lvl+0x95/0xd0 [ 1150.202568][T31381] dump_stack+0x15/0x1b [ 1150.202585][T31381] should_fail_ex+0x25e/0x270 [ 1150.202609][T31381] should_failslab+0x8c/0xb0 [ 1150.202710][T31381] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 1150.202731][T31381] ? do_getname+0x2e/0x1c0 [ 1150.202754][T31381] ? do_getname+0x2e/0x1c0 [ 1150.202780][T31381] do_getname+0x2e/0x1c0 [ 1150.202802][T31381] getname_uflags+0x23/0x30 [ 1150.202884][T31381] __se_sys_name_to_handle_at+0xef/0x660 [ 1150.202902][T31381] ? mutex_unlock+0x4e/0x90 [ 1150.202951][T31381] ? ksys_write+0x194/0x1a0 [ 1150.202973][T31381] __x64_sys_name_to_handle_at+0x67/0x80 [ 1150.203008][T31381] x64_sys_call+0x2818/0x3020 [ 1150.203091][T31381] do_syscall_64+0x136/0x3c0 [ 1150.203197][T31381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.203216][T31381] RIP: 0033:0x7f0ca15cde59 [ 1150.203231][T31381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.203291][T31381] RSP: 002b:00007f0ca0027028 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 1150.203314][T31381] RAX: ffffffffffffffda RBX: 00007f0ca1855fa0 RCX: 00007f0ca15cde59 [ 1150.203378][T31381] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1150.203393][T31381] RBP: 00007f0ca0027090 R08: 0000000000001600 R09: 0000000000000000 [ 1150.203461][T31381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1150.203473][T31381] R13: 00007f0ca1856038 R14: 00007f0ca1855fa0 R15: 00007ffdbaa22508 [ 1150.203491][T31381] [ 1150.273001][ T28] audit: type=1400 audit(1783351373.510:1981): avc: denied { map } for pid=31382 comm="syz.2.8106" path="socket:[106787]" dev="sockfs" ino=106787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1150.423384][T31386] hub 8-0:1.0: USB hub found [ 1150.491008][T31386] hub 8-0:1.0: 8 ports detected [ 1150.510513][ T28] audit: type=1400 audit(1783351373.510:1982): avc: denied { setopt } for pid=31382 comm="syz.2.8106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1150.552671][ T28] audit: type=1400 audit(1783351373.800:1983): avc: denied { name_bind } for pid=31387 comm="syz.1.8108" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1150.647565][T31398] loop1: detected capacity change from 0 to 512 [ 1150.656546][T31398] ext4: Unknown parameter 'subj_type' [ 1150.750003][T31400] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8112'. [ 1150.793616][T31398] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1150.811860][T31398] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1150.827222][T31398] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1150.838536][T31400] tipc: Enabling of bearer rejected, failed to enable media [ 1150.849075][T31398] xt_hashlimit: max too large, truncated to 1048576 [ 1150.928424][T31414] sctp: [Deprecated]: syz.4.8117 (pid 31414) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1150.928424][T31414] Use struct sctp_sack_info instead [ 1150.984609][T31401] loop6: detected capacity change from 0 to 256 [ 1151.019070][T31418] loop0: detected capacity change from 0 to 128 [ 1151.026251][T31418] msdos: Bad value for 'gid' [ 1151.030936][T31418] msdos: Bad value for 'gid' [ 1151.044485][T31418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8116'. [ 1151.061580][T31418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8116'. [ 1151.072510][T31418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8116'. [ 1151.082445][T31418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8116'. [ 1151.702185][T31433] loop1: detected capacity change from 0 to 512 [ 1151.774254][T31433] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1151.795473][T31433] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.8121: iget: bad i_size value: 38620345925642 [ 1151.808993][T31433] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1151.812714][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1151.828551][ C1] EXT4-fs (loop1): initial error at time 1783351375: ext4_orphan_get:1399: inode 15 [ 1151.838142][ C1] EXT4-fs (loop1): last error at time 1783351375: ext4_orphan_get:1399: inode 15 [ 1151.881604][T31433] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.8121: couldn't read orphan inode 15 (err -117) [ 1151.893678][T31433] loop1: lost filesystem error report for type 5 error -117 [ 1151.894349][T31433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1152.012651][T31433] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.8121: bg 0: block 5: invalid block bitmap [ 1152.129665][T31449] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8127'. [ 1152.139464][T31449] tipc: Enabling of bearer rejected, failed to enable media [ 1152.185141][T31452] loop4: detected capacity change from 0 to 512 [ 1152.194029][T31452] ext4: Unknown parameter 'subj_type' [ 1152.328996][T31452] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1152.337851][T31452] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1152.346812][T31452] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1152.355772][T31452] xt_hashlimit: max too large, truncated to 1048576 [ 1152.427791][T31433] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 232 with error 28 [ 1152.445764][T31433] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1152.445764][T31433] [ 1152.475387][T31433] EXT4-fs (loop1): Total free blocks count 0 [ 1152.487090][T31433] EXT4-fs (loop1): Free/Dirty block details [ 1152.523698][T31433] EXT4-fs (loop1): free_blocks=0 [ 1152.536980][T31433] EXT4-fs (loop1): dirty_blocks=248 [ 1152.548696][T31433] EXT4-fs (loop1): Block reservation details [ 1152.561179][T31433] EXT4-fs (loop1): i_reserved_data_blocks=248 [ 1152.577131][T31463] loop2: detected capacity change from 0 to 256 [ 1152.653592][T31469] sctp: [Deprecated]: syz.2.8132 (pid 31469) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1152.653592][T31469] Use struct sctp_sack_info instead [ 1152.983826][T25104] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 232 with max blocks 16 with error 28 [ 1153.151605][T24777] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1153.415325][T31478] netlink: 'syz.6.8134': attribute type 6 has an invalid length. [ 1153.562916][T31482] sctp: [Deprecated]: syz.2.8136 (pid 31482) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1153.562916][T31482] Use struct sctp_sack_info instead [ 1153.992080][T31486] loop1: detected capacity change from 0 to 8192 [ 1154.016329][T31486] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1154.048014][T31493] loop4: detected capacity change from 0 to 512 [ 1154.055421][T31493] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1154.123205][T31493] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.8140: iget: bad i_size value: 38620345925642 [ 1154.142534][T31493] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1154.143369][T31493] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.8140: couldn't read orphan inode 15 (err -117) [ 1154.152855][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1154.152960][ C0] EXT4-fs (loop4): initial error at time 1783351377: ext4_orphan_get:1399: inode 15 [ 1154.153095][ C0] EXT4-fs (loop4): last error at time 1783351377: ext4_orphan_get:1399: inode 15 [ 1154.265123][T31493] loop4: lost filesystem error report for type 5 error -117 [ 1154.265773][T31493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1154.355480][T31506] hub 8-0:1.0: USB hub found [ 1154.359432][T31502] loop6: detected capacity change from 0 to 512 [ 1154.360469][T31506] hub 8-0:1.0: 8 ports detected [ 1154.392316][T31502] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1154.406932][T31502] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.8144: iget: bad i_size value: 38620345925642 [ 1154.420029][T31502] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1154.447953][T31502] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.8144: couldn't read orphan inode 15 (err -117) [ 1154.457894][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1154.457940][T31512] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.8140: bg 0: block 5: invalid block bitmap [ 1154.458147][ C1] EXT4-fs (loop6): initial error at time 1783351377: ext4_orphan_get:1399: inode 15 [ 1154.458234][ C1] EXT4-fs (loop6): last error at time 1783351377: ext4_orphan_get:1399: inode 15 [ 1154.465650][T31512] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1154.473069][T31502] loop6: lost filesystem error report for type 5 error -117 [ 1154.483203][T31512] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1154.483203][T31512] [ 1154.499725][T31502] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1154.532208][T31512] EXT4-fs (loop4): Total free blocks count 0 [ 1154.561368][T31512] EXT4-fs (loop4): Free/Dirty block details [ 1154.567517][T31512] EXT4-fs (loop4): free_blocks=0 [ 1154.572632][T31512] EXT4-fs (loop4): dirty_blocks=2980 [ 1154.578875][T31512] EXT4-fs (loop4): Block reservation details [ 1154.584955][T31512] EXT4-fs (loop4): i_reserved_data_blocks=2980 [ 1154.810473][T31517] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.8144: bg 0: block 5: invalid block bitmap [ 1154.829808][T31517] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1154.843750][T31517] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1154.843750][T31517] [ 1154.904839][T31517] EXT4-fs (loop6): Total free blocks count 0 [ 1154.912282][T31517] EXT4-fs (loop6): Free/Dirty block details [ 1154.919815][T31517] EXT4-fs (loop6): free_blocks=0 [ 1154.925129][T31517] EXT4-fs (loop6): dirty_blocks=7996 [ 1154.931143][T31517] EXT4-fs (loop6): Block reservation details [ 1154.937929][T31517] EXT4-fs (loop6): i_reserved_data_blocks=7996 [ 1154.946258][T10995] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 928 with error 28 [ 1154.967984][T22341] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1154.986206][T31520] __nla_validate_parse: 2 callbacks suppressed [ 1154.986251][T31520] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8148'. [ 1155.007301][T10995] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 1155.100513][T28179] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1155.124948][T31520] tipc: Enabling of bearer rejected, failed to enable media [ 1155.185821][T31528] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8152'. [ 1155.199373][T31528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8152'. [ 1155.217312][T31528] loop2: detected capacity change from 0 to 512 [ 1155.260561][T31528] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1155.325860][T31536] sctp: [Deprecated]: syz.0.8153 (pid 31536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1155.325860][T31536] Use struct sctp_sack_info instead [ 1155.356611][T31528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1155.373000][T31528] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1155.428210][T22812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.461463][T31539] loop4: detected capacity change from 0 to 8192 [ 1155.470686][T31539] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1155.611689][T31542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8155'. [ 1155.633953][T31542] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8155'. [ 1155.748849][T31550] loop4: detected capacity change from 0 to 128 [ 1155.756730][T31550] msdos: Bad value for 'gid' [ 1155.761367][T31550] msdos: Bad value for 'gid' [ 1155.776274][T31550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8157'. [ 1155.788924][T31550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8157'. [ 1155.799513][T31550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8157'. [ 1155.809961][T31550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8157'. [ 1155.819802][T31550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8157'. [ 1156.368166][T31563] loop1: detected capacity change from 0 to 512 [ 1156.389630][T31563] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1156.417078][T31563] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1156.426265][T31560] loop6: detected capacity change from 0 to 512 [ 1156.430775][T31563] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1156.433390][T31560] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1156.451964][T31563] Quota error (device loop1): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 1156.467023][T31563] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1156.484638][T31563] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 1156.492915][T31563] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.8161: bg 0: block 15: invalid block bitmap [ 1156.508649][T31563] loop1: lost filesystem error report for type 5 error -117 [ 1156.508951][T31560] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.8160: iget: bad i_size value: 38620345925642 [ 1156.522724][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1156.522800][ C1] EXT4-fs (loop1): initial error at time 1783351379: ext4_validate_block_bitmap:432 [ 1156.522951][ C1] EXT4-fs (loop1): last error at time 1783351379: ext4_validate_block_bitmap:432 [ 1156.639940][T31563] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1156.662767][T31563] loop1: lost filesystem error report for type 5 error -117 [ 1156.663076][T31560] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1156.671711][T31563] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.8161: data will be lost [ 1156.705458][T31560] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.8160: couldn't read orphan inode 15 (err -117) [ 1156.717997][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1156.718041][ C1] EXT4-fs (loop6): initial error at time 1783351379: ext4_orphan_get:1399: inode 15 [ 1156.718138][ C1] EXT4-fs (loop6): last error at time 1783351379: ext4_orphan_get:1399: inode 15 [ 1156.720457][T31563] EXT4-fs (loop1): 1 truncate cleaned up [ 1156.748919][T31560] loop6: lost filesystem error report for type 5 error -117 [ 1156.759712][T31563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1156.912160][T31575] tipc: Enabling of bearer rejected, failed to enable media [ 1156.933689][T31560] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1156.957834][T31577] loop0: detected capacity change from 0 to 512 [ 1157.051965][T31577] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1157.115905][T31577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1157.129011][T31577] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1157.156635][T31589] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.8160: bg 0: block 5: invalid block bitmap [ 1157.194158][T23475] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.208989][T31589] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1157.222273][T31589] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1157.222273][T31589] [ 1157.232221][T31589] EXT4-fs (loop6): Total free blocks count 0 [ 1157.238500][T31589] EXT4-fs (loop6): Free/Dirty block details [ 1157.244786][T31589] EXT4-fs (loop6): free_blocks=0 [ 1157.249855][T31589] EXT4-fs (loop6): dirty_blocks=4168 [ 1157.263085][T31589] EXT4-fs (loop6): Block reservation details [ 1157.275013][T31596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.287808][T31589] EXT4-fs (loop6): i_reserved_data_blocks=4168 [ 1157.305831][T31596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.352867][T25104] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 1157.398118][T28179] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1157.438809][T31585] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1157.456525][T31591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.475549][T31591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.516681][T31591] netlink: 'syz.4.8168': attribute type 10 has an invalid length. [ 1157.570958][T31591] team0: Device ipvlan0 failed to register rx_handler [ 1157.817197][T31607] sctp: [Deprecated]: syz.2.8173 (pid 31607) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1157.817197][T31607] Use struct sctp_sack_info instead [ 1158.025429][T31605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1158.035458][T31605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1158.046110][T31605] netlink: 'syz.0.8172': attribute type 10 has an invalid length. [ 1158.065320][T31605] team0: Device ipvlan0 failed to register rx_handler [ 1158.194011][T31616] FAULT_INJECTION: forcing a failure. [ 1158.194011][T31616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1158.207367][T31616] CPU: 1 UID: 0 PID: 31616 Comm: syz.2.8175 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1158.207398][T31616] Tainted: [W]=WARN [ 1158.207406][T31616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1158.207418][T31616] Call Trace: [ 1158.207426][T31616] [ 1158.207435][T31616] __dump_stack+0x1d/0x30 [ 1158.207488][T31616] dump_stack_lvl+0x95/0xd0 [ 1158.207510][T31616] dump_stack+0x15/0x1b [ 1158.207528][T31616] should_fail_ex+0x25e/0x270 [ 1158.207552][T31616] should_fail+0xb/0x20 [ 1158.207583][T31616] should_fail_usercopy+0x1a/0x20 [ 1158.207607][T31616] _copy_from_user+0x1c/0xb0 [ 1158.207680][T31616] proc_ioctl_default+0x43/0xa0 [ 1158.207702][T31616] usbdev_ioctl+0xe16/0x16a0 [ 1158.207720][T31616] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1158.207737][T31616] __se_sys_ioctl+0xce/0x140 [ 1158.207755][T31616] __x64_sys_ioctl+0x43/0x50 [ 1158.207809][T31616] x64_sys_call+0x1563/0x3020 [ 1158.207898][T31616] do_syscall_64+0x136/0x3c0 [ 1158.207930][T31616] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 1158.208025][T31616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.208044][T31616] RIP: 0033:0x7f0ca15cde59 [ 1158.208059][T31616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1158.208074][T31616] RSP: 002b:00007f0c9ffe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1158.208164][T31616] RAX: ffffffffffffffda RBX: 00007f0ca1856180 RCX: 00007f0ca15cde59 [ 1158.208177][T31616] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000006 [ 1158.208189][T31616] RBP: 00007f0c9ffe5090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.208200][T31616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.208212][T31616] R13: 00007f0ca1856218 R14: 00007f0ca1856180 R15: 00007ffdbaa22508 [ 1158.208290][T31616] [ 1158.956661][T31626] tipc: Enabling of bearer rejected, failed to enable media [ 1159.056659][T31637] set_capacity_and_notify: 1 callbacks suppressed [ 1159.056671][T31637] loop2: detected capacity change from 0 to 512 [ 1159.093162][T31637] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1159.125557][T31632] loop0: detected capacity change from 0 to 512 [ 1159.148665][T31637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1159.164905][T31632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1159.184527][T31637] ext4 filesystem being mounted at /442/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1159.201525][T31632] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.8181: iget: bad i_size value: 38620345925642 [ 1159.218009][T31632] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1159.218581][T31632] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.8181: couldn't read orphan inode 15 (err -117) [ 1159.229968][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1159.230201][ C1] EXT4-fs (loop0): initial error at time 1783351382: ext4_orphan_get:1399: inode 15 [ 1159.230365][ C1] EXT4-fs (loop0): last error at time 1783351382: ext4_orphan_get:1399: inode 15 [ 1159.283095][T31632] loop0: lost filesystem error report for type 5 error -117 [ 1159.283894][T31632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1159.308062][T22812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1159.360063][T31643] sctp: [Deprecated]: syz.2.8184 (pid 31643) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1159.360063][T31643] Use struct sctp_sack_info instead [ 1159.641049][T31646] loop4: detected capacity change from 0 to 512 [ 1159.713049][T24777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.113442][T10995] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:14: bg 0: block 5: invalid block bitmap [ 1160.127435][T10995] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1160.139894][T10995] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1160.139894][T10995] [ 1160.151291][T10995] EXT4-fs (loop0): Total free blocks count 0 [ 1160.157506][T10995] EXT4-fs (loop0): Free/Dirty block details [ 1160.163680][T10995] EXT4-fs (loop0): free_blocks=0 [ 1160.168757][T10995] EXT4-fs (loop0): dirty_blocks=16012 [ 1160.176722][T31660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.185242][T31660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.194485][T10995] EXT4-fs (loop0): Block reservation details [ 1160.200487][T10995] EXT4-fs (loop0): i_reserved_data_blocks=16012 [ 1160.225261][T31660] netlink: 'syz.2.8190': attribute type 10 has an invalid length. [ 1160.234879][T31660] team0: Device ipvlan0 failed to register rx_handler [ 1160.255992][T10995] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 1160.292677][T31632] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz.0.8181: data will be lost [ 1160.363950][T31668] __nla_validate_parse: 15 callbacks suppressed [ 1160.363978][T31668] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8192'. [ 1160.426923][T31668] tipc: Enabling of bearer rejected, failed to enable media [ 1160.486843][T31672] gre0 speed is unknown, defaulting to 1000 [ 1160.533217][T31672] xfrm0 speed is unknown, defaulting to 1000 [ 1161.408462][T31685] loop6: detected capacity change from 0 to 128 [ 1161.415568][T31685] msdos: Bad value for 'gid' [ 1161.420177][T31685] msdos: Bad value for 'gid' [ 1161.433340][T31685] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8196'. [ 1161.449374][T31685] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8196'. [ 1161.464028][T31685] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8196'. [ 1161.481828][T31685] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8196'. [ 1161.646553][T31687] loop4: detected capacity change from 0 to 512 [ 1161.765933][T31687] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1161.895812][T31690] sctp: [Deprecated]: syz.1.8199 (pid 31690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1161.895812][T31690] Use struct sctp_sack_info instead [ 1161.930401][T31687] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1161.939517][T31687] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1161.952249][T31687] Quota error (device loop4): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 1161.973886][ T28] audit: type=1400 audit(1783351385.230:1984): avc: denied { create } for pid=31692 comm="syz.6.8200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1162.022829][T31687] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1162.038597][T31694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8197'. [ 1162.047616][T31694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8197'. [ 1162.056772][T31694] netlink: 'syz.2.8197': attribute type 6 has an invalid length. [ 1162.086597][T31687] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 1162.144741][T31687] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.8198: bg 0: block 15: invalid block bitmap [ 1162.224127][T31687] loop4: lost filesystem error report for type 5 error -117 [ 1162.225115][T31687] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1162.241275][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1162.241298][ C0] EXT4-fs (loop4): initial error at time 1783351385: ext4_validate_block_bitmap:432 [ 1162.241347][ C0] EXT4-fs (loop4): last error at time 1783351385: ext4_validate_block_bitmap:432 [ 1162.376057][T31702] loop6: detected capacity change from 0 to 512 [ 1162.529770][T31702] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.8200: corrupted inode contents [ 1162.542441][T31702] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1162.542777][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1162.559718][ C0] EXT4-fs (loop6): initial error at time 1783351385: ext4_do_update_inode:5742: inode 16 [ 1162.569695][ C0] EXT4-fs (loop6): last error at time 1783351385: ext4_do_update_inode:5742: inode 16 [ 1162.585807][T31702] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #16: comm syz.6.8200: mark_inode_dirty error [ 1162.597947][T31702] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1162.599445][T31702] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.8200: corrupted inode contents [ 1162.623234][T31702] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1162.626047][T31702] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.8200: mark_inode_dirty error [ 1162.648407][T31702] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1162.649883][T31702] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.8200: corrupted inode contents [ 1162.673586][T31702] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1162.675158][T31702] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1162.693614][T31702] loop6: lost filesystem error report for type 5 error -117 [ 1162.696808][T31702] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.8200: corrupted inode contents [ 1162.716469][T31702] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1162.717510][T31702] EXT4-fs error (device loop6): ext4_truncate:4691: inode #16: comm syz.6.8200: mark_inode_dirty error [ 1162.738462][T31702] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1162.740132][T31702] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1162.758607][T31702] loop6: lost filesystem error report for type 5 error -117 [ 1162.761701][T31702] EXT4-fs (loop6): 1 truncate cleaned up [ 1162.780671][T31702] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1162.794160][T31702] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1162.841907][T10995] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1162.865336][T31687] loop4: lost filesystem error report for type 5 error -117 [ 1162.866199][T31687] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #16: comm syz.4.8198: data will be lost [ 1162.885612][T10995] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:14: Failed to release dquot type 1 [ 1163.132892][T31687] EXT4-fs (loop4): 1 truncate cleaned up [ 1163.141870][T31687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1163.584079][T31713] sctp: [Deprecated]: syz.1.8203 (pid 31713) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1163.584079][T31713] Use struct sctp_sack_info instead [ 1163.912999][T28179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.963065][T31718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.982288][T31718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.041953][T31722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8206'. [ 1164.059420][T31724] loop2: detected capacity change from 0 to 128 [ 1164.071197][T31722] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8206'. [ 1164.096306][ T28] audit: type=1400 audit(1783351387.350:1985): avc: denied { bind } for pid=31723 comm="syz.2.8207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1164.137842][ T28] audit: type=1400 audit(1783351387.390:1986): avc: denied { create } for pid=31723 comm="syz.2.8207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1164.191515][ T28] audit: type=1400 audit(1783351387.410:1987): avc: denied { map } for pid=31723 comm="syz.2.8207" path="socket:[108265]" dev="sockfs" ino=108265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1164.228084][ T28] audit: type=1400 audit(1783351387.410:1988): avc: denied { mmap_zero } for pid=31723 comm="syz.2.8207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1164.260031][ T28] audit: type=1400 audit(1783351387.420:1989): avc: denied { map } for pid=31723 comm="syz.2.8207" path="socket:[108264]" dev="sockfs" ino=108264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1164.314010][T31732] sctp: [Deprecated]: syz.2.8209 (pid 31732) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1164.314010][T31732] Use struct sctp_sack_info instead [ 1164.686955][T31745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8212'. [ 1164.815812][T31750] loop0: detected capacity change from 0 to 512 [ 1164.842504][T31750] ext4: Unknown parameter 'subj_type' [ 1165.129272][T31755] loop2: detected capacity change from 0 to 512 [ 1165.138962][T31755] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 1165.174016][T31750] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1165.200846][T31750] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1165.209134][T31750] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1165.225997][T31750] xt_hashlimit: max too large, truncated to 1048576 [ 1165.263638][T31761] netlink: 'syz.6.8214': attribute type 6 has an invalid length. [ 1165.502294][T31766] __nla_validate_parse: 3 callbacks suppressed [ 1165.509944][T31766] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8218'. [ 1165.619016][T31769] sctp: [Deprecated]: syz.0.8219 (pid 31769) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1165.619016][T31769] Use struct sctp_sack_info instead [ 1165.828449][T31766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.846718][T31766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.874587][T31766] netlink: 'syz.2.8218': attribute type 10 has an invalid length. [ 1165.928194][T31766] team0: Device ipvlan0 failed to register rx_handler [ 1166.258688][T22341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.357904][T31772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8220'. [ 1166.382941][T31772] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8220'. [ 1166.716664][T31785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8223'. [ 1166.756887][T31785] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8223'. [ 1167.002079][T31796] loop4: detected capacity change from 0 to 512 [ 1167.010838][T31796] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 1167.240352][T31804] loop0: detected capacity change from 0 to 256 [ 1167.247380][T31806] sctp: [Deprecated]: syz.1.8232 (pid 31806) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1167.247380][T31806] Use struct sctp_sack_info instead [ 1167.273901][T31802] tipc: Enabled bearer , priority 0 [ 1167.329337][T31802] syzkaller0: entered promiscuous mode [ 1167.335237][T31802] syzkaller0: entered allmulticast mode [ 1167.344604][T31802] tipc: Resetting bearer [ 1167.436117][T31801] tipc: Resetting bearer [ 1167.456395][T31801] tipc: Disabling bearer [ 1167.464327][T31810] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8233'. [ 1167.609734][T31827] loop4: detected capacity change from 0 to 512 [ 1167.618596][T31827] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 1167.768416][T31810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.778770][T31810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.790633][T31810] netlink: 'syz.6.8233': attribute type 10 has an invalid length. [ 1167.803525][T31810] team0: Device ipvlan0 failed to register rx_handler [ 1167.814868][T31835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8241'. [ 1167.823975][T31835] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8241'. [ 1168.035548][T31838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8239'. [ 1168.044575][T31838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8239'. [ 1168.053584][T31838] netlink: 'syz.0.8239': attribute type 6 has an invalid length. [ 1169.312299][T31847] loop6: detected capacity change from 0 to 256 [ 1169.505463][T31855] loop2: detected capacity change from 0 to 512 [ 1169.814478][T31872] loop4: detected capacity change from 0 to 512 [ 1169.825609][T31872] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 1169.988092][T31879] sctp: [Deprecated]: syz.6.8253 (pid 31879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1169.988092][T31879] Use struct sctp_sack_info instead [ 1170.260471][T31885] loop1: detected capacity change from 0 to 256 [ 1170.424756][T31891] hub 8-0:1.0: USB hub found [ 1170.429559][T31891] hub 8-0:1.0: 8 ports detected [ 1170.470776][T31892] loop4: detected capacity change from 0 to 512 [ 1170.491173][T31892] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1170.614587][T31892] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.8257: iget: bad i_size value: 38620345925642 [ 1170.689254][T31892] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1170.690350][T31892] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.8257: couldn't read orphan inode 15 (err -117) [ 1170.699795][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1170.699816][ C1] EXT4-fs (loop4): initial error at time 1783351393: ext4_orphan_get:1399: inode 15 [ 1170.699852][ C1] EXT4-fs (loop4): last error at time 1783351393: ext4_orphan_get:1399: inode 15 [ 1170.742964][T31898] FAULT_INJECTION: forcing a failure. [ 1170.742964][T31898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1170.958860][T31898] CPU: 1 UID: 0 PID: 31898 Comm: syz.1.8258 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1170.958890][T31898] Tainted: [W]=WARN [ 1170.958896][T31898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1170.958907][T31898] Call Trace: [ 1170.958914][T31898] [ 1170.958996][T31898] __dump_stack+0x1d/0x30 [ 1170.959023][T31898] dump_stack_lvl+0x95/0xd0 [ 1170.959045][T31898] dump_stack+0x15/0x1b [ 1170.959066][T31898] should_fail_ex+0x25e/0x270 [ 1170.959146][T31898] should_fail+0xb/0x20 [ 1170.959172][T31898] should_fail_usercopy+0x1a/0x20 [ 1170.959199][T31898] copy_fpstate_to_sigframe+0x61a/0x7b0 [ 1170.959244][T31898] ? copy_fpstate_to_sigframe+0xe5/0x7b0 [ 1170.959272][T31898] ? x86_task_fpu+0x36/0x60 [ 1170.959295][T31898] get_sigframe+0x34f/0x470 [ 1170.959378][T31898] ? _raw_spin_unlock_irq+0x9/0x30 [ 1170.959404][T31898] x64_setup_rt_frame+0xa7/0x4e0 [ 1170.959431][T31898] arch_do_signal_or_restart+0x27c/0x480 [ 1170.959470][T31898] exit_to_user_mode_loop+0x15d/0x8c0 [ 1170.959494][T31898] ? ksys_write+0x194/0x1a0 [ 1170.959518][T31898] do_syscall_64+0x23c/0x3c0 [ 1170.959548][T31898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.959583][T31898] RIP: 0033:0x7f9eb2a0e68e [ 1170.959600][T31898] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1170.959620][T31898] RSP: 002b:00007f9eb14a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1170.959646][T31898] RAX: 0000000000000001 RBX: 00007f9eb14a76c0 RCX: 00007f9eb2a0e68e [ 1170.959696][T31898] RDX: 0000000000000001 RSI: 00007f9eb14a7090 RDI: 0000000000000004 [ 1170.959709][T31898] RBP: 00007f9eb14a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.959721][T31898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.959733][T31898] R13: 00007f9eb2cd6038 R14: 00007f9eb2cd5fa0 R15: 00007ffe81b1dc08 [ 1170.959750][T31898] [ 1171.177973][T31892] loop4: lost filesystem error report for type 5 error -117 [ 1171.190362][T31903] SELinux: Context system_u:object_r:kmsg_device_t:s0 is not valid (left unmapped). [ 1171.223811][T31892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1171.248025][ T28] audit: type=1400 audit(1783351394.470:1990): avc: denied { relabelto } for pid=31901 comm="syz.1.8259" name="file0" dev="tmpfs" ino=2196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:kmsg_device_t:s0" [ 1171.309546][ T28] audit: type=1400 audit(1783351394.470:1991): avc: denied { associate } for pid=31901 comm="syz.1.8259" name="file0" dev="tmpfs" ino=2196 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:kmsg_device_t:s0" [ 1171.340759][T31892] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.8257: bg 0: block 5: invalid block bitmap [ 1171.355408][ T28] audit: type=1400 audit(1783351394.550:1992): avc: denied { read append } for pid=31901 comm="syz.1.8259" name="file0" dev="tmpfs" ino=2196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:kmsg_device_t:s0" [ 1171.383504][T31892] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 248 with error 28 [ 1171.396277][ T28] audit: type=1400 audit(1783351394.550:1993): avc: denied { open } for pid=31901 comm="syz.1.8259" path="/400/file0" dev="tmpfs" ino=2196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:kmsg_device_t:s0" [ 1171.435702][T31892] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1171.435702][T31892] [ 1171.446846][T31892] EXT4-fs (loop4): Total free blocks count 0 [ 1171.479454][T31892] EXT4-fs (loop4): Free/Dirty block details [ 1171.625675][ T28] audit: type=1400 audit(1783351394.860:1994): avc: denied { unlink } for pid=24777 comm="syz-executor" name="file0" dev="tmpfs" ino=2196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:kmsg_device_t:s0" [ 1171.657620][T31892] EXT4-fs (loop4): free_blocks=0 [ 1171.669656][T31892] EXT4-fs (loop4): dirty_blocks=268 [ 1171.744249][T31892] EXT4-fs (loop4): Block reservation details [ 1171.767336][T31892] EXT4-fs (loop4): i_reserved_data_blocks=268 [ 1171.822241][T31913] __nla_validate_parse: 1 callbacks suppressed [ 1171.822311][T31913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8261'. [ 1171.863368][T11003] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 248 with max blocks 20 with error 28 [ 1171.890808][T31915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8263'. [ 1171.912051][T22341] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1171.968390][T31913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8261'. [ 1172.058787][T31926] loop4: detected capacity change from 0 to 512 [ 1172.067796][T31926] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 1172.079957][T31926] loop4: detected capacity change from 0 to 164 [ 1172.088915][T31926] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1172.098213][T31926] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1172.109611][T31926] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1172.117608][T31926] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1172.126335][T31926] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1172.157541][T31913] netlink: 'syz.2.8261': attribute type 6 has an invalid length. [ 1172.352425][T31928] loop1: detected capacity change from 0 to 256 [ 1172.939337][ T28] audit: type=1400 audit(1783351396.170:1995): avc: denied { map } for pid=31939 comm="syz.1.8272" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=109682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1172.974720][ T28] audit: type=1400 audit(1783351396.170:1996): avc: denied { read write } for pid=31939 comm="syz.1.8272" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=109682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1173.035819][T31949] loop6: detected capacity change from 0 to 512 [ 1173.208299][T31951] loop2: detected capacity change from 0 to 512 [ 1173.218579][T31951] EXT4-fs: Ignoring removed bh option [ 1173.361507][T31951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1173.582959][T31951] ext4 filesystem being mounted at /462/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1173.623291][T22812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.863285][T31962] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 1173.884978][T31962] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1173.900487][T31962] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1173.910924][T31962] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1173.922762][T31962] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1173.931579][T31962] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1173.972036][T31960] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8278'. [ 1174.021985][T31972] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8283'. [ 1174.037872][T31972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8283'. [ 1174.077523][T31972] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1174.259235][T31972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1174.316448][T31972] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1174.467801][T31987] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8288'. [ 1174.596628][T22341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1174.650387][T31993] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8285'. [ 1174.661910][T31995] set_capacity_and_notify: 3 callbacks suppressed [ 1174.661928][T31995] loop4: detected capacity change from 0 to 512 [ 1174.675377][T31993] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8285'. [ 1174.692823][T31995] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1174.743286][T31987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.751838][T31987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.761657][T31987] netlink: 'syz.1.8288': attribute type 10 has an invalid length. [ 1174.777583][T31987] team0: Device ipvlan0 failed to register rx_handler [ 1174.809101][T31993] netlink: 'syz.6.8285': attribute type 6 has an invalid length. [ 1174.883155][T31995] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1174.892507][T31995] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1174.904799][T31995] Quota error (device loop4): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 1174.918171][T31995] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1174.933174][T31995] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 1174.941136][T31995] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.8289: bg 0: block 15: invalid block bitmap [ 1174.954484][T31995] loop4: lost filesystem error report for type 5 error -117 [ 1174.954654][T31995] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1174.970994][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1174.971020][ C0] EXT4-fs (loop4): initial error at time 1783351398: ext4_validate_block_bitmap:432 [ 1174.971052][ C0] EXT4-fs (loop4): last error at time 1783351398: ext4_validate_block_bitmap:432 [ 1174.996270][T31995] loop4: lost filesystem error report for type 5 error -117 [ 1174.997647][T31995] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #16: comm syz.4.8289: data will be lost [ 1175.019131][T31995] EXT4-fs (loop4): 1 truncate cleaned up [ 1175.025411][T31999] netlink: 'syz.2.8290': attribute type 1 has an invalid length. [ 1175.025459][T31995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1175.279976][T32006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1175.313013][T32006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.388732][T32009] loop1: detected capacity change from 0 to 512 [ 1175.399955][T32009] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 1175.422597][T32009] loop1: detected capacity change from 0 to 164 [ 1175.438201][T32009] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1175.449179][T32009] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1175.458393][T32010] loop0: detected capacity change from 0 to 1024 [ 1175.470514][T32009] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1175.471053][T32010] EXT4-fs: dax option not supported [ 1175.484625][T32009] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1175.494162][T32009] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1175.525911][T32007] tipc: Enabling of bearer rejected, failed to enable media [ 1175.697587][T32011] syzkaller0: entered promiscuous mode [ 1175.703182][T32011] syzkaller0: entered allmulticast mode [ 1175.724755][T32013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8295'. [ 1175.813820][T32021] loop1: detected capacity change from 0 to 512 [ 1175.834375][T32021] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1175.870069][T32027] tipc: Enabling of bearer rejected, failed to enable media [ 1175.922249][T32031] sctp: [Deprecated]: syz.2.8302 (pid 32031) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1175.922249][T32031] Use struct sctp_sack_info instead [ 1175.971321][T32021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1175.991868][T32021] ext4 filesystem being mounted at /410/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1176.104085][T24777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.253574][T32040] netlink: 'syz.6.8303': attribute type 6 has an invalid length. [ 1176.383830][T32039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.392520][T32039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.401489][T32039] netlink: 'syz.1.8304': attribute type 10 has an invalid length. [ 1176.410936][T32039] team0: Device ipvlan0 failed to register rx_handler [ 1176.699035][T32043] loop0: detected capacity change from 0 to 512 [ 1176.707885][T32043] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 1176.730067][T32043] loop0: detected capacity change from 0 to 164 [ 1176.743730][T32043] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1176.754218][T32043] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1176.763649][T32043] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1176.771926][T32043] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1176.780920][T32043] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1176.914719][T32047] __nla_validate_parse: 6 callbacks suppressed [ 1176.914749][T32047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8307'. [ 1177.004592][T32053] FAULT_INJECTION: forcing a failure. [ 1177.004592][T32053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1177.018453][T32053] CPU: 1 UID: 0 PID: 32053 Comm: syz.2.8310 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1177.018552][T32053] Tainted: [W]=WARN [ 1177.018560][T32053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1177.018572][T32053] Call Trace: [ 1177.018579][T32053] [ 1177.018587][T32053] __dump_stack+0x1d/0x30 [ 1177.018646][T32053] dump_stack_lvl+0x95/0xd0 [ 1177.018665][T32053] dump_stack+0x15/0x1b [ 1177.018687][T32053] should_fail_ex+0x25e/0x270 [ 1177.018717][T32053] should_fail+0xb/0x20 [ 1177.018743][T32053] should_fail_usercopy+0x1a/0x20 [ 1177.018848][T32053] _copy_to_user+0x20/0xa0 [ 1177.018931][T32053] simple_read_from_buffer+0xb5/0x130 [ 1177.018959][T32053] proc_fail_nth_read+0x10e/0x150 [ 1177.018982][T32053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1177.019004][T32053] vfs_read+0x18e/0x7c0 [ 1177.019020][T32053] ? __rcu_read_unlock+0x4e/0x70 [ 1177.019042][T32053] ? __fget_files+0x184/0x1c0 [ 1177.019068][T32053] ? mutex_lock+0x57/0x90 [ 1177.019170][T32053] ksys_read+0xdc/0x1a0 [ 1177.019271][T32053] __x64_sys_read+0x40/0x50 [ 1177.019292][T32053] x64_sys_call+0x2886/0x3020 [ 1177.019316][T32053] do_syscall_64+0x136/0x3c0 [ 1177.019350][T32053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.019427][T32053] RIP: 0033:0x7f0ca158e68e [ 1177.019452][T32053] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1177.019472][T32053] RSP: 002b:00007f0ca0026fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1177.019495][T32053] RAX: ffffffffffffffda RBX: 00007f0ca00276c0 RCX: 00007f0ca158e68e [ 1177.019538][T32053] RDX: 000000000000000f RSI: 00007f0ca00270a0 RDI: 0000000000000005 [ 1177.019554][T32053] RBP: 00007f0ca0027090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.019569][T32053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1177.019581][T32053] R13: 00007f0ca1856038 R14: 00007f0ca1855fa0 R15: 00007ffdbaa22508 [ 1177.019601][T32053] [ 1177.310661][T32060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8312'. [ 1177.325593][T32060] loop1: detected capacity change from 0 to 164 [ 1177.336404][T32060] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1177.354074][T32062] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8314'. [ 1177.359626][T32060] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1177.365749][T32062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8314'. [ 1177.392311][T32060] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1177.403703][T32060] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1177.406511][T32062] loop2: detected capacity change from 0 to 512 [ 1177.415164][T32060] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1177.424867][T32062] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1177.430341][T32060] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1177.460330][T32062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1177.483711][T32062] ext4 filesystem being mounted at /477/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1177.544919][T32069] loop6: detected capacity change from 0 to 512 [ 1177.555935][T32069] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 1177.556019][T22812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.596319][T32069] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1177.601517][ T28] audit: type=1400 audit(1783351400.850:1997): avc: denied { setopt } for pid=32070 comm="syz.2.8317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1177.627921][T32069] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1177.639635][T32069] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1177.648960][T32069] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1177.660250][T32069] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1177.750065][T22341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.768905][T32076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8318'. [ 1177.794020][T32080] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8321'. [ 1178.125345][T32080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.140908][T32080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.143734][T32086] FAULT_INJECTION: forcing a failure. [ 1178.143734][T32086] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.155383][T32080] netlink: 'syz.4.8321': attribute type 10 has an invalid length. [ 1178.162456][T32086] CPU: 1 UID: 0 PID: 32086 Comm: syz.6.8323 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1178.162489][T32086] Tainted: [W]=WARN [ 1178.162495][T32086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1178.162507][T32086] Call Trace: [ 1178.162515][T32086] [ 1178.162523][T32086] __dump_stack+0x1d/0x30 [ 1178.162546][T32086] dump_stack_lvl+0x95/0xd0 [ 1178.162611][T32086] dump_stack+0x15/0x1b [ 1178.162631][T32086] should_fail_ex+0x25e/0x270 [ 1178.162659][T32086] should_failslab+0x8c/0xb0 [ 1178.162681][T32086] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 1178.162717][T32086] ? security_inode_alloc+0x37/0x100 [ 1178.162748][T32086] ? security_inode_alloc+0x37/0x100 [ 1178.162772][T32086] security_inode_alloc+0x37/0x100 [ 1178.162796][T32086] inode_init_always_gfp+0x495/0x4e0 [ 1178.162827][T32086] alloc_inode+0x58/0x170 [ 1178.162849][T32086] path_from_stashed+0xec/0x330 [ 1178.162916][T32086] open_namespace+0x59/0x140 [ 1178.162939][T32086] pidfd_ioctl+0x1328/0x13f0 [ 1178.162978][T32086] ? selinux_file_ioctl+0x33c/0x3c0 [ 1178.163009][T32086] ? __fget_files+0x184/0x1c0 [ 1178.163114][T32086] ? mutex_lock+0x57/0x90 [ 1178.163139][T32086] ? __pfx_pidfd_ioctl+0x10/0x10 [ 1178.163158][T32086] __se_sys_ioctl+0xce/0x140 [ 1178.163225][T32086] __x64_sys_ioctl+0x43/0x50 [ 1178.163320][T32086] x64_sys_call+0x1563/0x3020 [ 1178.163370][T32086] do_syscall_64+0x136/0x3c0 [ 1178.163401][T32086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.163424][T32086] RIP: 0033:0x7f684aa2de59 [ 1178.163441][T32086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.163499][T32086] RSP: 002b:00007f6849487028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1178.163520][T32086] RAX: ffffffffffffffda RBX: 00007f684acb5fa0 RCX: 00007f684aa2de59 [ 1178.163536][T32086] RDX: 0000000000000000 RSI: 000000000000ff08 RDI: 0000000000000005 [ 1178.163549][T32086] RBP: 00007f6849487090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.163569][T32086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.163583][T32086] R13: 00007f684acb6038 R14: 00007f684acb5fa0 R15: 00007ffdb46f0c88 [ 1178.163603][T32086] [ 1178.271660][T32092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8325'. [ 1178.280966][T32080] team0: Device ipvlan0 failed to register rx_handler [ 1178.476840][T32093] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1178.488636][T32092] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1178.499732][T32092] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1178.509939][T32092] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1178.520955][T32092] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1178.533843][T32092] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1178.595452][T32098] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8327'. [ 1178.628888][T32098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8327'. [ 1178.675031][T32098] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1178.699825][T32101] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 1178.714366][T32101] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1178.714939][T32098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1178.723496][T32101] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1178.745226][T32098] ext4 filesystem being mounted at /479/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1178.749024][T32101] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1178.787763][T32101] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1178.798689][T32101] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1178.821017][T22812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.030108][T32116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8332'. [ 1179.170312][T32123] msdos: Bad value for 'gid' [ 1179.175038][T32123] msdos: Bad value for 'gid' [ 1179.274781][T32125] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1179.285167][T32125] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1179.297878][T32125] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1179.309447][T32125] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1179.320109][T32125] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1179.329531][T32125] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1179.693972][T32134] FAULT_INJECTION: forcing a failure. [ 1179.693972][T32134] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.711967][T32134] CPU: 1 UID: 0 PID: 32134 Comm: syz.4.8340 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1179.712049][T32134] Tainted: [W]=WARN [ 1179.712057][T32134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1179.712071][T32134] Call Trace: [ 1179.712078][T32134] [ 1179.712087][T32134] __dump_stack+0x1d/0x30 [ 1179.712147][T32134] dump_stack_lvl+0x95/0xd0 [ 1179.712195][T32134] dump_stack+0x15/0x1b [ 1179.712214][T32134] should_fail_ex+0x25e/0x270 [ 1179.712243][T32134] should_failslab+0x8c/0xb0 [ 1179.712313][T32134] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 1179.712367][T32134] ? __alloc_skb+0x2db/0x6f0 [ 1179.712434][T32134] ? __alloc_skb+0x2db/0x6f0 [ 1179.712460][T32134] __alloc_skb+0x2db/0x6f0 [ 1179.712485][T32134] ? __alloc_skb+0x205/0x6f0 [ 1179.712574][T32134] netlink_alloc_large_skb+0xbf/0xf0 [ 1179.712608][T32134] netlink_sendmsg+0x40c/0x6f0 [ 1179.712698][T32134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1179.712719][T32134] ____sys_sendmsg+0x532/0x580 [ 1179.712784][T32134] ___sys_sendmsg+0x195/0x1e0 [ 1179.712823][T32134] __x64_sys_sendmsg+0xd4/0x160 [ 1179.712890][T32134] x64_sys_call+0x194c/0x3020 [ 1179.712919][T32134] do_syscall_64+0x136/0x3c0 [ 1179.712960][T32134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.712983][T32134] RIP: 0033:0x7ff7763dde59 [ 1179.713002][T32134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.713021][T32134] RSP: 002b:00007ff774e37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1179.713127][T32134] RAX: ffffffffffffffda RBX: 00007ff776665fa0 RCX: 00007ff7763dde59 [ 1179.713142][T32134] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1179.713157][T32134] RBP: 00007ff774e37090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.713172][T32134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.713186][T32134] R13: 00007ff776666038 R14: 00007ff776665fa0 R15: 00007ffd5093cc38 [ 1179.713207][T32134] [ 1180.073089][T32141] set_capacity_and_notify: 8 callbacks suppressed [ 1180.073107][T32141] loop0: detected capacity change from 0 to 512 [ 1180.151301][T32141] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1180.180625][T32146] loop2: detected capacity change from 0 to 512 [ 1180.200956][T32146] ext4: Unknown parameter 'subj_type' [ 1180.330248][T32153] loop1: detected capacity change from 0 to 164 [ 1180.339636][T32153] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1180.349821][T32153] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1180.359228][T32153] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1180.398528][T32153] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1180.568633][T32156] xt_hashlimit: max too large, truncated to 1048576 [ 1181.306875][T32141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1181.320102][T32141] ext4 filesystem being mounted at /464/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1181.345918][T32153] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1181.354879][T32153] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1181.991317][T32164] hub 8-0:1.0: USB hub found [ 1181.997034][T32164] hub 8-0:1.0: 8 ports detected [ 1182.092599][T23475] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.137497][T32166] loop1: detected capacity change from 0 to 764 [ 1182.146946][T32166] rock: directory entry would overflow storage [ 1182.211186][T32166] rock: sig=0x5245, size=8, remaining=5 [ 1182.305009][T32166] gre0 speed is unknown, defaulting to 1000 [ 1182.344044][T32166] xfrm0 speed is unknown, defaulting to 1000 [ 1182.531606][T32176] loop6: detected capacity change from 0 to 1024 [ 1182.539332][T32176] EXT4-fs: Invalid want_extra_isize 9 [ 1182.573097][T32179] __nla_validate_parse: 9 callbacks suppressed [ 1182.573261][T32179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8351'. [ 1182.618666][T32179] loop0: detected capacity change from 0 to 164 [ 1182.632581][T32180] loop6: detected capacity change from 0 to 1024 [ 1182.640092][T32180] EXT4-fs (loop6): invalid inodes per group: 2147418144 [ 1182.640092][T32180] [ 1182.672133][T32179] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1182.683642][T32179] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1182.693502][T32179] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1182.702904][T32179] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1182.718426][T32179] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1182.727257][T32179] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1182.966822][T32184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8356'. [ 1182.983549][T32187] loop0: detected capacity change from 0 to 512 [ 1182.990234][T32187] ext4: Unknown parameter 'subj_type' [ 1183.125624][T32191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8359'. [ 1183.135852][T32191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8359'. [ 1183.155641][T32191] loop4: detected capacity change from 0 to 164 [ 1183.169470][T32191] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1183.179886][T32191] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1183.254359][T32191] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1183.308098][T32193] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1183.317001][T32191] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1183.325786][T32191] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1183.346576][T32187] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1183.354135][T32187] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1183.361666][T32187] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1183.374777][T32197] loop6: detected capacity change from 0 to 512 [ 1183.389501][T32199] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8361'. [ 1183.396791][T32187] xt_hashlimit: max too large, truncated to 1048576 [ 1183.399180][T32199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8361'. [ 1183.407438][T32197] ext4: Unknown parameter 'subj_type' [ 1183.423617][T32199] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1183.462509][T32199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1183.500939][T32203] sctp: [Deprecated]: syz.0.8362 (pid 32203) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1183.500939][T32203] Use struct sctp_sack_info instead [ 1183.529619][T32199] ext4 filesystem being mounted at /479/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1183.610073][T22341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.697443][T32208] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8365'. [ 1183.758395][T32209] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1183.768726][T32209] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1183.780476][T32209] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1183.792853][T32209] xt_hashlimit: max too large, truncated to 1048576 [ 1184.015400][T32214] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1184.158927][T32214] ext4 filesystem being mounted at /481/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1184.657391][ T28] audit: type=1400 audit(1783351406.940:1998): avc: denied { create } for pid=32207 comm="syz.2.8365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1185.106799][T32219] set_capacity_and_notify: 2 callbacks suppressed [ 1185.106837][T32219] loop1: detected capacity change from 0 to 256 [ 1185.120244][T32219] msdos: Unknown parameter 'time_offse' [ 1185.194146][T32214] FAULT_INJECTION: forcing a failure. [ 1185.194146][T32214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.207872][T32214] CPU: 0 UID: 0 PID: 32214 Comm: syz.4.8366 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1185.207951][T32214] Tainted: [W]=WARN [ 1185.207957][T32214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1185.207975][T32214] Call Trace: [ 1185.207985][T32214] [ 1185.208002][T32214] __dump_stack+0x1d/0x30 [ 1185.208082][T32214] dump_stack_lvl+0x95/0xd0 [ 1185.208110][T32214] dump_stack+0x15/0x1b [ 1185.208130][T32214] should_fail_ex+0x25e/0x270 [ 1185.208159][T32214] should_fail+0xb/0x20 [ 1185.208219][T32214] should_fail_usercopy+0x1a/0x20 [ 1185.208297][T32214] strncpy_from_user+0x27/0x250 [ 1185.208384][T32214] do_getname+0x59/0x1c0 [ 1185.208409][T32214] __se_sys_unlinkat+0x4c/0x140 [ 1185.208508][T32214] __x64_sys_unlinkat+0x43/0x50 [ 1185.208527][T32214] x64_sys_call+0x1120/0x3020 [ 1185.208548][T32214] do_syscall_64+0x136/0x3c0 [ 1185.208587][T32214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.208665][T32214] RIP: 0033:0x7ff7763dde59 [ 1185.208687][T32214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1185.208781][T32214] RSP: 002b:00007ff774e37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 1185.208799][T32214] RAX: ffffffffffffffda RBX: 00007ff776665fa0 RCX: 00007ff7763dde59 [ 1185.208815][T32214] RDX: 0000000000000200 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 1185.208831][T32214] RBP: 00007ff774e37090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.208911][T32214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.208923][T32214] R13: 00007ff776666038 R14: 00007ff776665fa0 R15: 00007ffd5093cc38 [ 1185.208944][T32214] [ 1185.885981][T32223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8368'. [ 1185.948054][T32227] loop2: detected capacity change from 0 to 128 [ 1185.959504][T32227] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1185.990531][T32227] ext4 filesystem being mounted at /489/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1186.092460][T32231] hub 8-0:1.0: USB hub found [ 1186.099867][T32231] hub 8-0:1.0: 8 ports detected [ 1186.220668][T22341] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1186.812573][ T28] audit: type=1400 audit(1783351410.060:1999): avc: denied { rmdir } for pid=32226 comm="syz.2.8371" name="file1" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1186.938296][T32233] loop1: detected capacity change from 0 to 512 [ 1186.957969][T32233] ext4: Unknown parameter 'subj_type' [ 1186.992783][T32235] loop4: detected capacity change from 0 to 512 [ 1187.004205][T22812] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1187.069434][T32235] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1187.103006][T32235] EXT4-fs (loop4): Remounting filesystem read-only [ 1187.109867][T32235] EXT4-fs (loop4): 1 truncate cleaned up [ 1187.115541][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1187.115569][ C0] EXT4-fs (loop4): initial error at time 1783351410: ext4_mb_generate_buddy:1317 [ 1187.115596][ C0] EXT4-fs (loop4): last error at time 1783351410: ext4_mb_generate_buddy:1317 [ 1187.131938][T32240] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8372'. [ 1187.149310][T32240] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8372'. [ 1187.227217][T32235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1187.302815][ T28] audit: type=1400 audit(1783351410.550:2000): avc: denied { setattr } for pid=32234 comm="syz.4.8370" path="pipe:[75200]" dev="pipefs" ino=75200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1187.330730][T32240] loop2: detected capacity change from 0 to 164 [ 1187.341100][T32240] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1187.351440][T32240] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1187.364873][T32240] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1187.373080][T32240] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1187.382388][T32240] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1187.391334][T32240] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1187.563462][ T28] audit: type=1400 audit(1783351410.550:2001): avc: denied { connect } for pid=32234 comm="syz.4.8370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1187.594036][T22341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.636663][ T28] audit: type=1400 audit(1783351410.550:2002): avc: denied { associate } for pid=32234 comm="syz.4.8370" name="current" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1187.712807][ T28] audit: type=1400 audit(1783351410.550:2003): avc: denied { write } for pid=32234 comm="syz.4.8370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1187.821873][T32233] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1187.829395][T32233] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1187.841994][T32233] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1187.940006][T32233] xt_hashlimit: max too large, truncated to 1048576 [ 1188.190939][T32253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8378'. [ 1188.200154][T32253] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8378'. [ 1188.278251][T32257] loop2: detected capacity change from 0 to 512 [ 1188.296791][T32257] ext4: Unknown parameter 'subj_type' [ 1188.334382][T32250] loop6: detected capacity change from 0 to 8192 [ 1188.563257][T32250] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1188.639084][T32262] tipc: Enabled bearer , priority 0 [ 1188.792591][T32264] syzkaller0: entered promiscuous mode [ 1188.798362][T32264] syzkaller0: entered allmulticast mode [ 1188.967381][T32270] xt_hashlimit: max too large, truncated to 1048576 [ 1189.111390][T32264] tipc: Resetting bearer [ 1189.472750][T32282] loop6: detected capacity change from 0 to 512 [ 1189.755503][T32261] tipc: Resetting bearer [ 1189.780040][ T28] audit: type=1326 audit(1783351413.030:2004): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32278 comm="syz.1.8385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9eb2a4de59 code=0x0 [ 1189.808508][T32261] tipc: Disabling bearer [ 1189.871181][ T28] audit: type=1400 audit(1783351413.110:2005): avc: denied { connect } for pid=32278 comm="syz.1.8385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1190.303925][T32293] loop6: detected capacity change from 0 to 256 [ 1190.310725][T32293] msdos: Unknown parameter 'time_offse' [ 1190.395279][T32295] loop2: detected capacity change from 0 to 512 [ 1190.442833][T32295] ext4: Unknown parameter 'subj_type' [ 1190.660830][T32298] hub 8-0:1.0: USB hub found [ 1190.668769][T32298] hub 8-0:1.0: 8 ports detected [ 1192.246338][T32295] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1192.253746][T32295] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1192.261102][T32295] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1192.334503][T32295] xt_hashlimit: max too large, truncated to 1048576 [ 1192.369407][T32317] loop4: detected capacity change from 0 to 512 [ 1192.401355][T32317] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1192.504805][T32321] loop2: detected capacity change from 0 to 512 [ 1192.533377][T32321] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1192.548264][T32317] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.8391: iget: bad i_size value: 38620345925642 [ 1192.564645][T32321] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.8392: iget: bad i_size value: 38620345925642 [ 1192.577949][T32317] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1192.578156][T32317] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.8391: couldn't read orphan inode 15 (err -117) [ 1192.587341][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1192.587363][ C1] EXT4-fs (loop4): initial error at time 1783351415: ext4_orphan_get:1399: inode 15 [ 1192.587389][ C1] EXT4-fs (loop4): last error at time 1783351415: ext4_orphan_get:1399: inode 15 [ 1192.628415][T32321] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1192.629215][T32321] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.8392: couldn't read orphan inode 15 (err -117) [ 1192.638755][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1192.638812][ C1] EXT4-fs (loop2): initial error at time 1783351415: ext4_orphan_get:1399: inode 15 [ 1192.639008][ C1] EXT4-fs (loop2): last error at time 1783351415: ext4_orphan_get:1399: inode 15 [ 1192.686545][T32317] loop4: lost filesystem error report for type 5 error -117 [ 1192.687213][T32317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1192.707675][T32321] loop2: lost filesystem error report for type 5 error -117 [ 1192.711484][T32321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1192.779252][T32326] sctp: [Deprecated]: syz.1.8393 (pid 32326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1192.779252][T32326] Use struct sctp_sack_info instead [ 1193.206311][T32331] tipc: Enabled bearer , priority 0 [ 1193.263291][T32331] syzkaller0: entered promiscuous mode [ 1193.269593][T32331] syzkaller0: entered allmulticast mode [ 1193.276088][T32331] tipc: Resetting bearer [ 1193.287159][T32330] tipc: Resetting bearer [ 1193.317786][T32317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1193.411104][ T310] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 1193.423994][ T310] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1193.429571][T32330] tipc: Disabling bearer [ 1193.446547][ T310] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1193.446547][ T310] [ 1193.456463][ T310] EXT4-fs (loop2): Total free blocks count 0 [ 1193.462557][ T310] EXT4-fs (loop2): Free/Dirty block details [ 1193.472173][T32336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8396'. [ 1193.482152][T32336] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8396'. [ 1193.491248][ T310] EXT4-fs (loop2): free_blocks=0 [ 1193.497557][ T310] EXT4-fs (loop2): dirty_blocks=6440 [ 1193.502970][ T310] EXT4-fs (loop2): Block reservation details [ 1193.509358][ T310] EXT4-fs (loop2): i_reserved_data_blocks=6440 [ 1193.528577][ T310] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 1193.532780][T32338] loop4: detected capacity change from 0 to 512 [ 1193.569719][T32321] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz.2.8392: data will be lost [ 1193.673937][T32345] sctp: [Deprecated]: syz.2.8399 (pid 32345) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1193.673937][T32345] Use struct sctp_sack_info instead [ 1193.714997][T32344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8400'. [ 1193.728075][T32344] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8400'. [ 1194.119865][T32349] loop6: detected capacity change from 0 to 256 [ 1194.145206][T32349] msdos: Unknown parameter 'time_offse' [ 1194.424036][T32351] loop1: detected capacity change from 0 to 256 [ 1194.440265][T32351] msdos: Unknown parameter 'time_offse' [ 1194.595779][T32371] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8406'. [ 1194.638782][T32372] hub 8-0:1.0: USB hub found [ 1194.643798][T32372] hub 8-0:1.0: 8 ports detected [ 1194.841368][T32371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.860103][T32371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.876049][T32371] netlink: 'syz.6.8406': attribute type 10 has an invalid length. [ 1194.907058][T32371] team0: Device ipvlan0 failed to register rx_handler [ 1195.622832][T32375] loop0: detected capacity change from 0 to 512 [ 1195.633252][T32379] tipc: Enabled bearer , priority 0 [ 1195.640063][T32381] loop6: detected capacity change from 0 to 512 [ 1195.647784][T32375] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1195.665732][T32381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1195.696834][T32379] syzkaller0: entered promiscuous mode [ 1195.702371][T32379] syzkaller0: entered allmulticast mode [ 1195.708783][T32379] tipc: Resetting bearer [ 1195.719046][T32378] tipc: Resetting bearer [ 1195.742182][T32378] tipc: Disabling bearer [ 1195.822756][ T28] audit: type=1400 audit(1783351419.060:2006): avc: denied { attach_queue } for pid=32380 comm="syz.6.8409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1195.851715][T32375] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.8407: iget: bad i_size value: 38620345925642 [ 1195.864444][T32375] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1195.865103][T32375] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.8407: couldn't read orphan inode 15 (err -117) [ 1195.886727][T32375] loop0: lost filesystem error report for type 5 error -117 [ 1195.887336][T32375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1195.960155][T32386] loop2: detected capacity change from 0 to 512 [ 1196.068915][T32381] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.141984][T32391] loop4: detected capacity change from 0 to 256 [ 1196.157120][ T28] audit: type=1400 audit(1783351419.380:2007): avc: denied { getopt } for pid=32394 comm="syz.2.8413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1196.244055][T32397] loop6: detected capacity change from 0 to 512 [ 1196.270935][T32397] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1196.305863][T32397] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.8414: iget: bad i_size value: 38620345925642 [ 1196.324157][T32397] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1196.324810][T32397] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.8414: couldn't read orphan inode 15 (err -117) [ 1196.334474][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1196.334539][ C1] EXT4-fs (loop6): initial error at time 1783351419: ext4_orphan_get:1399: inode 15 [ 1196.334656][ C1] EXT4-fs (loop6): last error at time 1783351419: ext4_orphan_get:1399: inode 15 [ 1196.416794][T32397] loop6: lost filesystem error report for type 5 error -117 [ 1196.423809][T32397] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1198.492984][T32385] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1199.079389][ T310] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 1199.080184][T10995] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1199.122356][T10995] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1199.122356][T10995] [ 1199.134349][T10995] EXT4-fs (loop0): Total free blocks count 0 [ 1199.141326][T10995] EXT4-fs (loop0): Free/Dirty block details [ 1199.156010][ T310] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1199.172264][T10995] EXT4-fs (loop0): free_blocks=0 [ 1199.175589][ T310] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1199.175589][ T310] [ 1199.188081][ T310] EXT4-fs (loop6): Total free blocks count 0 [ 1199.194167][ T310] EXT4-fs (loop6): Free/Dirty block details [ 1199.197376][T10995] EXT4-fs (loop0): dirty_blocks=5764 [ 1199.200284][ T310] EXT4-fs (loop6): free_blocks=0 [ 1199.211615][ T310] EXT4-fs (loop6): dirty_blocks=4344 [ 1199.217917][ T310] EXT4-fs (loop6): Block reservation details [ 1199.224264][ T310] EXT4-fs (loop6): i_reserved_data_blocks=4344 [ 1199.237178][T10995] EXT4-fs (loop0): Block reservation details [ 1199.263883][ T310] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 1199.283435][T10995] EXT4-fs (loop0): i_reserved_data_blocks=5764 [ 1199.291987][T32397] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz.6.8414: data will be lost [ 1199.307113][T10995] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 1199.327589][T32375] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz.0.8407: data will be lost [ 1199.399175][T32422] hub 8-0:1.0: USB hub found [ 1199.404155][T32422] hub 8-0:1.0: 8 ports detected [ 1199.413316][T32408] loop1: detected capacity change from 0 to 256 [ 1199.444896][T32428] tipc: Enabled bearer , priority 0 [ 1199.460309][T32408] msdos: Unknown parameter 'time_offse' [ 1199.481668][T32428] syzkaller0: entered promiscuous mode [ 1199.487337][T32428] syzkaller0: entered allmulticast mode [ 1199.493818][T32428] tipc: Resetting bearer [ 1199.503303][T32427] tipc: Resetting bearer [ 1199.509262][T32424] loop6: detected capacity change from 0 to 512 [ 1199.523867][T32427] tipc: Disabling bearer [ 1199.649454][ T28] audit: type=1400 audit(1783351422.900:2008): avc: denied { listen } for pid=32433 comm="syz.0.8424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1199.650684][T32434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8424'. [ 1199.680169][T32434] netlink: 'syz.0.8424': attribute type 30 has an invalid length. [ 1199.705891][T32435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8424'. [ 1199.716848][T32435] netlink: 'syz.0.8424': attribute type 30 has an invalid length. [ 1199.785031][T32434] loop0: detected capacity change from 0 to 512 [ 1199.848072][T32437] hub 8-0:1.0: USB hub found [ 1199.854055][T32437] hub 8-0:1.0: 8 ports detected [ 1199.888795][T32434] EXT4-fs: inline encryption not supported [ 1199.895329][T32434] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1199.904092][T32434] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1199.976817][T32434] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1199.993734][T32434] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.8424: bg 0: block 248: padding at end of block bitmap is not set [ 1200.013589][T32434] loop0: lost filesystem error report for type 5 error -117 [ 1200.014072][T32434] Quota error (device loop0): write_blk: dquota write failed [ 1200.029093][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1200.029117][ C1] EXT4-fs (loop0): last error at time 1783351423: ext4_validate_block_bitmap:441 [ 1200.046950][T32434] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1200.058950][T32434] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.8424: Failed to acquire dquot type 1 [ 1200.071553][T32434] loop0: lost filesystem error report for type 5 error -28 [ 1200.072898][T32434] EXT4-fs (loop0): 1 truncate cleaned up [ 1200.088655][T32434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1200.112895][ T28] audit: type=1326 audit(1783351423.360:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32433 comm="syz.0.8424" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd09a7de59 code=0x0 [ 1200.200382][T32435] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.8424: deleted inode referenced: 12 [ 1200.583881][T23475] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1201.025444][T32453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1201.036415][T32453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1201.047525][T32453] netlink: 'syz.0.8429': attribute type 10 has an invalid length. [ 1201.070183][T32453] team0: Device ipvlan0 failed to register rx_handler [ 1201.161248][T32465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1201.176317][T32465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1201.189103][T32465] netlink: 'syz.4.8432': attribute type 10 has an invalid length. [ 1201.195773][T32467] loop6: detected capacity change from 0 to 512 [ 1201.204291][T32465] team0: Device ipvlan0 failed to register rx_handler [ 1201.609089][ T28] audit: type=1400 audit(1783351424.860:2010): avc: denied { create } for pid=32478 comm="syz.2.8436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1201.759284][T32479] loop2: detected capacity change from 0 to 128 [ 1201.927650][T32479] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1201.985081][T32479] ext4 filesystem being mounted at /502/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1202.117789][ T28] audit: type=1400 audit(1783351425.360:2011): avc: denied { bind } for pid=32484 comm="syz.4.8438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1202.602569][T32487] loop0: detected capacity change from 0 to 256 [ 1202.706839][T32487] msdos: Unknown parameter 'time_offse' [ 1202.810806][T22812] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1203.464246][T32500] sctp: [Deprecated]: syz.0.8443 (pid 32500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1203.464246][T32500] Use struct sctp_sack_info instead [ 1203.795793][T32507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8444'. [ 1203.851354][T32507] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8444'. [ 1204.661131][T32513] loop0: detected capacity change from 0 to 512 [ 1204.701806][T32513] ext4: Unknown parameter 'subj_type' [ 1204.979059][ T28] audit: type=1400 audit(1783351428.220:2012): avc: denied { read write } for pid=32518 comm="syz.4.8449" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1205.008786][T32519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8449'. [ 1205.092902][ T28] audit: type=1400 audit(1783351428.220:2013): avc: denied { open } for pid=32518 comm="syz.4.8449" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1205.169620][T32513] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1205.178690][T32513] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1205.186014][T32513] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1205.248659][T32530] loop2: detected capacity change from 0 to 4096 [ 1205.275819][T32513] xt_hashlimit: max too large, truncated to 1048576 [ 1205.394075][T32538] loop0: detected capacity change from 0 to 512 [ 1205.401106][T32538] ext4: Unknown parameter 'subj_type' [ 1205.443183][T32530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1205.576977][T32530] FAULT_INJECTION: forcing a failure. [ 1205.576977][T32530] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.609808][T32530] CPU: 1 UID: 0 PID: 32530 Comm: syz.2.8451 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1205.609851][T32530] Tainted: [W]=WARN [ 1205.609857][T32530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1205.609871][T32530] Call Trace: [ 1205.609878][T32530] [ 1205.609887][T32530] __dump_stack+0x1d/0x30 [ 1205.609929][T32530] dump_stack_lvl+0x95/0xd0 [ 1205.609998][T32530] dump_stack+0x15/0x1b [ 1205.610022][T32530] should_fail_ex+0x25e/0x270 [ 1205.610053][T32530] should_failslab+0x8c/0xb0 [ 1205.610145][T32530] __kmalloc_noprof+0xd4/0x4a0 [ 1205.610169][T32530] ? ext4_find_extent+0x17f/0x7a0 [ 1205.610205][T32530] ? ext4_find_extent+0x17f/0x7a0 [ 1205.610247][T32530] ext4_find_extent+0x17f/0x7a0 [ 1205.610277][T32530] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 1205.610371][T32530] ext4_ext_map_blocks+0x10b/0x2f30 [ 1205.610403][T32530] ? lapic_next_event+0x11/0x20 [ 1205.610503][T32530] ? tick_program_event+0x79/0xc0 [ 1205.610536][T32530] ? __hrtimer_rearm_deferred+0x571/0x650 [ 1205.610568][T32530] ? tick_program_event+0x79/0xc0 [ 1205.610598][T32530] ? _raw_spin_unlock+0x9/0x30 [ 1205.610624][T32530] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 1205.610654][T32530] ext4_map_query_blocks+0xa1/0x500 [ 1205.610748][T32530] ext4_map_blocks+0x300/0x950 [ 1205.610766][T32530] ? alloc_buffer_head+0x88/0x1f0 [ 1205.610858][T32530] _ext4_get_block+0x117/0x370 [ 1205.610880][T32530] ? _raw_spin_lock+0x52/0xa0 [ 1205.610901][T32530] ? _raw_spin_unlock+0x9/0x30 [ 1205.610943][T32530] ext4_load_tail_bh+0x1c6/0x330 [ 1205.610970][T32530] ext4_block_zero_range+0x7e/0x710 [ 1205.610997][T32530] ext4_block_zero_eof+0xde/0x290 [ 1205.611049][T32530] ext4_alloc_file_blocks+0x19d/0x990 [ 1205.611072][T32530] ? inode_io_list_move_locked+0x1d0/0x2d0 [ 1205.611108][T32530] ext4_do_fallocate+0x159/0x410 [ 1205.611219][T32530] ext4_fallocate+0x207/0x320 [ 1205.611312][T32530] vfs_fallocate+0x3ac/0x400 [ 1205.611364][T32530] __x64_sys_fallocate+0x7a/0xd0 [ 1205.611388][T32530] x64_sys_call+0x298e/0x3020 [ 1205.611409][T32530] do_syscall_64+0x136/0x3c0 [ 1205.611437][T32530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.611466][T32530] RIP: 0033:0x7f0ca15cde59 [ 1205.611545][T32530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1205.611565][T32530] RSP: 002b:00007f0ca0027028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1205.611588][T32530] RAX: ffffffffffffffda RBX: 00007f0ca1855fa0 RCX: 00007f0ca15cde59 [ 1205.611602][T32530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1205.611613][T32530] RBP: 00007f0ca0027090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.611693][T32530] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000001 [ 1205.611705][T32530] R13: 00007f0ca1856038 R14: 00007f0ca1855fa0 R15: 00007ffdbaa22508 [ 1205.611725][T32530] [ 1205.902850][T32539] loop4: detected capacity change from 0 to 256 [ 1205.910020][T32539] msdos: Unknown parameter 'time_offse' [ 1205.950910][T32543] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1205.958314][T32543] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1205.965614][T32543] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1205.973946][T32543] xt_hashlimit: max too large, truncated to 1048576 [ 1206.024596][T22812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.256515][T32556] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8460'. [ 1206.266365][T32556] tipc: Enabling of bearer rejected, failed to enable media [ 1206.376055][T32572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8464'. [ 1206.416481][T32572] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8464'. [ 1206.569245][T32579] loop6: detected capacity change from 0 to 128 [ 1206.576664][T32579] msdos: Bad value for 'gid' [ 1206.581919][T32579] msdos: Bad value for 'gid' [ 1206.814518][T32579] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8465'. [ 1208.108884][T32585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8467'. [ 1208.153316][T32585] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8467'. [ 1208.510355][T32598] loop6: detected capacity change from 0 to 512 [ 1208.539195][T32598] ext4: Unknown parameter 'subj_type' [ 1208.749269][T32603] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8473'. [ 1208.780595][T32603] tipc: Enabling of bearer rejected, failed to enable media [ 1208.954411][T32622] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8477'. [ 1208.965540][T32612] loop0: detected capacity change from 0 to 256 [ 1208.972457][T32619] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1208.979848][T32619] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1208.984254][T32622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8477'. [ 1208.987207][T32619] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1209.007412][T32619] xt_hashlimit: max too large, truncated to 1048576 [ 1209.016471][T32612] msdos: Unknown parameter 'time_offse' [ 1209.030080][T32622] loop4: detected capacity change from 0 to 512 [ 1209.063718][T32622] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1209.094541][T32622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1209.107198][T32622] ext4 filesystem being mounted at /507/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1209.135849][T22341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.188074][T32628] tipc: Enabled bearer , priority 0 [ 1209.223156][T32628] syzkaller0: entered promiscuous mode [ 1209.228737][T32628] syzkaller0: entered allmulticast mode [ 1209.234533][T32628] tipc: Resetting bearer [ 1209.243705][T32627] tipc: Resetting bearer [ 1209.260946][T32627] tipc: Disabling bearer [ 1209.309636][T32630] loop1: detected capacity change from 0 to 512 [ 1209.318871][T32630] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 1209.342847][T32630] loop1: detected capacity change from 0 to 164 [ 1209.351363][T32630] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1209.363172][T32630] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1209.383614][T32630] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1209.438028][T32630] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1209.447485][T32630] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1210.056207][T32653] __nla_validate_parse: 3 callbacks suppressed [ 1210.056827][T32653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8486'. [ 1210.099787][T32653] tipc: Enabling of bearer rejected, failed to enable media [ 1210.884617][T32664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8489'. [ 1210.996723][T32660] loop0: detected capacity change from 0 to 8192 [ 1211.031186][T32660] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1211.074962][T32668] tipc: Enabled bearer , priority 0 [ 1211.301453][T32668] syzkaller0: entered promiscuous mode [ 1211.307013][T32668] syzkaller0: entered allmulticast mode [ 1211.313425][T32668] tipc: Resetting bearer [ 1211.356063][T32671] loop4: detected capacity change from 0 to 512 [ 1211.365636][T32671] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 1211.383314][T32667] tipc: Resetting bearer [ 1211.465496][T32667] tipc: Disabling bearer [ 1211.477579][T32673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8494'. [ 1211.537983][T32678] loop4: detected capacity change from 0 to 512 [ 1211.555219][T32678] ext4: Unknown parameter 'subj_type' [ 1211.842969][T32683] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1211.850445][T32683] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1211.857731][T32683] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1211.866101][T32683] xt_hashlimit: max too large, truncated to 1048576 [ 1211.881191][T32681] loop0: detected capacity change from 0 to 256 [ 1211.899388][T32687] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8498'. [ 1211.919415][T32681] msdos: Unknown parameter 'time_offse' [ 1211.931429][T32687] tipc: Enabling of bearer rejected, failed to enable media [ 1212.006179][T32691] loop1: detected capacity change from 0 to 512 [ 1212.027824][T32691] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1212.037641][T32691] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.8499: iget: bad i_size value: 38620345925642 [ 1212.050328][T32691] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1212.050663][T32691] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.8499: couldn't read orphan inode 15 (err -117) [ 1212.071637][T32691] loop1: lost filesystem error report for type 5 error -117 [ 1212.072274][T32691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1212.526202][T32707] loop4: detected capacity change from 0 to 512 [ 1212.533608][T32707] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 1212.545701][T32707] loop4: detected capacity change from 0 to 164 [ 1212.558652][T32707] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1212.573082][T32707] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1212.583041][T32707] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1212.591485][T32707] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1212.601707][T32707] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1212.785427][T32710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8505'. [ 1212.954272][T32712] tipc: Enabled bearer , priority 0 [ 1213.107285][T32715] syzkaller0: entered promiscuous mode [ 1213.113247][T32715] syzkaller0: entered allmulticast mode [ 1213.120712][T32715] tipc: Resetting bearer [ 1213.143748][T32711] tipc: Resetting bearer [ 1213.209757][T32711] tipc: Disabling bearer [ 1213.433336][T32720] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8509'. [ 1213.452563][T32720] tipc: Enabling of bearer rejected, failed to enable media [ 1213.465224][T32718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8508'. [ 1213.479029][T25104] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:0: bg 0: block 5: invalid block bitmap [ 1213.688098][T25104] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1213.704526][T25104] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1213.704526][T25104] [ 1213.715726][T25104] EXT4-fs (loop1): Total free blocks count 0 [ 1213.723356][T25104] EXT4-fs (loop1): Free/Dirty block details [ 1213.729391][T25104] EXT4-fs (loop1): free_blocks=0 [ 1213.773618][T25104] EXT4-fs (loop1): dirty_blocks=16008 [ 1213.788688][T25104] EXT4-fs (loop1): Block reservation details [ 1213.845789][T25104] EXT4-fs (loop1): i_reserved_data_blocks=16008 [ 1213.995984][T25104] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 1214.069679][T32691] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz.1.8499: data will be lost [ 1214.335794][T32733] sctp: [Deprecated]: syz.4.8513 (pid 32733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1214.335794][T32733] Use struct sctp_sack_info instead [ 1214.385906][T32735] loop1: detected capacity change from 0 to 512 [ 1214.399282][T32735] ext4: Unknown parameter 'subj_type' [ 1214.435538][T32737] loop0: detected capacity change from 0 to 512 [ 1214.446633][T32737] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 1214.469499][T32737] loop0: detected capacity change from 0 to 164 [ 1214.479998][T32737] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1214.493431][T32737] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1214.503282][T32737] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1214.512085][T32737] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1214.520912][T32737] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1214.570735][T32743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8517'. [ 1214.651042][T32745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8518'. [ 1214.679510][T32745] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8518'. [ 1214.836666][T32747] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1214.846417][T32747] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1214.854275][T32747] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1214.864569][T32747] xt_hashlimit: max too large, truncated to 1048576 [ 1215.081539][T32749] loop6: detected capacity change from 0 to 256 [ 1215.094398][T32749] msdos: Unknown parameter 'time_offse' [ 1215.475926][T32758] tipc: Enabled bearer , priority 0 [ 1215.568165][T32758] syzkaller0: entered promiscuous mode [ 1215.573756][T32758] syzkaller0: entered allmulticast mode [ 1215.579949][T32758] tipc: Resetting bearer [ 1215.581206][T32761] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8523'. [ 1215.598746][T32760] tipc: Enabling of bearer rejected, failed to enable media [ 1215.651443][T32757] tipc: Resetting bearer [ 1215.674788][T32757] tipc: Disabling bearer [ 1216.685883][ T328] hub 8-0:1.0: USB hub found [ 1216.690673][ T328] hub 8-0:1.0: 8 ports detected [ 1216.857543][ T325] loop2: detected capacity change from 0 to 256 [ 1216.866335][ T325] msdos: Unknown parameter 'time_offse' [ 1216.899595][ T333] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8535'. [ 1216.909933][ T333] tipc: Enabling of bearer rejected, failed to enable media [ 1216.950276][ T337] tipc: Enabled bearer , priority 0 [ 1217.001080][ T337] syzkaller0: entered promiscuous mode [ 1217.006936][ T337] syzkaller0: entered allmulticast mode [ 1217.015673][ T337] tipc: Resetting bearer [ 1217.025464][ T336] tipc: Resetting bearer [ 1217.043063][ T336] tipc: Disabling bearer [ 1217.118185][ T342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8538'. [ 1217.128331][ T342] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8538'. [ 1217.312184][ T347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8540'. [ 1217.409794][ T28] audit: type=1400 audit(1783351440.660:2014): avc: denied { connect } for pid=351 comm="syz.0.8543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1217.480036][ T28] audit: type=1400 audit(1783351440.710:2015): avc: denied { write } for pid=351 comm="syz.0.8543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1217.513465][ T357] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8545'. [ 1217.533675][ T357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8545'. [ 1217.606577][ T362] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8546'. [ 1217.613543][ T360] tipc: Enabled bearer , priority 0 [ 1217.623019][ T362] tipc: Enabling of bearer rejected, failed to enable media [ 1217.658711][ T360] syzkaller0: entered promiscuous mode [ 1217.664295][ T360] syzkaller0: entered allmulticast mode [ 1217.671359][ T360] tipc: Resetting bearer [ 1217.718401][ T369] loop4: detected capacity change from 0 to 256 [ 1217.736707][ T358] tipc: Resetting bearer [ 1217.768882][ T358] tipc: Disabling bearer [ 1217.815275][ T377] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8552'. [ 1217.825469][ T377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8552'. [ 1218.163801][ T400] loop2: detected capacity change from 0 to 256 [ 1218.194558][ T397] tipc: Enabling of bearer rejected, failed to enable media [ 1218.320058][ T413] loop1: detected capacity change from 0 to 256 [ 1218.326932][ T28] audit: type=1400 audit(1783351441.560:2016): avc: denied { create } for pid=412 comm="syz.1.8566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1218.334268][ T413] vfat: Unknown parameter '18446744073709551615' [ 1218.395513][ T415] loop2: detected capacity change from 0 to 8192 [ 1218.436244][ T415] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1218.518966][ T28] audit: type=1400 audit(1783351441.770:2017): avc: denied { read } for pid=420 comm="syz.0.8568" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1218.554223][ T407] loop4: detected capacity change from 0 to 256 [ 1218.561170][ T407] msdos: Unknown parameter 'time_offse' [ 1218.567770][ T28] audit: type=1400 audit(1783351441.770:2018): avc: denied { open } for pid=420 comm="syz.0.8568" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1218.591590][ T28] audit: type=1400 audit(1783351441.770:2019): avc: denied { ioctl } for pid=420 comm="syz.0.8568" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x227e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1218.627114][ T423] loop0: detected capacity change from 0 to 512 [ 1218.634459][ T423] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1218.645690][ T28] audit: type=1400 audit(1783351441.860:2020): avc: denied { create } for pid=422 comm="syz.0.8570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1218.673424][ T28] audit: type=1400 audit(1783351441.860:2021): avc: denied { connect } for pid=422 comm="syz.0.8570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1218.691495][ T423] EXT4-fs (loop0): 1 truncate cleaned up [ 1218.697147][ T28] audit: type=1400 audit(1783351441.860:2022): avc: denied { bind } for pid=422 comm="syz.0.8570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1218.724354][ T28] audit: type=1400 audit(1783351441.860:2023): avc: denied { write } for pid=422 comm="syz.0.8570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1218.749412][ T423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1218.890341][T23475] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1219.109399][ T439] loop1: detected capacity change from 0 to 256 [ 1219.155325][ T444] tipc: Enabling of bearer rejected, failed to enable media [ 1219.258115][ T454] sctp: [Deprecated]: syz.4.8580 (pid 454) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1219.258115][ T454] Use struct sctp_sack_info instead [ 1219.520498][ T447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.531323][ T447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.543559][ T447] netlink: 'syz.6.8578': attribute type 10 has an invalid length. [ 1219.555057][ T447] team0: Device ipvlan0 failed to register rx_handler [ 1220.024068][ T464] loop1: detected capacity change from 0 to 256 [ 1220.057864][ T464] msdos: Unknown parameter 'time_offse' [ 1220.089357][ T479] loop0: detected capacity change from 0 to 256 [ 1220.097180][ T479] FAT-fs (loop0): Directory bread(block 1285) failed [ 1220.104097][ T479] FAT-fs (loop0): Directory bread(block 1286) failed [ 1220.110874][ T479] FAT-fs (loop0): Directory bread(block 1287) failed [ 1220.117670][ T479] FAT-fs (loop0): Directory bread(block 1288) failed [ 1220.126733][ T479] FAT-fs (loop0): Directory bread(block 1285) failed [ 1220.133619][ T479] FAT-fs (loop0): Directory bread(block 1286) failed [ 1220.141789][ T479] FAT-fs (loop0): Directory bread(block 1287) failed [ 1220.148940][ T479] FAT-fs (loop0): Directory bread(block 1288) failed [ 1220.241081][ T483] tipc: Enabling of bearer rejected, failed to enable media [ 1220.408719][ T499] sctp: [Deprecated]: syz.2.8596 (pid 499) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1220.408719][ T499] Use struct sctp_sack_info instead [ 1220.806268][ T514] __nla_validate_parse: 9 callbacks suppressed [ 1220.806293][ T514] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8601'. [ 1220.830843][ T516] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8602'. [ 1220.841019][ T516] tipc: Enabling of bearer rejected, failed to enable media [ 1220.977392][ T523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8604'. [ 1221.014754][ T525] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8605'. [ 1221.059298][ T529] ext4: Unknown parameter 'subj_type' [ 1221.094286][ T514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.102963][ T514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.112166][ T514] netlink: 'syz.1.8601': attribute type 10 has an invalid length. [ 1221.121341][ T514] team0: Device ipvlan0 failed to register rx_handler [ 1221.167059][ T529] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1221.174546][ T529] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1221.181881][ T529] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1221.190445][ T529] xt_hashlimit: max too large, truncated to 1048576 [ 1221.384570][ T543] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8613'. [ 1221.401407][ T543] tipc: Enabling of bearer rejected, failed to enable media [ 1221.532672][ T549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8615'. [ 1221.633433][ T550] msdos: Unknown parameter 'time_offse' [ 1221.677413][ T3286] ================================================================== [ 1221.685541][ T3286] BUG: KCSAN: data-race in dentry_kill / fast_dput [ 1221.692057][ T3286] [ 1221.694477][ T3286] write to 0xffff888119e8c310 of 8 bytes by task 2980 on cpu 1: [ 1221.702116][ T3286] dentry_kill+0x139/0x500 [ 1221.706729][ T3286] finish_dput+0x16/0x1d0 [ 1221.711075][ T3286] dput+0x48/0x50 [ 1221.714724][ T3286] lookup_one_qstr_excl+0x156/0x240 [ 1221.719948][ T3286] filename_unlinkat+0x149/0x410 [ 1221.724909][ T3286] __se_sys_unlink+0x2b/0xe0 [ 1221.729511][ T3286] __x64_sys_unlink+0x1f/0x30 [ 1221.734196][ T3286] x64_sys_call+0x2eb6/0x3020 [ 1221.739268][ T3286] do_syscall_64+0x136/0x3c0 [ 1221.744572][ T3286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.750576][ T3286] [ 1221.752902][ T3286] read to 0xffff888119e8c310 of 8 bytes by task 3286 on cpu 0: [ 1221.760440][ T3286] fast_dput+0x64/0x2e0 [ 1221.764618][ T3286] dput+0x1f/0x50 [ 1221.768353][ T3286] filename_unlinkat+0x217/0x410 [ 1221.773314][ T3286] __se_sys_unlink+0x2b/0xe0 [ 1221.777924][ T3286] __x64_sys_unlink+0x1f/0x30 [ 1221.782707][ T3286] x64_sys_call+0x2eb6/0x3020 [ 1221.787384][ T3286] do_syscall_64+0x136/0x3c0 [ 1221.791997][ T3286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.798073][ T3286] [ 1221.800384][ T3286] value changed: 0xffff888237a42190 -> 0x0000000000000000 [ 1221.808298][ T3286] [ 1221.810649][ T3286] Reported by Kernel Concurrency Sanitizer on: [ 1221.816812][ T3286] CPU: 0 UID: 0 PID: 3286 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1221.827673][ T3286] Tainted: [W]=WARN [ 1221.831744][ T3286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1221.842923][ T3286] ==================================================================