last executing test programs: 2m4.30562049s ago: executing program 4 (id=444): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x4}, {0xffff, 0xffff}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x80d1}, 0x10040000) (fail_nth: 5) 2m4.287119607s ago: executing program 4 (id=445): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1780, 0x0, 0x1, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r4 = open(&(0x7f0000000280)='.\x00', 0xc8180, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) (fail_nth: 9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) 2m3.958344093s ago: executing program 4 (id=447): r0 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb6, 0x1, 0xffffffbc, 0x333}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) (async) read$eventfd(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x945, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000001380)={0x2, 0x83, "da543feb6f5740ef05fadb6a16bf773815657318c184b0827c19f42cbe8929c1c37c56b862ee84ca87afb834ee630d059eab6dc4f9e6edab7d80a79894ed81813f01a8cd8ac1cd9ce9eb0e0371cc4cd1984ea5a9f76cff48de15f1b4fdbe79eed7f76185ee9724dcd7b0b9c9b9874650aa2c66b7ba9c329eba21050a2279588412e1df"}) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$eJzs3U9sHFcZAPBvdx0ncd2mCY3UlIMDqUj/KLbblZwaDoQDHCjqpUioUjlYycYOXsfGdkVtLu6NE0UCBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHigBjGZ31t54Z51Ftndbz+8nbfbNm7G/93bzvd19b9YTQG6dTv4pRAxGxI2IOFbfvPWA0/W775RXp66XV6cKsbHx5N8KteOulVenGoc2fu6OiFiJiHsj4seXIy4eao27sLQ8PVGtVubT7ZHFmbmRhaXlc1dmJiYrk5Wr5fJj42Nj4+fHRv+P3hR23PuJuddP/GbqicmXhv791PmZb/y1EBdq/Y5t/dhLWS3qK0Rc2I9gPVBK+hMRAx0ef7Ly/Mv73CQ69KUTayPJc3dPRNxfy/9jUao9mxEffPHpfxyLD9xs97M31l78UzfbCgDsnY3E4Z13AwdTMZLP/oXicETUy8Xi8HD9M/w9MVCszi4sPnx59pmrl+pzBHfHoeLlK9XKaDpXcHccKiTbj9TKW9uPbtsuR8TxiPhc6Whte/jibPVSV0c6oGEw4rXvfvpi/x3b8v+PpXr+AwdXkv+/+sn3f5iU3yz1ujVANyX5/603Zx4P+Q+5c/v8P9L1NgHd4fUf8kv+Q3615v/O584CB4fXf8gv+Q/5Jf8hv+Q/5Jf8h/xqzn/pD/l0fOiVtUJErLz/aO2W6E/3ZfzZHuAA2bjTt/whr7z3h/zq2yoe7WU7gO7zGR+43dn/bb8NPLf3bQG6o9jrBgA9c/aU9T/IK/P/kF99vW4A0DPe4wPm/yF/zP9Dfg22uf7XnU3X7hqNiLsi4melQ4cb1/oC3rkGI1574cb3no4o/rmQvv9PxoKJ11/9UfNx/YV/1pYI+iPiMy88+ZVnJxYX5x9J6v++Wb/41bT+0V71BuhEI08beQzk18LS8vREtVqZV1DYVoh4WzRDYR8LjXHgWnl1qnHr1tjz/EMRb3yofhJCEvd6eqvv7UvnJo/U1igH1gu3nKtQ2IO1y8+fi1h5LiLuzep/Ib3eeX3lY2C91BL/Xel9cjuVzp8kx5zsMH7prt3Fv68p/lBT/Hd3GH/t4x0euE+Of7u38V/67eayV1/W49+3y6/EnrjN/se/uatfv2t/+H1v498/1Nv4X56NeCUZf0az8q+YpOXmymfz+PPFL9TnSvp3Gf+zZ7fGv+st419xc/wrtRn/TncY56dPVT6ZVV/6ecQbz0Xclxm/Ee9ILdbAerEl/pmm8eeBHeL/5WO/nM6qv/BqxMa1iLORHb851sjizNzIwtLyuSszE5OVycrVcvmx8bGx8fNjoyO1OeqRxkx1qydunvxwVv2Zr9f7P9AmfqP/7R7/jR363Gz5a58afE9G/S9O1eM/cCb7+T+Rxq8//n0t8d+b3if/T/6TnsubHPNWRBxO6x+MiB+8fPyhrHZ99GY9/qU2/S/eEr+1/w932P/43X+fyap+9iOd/gIAYC+1nxrodcsAAIC91o2Vxl73Ecg2sN4fzcvAhZWmdYWVrXWFpP6tdH2htBLxr3SNIal/MF0lS8qZCw3A287J5ff9utdtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMi7haXl6YlqtTK/0OuWAN32vwAAAP//mSj9Tw==") (async, rerun: 32) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, r1, 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r2, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000001280)={0x29, 0x19, '\x00', [@jumbo={0xc2, 0x4, 0xa14}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x5}, @pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0x3, 0x0, [0x2, 0xe7a, 0x4f, 0x1]}}, @enc_lim={0x4, 0x1, 0xff}, @generic={0xff, 0x84, "0e02e17595c1099ee77a2394bd3c3a4c92e11aae4cf0a3152449c660576c3bf404e13fc719582c9855ab4a4f48124237b214e6c4f5a4a40aa9da7781fc9036c4f5aee4027562cd0f14344f24a88bf51e3a22ad21e2fe9aaae69294d29b66660e53febde0282ea2a98bbe3111717547edb2bbafe1d26cbc972e70bf0252c7ff3e97084967"}]}, 0xd8) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 2m3.774200817s ago: executing program 4 (id=451): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000cc0)='./file0\x00', 0x2, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="3638919e178389777d715e4daffbe0cc32aded742429e0ff6b95eedbeee750d5193411b770539f09cb29c22f3a1507d93643aafc88aadc859e3e4f758642d45bffcdee0ae4296933e00baf3474e752d392586846d197b23c3de36c6242c8ead9088decbae3bb86bd0ee7a121c63830965f71f1eb8a43f2a995f5394b5553aa2a0e93d85646e2fc452c5b0c6ffbd7f15190d6974094be62f48b5b856f3d754d025edf8c9833f2299d9a9acfa07c65b615c48c292eef"], 0xff, 0x2e7, &(0x7f0000000d80)="$eJzs3M9LG2kcx/Gvml9GNDksu+wuy37ZveyyMGj2XghFaWmgRU2pLRRGnbQh00QygyWlqD31WvpH9CDe6k1oe+jVS2899dKbhxZKqfTXlEwmGjX+oiZa836B5nGe5+vzTGYcPiNk1q48uFXIOUbOdKW7OyzdIguyLpKstkQq1W9dIhKTmi6JSKMF+bfv3cs/xiauXkhnMsOjqiPp8f9Tqjrw55Pbd5f+eub2XV4eWInKavL62tvU69WfV39d+zp+M+9o3tFiyVVTJ0uv3Mikbel03ikYqpc8z3QszRefT4j4/SXXrPbn7NLMTEXN4nR/fKZsOY6axYoWrIpKSKRcUfOGmS+qYRjaHxfsJ7o4Omqm/Wbs0MVTLVgQvtu5HSd+uZw2e0Skd8fY7GK7VgUAAE6OLfk/ptvzv68reK1u+eJ5XmO9n//fPxY5UP5fieyS/4N8X8//tlXL/45Vdg+W/92SutX8HyL/H0J2M//j1Krm/3jw9+u7d21p0G+Q/wEAAAAAAAAAAAAAAAAAAAAA+BGse17C87xE/bX+FQ0+El7/+bjXidbg+He2MQ0aqjER+/5sdjYrYodrGzeOuyWDkpDP/vkQqLVHzmeGB9WXlKf2fFA/P5vt8QvTOcmLLZYMSUKSzeuHavW6tT4s8cb6lCTkp+b1qab1Efnn74Z6QxLyYkpKYsu0f15v1s8NqZ69mNlW3+uPAwAAAADgNDB0Q9P7d8PYrb9Wn86J+PfX+/9/YNv9dUh+Cx3vvgMAAAAA0Cmcyp2CadtWuY2NmIi0fq7q3rV+d3r3HjP3X/vf3pPTSDRsqT9Euu3LCDVOGg1W0aK5fnn46MPR/cIzy79/atb1sS1v3QEuHuHWXZcAAAAAHL3N0L/7GO9NO1cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnad1TxHqCGfZ6sgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQWb4FAAD//9yVIwU=") creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x38) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x175) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m3.605345534s ago: executing program 4 (id=454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x220980, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x5, 0x0) listen(r1, 0x100) r2 = dup(r1) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="300000000000000084"], 0x30}, 0x8050) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0xe0, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{}, {0x2b, 0x2}, {0x7, 0x5}, {0x5a, 0x2}, {0x6, 0x6}, {0xc, 0x5}, {0x81, 0x5}, {0x0, 0x2}, {0x2, 0x5}, {0x5, 0x3}, {0xf2, 0x3}, {0x0, 0x6}, {0xf8, 0x3}, {0x4, 0x5}, {0x8, 0x1}, {0x1, 0x5}, {0x3, 0x2}, {0x79, 0x7}, {0x7, 0x2}, {0x9, 0x1}], "7d6ee2bce0833d2f"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x8, 0x7}, {0xb, 0x2}, {0xa0, 0x2}, {0xcb, 0x5}, {0x0, 0x3}, {0xa, 0x5}, {0x8, 0x6}, {0x4, 0x7}, {0x81, 0x3}, {0x8, 0x4}], "453c1894435e7990"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x7, 0x6}, {0x1, 0x5}, {0x8e, 0x5}, {0x3, 0x2}, {0x2, 0x1}], "904e732e2a06e940"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0xc}, {0xaf, 0x2}, {0x3f, 0x6}, {0x4c, 0x2}, {0xd}, {0xfb, 0x6}, {0x11, 0x2}, {0x3, 0x5}, {0x7f, 0x5}, {0x9, 0x1}, {0x7, 0x1}, {0x0, 0x5}, {0xfe, 0x6}, {0x40, 0x5}, {0x12, 0x3}, {0xc5, 0x7}, {0x4}], "9a91730cbbbb8878"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0xf6, 0x3}, {0xb5, 0x2}, {0xfd, 0x7}, {0x3}, {0x1, 0x1}, {0x23, 0x3}, {0xb, 0x4}, {0xfc, 0x7}, {0x0, 0x2}, {0x5, 0x4}, {0x8, 0x5}], "29a281c14e61cf50"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4001}, 0x4048080) socketpair$tipc(0x1e, 0xbf9de76f07fedae7, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x9, 0x200) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000180)={0x6, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 2m2.480164866s ago: executing program 4 (id=466): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e00050300000000fedbdf250000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\t', @ANYRES32], 0x24}, 0x1, 0x8000000}, 0x0) 2m2.435289207s ago: executing program 32 (id=466): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e00050300000000fedbdf250000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\t', @ANYRES32], 0x24}, 0x1, 0x8000000}, 0x0) 1m49.690707561s ago: executing program 3 (id=567): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (fail_nth: 3) 1m49.01690572s ago: executing program 3 (id=571): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000811) (fail_nth: 4) 1m48.616197893s ago: executing program 3 (id=573): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x3, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101601, 0x119) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) 1m48.369770704s ago: executing program 3 (id=576): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xf6ffffffffffffff) 1m48.292527199s ago: executing program 3 (id=578): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffffe, 0x400000000007, &(0x7f0000006680)=0x4) r0 = memfd_create(&(0x7f0000000240)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd4\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x6) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1fffffffffffd}) syz_pidfd_open(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 1m47.433736422s ago: executing program 3 (id=582): faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x7, 0x1100) ptrace(0x10, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x800021, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x400271c, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) acct(&(0x7f00000000c0)='./file1\x00') perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xd) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r7, &(0x7f0000001180)=""/4096, 0x1000) 1m46.518968455s ago: executing program 33 (id=582): faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x7, 0x1100) ptrace(0x10, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x800021, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x400271c, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) acct(&(0x7f00000000c0)='./file1\x00') perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xd) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r7, &(0x7f0000001180)=""/4096, 0x1000) 1m5.556883927s ago: executing program 6 (id=995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000001c0)=0x180, 0x4) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0xd, 0x2, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x8000, 0x40, 0x4, 0x9}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r7], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', r7, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r10, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001000000", @ANYRES32=r10], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=0x0, @ANYBLOB="200027bd7000fedbdf25020000002800018008000100", @ANYRES32=r4, @ANYBLOB="14000200000000000000000000000000000000000800030000000000180001801400020076657468305f746f5f7465616d0000005000018014000200726f736530000000000000000000000008000300020000001400020070696d367265673000000000000000001400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r10, @ANYBLOB="6eae1f8b2b8a75e871c8df3f4ba32541267b0641e97324b967eba9272fa83200c9f2e82aedcb8d840247c842"], 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) chmod(&(0x7f0000000080)='./file0\x00', 0x103) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xe}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x80000, &(0x7f0000000300)="cb8fd41ff88f14a95e8c04a759a4dfb1b3dfb67500407bef65682cd9a7b82f21c26d7cc851eced620c0d8ff58cb7dcbbafb1503489881783f45e1d78b08657f7fd4a1dde34cb59478593136f4699562b0007c3f70129da81590db8d251e582211370b747ba9a05c4c28298", 0x6b, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000001780)="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") sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000000000100fffe0900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000001400038008000140000000000800024000000000a4010000160a0101000b000000000000010000000900020073797a30000000000900010073797a300000000070010380"], 0x22c}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 1m5.001429488s ago: executing program 6 (id=1003): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0x40000000}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x8, 0x0, 0x0}}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r3, 0x0) pidfd_send_signal(r6, 0x2d, &(0x7f00000007c0)={0x14, 0x666b, 0x80008000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, r0}, 0x94) 1m4.663159843s ago: executing program 6 (id=1010): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e00010000000000fedbdf2507000000", @ANYRES32, @ANYBLOB="000010"], 0x28}}, 0x0) 1m4.54644267s ago: executing program 6 (id=1012): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x22, 0x0, &(0x7f0000000540)="3d25ab555b19c4cbd0017085080040fee5a990ecaf5c07d06f1f7a8aa879d3a622a8", 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) prlimit64(r3, 0x0, &(0x7f0000000140), 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4, 0x9, 0xa, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd000070aac1bd5bba76634793ddd7aae07ef35f0600000000b0d200dddd91b59ca8d5410000000400", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x7a, 0xd]}) 1m3.855757086s ago: executing program 6 (id=1018): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0xa, r3, 0x1}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x1000002, r4}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x7fff0003}]}) times(0x0) timer_create(0x5, &(0x7f00000002c0)={0x0, 0x1, 0x4, @thr={&(0x7f00000005c0)="56cc6d4f0ffd1660ceed58ad115d236bc527b006d71db898207fad539454320643186d94e91d22af8e0a7d0a104f63052a0dc407decc484d7cf4eeb9694312ef6e5caebf84980cedd5b4f1a46f731d049d1e891d1a3aa2c230a2d184f348df7f33655dfc6c15af4d4220e115859baa9747cd457f789e20cd06009f4353bbfa88542e41813bbf640efcdaf30d600ca9d7d238", &(0x7f0000000200)="cb2e343ebd2a34553475465139d5e81166e86487ad3385fa2acca572133756683e11525e0a9c04be0c383e928f44654091444759fb"}}, &(0x7f0000000400)=0x0) timer_delete(r5) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4001, 0x0, 0x6, 0x2) r6 = socket(0x10, 0x80002, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x4080) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r8}], @IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x15}}, @IFLA_VTI_REMOTE={0x8, 0x5, @local}]}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xa7d7}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) mmap(&(0x7f0000766000/0x1000)=nil, 0x1000, 0x3, 0x2010, r7, 0xe50c4000) socket$nl_route(0x10, 0x3, 0x0) 1m2.912945513s ago: executing program 6 (id=1023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="c0fbedd8c1c20fb9b8209a08efe4", 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_pidfd_open(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000980), 0xfdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000380)={0x50, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x31, 0xe, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @mic={0x8c, 0x18, {0xfac, '\x00', @long="322e981dd4e9e4dccdb2eceabeb57bc8"}}, @random={0x4, 0xe, "7e7f1500fab9062d0c04e5ed7212"}]}]}, 0x50}}, 0x4000000) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xb}, 0x0, 0x0, 0x0, 0x7, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='net/rt_acct\x00') preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0xd, 0x0) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 1m2.824172415s ago: executing program 34 (id=1023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="c0fbedd8c1c20fb9b8209a08efe4", 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_pidfd_open(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000980), 0xfdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000380)={0x50, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x31, 0xe, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @mic={0x8c, 0x18, {0xfac, '\x00', @long="322e981dd4e9e4dccdb2eceabeb57bc8"}}, @random={0x4, 0xe, "7e7f1500fab9062d0c04e5ed7212"}]}]}, 0x50}}, 0x4000000) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xb}, 0x0, 0x0, 0x0, 0x7, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='net/rt_acct\x00') preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0xd, 0x0) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 12.381975346s ago: executing program 5 (id=1519): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r4, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r4, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000600)="002147b7357e0e8d442441e9bea6583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16d2e54eec23d7c139254ead9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce449066bfe9fa0700eb00000000001861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c11640bf56f0fe1829f55cd2d91b74aee000000007014dbb599acce7d933ae8928eccad", 0xad}], 0x1, 0x73a, 0x1) preadv(r6, &(0x7f0000000400)=[{&(0x7f0000000140)=""/172, 0xac}], 0x1, 0x6, 0x1) io_submit(0x0, 0x202e, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) 12.225527495s ago: executing program 5 (id=1523): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4f21, 0x8000003, @private1={0xfc, 0x1, '\x00', 0x1}}, 0xffffffffffffff11) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x4001}, 0x1c) 11.213906548s ago: executing program 5 (id=1535): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0xf0}, 0xf00}], 0x1, 0x24004c41) 11.213385728s ago: executing program 5 (id=1536): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x31, 0x1, 0xffffffffffffffb5, 0x4000006, 0x8, 0xfdff}) modify_ldt$read_default(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) epoll_create1(0x80000) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000019000000040000000800000195"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x800ce90, 0x10, 0x3, 0x40004333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, r8, 0xc4fc9e906872338b, 0x0, 0x25dfdbff, {{0x5}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4, 0x80}]}]}]}, 0x38}}, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$getregset(0x4204, r9, 0x202, &(0x7f0000000100)={&(0x7f00000003c0)=""/224, 0xe0}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x2, @private2, 0x401, 0x4}, 0x0, 0x0, 0x1}) getitimer(0x2, &(0x7f0000000000)) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000380)={@ipv4={""/10, ""/2, @empty}, 0x0}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000dc0)=@newtclass={0x14d4, 0x28, 0x2, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xf, 0x4}, {0x2, 0x9}, {0xfff1, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_htb={{0x8}, {0x1470, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x6, 0x5, 0x401, 0x3, 0x5, 0x6, 0x2, 0x9, 0x2, 0x753, 0x400, 0x0, 0x101, 0x0, 0x4, 0x0, 0x3, 0x7a7e, 0xfffffffe, 0x8d9e, 0x401, 0x8000, 0x0, 0xfff, 0x677, 0x4, 0x2, 0x3, 0x0, 0x60, 0x9a66, 0xa, 0x60, 0x4, 0x10, 0x7fff, 0x1ff, 0x4, 0x4, 0x3, 0x7, 0x7, 0x9, 0x1, 0x6, 0x6, 0x8, 0x6, 0x7, 0x1, 0x0, 0x5, 0xfffffff2, 0x9, 0xfffffff7, 0x3, 0x8001, 0x5, 0x80000, 0xffff, 0x9, 0x3, 0x6, 0x3, 0x400, 0xe000000, 0x6, 0x0, 0x1, 0xfffffffd, 0x436e, 0x3, 0x0, 0x0, 0xffff, 0x4, 0x5, 0x3ff, 0x740f, 0x9, 0x8000, 0x5, 0x3, 0x214, 0x9, 0x9, 0x8, 0x8, 0xfffffffd, 0x41, 0xac9f, 0x1, 0x72c, 0xb, 0x9, 0x1, 0x4, 0x0, 0x9, 0x3, 0x5, 0x9, 0x2, 0xfffffffe, 0x28, 0x8, 0x8, 0x9, 0x1, 0x2, 0x0, 0x51, 0x80000001, 0x0, 0x9, 0x7, 0x4, 0x8, 0xe800, 0x8001, 0x88de, 0x7, 0x2, 0x0, 0xfffffffa, 0xffff8000, 0x4, 0x3, 0x800, 0x7, 0xc05, 0x100, 0xfffffff7, 0x2, 0xa, 0x7f, 0xffffffff, 0x1000, 0x1, 0x8, 0x5, 0x9, 0x0, 0x7, 0x4, 0xe074, 0x401, 0x7ff, 0x0, 0x6, 0xfffffff7, 0x6, 0x80, 0x3, 0x0, 0x40, 0x3, 0x7, 0x1, 0x9, 0x200, 0x7f, 0x0, 0xeca5, 0x96f, 0x40, 0x0, 0x1000, 0x2, 0x8, 0x81, 0xfffffff7, 0xcc6, 0x3, 0x8, 0x3, 0x3, 0xffff, 0x3, 0x101, 0x7, 0x8, 0x5, 0x2, 0x10000, 0x6, 0x3, 0x224, 0x2, 0xc, 0x7b, 0x9, 0x5, 0x0, 0x10, 0x3, 0x5, 0x40, 0x100, 0x7, 0x2, 0x1, 0xf98c, 0x4, 0x1, 0x4, 0xf9, 0x8, 0x81, 0x3, 0x4, 0x8, 0x1a9a, 0xe, 0x126, 0xe15, 0x3, 0xfc5, 0x8, 0x1, 0x10, 0x58, 0x4, 0x4, 0xda12, 0x91, 0x6, 0x8, 0x3, 0xffffffff, 0x1, 0xfffffff7, 0xfffffff7, 0x800, 0x1, 0x7fff, 0x4, 0x5, 0x7, 0x7a2, 0x10001, 0x0, 0x4, 0x4, 0x8, 0x9, 0x8, 0x9, 0xbe, 0x6, 0x9, 0x5, 0x100, 0x2, 0x9, 0x1]}, @TCA_HTB_CTAB={0x404, 0x3, [0x6, 0x401, 0xb, 0x6, 0x3, 0x3, 0x0, 0x9, 0x5, 0x8, 0x2, 0x1, 0x3ff, 0xf, 0x6, 0x9, 0x0, 0x5, 0x6d48, 0x4, 0x5, 0x7, 0x5, 0x9, 0xffffffff, 0x15, 0x8, 0x3cc8, 0x9, 0xff, 0x5, 0x3, 0x75, 0x8, 0x8000, 0x6, 0x5f55, 0x7, 0x2, 0x1, 0x5, 0x2, 0x8, 0x1, 0x0, 0x1a, 0x8001, 0xfffffffd, 0x0, 0x0, 0x2, 0x1, 0x7, 0x7498, 0x2, 0x80, 0xff, 0x10000, 0x4, 0x10, 0x4, 0xfff, 0x8, 0x1, 0x8, 0x1, 0x4d1, 0xfffffff9, 0x7f, 0x2, 0x674, 0x5, 0x5, 0x8, 0x8, 0x7fffffff, 0x0, 0x3, 0x0, 0x3, 0x20000, 0x2, 0x2, 0xb44, 0xa, 0xff, 0x2, 0xb, 0x3, 0x3, 0x101, 0x1, 0xda17, 0xf7e, 0x10001, 0x0, 0x6577, 0x4, 0x8, 0x7f, 0x80000000, 0xffffff33, 0x2, 0xffffffff, 0x9, 0x80, 0x9, 0x5, 0xf7, 0x60a720e6, 0x200, 0x40, 0xfffff8a5, 0x1, 0xfffffbff, 0x6, 0x8, 0x4, 0x3, 0x1, 0x800, 0x5, 0x5, 0x10000, 0x10, 0x3, 0x8, 0x800, 0x2, 0x44, 0x400, 0x1, 0x1a, 0xb, 0x6, 0x1, 0x1, 0x10, 0xa, 0x9, 0x88, 0x9, 0x2, 0x5, 0xeb41, 0xfff, 0x6, 0x7, 0x2, 0x4, 0x8, 0x4, 0x3, 0x75e0, 0x7fff, 0x3ff, 0x7d4, 0x41, 0x19316ca9, 0x3, 0x5, 0xdff, 0x6, 0x190, 0xe7, 0x0, 0x4008, 0x1, 0x8, 0x800, 0x4, 0xb684, 0xfffff972, 0x9, 0x5, 0x9, 0x8, 0xe, 0x1ff, 0x9, 0x6, 0xffffffff, 0x4, 0x6, 0x1, 0x6, 0x7fffffff, 0x7fffffff, 0x3, 0xdb1, 0x0, 0x3, 0x37af, 0x9, 0xfffffffd, 0x7, 0x1, 0x16, 0x6, 0x53, 0xd281, 0x1, 0x6d2, 0x4, 0x7fffffff, 0x1, 0x6, 0x7, 0x6c24, 0x10000, 0xf65d, 0x5ec6, 0xfffffffb, 0x1, 0x0, 0x828, 0xa8d, 0x81, 0x10, 0x473, 0x800, 0x5, 0x4, 0x7, 0x8, 0x10000, 0xd1c1, 0xffffffff, 0x2, 0x0, 0x6, 0x5, 0x1, 0x5, 0xb2, 0x200, 0x1ba, 0x2, 0x7, 0x906, 0x2, 0x9e14, 0xfffff801, 0x5, 0x2, 0x3, 0x4, 0x401, 0x0, 0xd8, 0x3, 0x6, 0xffff, 0x0, 0x1ff, 0x6d]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CTAB={0x404, 0x3, [0x4, 0x7, 0x8, 0x5, 0x8, 0xf, 0x7f, 0x9, 0x4, 0x6, 0xd, 0x115, 0x3, 0x67f4, 0x8, 0x3, 0x659, 0x5, 0x1, 0x3, 0x8, 0x9, 0x1, 0x8, 0x1321f89f, 0x7, 0x80000000, 0x9, 0x5, 0x4, 0x0, 0x8, 0x4, 0x1, 0x400, 0x28, 0x8, 0x5, 0x40, 0x401, 0x0, 0x8000, 0x10, 0x5, 0xfffffffa, 0x6, 0x61, 0xe21, 0xa2, 0x400, 0xfff, 0x3, 0x0, 0xffffff59, 0x1, 0x8000, 0xe, 0x1, 0x0, 0x7f, 0x7ff, 0xffffffff, 0x8654, 0x9, 0x2c1, 0xfffffffe, 0x2f9a, 0x16, 0x1, 0x4, 0x3, 0x6, 0x2, 0x5, 0xa, 0xffffffff, 0x8, 0xd, 0xc, 0x7, 0x8, 0x3, 0x7fff, 0x4, 0x7f, 0x1, 0x5, 0x0, 0x0, 0x4000, 0x4, 0xb62b, 0x7, 0xa17, 0x2, 0x2, 0x6, 0x0, 0x3ff, 0x7, 0x4, 0x5, 0x9, 0xffffffff, 0x3, 0x2d7, 0x577, 0x2, 0x2, 0xd, 0x5, 0x2, 0xfff, 0x7f, 0x1, 0x0, 0xf5f, 0x8, 0x80000000, 0x3, 0x9, 0x4, 0x6, 0xb, 0x0, 0x2, 0x2, 0x9, 0x4, 0x6, 0x1, 0x91e, 0xfffffff8, 0xf, 0x1, 0x4, 0x7, 0xffffffff, 0x6e0b, 0x4, 0x9, 0x2, 0xd73, 0x10001, 0x9, 0x4dc, 0xd, 0x6, 0x1, 0x80, 0x7, 0xfffffffd, 0xfffff800, 0x0, 0x80, 0x9, 0x6, 0x4, 0xa, 0x100, 0x3, 0x7, 0x8, 0x6, 0xd, 0xba, 0x8, 0xfffffff8, 0x2, 0x7, 0x7, 0x5, 0x5, 0x8, 0x2ab, 0x5, 0xfffffffb, 0xdf, 0x1, 0x2, 0x9, 0x5, 0xc130, 0x172, 0x6, 0x9, 0x200, 0x995b, 0x8, 0x4, 0x0, 0x6, 0x5, 0x3ce0, 0x5, 0x73fe, 0x4, 0x2, 0x9, 0x8000, 0x0, 0x4, 0x2a6, 0x10000, 0x6, 0x2, 0xba2c, 0x7, 0x5, 0x49, 0x6, 0x6, 0xa, 0xafb, 0x3, 0x3, 0x3, 0x686, 0x7, 0x6, 0x10000, 0x49, 0x7f, 0xa8, 0x4309, 0x74f, 0x8, 0x5, 0x6, 0x2, 0x9, 0xcddf, 0x2, 0xffffffd0, 0x44a, 0x9, 0x2, 0x1, 0xae27, 0xfffffe01, 0x80, 0x7, 0x1, 0x200, 0x8, 0x6, 0x6, 0x101, 0x8000, 0x5, 0x2, 0x6, 0xb17b, 0x5, 0x2, 0x6]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x2}, @TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x2, 0x6, 0xffff, 0x0, 0x3}, {0x1, 0xeeba176edbeeede9, 0x48f, 0xb, 0x8, 0x80000001}, 0x4, 0x10000, 0x3ff, 0x6, 0x2}}, @TCA_HTB_RTAB={0x404, 0x4, [0x2, 0x8, 0x0, 0x2, 0x7ff, 0x10, 0x7, 0x5, 0x1ff, 0xffff8426, 0x4, 0x7, 0x40, 0xb, 0x8, 0x7, 0xf, 0x6, 0x80000000, 0xff, 0x5, 0xccb, 0x81, 0xb, 0x1, 0x5, 0x331, 0x6, 0x1, 0x101, 0x0, 0x4, 0x4, 0xfdf, 0x706, 0x80000001, 0x7fffffff, 0x0, 0x6, 0x1b79, 0x6, 0x3, 0x10001, 0xe3b9, 0x1, 0x7ff, 0x80000001, 0x100, 0xa, 0x1, 0x3ff, 0x2, 0x4, 0xdeb2, 0xba, 0x6e9, 0x1000, 0xb3, 0xe, 0x3, 0x1ff, 0xfffffffd, 0x80000000, 0x919, 0x2, 0x3, 0x8000, 0xfffffff8, 0x3, 0x10001, 0x450, 0xc0000, 0x4, 0x8, 0xb6, 0x7fff, 0xfffffffd, 0x1000, 0x3, 0x7f, 0x1, 0x8, 0x0, 0x1, 0x5, 0x10, 0x8000, 0x8, 0x7fffffff, 0x3, 0x3, 0x5, 0xfffffffc, 0x9, 0x1aa, 0x1, 0xe7a, 0x3, 0x4, 0x7, 0xd31f, 0x5, 0x0, 0x7, 0x1ff, 0x3, 0x7, 0x7, 0xa68, 0x200, 0xfffffff9, 0xb, 0x8000, 0xfffffff9, 0xb, 0x1, 0x0, 0xbc24, 0xf13, 0xffff, 0x1, 0x8, 0x7f, 0x5, 0x2, 0x55, 0x4, 0xac06, 0x80, 0x8, 0x3, 0x5, 0x0, 0x9a, 0xeb, 0x2, 0x4, 0x5, 0x0, 0xb, 0xb7, 0x5, 0xe, 0x7, 0x5, 0x9, 0x71141d46, 0xdf, 0x7, 0x6, 0xc242, 0xde, 0x8, 0x2, 0x10001, 0xd, 0x6, 0x3, 0x4, 0x0, 0x0, 0x5, 0x8, 0x7, 0x5, 0x8, 0x8, 0xfffffffc, 0xffffffff, 0x8, 0x8000, 0x40000000, 0x0, 0x5, 0x2, 0x3, 0x10, 0x2, 0x8, 0x0, 0x383, 0x7, 0x8001, 0xf0, 0x7, 0xdd9, 0x0, 0x480, 0x7, 0x8, 0x8000, 0x0, 0x3, 0x1, 0x8001, 0xff63, 0x4, 0x4, 0x9, 0x6, 0x0, 0x2, 0x28, 0x7, 0x7155f5c5, 0x4, 0x4, 0x2, 0x1, 0x40000000, 0x8, 0x34c6, 0x6, 0x2, 0x1, 0x5, 0x9, 0xff, 0x10, 0x8, 0x40, 0x1, 0x2, 0x3, 0x2, 0x4, 0x8, 0x3, 0x10000, 0x400, 0x0, 0x7fff, 0xa8f, 0x4, 0x0, 0xffffffff, 0x100, 0x6, 0x7, 0x0, 0x5, 0x2, 0x1000, 0x4, 0x4, 0x1, 0x3, 0x0, 0xffc00000, 0xff, 0xf3c0, 0x71, 0xa, 0xa, 0x0, 0x800]}, @TCA_HTB_RATE64={0xc, 0x6, 0x1}, @TCA_HTB_CTAB={0x404, 0x3, [0x10000, 0xe, 0x4, 0x7, 0x31c, 0xfffffffb, 0xfffffff7, 0xb, 0x8, 0xfffff000, 0x1, 0x80000000, 0x7, 0x8, 0x10000, 0x400, 0xfffffffc, 0x6, 0xf1d, 0x2, 0x100, 0x1, 0x7, 0x3, 0x2, 0x0, 0x5f3, 0x0, 0x5, 0x6003, 0x2, 0x6, 0x50b, 0x0, 0x3, 0x9, 0x1, 0xf, 0xb4, 0xf100, 0x912, 0x8, 0x17, 0x6, 0x4, 0x1, 0x200, 0x1d, 0x1, 0x3, 0x4, 0x3, 0x92, 0x6, 0x81000, 0x3, 0x3ff, 0x4f, 0x7, 0x4, 0x2, 0x5, 0x9, 0x7, 0x7, 0x4, 0x5, 0xa, 0x6, 0x7, 0xb4, 0x7, 0x0, 0x1c, 0x7, 0x1, 0x7, 0x149, 0x2caf, 0x9, 0x0, 0x3735, 0x9, 0x7, 0xd23, 0xa, 0x9, 0x8, 0x5, 0x1, 0x0, 0x80000001, 0x4, 0x1, 0x7, 0x9, 0x8, 0x40, 0x6, 0x1, 0x13a, 0x1, 0x81, 0x0, 0x0, 0x1000, 0x7d00, 0x7, 0xff, 0x1, 0x9, 0x4fd, 0x0, 0x9, 0xf63, 0x3, 0x5ec2, 0x5, 0xc8, 0x1, 0x1, 0x6, 0x3, 0x1, 0x5, 0x5, 0x4, 0x7, 0x8, 0x4, 0xfff, 0xfffffff9, 0x3, 0xfffffff9, 0x7, 0x4d, 0x7, 0x9, 0xe, 0x0, 0xb, 0x3, 0x8, 0x146, 0xf, 0x3, 0x0, 0x9, 0x40000000, 0x0, 0xd, 0x1, 0x8, 0x0, 0x7, 0x100, 0x0, 0xffffffff, 0xc6a, 0x2, 0x9, 0xd9f9, 0x401, 0x6c, 0x100, 0xa43, 0xfffffffa, 0x81, 0x8, 0x7, 0x7, 0xfffffc01, 0xffffffff, 0x3ff, 0x8a, 0x8, 0x401, 0xc, 0x5, 0x100, 0x1, 0x9, 0x997, 0x8, 0x8, 0xd77a, 0x80, 0xc397, 0x3, 0x101, 0x3, 0x400, 0x19, 0x28, 0x1, 0x7, 0xca3, 0x7, 0x8000000, 0x725c, 0x0, 0xfffffff0, 0x7, 0x95, 0xffff, 0xec38, 0x6, 0x55, 0x909, 0x2, 0x10001, 0x9, 0x9, 0x1, 0x3, 0x5, 0xfffffffd, 0x21f8, 0x2, 0xb4, 0x1, 0x800, 0x8, 0x8, 0x7ff, 0x80000001, 0x7, 0xb79b, 0x9, 0xad74, 0x64, 0x4, 0x80000001, 0xff, 0x6570, 0x3, 0x70e13546, 0x7, 0x800, 0x9, 0x57e0000, 0xbbb3, 0x10001, 0x4, 0x200, 0x200, 0x7, 0x5, 0x5, 0x7, 0x1, 0x8, 0x4, 0x1, 0x6, 0x6]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x2}]}}]}, 0x14d4}, 0x1, 0x0, 0x0, 0x4}, 0x24000044) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 10.583963696s ago: executing program 5 (id=1544): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000711032000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020"], 0xfe33) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 10.278380187s ago: executing program 5 (id=1550): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000009940)={0x15, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x2, 0x803, 0x2) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) unshare(0x2e000200) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(r3, 0xe, &(0x7f0000000100)={0x8000000000000008, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xb454, 0xfc}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a9", 0x12, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x40001) r9 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) fcntl$dupfd(r9, 0x0, r9) 10.259544963s ago: executing program 35 (id=1550): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000009940)={0x15, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x2, 0x803, 0x2) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) unshare(0x2e000200) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(r3, 0xe, &(0x7f0000000100)={0x8000000000000008, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xb454, 0xfc}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a9", 0x12, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x40001) r9 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) fcntl$dupfd(r9, 0x0, r9) 8.997278798s ago: executing program 1 (id=1568): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) unshare(0x2a020400) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, 0x0, 0x0) 8.977444104s ago: executing program 1 (id=1570): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c18000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 8.837871697s ago: executing program 1 (id=1571): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x4000, 0x0, 0x9, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xbe}, 0x0, 0xdfffffffffffffff, r1, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000380)={0x0, 0x7c29, 0x10, 0xffffffff, 0x40004330}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000440)=0x8, 0x0, 0x4) r8 = epoll_create1(0x80000) r9 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0xc000000b}) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x2, @private2, 0x401, 0x4}, 0x0, 0x0, 0x1}) setitimer(0x2, &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000000)) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) openat$random(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r10, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) brk(0x800000) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r11, 0x402c542c, &(0x7f00000000c0)={0x9, 0x0, 0xd0, 0x4002, 0x5, "0c411be01fbcd2b7cb366b0200", 0x1004, 0xffffffff}) socket$key(0xf, 0x3, 0x2) 8.641936529s ago: executing program 1 (id=1576): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20024810}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r3, &(0x7f0000002400)=""/118, 0x76, 0x10000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mount$9p_unix(0x0, 0x0, 0x0, 0x12d7498, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x65) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = epoll_create1(0x80000) r9 = fcntl$dupfd(r7, 0x406, r8) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000000)) r10 = getpid() r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r10, r11, 0x7, r9, &(0x7f0000000100)={r8, r9}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) mlockall(0x2) sendfile(r5, r4, 0x0, 0x7ffff000) 6.317843367s ago: executing program 1 (id=1590): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4f21, 0x8000003, @private1={0xfc, 0x1, '\x00', 0x1}}, 0xffffffffffffff11) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x4001}, 0x1c) 5.761799089s ago: executing program 1 (id=1598): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) dup2(r1, r0) 5.745824366s ago: executing program 36 (id=1598): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) dup2(r1, r0) 5.320003073s ago: executing program 7 (id=1605): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4000040) 5.209645862s ago: executing program 7 (id=1606): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000002c0)={[{@abort}, {@noblock_validity}, {@grpquota}, {@errors_remount}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x6, 0x60d, &(0x7f0000000340)="$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") sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) select(0x40, &(0x7f00000002c0)={0xf, 0x8002, 0xe, 0x7, 0x4, 0x9, 0x7fffffff, 0x1000}, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)={0x2bc, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x24f4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc34}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2f2e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x85346b6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf1e7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa92}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe055}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9d61}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}]}]}, 0x2bc}}, 0x20000000) ioctl$TCXONC(r0, 0x540a, 0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) acct(&(0x7f0000000300)='./file0\x00') syz_open_dev$hiddev(&(0x7f00000001c0), 0x2, 0x40) 4.413229207s ago: executing program 7 (id=1615): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@getsa={0x28, 0x12, 0x1, 0x70bd26, 0x25dfdbfd, {@in6=@empty, 0x4d5, 0x2, 0x32}}, 0x28}}, 0x4000040) 4.412719037s ago: executing program 7 (id=1617): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x707b, 0x400, 0x2, 0x40288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x1, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) io_uring_enter(r2, 0x154e, 0x0, 0x41, 0x0, 0x0) 4.363690528s ago: executing program 7 (id=1618): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4f21, 0x8000003, @private1={0xfc, 0x1, '\x00', 0x1}}, 0xffffffffffffff11) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x4001}, 0x1c) 4.305581676s ago: executing program 7 (id=1619): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0xfffffffd, 0x8000}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0xfffffffd, 0x8000}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x130, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_io_uring_setup(0x10b4, &(0x7f0000000040)={0x0, 0x1c6, 0x400, 0x5, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) perf_event_open(0x0, 0x0, 0xfffffffbffffffff, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xd5, 0x0, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000ff05001000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62f67a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedf", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) r5 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x44, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0xef16, 0x4, 0xc75, 0x8]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x14}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x44}}, 0x8000) (async) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x44, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0xef16, 0x4, 0xc75, 0x8]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x14}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x44}}, 0x8000) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r5, 0x0, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x5421, 0x110e22fff5) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x5421, 0x110e22fff5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x4, 0x0, 0x0}) clock_adjtime(0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0x9, @empty, 0x4}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x5, @mcast2, 0x6}, @in6={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0xfffffff7}, @in6={0xa, 0x4e21, 0x24000, @private1, 0x1}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @broadcast}], 0xd0) io_uring_enter(r2, 0x47ba, 0x0, 0x28, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000079109000000000006200000a00000000950000086594aa00e9a9b6d219c966441748cd450a5aac76190960783a2d9a931e57b37d6ca3a33f5f65f458741158302a6c"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) dup3(r5, r1, 0x80000) socket$netlink(0x10, 0x3, 0x8000000004) (async) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f00000000c0)=[{&(0x7f00000001c0)="580000001500add427327b472545b45602117fffffff81000e224e217f000001925aa80020007b00090001e809000000ff0000f038c71036000000ffffffffffffffffffe7ee000000000000000002000000000000000000", 0x58}], 0x1) (async) writev(r9, &(0x7f00000000c0)=[{&(0x7f00000001c0)="580000001500add427327b472545b45602117fffffff81000e224e217f000001925aa80020007b00090001e809000000ff0000f038c71036000000ffffffffffffffffffe7ee000000000000000002000000000000000000", 0x58}], 0x1) 2.909684325s ago: executing program 9 (id=1636): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000001440)="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"}, {&(0x7f0000000380)="1f5f5a5072adb15deae0818d3d4084b209ef6b9a9bb45dc6c453d8338718d3d47a0d49e96c6262c351453787de3102f0c1facce0ce01ab6d70ab968932f183eda34a1c494312e325d88938b70a0e35d44902673f1ba1b433af943e285154c878c70472d352172a16c244de28c1deb9a06305c3d5ea180620d8f71391d1e35dea2bfcde5fbe55f4e6d919e54662afd573f67707adeef462b95674670a2c9aac2ba6b162a3f3da13ed7ef0c20bae6b"}, {&(0x7f0000000440)="6cdff943112dc313adee3988d3b554e5181cd78bd1c7cd90f050b22d8fbabe6ab82ae6f454b531f069aef7a48ece073a692f7536e76cd1a591a81b1595554d58e8734f20a862ce2e7e1339833edd2c6571b8a9762fb2a503f17029ffb536e4b84c1fa4d78c999602065f5ef11b6c75ad710c16b101503ad83113d1dd9315d1da47b842d0b90b54dfb46047abf762664df14a5d8a7735"}, {&(0x7f0000000500)="aab13358bb6f8e898ca8a5e513d4b215fe9289281f277ae17fcef2176c5e78ba66bbf7f41b6e7209e39450a5ff83fe00d41140eaee16334fad74c60e4e51ad96b9a69895720cff41a55f829c1d12dc0155c1a74233fb7504af28b16ede72d835ada3565625610345fb7a33ce86c0f783237f26855cdd6fac94075952ae2a86d57ee3"}, {&(0x7f00000005c0)="c808ffcfb5d92fd282a75ddd338c8b65c61203d289ee754b42131abdd9d1b0d1a6fcd1abb027b5582e349cdb47ce21ec9dbde0ddb624f96157ee55aa56e81fcfe02d32e749dddc13c65fd94d54f742b6af7f72e8e0027922f70d49621c5448b5e6de5367d99b8df568a2728e270eadc80165b6e42b3168485e57bbf251b8e5b099dd9bb83f0ffbd33b2743c5a7632407dbcee8dafe565742fdb534a23bd20eda2916e57c1b834fdd31b250ededd4cac9967bbbf350f6b36850c83687b34343da"}, {&(0x7f0000000680)="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"}, {&(0x7f0000000780)="0a02074704297e33aba5a928a15c5dbbf4abd22241a6f65343538a129fe3c330ce853a740b9aa74288ef04915e7eab37e236c51b486cd255f4148d40f7490a69f291e1e348dae7edcf4cf7590f90a7488c6eb1201dda40ffe63a31f02c6a47e12a28dff2aef14d4b81165d7460ee42622f5cc307d7641f7b4199dfe0bd53daa86c11fb995a4276cd0f0ea3592f9da43274777c444a83c05539ea667cb4c7ffe3a2ed27510194e31805497813233a33475380f9be2d1f9412b87cc94cc1fbbfef531a37"}, {&(0x7f0000000880)="925cc6aa00b801c78f2aff35eb25cc87c2dc955f753f49f2df220b828800b17aec65061349873210ce8f2baee6fa8e6630e7dc0c2662db02fc97bb123c2d27f2ed307849ea025ac25e302c52605f03f77a36185c3f87c35a9b6cb6c7e6f965064e59774a2e59fb79e219871082f0a9add57a5163181a77da9a2e87bf67776b365aa620bdaa08fcea9a001c5ae2a91ad08d2a30aafc08593f0d1dba082dad643ec6d81b6950880cb853b946ec1e7b0867521d2898935c51a5b90cc9d2eac91e3663179a0f864556d5a06c06515a006e0727d5ae35ce"}, {&(0x7f0000000980)="1cc493e6fe9edeb1d3887a2bd52b6313550ab0b899c3dea5d4c67a04a5b72dd4fbb1988222b03a5209089094f421ab36994a29f6f1558ade5f4522b02d0a55dae9577cbcaaef025abaec7a09136d885365f9c7b62640af3df5d0170734b1318ced0347d6c148b5ce6ddc0b2bfc7671a3a0bda01aad3678b596aa947269d4db60c732c463c93ecbf86d0acb2a724a1e08890a2e579f1390d3cbacf4800a5647882b6d08755586043c402cbad5ebb33d7208"}], 0x0, 0x0, 0x19fe6c92f63a8faa}, 0x40008d5) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sync_file_range(r2, 0x8, 0x30, 0x5) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x252) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = dup2(r4, r4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$binfmt_misc(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x4) ptrace$setregs(0xffffffffffffffff, r3, 0xfffffffffffffffe, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0x1000, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) r6 = fsopen(&(0x7f0000000080)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r7, 0x2) r8 = fsmount(r6, 0x1, 0x70) fchdir(r8) socket$caif_stream(0x25, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x4b2}, 0x38) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x1, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x41}, 0x9db6}, @in6={0xa, 0x4e22, 0x800, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, 0x6}, @in6={0xa, 0x4e22, 0x2, @private2, 0x8001}, @in6={0xa, 0x4e21, 0x409, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e23, 0x1fe, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, @in6={0xa, 0x4e21, 0x9, @private2, 0x7}], 0xe4) 2.864828136s ago: executing program 9 (id=1637): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) 2.775718589s ago: executing program 9 (id=1639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r6, 0x1, 0x70bd2b, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$sock_bt_hci(r3, 0x400448dd, &(0x7f0000000100)) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x22000000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) 2.190297166s ago: executing program 2 (id=1642): r0 = socket$inet6_sctp(0xa, 0x98d486e4294135b0, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x3, 0x9, 0x9, 0x6}, 0x20) setresuid(0x0, 0xee00, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000201fed797e438f6342100000200000b08a3000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x40040) r2 = socket(0x10, 0x3, 0x0) r3 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/668, 0x6) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0400000004000000040000000000010008080000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000070600349adf9eec1bbbdf9dbe4f19e0314e49d52e30bb76fefe13eeaf8acf8d8019f7fa9e15dda500d680000000a10ee45ef7fbc9ac624d631a99a4dbfd2b0f3f2a0e46dfa9c9ad4802d286a72a2004f123ca9d1b49682828b13bae2c89837a87e0a9a955e1eea12c276ccc1192d5f9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000003ffffffff00"/28], 0x48) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x100000, &(0x7f0000000100)={[{@gid={'gid', 0x3d, r4}}, {@nr_inodes={'nr_inodes', 0x3d, [0x67]}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x78]}}], [{@context={'context', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, ','}}, {@obj_type={'obj_type', 0x3d, '+.,)}'}}]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000340)=0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r5, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000000)="bf", 0x1}], 0x1, &(0x7f0000000680)=ANY=[], 0xc}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)='s', 0x1}], 0x1, &(0x7f00000006c0)=ANY=[], 0x10}}], 0x2, 0x4044044) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x292180, 0x0) r7 = io_uring_setup(0x3f1, &(0x7f0000000140)={0x0, 0x3, 0x20000, 0x2, 0x0, 0x0, r6}) poll(&(0x7f0000000080)=[{r7, 0x200}], 0x1, 0x6) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r8, 0xc0403d08, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x300, 0x0, 0x3, 0x9, 0x3, 0x6}, 0x20) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @broadcast}], 0x10) 1.893845648s ago: executing program 8 (id=1647): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAP(r0, 0x4b52, &(0x7f0000000040)={0xfa, &(0x7f0000000000)=[{0x0, 0xfdfd}]}) 1.893530688s ago: executing program 8 (id=1648): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x1, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) io_uring_enter(r2, 0x154e, 0x0, 0x41, 0x0, 0x0) 1.521669865s ago: executing program 0 (id=1651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x220980, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x5, 0x0) listen(r1, 0x100) r2 = dup(r1) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="300000000000000084"], 0x30}, 0x8050) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0xd8, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{}, {0x2b, 0x2}, {0x7, 0x5}, {0x5a, 0x2}, {0x6, 0x6}, {0xc, 0x5}, {0x81, 0x5}, {0x0, 0x2}, {0x2, 0x5}, {0x5, 0x3}, {0xf2, 0x3}, {0x0, 0x6}, {0xf8, 0x3}, {0x4, 0x5}, {0x8, 0x1}, {0x1, 0x5}, {0x3, 0x2}, {0x79, 0x7}, {0x7, 0x2}, {0x9, 0x1}], "7d6ee2bce0833d2f"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x8, 0x7}, {0xb, 0x2}, {0xa0, 0x2}, {0xcb, 0x5}, {0x0, 0x3}, {0xa, 0x5}, {0x8, 0x6}, {0x4, 0x7}], "453c1894435e7990"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7, 0x6}, {0x1, 0x5}, {0x8e, 0x5}, {0x3, 0x2}], "904e732e2a06e940"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0xc}, {0xaf, 0x2}, {0x3f, 0x6}, {0xd}, {0xfb, 0x6}, {0x11, 0x2}, {0x3, 0x5}, {0x0, 0x1}, {0x7f, 0x5}, {0x9, 0x1}, {0x7, 0x1}, {0x0, 0x5}, {0xfe, 0x6}, {0x40, 0x5}, {0x12, 0x3}, {0xc5, 0x7}, {0x4}], "9a91730cbbbb8878"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0xf6, 0x3}, {0xb5, 0x2}, {0xfd, 0x7}, {0x3}, {0x1, 0x1}, {0x23, 0x3}, {0xb, 0x4}, {0xfc, 0x7}, {0x0, 0x2}, {0x5, 0x4}, {0x8, 0x5}], "29a281c14e61cf50"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4001}, 0x4048080) socketpair$tipc(0x1e, 0xbf9de76f07fedae7, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x9, 0x200) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000180)={0x6, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 1.312015875s ago: executing program 2 (id=1652): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x938, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x40012002, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020000000400000008009e16e76600000189d90080000000", @ANYRESHEX, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="180019aa5e67d2856a7c", @ANYRES32=r0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r1}, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x4}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x6, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) unshare(0x20000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x50, r2, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x0) timer_getoverrun(0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(0xffffffffffffffff, 0x0, 0x103000, 0xe997037d5da35e00) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0xfffffffffffffce1) io_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffdffffffff, 0xffffffffffffffff, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) 1.173274338s ago: executing program 0 (id=1653): socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f000009ddc0), 0x20100) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYRES64=r3, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 1.141120062s ago: executing program 0 (id=1654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) (fail_nth: 7) 1.005682035s ago: executing program 8 (id=1655): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000002c0)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000002cc0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, r6, 0x19c00, 0x0, 0xfd7c, 0x10, &(0x7f0000000180)={0x0, 0x2, 0x5b, 0x9}, 0x10}, 0x94) socket$rds(0x15, 0x5, 0x0) (async) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) 740.289194ms ago: executing program 0 (id=1656): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400244}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0xc}) r3 = eventfd2(0x5, 0x80000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x6, 0x9, 0x1, 0x95, 0x0, 0x80000001, 0x280, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x5}, 0x2, 0x7, 0x5, 0x4, 0x4, 0x6, 0x25a3, 0x0, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xa) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040)=r3, 0x1) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 703.897887ms ago: executing program 0 (id=1657): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000001500)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@abort}]}, 0x11, 0x556, &(0x7f00000005c0)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8H7nZO7k3O/ebe7+m5OTckgKE1kf1TiHg5Ir5JIg5GRJKvG4185cTadqv3r85mSxKNxqd/Jc3tsnrrtVrP259XXoqI376KOF7Y2G5teWWhVC6ni3l9sl65NFlbXjlxoVKaT+fTi9MzM6fenpl+7913+hbrG2f/+f6T2x+e+vro6ne/3D10M4nTcSBf1x7HE7jWXpmIifw9GYvTj2w41YfGdoJd+f/JgPeD7RnJ83wssj7gYIzkWQ/8/30ZEQ1gSCXyH4ZUaxzQurbv03Xwc+PeB2sXQBvjH137bCT2NK+N9q0mD10ZZde7431oP2vj1z9v3cyW6N/nEABbunY9Ik6Ojm7s/5K8/9u+kz1s82gb+j94dm5n4583O41/Cuvjn+gw/tnfIXe3Y+v8L9ztQzNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq59/JctWfutsWC+H3dHdz/8nLlSvfQkMbe7dz3ilY7j32T9+Ccdjn/2fpztsY0j6a3Xuq3bOv6nq/FTxOsdj/+DGa1k8/nJyeb5MNk6Kzb6+8aR37u1P+j4s+O/b/P4x5P2+dra47fx455/027rHoo/ej//dyWfNcut+ccrpXp9cSpiV/LxxsenHzy3VW9tn8V/7Ojm/V+n839vRHzeY/w3Dv/8ak/xD+j4zz3W8X/8wp2PvvihW/u99X9vNUvH8kd66f963cEnee8AAAAAAABgpylExIFICsX1cqFQLK7d33E49hXK1Vr9+Pnq0sW5aH5XdjzGCq2Z7oNt90NM5ffDturTj9RnIuJQRHw7srdZL85Wy3ODDh4AAAAAAAAAAAAAAAAAAAB2iP1dvv+f+WNk0HsHPHV+8huG15b5349fegJ2JH//YXjJfxhe8h+Gl/yH4SX/YXjJfxhe8h+Gl/wHAAAAAAAAAAAAAAAAAAAAAAAAAACAvjp75ky2NFbvX53N6nOXl5cWqpdPzKW1hWJlabY4W128VJyvVufLaXG2Wtnq9crV6qWp6Vi6MllPa/XJ2vLKuUp16WL93IVKaT49l449k6gAAAAAAAAAAAAAAAAAAADg+VJbXlkolcvpooLCtgqjO2M3FPpcGHTPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//xVY3tw==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r5], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000004c0)=""/232, 0xe8, 0x0, &(0x7f0000000140)=""/93, 0x5d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000300)=r9) write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.incfs.metadata\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4000000}, 0x0) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r10}, 0x10) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='clear_refs\x00') write$binfmt_format(r11, &(0x7f0000000000)='-1\x00', 0xfffffd17) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) sendmsg$kcm(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='@', 0x1}], 0x1}, 0x80) 597.902196ms ago: executing program 8 (id=1658): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000400000030000000300000000600000000000000030000930100000003000000b70b0000ffffff7f04000000050001000500000004000000010000000101000000615f5f2e"], 0x0, 0x4e, 0x0, 0x9}, 0x28) 585.615213ms ago: executing program 8 (id=1659): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000000000000, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x4}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") openat(0xffffffffffffff9c, 0x0, 0x143142, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)={0x2400, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}]}) 565.01315ms ago: executing program 9 (id=1660): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x39, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x5, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x80082102, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe2$watch_queue(&(0x7f0000001080)={0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000002340)=""/4096, 0x1000) r3 = socket(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @local, 0x2}, 0x1c) listen(r3, 0x7f) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0b030000000000000000260000001f0001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x11c, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc96}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffa}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004090) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f00000011c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000002300)=[{&(0x7f0000001200)="97e8e909ef8e", 0x6}, {&(0x7f0000000140)="5495", 0x2}, {&(0x7f00000001c0)="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", 0xe42}], 0x3}}], 0x1, 0x4000800) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="850000002a00"], 0x0, 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x2, 0x6}, 0xfffffffffffffdd9) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r8, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 438.309805ms ago: executing program 2 (id=1661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f00000000c0)=0xe4bc, 0x4) fsetxattr(r1, &(0x7f0000000040)=@random={'btrfs.', '\x00'}, &(0x7f0000000080)='$\x00', 0x2, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0xa7ff, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 349.687007ms ago: executing program 2 (id=1662): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="170000000000000095000000000000"], 0x0}, 0x94) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x79ba, &(0x7f0000000540)={0x0, 0x3bd1, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)=""/192, 0xc0}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x4, 0xc, 0x7, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7a0, 0x7, 0xa34, 0x2}}) 290.914776ms ago: executing program 8 (id=1663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x220980, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x5, 0x0) listen(r1, 0x100) r2 = dup(r1) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="300000000000000084"], 0x30}, 0x8050) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0xd8, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{}, {0x2b, 0x2}, {0x7, 0x5}, {0x5a, 0x2}, {0x6, 0x6}, {0xc, 0x5}, {0x81, 0x5}, {0x0, 0x2}, {0x2, 0x5}, {0x5, 0x3}, {0xf2, 0x3}, {0x0, 0x6}, {0xf8, 0x3}, {0x4, 0x5}, {0x8, 0x1}, {0x1, 0x5}, {0x3, 0x2}, {0x79, 0x7}, {0x7, 0x2}, {0x9, 0x1}], "7d6ee2bce0833d2f"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x8, 0x7}, {0xb, 0x2}, {0xa0, 0x2}, {0xcb, 0x5}, {0x0, 0x3}, {0xa, 0x5}, {0x8, 0x6}, {0x4, 0x7}], "453c1894435e7990"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7, 0x6}, {0x1, 0x5}, {0x8e, 0x5}, {0x3, 0x2}], "904e732e2a06e940"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0xc}, {0xaf, 0x2}, {0x3f, 0x6}, {0xd}, {0xfb, 0x6}, {0x11, 0x2}, {0x3, 0x5}, {0x0, 0x1}, {0x7f, 0x5}, {0x9, 0x1}, {0x7, 0x1}, {0x0, 0x5}, {0xfe, 0x6}, {0x40, 0x5}, {0x12, 0x3}, {0xc5, 0x7}, {0x4}], "9a91730cbbbb8878"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0xf6, 0x3}, {0xb5, 0x2}, {0xfd, 0x7}, {0x3}, {0x1, 0x1}, {0x23, 0x3}, {0xb, 0x4}, {0xfc, 0x7}, {0x0, 0x2}, {0x5, 0x4}, {0x8, 0x5}], "29a281c14e61cf50"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4001}, 0x4048080) socketpair$tipc(0x1e, 0xbf9de76f07fedae7, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x9, 0x200) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000180)={0x6, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 161.992511ms ago: executing program 9 (id=1664): socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f000009ddc0), 0x20100) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYRES64=r3, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 132.493346ms ago: executing program 9 (id=1665): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x1, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) io_uring_enter(r2, 0x154e, 0x0, 0x41, 0x0, 0x0) 97.975329ms ago: executing program 2 (id=1666): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x300, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x400300}, 0x10}}, 0x0) 1.53248ms ago: executing program 0 (id=1667): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x3818746, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@sysvgroups}, {@orlov}, {@mblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x47f, &(0x7f0000000b00)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf0f01"], 0x4c}, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x16}, {@in6=@loopback, 0x4d2, 0x6c}, @in=@local, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x1}, {}, 0x0, 0x0, 0x2, 0x1}}, 0xf0}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000340)=0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_gettime(r4, &(0x7f0000000100)) gettid() 0s ago: executing program 2 (id=1668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x4}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @masq={{0x9}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): _bmap_cluster: request beyond EOF (i_pos 52) [ 151.019050][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.029891][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.039355][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.044379][ T69] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.048724][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.067109][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.071070][ T69] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.077188][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.087266][ T69] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.097742][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.113726][ T69] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.113997][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.131973][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.141437][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.152030][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.163103][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.173193][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.184162][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.195333][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.204213][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.213844][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.223211][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.234467][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.245709][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.256561][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.260042][ T8023] loop5: detected capacity change from 0 to 4096 [ 151.270133][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.288675][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.297744][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.307808][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.318584][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.323522][ T8023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.327965][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.328232][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.349025][ T8023] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1203'. [ 151.353322][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.353350][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.353414][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.363349][ T8023] netlink: 'syz.5.1203': attribute type 2 has an invalid length. [ 151.371892][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.420952][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.432214][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.441975][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.451189][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.460937][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.470727][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.480071][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.532332][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.542086][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.551240][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.579627][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.589904][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.599140][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.652003][ T7920] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.763751][ T7975] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.775747][ T7975] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.798237][ T7975] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.845976][ T7975] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.871061][ T7975] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.888327][ T7975] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 151.906769][ T7975] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 152.149135][ T7975] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 153.393448][ T8056] xfrm0 speed is unknown, defaulting to 1000 [ 153.401048][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 153.401065][ T28] audit: type=1400 audit(1772220061.732:1329): avc: denied { unlink } for pid=7260 comm="syz-executor" name="file0" dev="tmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 153.586855][ T28] audit: type=1400 audit(1772220061.882:1330): avc: denied { setattr } for pid=8061 comm="syz.0.1216" name="" dev="pipefs" ino=1536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 153.687470][ T5069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.767667][ T8077] 9p: p9: multiple sources not supported [ 153.816859][ T8079] FAULT_INJECTION: forcing a failure. [ 153.816859][ T8079] name failslab, interval 1, probability 0, space 0, times 0 [ 153.848299][ T8079] CPU: 1 UID: 0 PID: 8079 Comm: syz.7.1220 Tainted: G W syzkaller #0 PREEMPT(full) [ 153.848470][ T8079] Tainted: [W]=WARN [ 153.848478][ T8079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 153.848492][ T8079] Call Trace: [ 153.848500][ T8079] [ 153.848509][ T8079] __dump_stack+0x1d/0x30 [ 153.848611][ T8079] dump_stack_lvl+0x95/0xd0 [ 153.848686][ T8079] dump_stack+0x15/0x1b [ 153.848710][ T8079] should_fail_ex+0x263/0x280 [ 153.848735][ T8079] should_failslab+0x8c/0xb0 [ 153.848758][ T8079] kmem_cache_alloc_noprof+0x66/0x400 [ 153.848820][ T8079] ? skb_clone+0x151/0x1f0 [ 153.848851][ T8079] skb_clone+0x151/0x1f0 [ 153.848880][ T8079] __netlink_deliver_tap+0x2c9/0x500 [ 153.848941][ T8079] netlink_unicast+0x66b/0x690 [ 153.848970][ T8079] netlink_sendmsg+0x5c8/0x6f0 [ 153.849045][ T8079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.849074][ T8079] ____sys_sendmsg+0x5af/0x600 [ 153.849103][ T8079] ___sys_sendmsg+0x195/0x1e0 [ 153.849175][ T8079] __x64_sys_sendmsg+0xd4/0x160 [ 153.849202][ T8079] x64_sys_call+0x194c/0x3020 [ 153.849226][ T8079] do_syscall_64+0x12c/0x370 [ 153.849247][ T8079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.849481][ T8079] RIP: 0033:0x7fe61de5c799 [ 153.849498][ T8079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.849511][ T8079] RSP: 002b:00007fe61c8b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.849537][ T8079] RAX: ffffffffffffffda RBX: 00007fe61e0d5fa0 RCX: 00007fe61de5c799 [ 153.849547][ T8079] RDX: 0000000000008080 RSI: 0000200000000000 RDI: 0000000000000003 [ 153.849556][ T8079] RBP: 00007fe61c8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 153.849601][ T8079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.849613][ T8079] R13: 00007fe61e0d6038 R14: 00007fe61e0d5fa0 R15: 00007fff6c44b398 [ 153.849632][ T8079] [ 154.068038][ T8074] loop5: detected capacity change from 0 to 1024 [ 154.114060][ T28] audit: type=1400 audit(1772220062.422:1331): avc: denied { ioctl } for pid=8081 comm="syz.0.1221" path="socket:[22537]" dev="sockfs" ino=22537 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 154.172359][ T8074] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.200398][ T5069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.268920][ T28] audit: type=1400 audit(1772220062.592:1332): avc: denied { create } for pid=8097 comm="syz.5.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.297259][ T28] audit: type=1400 audit(1772220062.602:1333): avc: denied { ioctl } for pid=8097 comm="syz.5.1225" path="socket:[22555]" dev="sockfs" ino=22555 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.326135][ T28] audit: type=1400 audit(1772220062.602:1334): avc: denied { bind } for pid=8097 comm="syz.5.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.359205][ T28] audit: type=1400 audit(1772220062.602:1335): avc: denied { write } for pid=8097 comm="syz.5.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.396428][ T28] audit: type=1400 audit(1772220062.602:1336): avc: denied { read } for pid=8097 comm="syz.5.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.422052][ T8102] 9p: Could not find request transport: fd00000000000000000007 [ 154.507818][ T8112] xt_hashlimit: size too large, truncated to 1048576 [ 154.558595][ T8118] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1232'. [ 155.091100][ T8134] loop0: detected capacity change from 0 to 1024 [ 155.105299][ T8134] EXT4-fs: inline encryption not supported [ 155.211778][ T8134] EXT4-fs: Ignoring removed bh option [ 155.290446][ T8134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.397271][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.458368][ T8142] loop0: detected capacity change from 0 to 128 [ 155.485253][ T8142] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8142 comm=syz.0.1237 [ 155.565599][ T8146] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.1239'. [ 155.580379][ T8146] netlink: zone id is out of range [ 155.586139][ T8146] netlink: zone id is out of range [ 155.693412][ T8142] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 155.722783][ T8142] FAT-fs (loop0): Filesystem has been set read-only [ 155.768991][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 155.788021][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 155.809601][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 155.825830][ T8153] netlink: 116376 bytes leftover after parsing attributes in process `syz.5.1241'. [ 155.839909][ T8153] netlink: zone id is out of range [ 155.847334][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 155.867044][ T8153] netlink: zone id is out of range [ 155.877128][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 155.895979][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 155.913866][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 155.928191][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 155.946594][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 155.967821][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 155.997274][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.027976][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.057185][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.078168][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.090068][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.098907][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.107656][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.117004][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.126015][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.134853][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.144153][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.153244][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.162784][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.172797][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.183019][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.192527][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.205719][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.216787][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.227087][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.236939][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.247864][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.258710][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.269919][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.269979][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.289333][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.289418][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.289437][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.289457][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.289562][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.336997][ T28] audit: type=1400 audit(1772220064.652:1337): avc: denied { listen } for pid=8160 comm="syz.1.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.337035][ T28] audit: type=1400 audit(1772220064.652:1338): avc: denied { ioctl } for pid=8160 comm="syz.1.1243" path="socket:[22328]" dev="sockfs" ino=22328 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 156.337094][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.392988][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.402673][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.427361][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.436710][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.447382][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.456363][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.466363][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.475449][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.510448][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.528334][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.541560][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.567658][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.579142][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.638295][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.647739][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.772235][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.850646][ T8175] loop5: detected capacity change from 0 to 512 [ 156.873584][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 156.918982][ T8175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.963375][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.014019][ T8175] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.033601][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.087630][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.097762][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.107406][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.124999][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.134066][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.143886][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.155265][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.185918][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.198025][ T5069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.212153][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.220892][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.252252][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.266226][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.278109][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.441418][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.478501][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.491933][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.501441][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.511100][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.521893][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.530777][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.588676][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.597889][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.608812][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.617770][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.779409][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.819070][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.874767][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.910085][ T8193] batadv_slave_1: entered promiscuous mode [ 157.921434][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 157.937874][ T8192] batadv_slave_1: left promiscuous mode [ 157.964942][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.000113][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.035851][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.069931][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.098592][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.108674][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.117494][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.129480][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.139250][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.229522][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.248235][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.267654][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.303125][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.316780][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.325917][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.334805][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.345542][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.354861][ T8149] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.363682][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.388320][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.411204][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.429203][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.442130][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.453029][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.466427][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.499440][ T8206] batadv_slave_1: entered allmulticast mode [ 158.514504][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 158.514523][ T28] audit: type=1400 audit(1772220066.842:1340): avc: denied { map } for pid=8207 comm="syz.1.1256" path="socket:[22722]" dev="sockfs" ino=22722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 158.546307][ T8141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 158.557390][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1255'. [ 158.573234][ T28] audit: type=1400 audit(1772220066.892:1341): avc: denied { setopt } for pid=8207 comm="syz.1.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 158.615753][ T8211] tipc: Enabling of bearer rejected, failed to enable media [ 158.643379][ T8213] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.1258'. [ 158.654364][ T8213] netlink: zone id is out of range [ 158.671158][ T8213] netlink: zone id is out of range [ 158.891945][ T8215] loop0: detected capacity change from 0 to 4096 [ 158.905626][ T8215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.045908][ T8222] loop7: detected capacity change from 0 to 512 [ 159.062958][ T8222] EXT4-fs: Ignoring removed i_version option [ 159.169356][ T8222] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.273330][ T7260] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.317513][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.384135][ T8230] wireguard0: entered promiscuous mode [ 159.390845][ T8230] wireguard0: entered allmulticast mode [ 159.526503][ T8245] 9p: p9: multiple sources not supported [ 159.541582][ T28] audit: type=1400 audit(1772220067.872:1342): avc: denied { watch_reads } for pid=8242 comm="syz.0.1268" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 159.607800][ T8244] syz_tun: entered allmulticast mode [ 159.630930][ T8252] tipc: Enabling of bearer rejected, failed to enable media [ 159.632483][ T28] audit: type=1400 audit(1772220067.962:1343): avc: denied { write } for pid=8253 comm="syz.2.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 159.716939][ T8254] netlink: 'syz.2.1273': attribute type 4 has an invalid length. [ 159.736907][ T8258] loop0: detected capacity change from 0 to 4096 [ 159.773708][ T8258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.774556][ T8262] loop1: detected capacity change from 0 to 512 [ 159.788978][ T8262] EXT4-fs: Ignoring removed i_version option [ 159.822248][ T8262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.863893][ T8254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1273'. [ 159.881956][ T8269] netlink: 116376 bytes leftover after parsing attributes in process `syz.7.1277'. [ 159.892344][ T8269] netlink: zone id is out of range [ 159.906449][ T8269] netlink: zone id is out of range [ 159.932443][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.983484][ T28] audit: type=1400 audit(1772220068.312:1344): avc: denied { accept } for pid=8278 comm="syz.0.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.015327][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.057540][ T28] audit: type=1400 audit(1772220068.382:1345): avc: denied { setopt } for pid=8282 comm="syz.2.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 160.085129][ T28] audit: type=1400 audit(1772220068.382:1346): avc: denied { connect } for pid=8282 comm="syz.2.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 160.325549][ T8292] loop5: detected capacity change from 0 to 512 [ 160.434908][ T8292] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 160.976112][ T8292] loop5: detected capacity change from 0 to 512 [ 160.997064][ T8299] syz_tun: entered allmulticast mode [ 161.044379][ T8311] loop0: detected capacity change from 0 to 512 [ 161.081626][ T8311] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 161.088509][ T8292] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.1282: corrupted inode contents [ 161.103411][ T8292] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 161.105064][ T8292] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #3: comm syz.5.1282: mark_inode_dirty error [ 161.115519][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 161.115683][ C0] EXT4-fs (loop5): initial error at time 1772220069: ext4_do_update_inode:5569: inode 3 [ 161.115861][ C0] EXT4-fs (loop5): last error at time 1772220069: ext4_do_update_inode:5569: inode 3 [ 161.142800][ T28] audit: type=1400 audit(1772220069.472:1347): avc: denied { connect } for pid=8317 comm="syz.7.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.149699][ T8292] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 161.196402][ T8292] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.1282: corrupted inode contents [ 161.222265][ T8292] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 161.224173][ T28] audit: type=1400 audit(1772220069.522:1348): avc: denied { create } for pid=8305 comm="syz.0.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 161.257733][ T8292] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.1282: mark_inode_dirty error [ 161.273234][ T8292] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 161.277474][ T8292] Quota error (device loop5): write_blk: dquota write failed [ 161.298004][ T8292] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1282: Failed to acquire dquot type 0 [ 161.311114][ T8292] loop5: lost filesystem error report for type 5 error -117 [ 161.315882][ T8292] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.1282: corrupted inode contents [ 161.338321][ T8292] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 161.339695][ T8292] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #16: comm syz.5.1282: mark_inode_dirty error [ 161.365772][ T8292] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 161.375059][ T8292] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.1282: corrupted inode contents [ 161.400274][ T8292] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 161.406145][ T8292] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.1282: mark_inode_dirty error [ 161.441536][ T8292] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 161.449640][ T8292] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.1282: corrupted inode contents [ 161.450985][ T8332] netlink: 'syz.1.1293': attribute type 2 has an invalid length. [ 161.460461][ T8292] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 161.483062][ T8311] loop0: detected capacity change from 0 to 8192 [ 161.485431][ T8334] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.1294'. [ 161.515781][ T8292] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 161.526102][ T8292] loop5: lost filesystem error report for type 5 error -117 [ 161.527036][ T8292] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.1282: corrupted inode contents [ 161.548706][ T8292] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 161.550460][ T8292] EXT4-fs error (device loop5): ext4_truncate:4587: inode #16: comm syz.5.1282: mark_inode_dirty error [ 161.567256][ T8334] netlink: zone id is out of range [ 161.579394][ T8292] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 161.588982][ T8334] netlink: zone id is out of range [ 161.589554][ T8292] loop5: lost filesystem error report for type 5 error -117 [ 161.600926][ T8292] EXT4-fs (loop5): 1 truncate cleaned up [ 161.630765][ T8292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.649416][ T8292] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.710192][ T82] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:5: Failed to release dquot type 1 [ 161.809397][ T5069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.845766][ T8342] tipc: Failed to remove unknown binding: 66,0,0/0:2924747013/2924747015 [ 161.875646][ T8344] loop5: detected capacity change from 0 to 1024 [ 161.877480][ T8342] tipc: Failed to remove unknown binding: 66,0,0/0:2924747013/2924747014 [ 161.887094][ T8344] EXT4-fs: inline encryption not supported [ 161.913455][ T8342] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1297'. [ 161.933490][ T8344] loop5: detected capacity change from 0 to 512 [ 161.976052][ T8344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.989951][ T8344] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.020087][ T8346] xfrm0 speed is unknown, defaulting to 1000 [ 162.400107][ T8367] loop0: detected capacity change from 0 to 1024 [ 162.494672][ T8367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.792617][ T5069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.806643][ T8367] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1302'. [ 162.900089][ T8385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.910538][ T8385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.052052][ T8388] loop5: detected capacity change from 0 to 256 [ 163.060265][ T8388] msdos: Bad value for 'time_offset' [ 163.929748][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.038721][ T8404] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 164.074153][ T8404] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 164.092074][ T8404] EXT4-fs (loop0): failed to initialize system zone (-117) [ 164.103095][ T8408] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.1313'. [ 164.121513][ T8404] EXT4-fs (loop0): mount failed [ 164.130757][ T8408] netlink: zone id is out of range [ 164.153087][ T8408] netlink: zone id is out of range [ 164.175831][ T8412] FAULT_INJECTION: forcing a failure. [ 164.175831][ T8412] name failslab, interval 1, probability 0, space 0, times 0 [ 164.190626][ T8411] bridge0: port 1(batadv1) entered blocking state [ 164.197280][ T8411] bridge0: port 1(batadv1) entered disabled state [ 164.204736][ T8412] CPU: 1 UID: 0 PID: 8412 Comm: syz.5.1315 Tainted: G W syzkaller #0 PREEMPT(full) [ 164.204831][ T8412] Tainted: [W]=WARN [ 164.204837][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 164.204848][ T8412] Call Trace: [ 164.204855][ T8412] [ 164.204863][ T8412] __dump_stack+0x1d/0x30 [ 164.204889][ T8412] dump_stack_lvl+0x95/0xd0 [ 164.204992][ T8412] dump_stack+0x15/0x1b [ 164.205013][ T8412] should_fail_ex+0x263/0x280 [ 164.205034][ T8412] should_failslab+0x8c/0xb0 [ 164.205057][ T8412] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 164.205091][ T8412] ? vfs_parse_monolithic_sep+0x16a/0x270 [ 164.205113][ T8412] kmemdup_nul+0x36/0xc0 [ 164.205179][ T8412] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 164.205221][ T8412] vfs_parse_monolithic_sep+0x16a/0x270 [ 164.205248][ T8412] generic_parse_monolithic+0x24/0x30 [ 164.205268][ T8412] parse_monolithic_mount_data+0x46/0x60 [ 164.205376][ T8412] do_new_mount+0x24e/0x8d0 [ 164.205395][ T8412] ? security_capable+0x7b/0x90 [ 164.205447][ T8412] path_mount+0x4d0/0xbc0 [ 164.205472][ T8412] __se_sys_mount+0x28c/0x2e0 [ 164.205494][ T8412] ? fput+0x8f/0xc0 [ 164.205517][ T8412] __x64_sys_mount+0x67/0x80 [ 164.205539][ T8412] x64_sys_call+0x2d61/0x3020 [ 164.205608][ T8412] do_syscall_64+0x12c/0x370 [ 164.205633][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.205658][ T8412] RIP: 0033:0x7fa372e7c799 [ 164.205686][ T8412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.205707][ T8412] RSP: 002b:00007fa3718d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 164.205801][ T8412] RAX: ffffffffffffffda RBX: 00007fa3730f5fa0 RCX: 00007fa372e7c799 [ 164.205815][ T8412] RDX: 0000200000000180 RSI: 0000200000000300 RDI: 0000000000000000 [ 164.205828][ T8412] RBP: 00007fa3718d7090 R08: 00002000000003c0 R09: 0000000000000000 [ 164.205843][ T8412] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000002 [ 164.205902][ T8412] R13: 00007fa3730f6038 R14: 00007fa3730f5fa0 R15: 00007ffc966c5058 [ 164.205921][ T8412] [ 164.444644][ T8411] batadv1: entered allmulticast mode [ 164.455687][ T8411] batadv1: entered promiscuous mode [ 164.481937][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 164.481951][ T28] audit: type=1400 audit(1772220072.812:1370): avc: denied { getopt } for pid=8414 comm="syz.5.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 164.518620][ T28] audit: type=1400 audit(1772220072.842:1371): avc: denied { connect } for pid=8414 comm="syz.5.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 164.541798][ T28] audit: type=1400 audit(1772220072.842:1372): avc: denied { ioctl } for pid=8414 comm="syz.5.1316" path="socket:[23678]" dev="sockfs" ino=23678 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 164.678272][ T6316] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 164.688206][ T6316] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 164.832307][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1321'. [ 164.852986][ T8437] netlink: 'syz.1.1320': attribute type 16 has an invalid length. [ 164.870870][ T8437] netlink: 'syz.1.1320': attribute type 3 has an invalid length. [ 164.888679][ T8437] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.1320'. [ 164.920801][ T28] audit: type=1400 audit(1772220073.252:1373): avc: denied { name_bind } for pid=8423 comm="syz.1.1320" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 165.048853][ T8452] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1327'. [ 165.068593][ T8452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.087628][ T8454] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1329'. [ 165.098390][ T8452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.111023][ T8452] bond0 (unregistering): Released all slaves [ 165.123036][ T8454] lo speed is unknown, defaulting to 1000 [ 165.138304][ T8454] lo speed is unknown, defaulting to 1000 [ 165.149789][ T8454] lo speed is unknown, defaulting to 1000 [ 165.156536][ T8454] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 165.165232][ T8454] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 165.182774][ T8454] lo speed is unknown, defaulting to 1000 [ 165.198972][ T8454] lo speed is unknown, defaulting to 1000 [ 165.211458][ T8454] lo speed is unknown, defaulting to 1000 [ 165.216586][ T8463] FAULT_INJECTION: forcing a failure. [ 165.216586][ T8463] name failslab, interval 1, probability 0, space 0, times 0 [ 165.219003][ T8454] lo speed is unknown, defaulting to 1000 [ 165.231569][ T8463] CPU: 1 UID: 0 PID: 8463 Comm: syz.5.1330 Tainted: G W syzkaller #0 PREEMPT(full) [ 165.231621][ T8463] Tainted: [W]=WARN [ 165.231627][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.231639][ T8463] Call Trace: [ 165.231647][ T8463] [ 165.231656][ T8463] __dump_stack+0x1d/0x30 [ 165.231684][ T8463] dump_stack_lvl+0x95/0xd0 [ 165.231754][ T8463] dump_stack+0x15/0x1b [ 165.231776][ T8463] should_fail_ex+0x263/0x280 [ 165.231805][ T8463] should_failslab+0x8c/0xb0 [ 165.231869][ T8463] __kmalloc_noprof+0xb8/0x4e0 [ 165.231907][ T8463] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 165.231931][ T8463] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 165.231955][ T8463] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 165.231976][ T8463] ? selinux_capable+0x31/0x40 [ 165.232027][ T8463] ? security_capable+0x7b/0x90 [ 165.232127][ T8463] ? ns_capable+0x7c/0xb0 [ 165.232204][ T8463] genl_rcv_msg+0x432/0x470 [ 165.232293][ T8463] ? __pfx_devlink_nl_pre_doit_port+0x10/0x10 [ 165.232372][ T8463] ? __pfx_devlink_nl_sb_tc_pool_bind_set_doit+0x10/0x10 [ 165.232404][ T8463] ? __pfx_devlink_nl_post_doit+0x10/0x10 [ 165.232482][ T8463] netlink_rcv_skb+0x123/0x220 [ 165.232507][ T8463] ? __pfx_genl_rcv_msg+0x10/0x10 [ 165.232618][ T8463] genl_rcv+0x28/0x40 [ 165.232647][ T8463] netlink_unicast+0x5c0/0x690 [ 165.232672][ T8463] netlink_sendmsg+0x5c8/0x6f0 [ 165.232700][ T8463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.232798][ T8463] ____sys_sendmsg+0x5af/0x600 [ 165.232828][ T8463] ___sys_sendmsg+0x195/0x1e0 [ 165.232865][ T8463] __x64_sys_sendmsg+0xd4/0x160 [ 165.232972][ T8463] x64_sys_call+0x194c/0x3020 [ 165.233017][ T8463] do_syscall_64+0x12c/0x370 [ 165.233038][ T8463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.233060][ T8463] RIP: 0033:0x7fa372e7c799 [ 165.233077][ T8463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.233121][ T8463] RSP: 002b:00007fa3718d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.233142][ T8463] RAX: ffffffffffffffda RBX: 00007fa3730f5fa0 RCX: 00007fa372e7c799 [ 165.233157][ T8463] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 165.233170][ T8463] RBP: 00007fa3718d7090 R08: 0000000000000000 R09: 0000000000000000 [ 165.233184][ T8463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.233261][ T8463] R13: 00007fa3730f6038 R14: 00007fa3730f5fa0 R15: 00007ffc966c5058 [ 165.233280][ T8463] [ 165.338041][ T8468] set_capacity_and_notify: 1 callbacks suppressed [ 165.338059][ T8468] loop5: detected capacity change from 0 to 512 [ 165.360869][ T8454] lo speed is unknown, defaulting to 1000 [ 165.550790][ T8470] loop0: detected capacity change from 0 to 128 [ 165.551461][ T8468] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1331: invalid indirect mapped block 256 (level 2) [ 165.578115][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 165.585177][ C0] EXT4-fs (loop5): initial error at time 1772220073: ext4_free_branches:1023: inode 11 [ 165.595500][ C0] EXT4-fs (loop5): last error at time 1772220073: ext4_free_branches:1023: inode 11 [ 165.607240][ T8468] EXT4-fs (loop5): 2 truncates cleaned up [ 165.619694][ T8468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.622382][ T8470] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.647658][ T8470] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.838015][ T8478] xfrm0 speed is unknown, defaulting to 1000 [ 165.876630][ T8478] lo speed is unknown, defaulting to 1000 [ 166.037283][ T8486] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.1335'. [ 166.070511][ T8486] netlink: zone id is out of range [ 166.076343][ T8486] netlink: zone id is out of range [ 166.129711][ T8490] loop7: detected capacity change from 0 to 512 [ 166.191489][ T8490] EXT4-fs: Ignoring removed oldalloc option [ 166.240351][ T5069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.256211][ T8490] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1338: inode has both inline data and extents flags [ 166.271948][ T8490] fserror_report: 2 callbacks suppressed [ 166.271964][ T8490] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 166.288134][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 166.305009][ C0] EXT4-fs (loop7): initial error at time 1772220074: ext4_orphan_get:1391: inode 15 [ 166.315388][ C0] EXT4-fs (loop7): last error at time 1772220074: ext4_orphan_get:1391: inode 15 [ 166.346984][ T8490] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1338: couldn't read orphan inode 15 (err -117) [ 166.363917][ T8490] loop7: lost filesystem error report for type 5 error -117 [ 166.369644][ T8490] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.428993][ T8496] loop1: detected capacity change from 0 to 2048 [ 166.449600][ T8494] loop5: detected capacity change from 0 to 2048 [ 166.464983][ T7260] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.476285][ T8494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.499126][ T8496] loop1: p1 < > p4 [ 166.504837][ T8496] loop1: p4 size 8388608 extends beyond EOD, truncated [ 166.625933][ T28] audit: type=1400 audit(1772220074.942:1374): avc: denied { ioctl } for pid=8493 comm="syz.5.1339" path="pid:[4026532383]" dev="nsfs" ino=4026532383 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 166.700628][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 166.706131][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 166.814395][ T8509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1343'. [ 166.859457][ T8508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1343'. [ 166.881027][ T50] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 166.934106][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.938279][ T50] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 994 with error 28 [ 166.965583][ T50] EXT4-fs (loop5): This should not happen!! Data will be lost [ 166.965583][ T50] [ 166.977019][ T50] EXT4-fs (loop5): Total free blocks count 0 [ 166.983471][ T50] EXT4-fs (loop5): Free/Dirty block details [ 166.989846][ T50] EXT4-fs (loop5): free_blocks=2415919504 [ 166.995789][ T50] EXT4-fs (loop5): dirty_blocks=1008 [ 167.001676][ T50] EXT4-fs (loop5): Block reservation details [ 167.010027][ T50] EXT4-fs (loop5): i_reserved_data_blocks=63 [ 167.031892][ T5069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.041094][ T8513] xfrm0 speed is unknown, defaulting to 1000 [ 167.126365][ T8513] lo speed is unknown, defaulting to 1000 [ 167.134154][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1348'. [ 167.163666][ T8525] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1344'. [ 167.199823][ T8525] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1344'. [ 167.270791][ T8525] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1344'. [ 167.458527][ T8534] xfrm0 speed is unknown, defaulting to 1000 [ 167.678829][ T28] audit: type=1400 audit(1772220076.012:1375): avc: denied { setattr } for pid=8540 comm="syz.2.1351" path="socket:[24009]" dev="sockfs" ino=24009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.027910][ T8534] lo speed is unknown, defaulting to 1000 [ 168.359467][ T8570] FAULT_INJECTION: forcing a failure. [ 168.359467][ T8570] name failslab, interval 1, probability 0, space 0, times 0 [ 168.387663][ T8570] CPU: 1 UID: 0 PID: 8570 Comm: syz.7.1356 Tainted: G W syzkaller #0 PREEMPT(full) [ 168.387699][ T8570] Tainted: [W]=WARN [ 168.387721][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.387770][ T8570] Call Trace: [ 168.387777][ T8570] [ 168.387785][ T8570] __dump_stack+0x1d/0x30 [ 168.387816][ T8570] dump_stack_lvl+0x95/0xd0 [ 168.387843][ T8570] dump_stack+0x15/0x1b [ 168.387867][ T8570] should_fail_ex+0x263/0x280 [ 168.387965][ T8570] should_failslab+0x8c/0xb0 [ 168.387985][ T8570] __kmalloc_noprof+0xb8/0x4e0 [ 168.388005][ T8570] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 168.388027][ T8570] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 168.388134][ T8570] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 168.388158][ T8570] ? selinux_capable+0x31/0x40 [ 168.388261][ T8570] ? security_capable+0x7b/0x90 [ 168.388286][ T8570] ? ns_capable+0x7c/0xb0 [ 168.388360][ T8570] genl_rcv_msg+0x432/0x470 [ 168.388389][ T8570] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 168.388493][ T8570] netlink_rcv_skb+0x123/0x220 [ 168.388521][ T8570] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.388562][ T8570] genl_rcv+0x28/0x40 [ 168.388669][ T8570] netlink_unicast+0x5c0/0x690 [ 168.388697][ T8570] netlink_sendmsg+0x5c8/0x6f0 [ 168.388767][ T8570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.388795][ T8570] ____sys_sendmsg+0x5af/0x600 [ 168.388822][ T8570] ___sys_sendmsg+0x195/0x1e0 [ 168.388874][ T8570] __x64_sys_sendmsg+0xd4/0x160 [ 168.388909][ T8570] x64_sys_call+0x194c/0x3020 [ 168.388937][ T8570] do_syscall_64+0x12c/0x370 [ 168.388997][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.389017][ T8570] RIP: 0033:0x7fe61de5c799 [ 168.389033][ T8570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.389083][ T8570] RSP: 002b:00007fe61c8b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.389108][ T8570] RAX: ffffffffffffffda RBX: 00007fe61e0d5fa0 RCX: 00007fe61de5c799 [ 168.389177][ T8570] RDX: 000000002000c000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 168.389189][ T8570] RBP: 00007fe61c8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 168.389201][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.389213][ T8570] R13: 00007fe61e0d6038 R14: 00007fe61e0d5fa0 R15: 00007fff6c44b398 [ 168.389231][ T8570] [ 168.894049][ T8581] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1359'. [ 169.018995][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1360'. [ 169.166643][ T8603] xfrm0 speed is unknown, defaulting to 1000 [ 169.237861][ T8603] lo speed is unknown, defaulting to 1000 [ 169.247296][ T8610] tmpfs: Unsupported parameter 'huge' [ 169.254459][ T8610] xt_TPROXY: Can be used only with -p tcp or -p udp [ 169.265317][ T8610] loop5: detected capacity change from 0 to 256 [ 169.312628][ T8610] FAT-fs (loop5): codepage cp857 not found [ 169.440727][ T8618] netlink: 332 bytes leftover after parsing attributes in process `syz.7.1365'. [ 169.458322][ T8618] netlink: 'syz.7.1365': attribute type 9 has an invalid length. [ 169.474287][ T8618] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1365'. [ 169.506721][ T8616] netlink: 'syz.5.1363': attribute type 21 has an invalid length. [ 169.596936][ T8623] macsec1: entered allmulticast mode [ 169.610451][ T8623] ip6gretap0: entered allmulticast mode [ 169.622789][ T8623] ip6gretap0: left allmulticast mode [ 169.906334][ T8639] netlink: 'syz.7.1371': attribute type 3 has an invalid length. [ 170.373021][ T8641] loop0: detected capacity change from 0 to 512 [ 170.382009][ T8641] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 170.396309][ T8643] loop1: detected capacity change from 0 to 512 [ 170.403906][ T8641] EXT4-fs error (device loop0): ext4_init_orphan_info:618: comm syz.0.1373: orphan file block 0: bad magic [ 170.417152][ T8641] loop0: lost filesystem error report for type 5 error -117 [ 170.418091][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 170.419954][ T8643] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 170.428592][ C0] EXT4-fs (loop0): initial error at time 1772220078: ext4_init_orphan_info:618 [ 170.428625][ C0] EXT4-fs (loop0): last error at time 1772220078: ext4_init_orphan_info:618 [ 170.445693][ T8641] EXT4-fs (loop0): Remounting filesystem read-only [ 170.447849][ C0] [ 170.487513][ T8641] EXT4-fs (loop0): mount failed [ 170.502899][ T8643] EXT4-fs (loop1): 1 truncate cleaned up [ 170.513894][ T8643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.565412][ T8648] xfrm0 speed is unknown, defaulting to 1000 [ 170.579847][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.677492][ T10] IPVS: starting estimator thread 0... [ 170.681795][ T8657] xt_hashlimit: size too large, truncated to 1048576 [ 170.714742][ T8648] lo speed is unknown, defaulting to 1000 [ 170.789687][ T8660] IPVS: using max 2400 ests per chain, 120000 per kthread [ 170.938794][ T8664] loop5: detected capacity change from 0 to 2048 [ 170.982334][ T8664] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.072000][ T8679] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8679 comm=syz.2.1386 [ 171.446606][ T8685] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8685 comm=syz.2.1387 [ 171.625716][ T5069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.696215][ T8692] xfrm0 speed is unknown, defaulting to 1000 [ 171.751354][ T8692] lo speed is unknown, defaulting to 1000 [ 171.809696][ T28] audit: type=1326 audit(1772220080.142:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120b7dc799 code=0x7ffc0000 [ 171.850910][ T28] audit: type=1326 audit(1772220080.142:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f120b7dc799 code=0x7ffc0000 [ 171.905596][ T28] audit: type=1326 audit(1772220080.142:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120b7dc799 code=0x7ffc0000 [ 171.974892][ T28] audit: type=1326 audit(1772220080.142:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f120b7dc799 code=0x7ffc0000 [ 172.006749][ T8699] bridge1: entered promiscuous mode [ 172.012531][ T8699] bridge1: entered allmulticast mode [ 172.036001][ T28] audit: type=1326 audit(1772220080.142:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120b7dc799 code=0x7ffc0000 [ 172.088275][ T28] audit: type=1326 audit(1772220080.142:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f120b7dc799 code=0x7ffc0000 [ 172.144615][ T28] audit: type=1326 audit(1772220080.142:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120b7dc799 code=0x7ffc0000 [ 172.198992][ T28] audit: type=1326 audit(1772220080.142:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120b7dc799 code=0x7ffc0000 [ 172.298176][ T28] audit: type=1326 audit(1772220080.142:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f120b7dc799 code=0x7ffc0000 [ 172.389602][ T28] audit: type=1326 audit(1772220080.142:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120b7dc799 code=0x7ffc0000 [ 172.460065][ T8726] __nla_validate_parse: 4 callbacks suppressed [ 172.460084][ T8726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1400'. [ 172.507558][ T8699] loop7: detected capacity change from 0 to 32768 [ 172.568689][ T3302] loop7: p1 p3 < > [ 172.579496][ T8699] loop7: p1 p3 < > [ 172.586942][ T8733] xfrm0 speed is unknown, defaulting to 1000 [ 172.627495][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1401'. [ 172.680307][ T8735] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1401'. [ 172.699584][ T8733] lo speed is unknown, defaulting to 1000 [ 172.734527][ T3400] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 172.751312][ T8735] loop5: detected capacity change from 0 to 256 [ 172.758689][ T3400] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 172.776455][ T3400] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 172.800237][ T3400] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 172.814376][ T3400] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 172.878837][ T3400] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 172.894821][ T8739] FAULT_INJECTION: forcing a failure. [ 172.894821][ T8739] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 172.918209][ T3400] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 172.936356][ T3400] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 172.950643][ T3400] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 172.967304][ T3400] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 172.979751][ T8739] CPU: 0 UID: 0 PID: 8739 Comm: syz.0.1403 Tainted: G W syzkaller #0 PREEMPT(full) [ 172.979795][ T8739] Tainted: [W]=WARN [ 172.979803][ T8739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.979851][ T8739] Call Trace: [ 172.979858][ T8739] [ 172.979875][ T8739] __dump_stack+0x1d/0x30 [ 172.979907][ T8739] dump_stack_lvl+0x95/0xd0 [ 172.979934][ T8739] dump_stack+0x15/0x1b [ 172.979957][ T8739] should_fail_ex+0x263/0x280 [ 172.980061][ T8739] should_fail_alloc_page+0xf2/0x100 [ 172.980161][ T8739] __alloc_frozen_pages_noprof+0x108/0x360 [ 172.980209][ T8739] alloc_pages_mpol+0xb3/0x260 [ 172.980239][ T8739] ? css_rstat_updated+0xbb/0x280 [ 172.980290][ T8739] vma_alloc_folio_noprof+0x1a9/0x300 [ 172.980343][ T8739] handle_mm_fault+0x111f/0x3020 [ 172.980419][ T8739] ? _raw_spin_lock+0x52/0xa0 [ 172.980452][ T8739] ? pte_offset_map_lock+0x1d9/0x240 [ 172.980480][ T8739] __get_user_pages+0x1023/0x1ea0 [ 172.980527][ T8739] ? path_openat+0x1ab2/0x2050 [ 172.980568][ T8739] faultin_page_range+0x107/0x4d0 [ 172.980668][ T8739] madvise_do_behavior+0x19f/0xa10 [ 172.980690][ T8739] ? __rcu_read_unlock+0x4e/0x70 [ 172.980747][ T8739] do_madvise+0x10e/0x190 [ 172.980783][ T8739] __x64_sys_madvise+0x63/0x80 [ 172.980816][ T8739] x64_sys_call+0x1eff/0x3020 [ 172.980844][ T8739] do_syscall_64+0x12c/0x370 [ 172.980865][ T8739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.980885][ T8739] RIP: 0033:0x7f120b7dc799 [ 172.980980][ T8739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.981002][ T8739] RSP: 002b:00007f120a216028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 172.981027][ T8739] RAX: ffffffffffffffda RBX: 00007f120ba56090 RCX: 00007f120b7dc799 [ 172.981042][ T8739] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 172.981096][ T8739] RBP: 00007f120a216090 R08: 0000000000000000 R09: 0000000000000000 [ 172.981113][ T8739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.981128][ T8739] R13: 00007f120ba56128 R14: 00007f120ba56090 R15: 00007fff5a9270c8 [ 172.981150][ T8739] [ 172.986171][ T3400] hid-generic 0000:0000:0004.0001: hidraw0: HID v0.03 Device [syz1] on syz0 [ 173.319829][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1404'. [ 173.387831][ T8750] bridge1: entered promiscuous mode [ 173.451557][ T8759] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1408'. [ 173.504528][ T8766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1411'. [ 173.507583][ T8765] xfrm0 speed is unknown, defaulting to 1000 [ 173.702062][ T8765] lo speed is unknown, defaulting to 1000 [ 173.721467][ T8738] syz.0.1403 (8738) used greatest stack depth: 5880 bytes left [ 174.415088][ T8802] loop7: detected capacity change from 0 to 512 [ 174.447799][ T8802] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1423: inode has both inline data and extents flags [ 174.479941][ T8802] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 174.482022][ T8802] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1423: couldn't read orphan inode 15 (err -117) [ 174.492146][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 174.492185][ C1] EXT4-fs (loop7): initial error at time 1772220082: ext4_orphan_get:1391: inode 15 [ 174.492236][ C1] EXT4-fs (loop7): last error at time 1772220082: ext4_orphan_get:1391: inode 15 [ 174.508481][ T8806] xfrm0 speed is unknown, defaulting to 1000 [ 174.545475][ T8802] loop7: lost filesystem error report for type 5 error -117 [ 174.548619][ T8802] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.627581][ T8806] lo speed is unknown, defaulting to 1000 [ 174.660328][ T7260] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.753787][ T8816] xfrm0 speed is unknown, defaulting to 1000 [ 174.805302][ T8816] lo speed is unknown, defaulting to 1000 [ 174.861784][ T8830] netlink: 'syz.1.1432': attribute type 3 has an invalid length. [ 174.879054][ T8820] sg_write: data in/out 65516/120 bytes for SCSI command 0x0-- guessing data in; [ 174.879054][ T8820] program syz.7.1427 not setting count and/or reply_len properly [ 174.945375][ T8833] loop0: detected capacity change from 0 to 512 [ 174.965549][ T8833] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.032580][ T8823] ip6gre1: entered promiscuous mode [ 175.038785][ T8823] ip6gre1: entered allmulticast mode [ 175.046130][ T8833] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 175.089947][ T8833] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1435: invalid indirect mapped block 33554432 (level 0) [ 175.137584][ T8833] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 175.138088][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 175.155575][ C0] EXT4-fs (loop0): initial error at time 1772220083: ext4_free_branches:1023: inode 13 [ 175.158339][ T8833] EXT4-fs (loop0): Remounting filesystem read-only [ 175.166847][ C0] EXT4-fs (loop0): last error at time 1772220083: ext4_free_branches:1023: inode 13 [ 175.203262][ T8833] EXT4-fs (loop0): 1 truncate cleaned up [ 175.210431][ T8833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.269186][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.342941][ T8840] loop7: detected capacity change from 0 to 8192 [ 175.612393][ T8851] loop0: detected capacity change from 0 to 1024 [ 175.619771][ T8851] EXT4-fs: inline encryption not supported [ 175.650580][ T8851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.744990][ T10] IPVS: starting estimator thread 0... [ 175.848181][ T8855] IPVS: using max 2544 ests per chain, 127200 per kthread [ 176.453322][ T8869] loop5: detected capacity change from 0 to 512 [ 177.090461][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 177.090481][ T28] audit: type=1400 audit(1772220085.422:1412): avc: denied { listen } for pid=8870 comm="syz.5.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 177.337719][ T8877] xfrm0 speed is unknown, defaulting to 1000 [ 177.338178][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.498701][ T8887] loop5: detected capacity change from 0 to 512 [ 177.523483][ T8887] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.545531][ T8887] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 177.556481][ T8887] EXT4-fs (loop5): 1 truncate cleaned up [ 177.563157][ T8887] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.593779][ T8877] lo speed is unknown, defaulting to 1000 [ 177.798881][ T28] audit: type=1400 audit(1772220086.132:1413): avc: denied { connect } for pid=8886 comm="syz.5.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 178.045992][ T8905] xfrm0 speed is unknown, defaulting to 1000 [ 178.147197][ T8905] lo speed is unknown, defaulting to 1000 [ 178.344919][ T8914] xfrm0 speed is unknown, defaulting to 1000 [ 178.420415][ T5069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.447659][ T8914] lo speed is unknown, defaulting to 1000 [ 178.448176][ T8918] can: request_module (can-proto-0) failed. [ 178.483764][ T28] audit: type=1326 audit(1772220086.812:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.7.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61de5c799 code=0x7ffc0000 [ 178.541610][ T28] audit: type=1326 audit(1772220086.812:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.7.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61de5c799 code=0x7ffc0000 [ 178.571230][ T8921] loop5: detected capacity change from 0 to 2048 [ 178.634102][ T8921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.850167][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1467'. [ 178.869963][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1468'. [ 178.872464][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1469'. [ 178.889805][ T8948] FAULT_INJECTION: forcing a failure. [ 178.889805][ T8948] name failslab, interval 1, probability 0, space 0, times 0 [ 178.910242][ T8947] team0: Port device team_slave_0 removed [ 178.927940][ T8948] CPU: 1 UID: 0 PID: 8948 Comm: syz.5.1460 Tainted: G W syzkaller #0 PREEMPT(full) [ 178.928036][ T8948] Tainted: [W]=WARN [ 178.928045][ T8948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 178.928063][ T8948] Call Trace: [ 178.928072][ T8948] [ 178.928081][ T8948] __dump_stack+0x1d/0x30 [ 178.928113][ T8948] dump_stack_lvl+0x95/0xd0 [ 178.928141][ T8948] dump_stack+0x15/0x1b [ 178.928271][ T8948] should_fail_ex+0x263/0x280 [ 178.928298][ T8948] should_failslab+0x8c/0xb0 [ 178.928322][ T8948] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 178.928349][ T8948] ? __alloc_skb+0x2d6/0x690 [ 178.928378][ T8948] __alloc_skb+0x2d6/0x690 [ 178.928417][ T8948] ? __alloc_skb+0x200/0x690 [ 178.928472][ T8948] netlink_alloc_large_skb+0xbf/0xf0 [ 178.928679][ T8948] netlink_sendmsg+0x40c/0x6f0 [ 178.928707][ T8948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.928740][ T8948] ____sys_sendmsg+0x5af/0x600 [ 178.928829][ T8948] ___sys_sendmsg+0x195/0x1e0 [ 178.928870][ T8948] __x64_sys_sendmsg+0xd4/0x160 [ 178.928905][ T8948] x64_sys_call+0x194c/0x3020 [ 178.928988][ T8948] do_syscall_64+0x12c/0x370 [ 178.929009][ T8948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.929030][ T8948] RIP: 0033:0x7fa372e7c799 [ 178.929050][ T8948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.929119][ T8948] RSP: 002b:00007fa371895028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.929140][ T8948] RAX: ffffffffffffffda RBX: 00007fa3730f6180 RCX: 00007fa372e7c799 [ 178.929153][ T8948] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 178.929166][ T8948] RBP: 00007fa371895090 R08: 0000000000000000 R09: 0000000000000000 [ 178.929178][ T8948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.929191][ T8948] R13: 00007fa3730f6218 R14: 00007fa3730f6180 R15: 00007ffc966c5058 [ 178.929228][ T8948] [ 179.431767][ T8962] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1473'. [ 179.926600][ T8960] Process accounting resumed [ 180.105351][ T8973] FAULT_INJECTION: forcing a failure. [ 180.105351][ T8973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.158110][ T8973] CPU: 1 UID: 0 PID: 8973 Comm: syz.7.1477 Tainted: G W syzkaller #0 PREEMPT(full) [ 180.158236][ T8973] Tainted: [W]=WARN [ 180.158244][ T8973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.158261][ T8973] Call Trace: [ 180.158268][ T8973] [ 180.158278][ T8973] __dump_stack+0x1d/0x30 [ 180.158317][ T8973] dump_stack_lvl+0x95/0xd0 [ 180.158360][ T8973] dump_stack+0x15/0x1b [ 180.158380][ T8973] should_fail_ex+0x263/0x280 [ 180.158406][ T8973] should_fail+0xb/0x20 [ 180.158435][ T8973] should_fail_usercopy+0x1a/0x20 [ 180.158506][ T8973] _copy_from_user+0x1c/0xb0 [ 180.158548][ T8973] bpf_prog_test_run_xdp+0x932/0xa10 [ 180.158585][ T8973] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 180.158613][ T8973] bpf_prog_test_run+0x204/0x340 [ 180.158675][ T8973] __sys_bpf+0x52e/0x7e0 [ 180.158744][ T8973] __x64_sys_bpf+0x41/0x50 [ 180.158798][ T8973] x64_sys_call+0x10cb/0x3020 [ 180.158825][ T8973] do_syscall_64+0x12c/0x370 [ 180.158855][ T8973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.158927][ T8973] RIP: 0033:0x7fe61de5c799 [ 180.158946][ T8973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.158966][ T8973] RSP: 002b:00007fe61c8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.158990][ T8973] RAX: ffffffffffffffda RBX: 00007fe61e0d5fa0 RCX: 00007fe61de5c799 [ 180.159062][ T8973] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 180.159075][ T8973] RBP: 00007fe61c8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 180.159090][ T8973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.159105][ T8973] R13: 00007fe61e0d6038 R14: 00007fe61e0d5fa0 R15: 00007fff6c44b398 [ 180.159134][ T8973] [ 180.448717][ T5069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.476472][ T8955] syz.2.1471 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 180.491038][ T8955] CPU: 1 UID: 0 PID: 8955 Comm: syz.2.1471 Tainted: G W syzkaller #0 PREEMPT(full) [ 180.491074][ T8955] Tainted: [W]=WARN [ 180.491081][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.491093][ T8955] Call Trace: [ 180.491101][ T8955] [ 180.491110][ T8955] __dump_stack+0x1d/0x30 [ 180.491139][ T8955] dump_stack_lvl+0x95/0xd0 [ 180.491170][ T8955] dump_stack+0x15/0x1b [ 180.491192][ T8955] dump_header+0x80/0x240 [ 180.491214][ T8955] oom_kill_process+0x295/0x350 [ 180.491247][ T8955] out_of_memory+0x97d/0xb80 [ 180.491268][ T8955] try_charge_memcg+0x62e/0xa10 [ 180.491302][ T8955] obj_cgroup_charge_pages+0x23/0xc0 [ 180.491380][ T8955] __memcg_kmem_charge_page+0x9e/0x170 [ 180.491449][ T8955] __alloc_frozen_pages_noprof+0x18a/0x360 [ 180.491478][ T8955] alloc_pages_mpol+0xb3/0x260 [ 180.491507][ T8955] alloc_pages_noprof+0x8f/0x130 [ 180.491612][ T8955] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 180.491646][ T8955] __kvmalloc_node_noprof+0x3d4/0x650 [ 180.491670][ T8955] ? futex_hash_allocate+0x190/0x9d0 [ 180.491752][ T8955] ? futex_hash_allocate+0x190/0x9d0 [ 180.491855][ T8955] futex_hash_allocate+0x190/0x9d0 [ 180.491900][ T8955] ? cap_task_prctl+0x13f/0x6e0 [ 180.491923][ T8955] futex_hash_prctl+0xd8/0xf0 [ 180.491949][ T8955] __se_sys_prctl+0xa3d/0x13f0 [ 180.492048][ T8955] __x64_sys_prctl+0x67/0x80 [ 180.492074][ T8955] x64_sys_call+0x2533/0x3020 [ 180.492129][ T8955] do_syscall_64+0x12c/0x370 [ 180.492150][ T8955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.492174][ T8955] RIP: 0033:0x7f8ebdabc799 [ 180.492191][ T8955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.492281][ T8955] RSP: 002b:00007f8ebc50f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 180.492302][ T8955] RAX: ffffffffffffffda RBX: 00007f8ebdd35fa0 RCX: 00007f8ebdabc799 [ 180.492316][ T8955] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 180.492330][ T8955] RBP: 00007f8ebdb52bd9 R08: 0000000000000000 R09: 0000000000000000 [ 180.492342][ T8955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.492386][ T8955] R13: 00007f8ebdd36038 R14: 00007f8ebdd35fa0 R15: 00007ffe511643b8 [ 180.492406][ T8955] [ 180.492413][ T8955] memory: usage 307200kB, limit 307200kB, failcnt 337 [ 180.624127][ T8980] loop0: detected capacity change from 0 to 256 [ 180.641676][ T8955] memory+swap: usage 307568kB, limit 9007199254740988kB, failcnt 0 [ 180.674890][ T8986] loop5: detected capacity change from 0 to 1024 [ 180.680067][ T8984] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1479'. [ 180.704887][ T8980] SELinux: security_context_str_to_sid () failed with errno=-22 [ 180.722377][ T8955] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 180.777124][ T8986] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 180.788438][ T8955] Memory cgroup stats for [ 180.789976][ T8986] System zones: [ 180.797200][ T8980] netlink: 'syz.0.1481': attribute type 5 has an invalid length. [ 180.802504][ T8986] 0-1 [ 180.805711][ T8955] /syz2 [ 180.814345][ T8986] , 3-36 [ 180.826185][ T8986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.827386][ T8955] : [ 180.845472][ T8988] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1479'. [ 180.861517][ T8955] cache 0 [ 180.864631][ T8955] rss 0 [ 180.865409][ T5069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.869747][ T8955] shmem 0 [ 180.887450][ T8955] mapped_file 0 [ 180.893706][ T8955] dirty 0 [ 180.896857][ T8955] writeback 0 [ 180.930346][ T8955] workingset_refault_anon 124 [ 180.936214][ T8955] workingset_refault_file 129 [ 180.942504][ T8955] swap 376832 [ 180.946610][ T8955] swapcached 6590464 [ 180.951142][ T8955] pgpgin 145980 [ 180.962160][ T8994] loop0: detected capacity change from 0 to 1024 [ 180.970808][ T8955] pgpgout 145980 [ 180.975985][ T8955] pgfault 171973 [ 180.992489][ T8994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.005044][ T8955] pgmajfault 122 [ 181.009254][ T8955] inactive_anon 0 [ 181.012751][ T8994] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: comm syz.0.1485: inode #1701604352: comm syz.0.1485: iget: illegal inode # [ 181.014037][ T8955] active_anon 0 [ 181.014047][ T8955] inactive_file 0 [ 181.014054][ T8955] active_file 0 [ 181.014080][ T8955] unevictable 0 [ 181.014087][ T8955] hierarchical_memory_limit 314572800 [ 181.014096][ T8955] hierarchical_memsw_limit 9223372036854771712 [ 181.014104][ T8955] total_cache 0 [ 181.014111][ T8955] total_rss 0 [ 181.014117][ T8955] total_shmem 0 [ 181.014125][ T8955] total_mapped_file 0 [ 181.065190][ T8994] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1485: error while reading EA inode 1701604352 err=-117 [ 181.066148][ T8955] total_dirty 0 [ 181.087767][ T8955] total_writeback 0 [ 181.098104][ T8955] total_workingset_refault_anon 124 [ 181.103773][ T8955] total_workingset_refault_file 129 [ 181.109122][ T8955] total_swap 376832 [ 181.113027][ T8955] total_swapcached 6590464 [ 181.117584][ T8955] total_pgpgin 145980 [ 181.121855][ T8955] total_pgpgout 145980 [ 181.126138][ T8955] total_pgfault 171973 [ 181.130361][ T8955] total_pgmajfault 122 [ 181.134617][ T8955] total_inactive_anon 0 [ 181.138945][ T8955] total_active_anon 0 [ 181.143074][ T8955] total_inactive_file 0 [ 181.147391][ T8955] total_active_file 0 [ 181.151854][ T8955] total_unevictable 0 [ 181.156245][ T8955] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1471,pid=8954,uid=0 [ 181.159606][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1488'. [ 181.173148][ T8955] Memory cgroup out of memory: Killed process 8955 (syz.2.1471) total-vm:94292kB, anon-rss:1228kB, file-rss:22424kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:0 [ 181.222856][ T9007] xfrm0 speed is unknown, defaulting to 1000 [ 181.251012][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.272911][ T9010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1490'. [ 181.298145][ T28] audit: type=1400 audit(1772220089.622:1416): avc: denied { getopt } for pid=9008 comm="syz.2.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 181.377465][ T9007] lo speed is unknown, defaulting to 1000 [ 181.384330][ T28] audit: type=1326 audit(1772220089.672:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9016 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ae57c799 code=0x7ffc0000 [ 181.419971][ T9011] loop0: detected capacity change from 0 to 8192 [ 181.452560][ T28] audit: type=1326 audit(1772220089.672:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9016 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fa7ae57c799 code=0x7ffc0000 [ 181.496908][ T28] audit: type=1326 audit(1772220089.672:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9016 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ae57c799 code=0x7ffc0000 [ 181.521529][ T3302] loop0: p2 p3 p4[EZD] [ 181.543666][ T3302] loop0: p3 start 331781 is beyond EOD, truncated [ 181.554907][ T3302] loop0: p4 size 197376 extends beyond EOD, truncated [ 181.577877][ T9011] loop0: p2 p3 p4[EZD] [ 181.583869][ T9011] loop0: p3 start 331781 is beyond EOD, truncated [ 181.587128][ T9021] mmap: syz.2.1495 (9021): VmData 29335552 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 181.592547][ T28] audit: type=1326 audit(1772220089.672:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9016 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa7ae57e007 code=0x7ffc0000 [ 181.629323][ T9011] loop0: p4 size 197376 extends beyond EOD, truncated [ 181.638653][ T28] audit: type=1326 audit(1772220089.672:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9016 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa7ae53cfce code=0x7ffc0000 [ 181.736037][ T9032] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 181.759485][ T9032] bond2 (unregistering): Released all slaves [ 181.809873][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 181.821499][ T9038] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1499'. [ 181.822593][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 181.847405][ T9038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1499'. [ 181.980504][ T9044] team0: No ports can be present during mode change [ 182.115840][ T9055] FAULT_INJECTION: forcing a failure. [ 182.115840][ T9055] name failslab, interval 1, probability 0, space 0, times 0 [ 182.129621][ T9055] CPU: 0 UID: 0 PID: 9055 Comm: syz.0.1506 Tainted: G W syzkaller #0 PREEMPT(full) [ 182.129683][ T9055] Tainted: [W]=WARN [ 182.129691][ T9055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 182.129705][ T9055] Call Trace: [ 182.129713][ T9055] [ 182.129722][ T9055] __dump_stack+0x1d/0x30 [ 182.129807][ T9055] dump_stack_lvl+0x95/0xd0 [ 182.129831][ T9055] dump_stack+0x15/0x1b [ 182.129896][ T9055] should_fail_ex+0x263/0x280 [ 182.129991][ T9055] should_failslab+0x8c/0xb0 [ 182.130014][ T9055] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 182.130038][ T9055] ? __alloc_skb+0x2d6/0x690 [ 182.130151][ T9055] __alloc_skb+0x2d6/0x690 [ 182.130176][ T9055] ? __alloc_skb+0x200/0x690 [ 182.130198][ T9055] netlink_alloc_large_skb+0xbf/0xf0 [ 182.130223][ T9055] netlink_sendmsg+0x40c/0x6f0 [ 182.130330][ T9055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.130354][ T9055] ____sys_sendmsg+0x5af/0x600 [ 182.130432][ T9055] ___sys_sendmsg+0x195/0x1e0 [ 182.130468][ T9055] __x64_sys_sendmsg+0xd4/0x160 [ 182.130577][ T9055] x64_sys_call+0x194c/0x3020 [ 182.130613][ T9055] do_syscall_64+0x12c/0x370 [ 182.130637][ T9055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.130660][ T9055] RIP: 0033:0x7f120b7dc799 [ 182.130678][ T9055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.130771][ T9055] RSP: 002b:00007f120a237028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.130793][ T9055] RAX: ffffffffffffffda RBX: 00007f120ba55fa0 RCX: 00007f120b7dc799 [ 182.130806][ T9055] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 182.130819][ T9055] RBP: 00007f120a237090 R08: 0000000000000000 R09: 0000000000000000 [ 182.130834][ T9055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.130873][ T9055] R13: 00007f120ba56038 R14: 00007f120ba55fa0 R15: 00007fff5a9270c8 [ 182.130895][ T9055] [ 182.137370][ T9056] loop7: detected capacity change from 0 to 512 [ 182.168685][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 182.168701][ T28] audit: type=1326 audit(1772220090.492:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9057 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120b7dc799 code=0x7ffc0000 [ 182.383324][ T28] audit: type=1326 audit(1772220090.492:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9057 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120b7dc799 code=0x7ffc0000 [ 182.407811][ T28] audit: type=1326 audit(1772220090.492:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9057 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120b7dc799 code=0x7ffc0000 [ 182.408378][ T9056] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 182.434511][ T28] audit: type=1326 audit(1772220090.492:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9057 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120b7dc799 code=0x7ffc0000 [ 182.445924][ T9056] ext4 filesystem being mounted at /94/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.492568][ T28] audit: type=1326 audit(1772220090.492:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9057 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f120b7dc799 code=0x7ffc0000 [ 182.536105][ T28] audit: type=1326 audit(1772220090.492:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9057 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120b7dc799 code=0x7ffc0000 [ 182.563059][ T28] audit: type=1326 audit(1772220090.492:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9057 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120b7dc799 code=0x7ffc0000 [ 182.589323][ T28] audit: type=1326 audit(1772220090.492:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9057 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120b7dc799 code=0x7ffc0000 [ 182.614154][ T28] audit: type=1326 audit(1772220090.492:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9057 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f120b7de007 code=0x7ffc0000 [ 182.647962][ T9070] team_slave_0: entered promiscuous mode [ 182.654603][ T9070] team_slave_1: entered promiscuous mode [ 182.660608][ T28] audit: type=1326 audit(1772220090.492:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9057 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f120b79cfce code=0x7ffc0000 [ 182.687205][ T9070] macvtap1: entered promiscuous mode [ 182.693290][ T9070] team0: entered promiscuous mode [ 182.699793][ T9070] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 182.708053][ T9070] team0: Device macvtap1 is already an upper device of the team interface [ 182.748677][ T9070] team0: left promiscuous mode [ 182.754189][ T9070] team_slave_0: left promiscuous mode [ 182.759885][ T9070] team_slave_1: left promiscuous mode [ 183.804513][ T7260] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 185.014440][ T9114] loop1: detected capacity change from 0 to 8192 [ 185.119442][ T3302] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 185.132948][ T3302] loop1: partition table partially beyond EOD, truncated [ 185.172522][ T3302] loop1: p1 start 100663296 is beyond EOD, truncated [ 185.200634][ T3302] loop1: p2 size 134217732 extends beyond EOD, truncated [ 185.243428][ T9133] __nla_validate_parse: 4 callbacks suppressed [ 185.243446][ T9133] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1531'. [ 185.264953][ T9131] loop7: detected capacity change from 0 to 512 [ 185.272573][ T3302] loop1: p4 size 14876672 extends beyond EOD, truncated [ 185.280869][ T3302] loop1: p5 size 134217732 extends beyond EOD, truncated [ 185.288899][ T9131] EXT4-fs: Ignoring removed orlov option [ 185.311894][ T3302] loop1: p6 size 14876672 extends beyond EOD, truncated [ 185.325125][ T9131] EXT4-fs: Ignoring removed i_version option [ 185.341268][ T9131] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.356059][ T9131] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 185.356625][ T9114] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 185.366916][ T9133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1531'. [ 185.378351][ T9131] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 185.382102][ T9114] loop1: partition table partially beyond EOD, truncated [ 185.396328][ T9114] loop1: p1 start 100663296 is beyond EOD, truncated [ 185.403627][ T9131] EXT4-fs (loop7): orphan cleanup on readonly fs [ 185.403683][ T9114] loop1: p2 size 134217732 extends beyond EOD, truncated [ 185.404953][ T9114] loop1: p4 size 14876672 extends beyond EOD, truncated [ 185.426873][ T9114] loop1: p5 size 134217732 extends beyond EOD, truncated [ 185.434971][ T9114] loop1: p6 size 14876672 extends beyond EOD, truncated [ 185.492064][ T9131] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 185.520650][ T9131] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 185.534048][ T9131] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1530: bg 0: block 40: padding at end of block bitmap is not set [ 185.555170][ T9131] loop7: lost filesystem error report for type 5 error -117 [ 185.558088][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 185.572553][ C1] EXT4-fs (loop7): initial error at time 1772220093: ext4_validate_block_bitmap:441 [ 185.582499][ C1] EXT4-fs (loop7): last error at time 1772220093: ext4_validate_block_bitmap:441 [ 185.585989][ T9144] loop5: detected capacity change from 0 to 512 [ 185.598153][ T9131] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 185.607437][ T9131] loop7: lost filesystem error report for type 5 error -117 [ 185.608004][ T9131] EXT4-fs (loop7): 1 truncate cleaned up [ 185.623208][ T9144] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 185.643371][ T9131] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.666773][ T9131] EXT4-fs error (device loop7): ext4_encrypted_get_link:46: inode #16: comm syz.7.1530: bad symlink. [ 185.679610][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 185.679800][ T3791] udevd[3791]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 185.692537][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 185.701618][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 185.729362][ T9144] EXT4-fs (loop5): 1 truncate cleaned up [ 185.730459][ T9146] udevd[9146]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 185.748503][ T9144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.776626][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 185.776626][ T3791] udevd[3791]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 185.787449][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 185.814865][ T7260] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.827619][ T9144] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 49 (only 1 groups) [ 185.891054][ T9159] bridge0: port 3(veth0_to_bridge) entered blocking state [ 185.904872][ T9159] bridge0: port 3(veth0_to_bridge) entered disabled state [ 185.912790][ T9159] veth0_to_bridge: entered allmulticast mode [ 185.920118][ T9159] veth0_to_bridge: entered promiscuous mode [ 186.002962][ T9171] FAULT_INJECTION: forcing a failure. [ 186.002962][ T9171] name failslab, interval 1, probability 0, space 0, times 0 [ 186.016558][ T9171] CPU: 0 UID: 0 PID: 9171 Comm: syz.7.1543 Tainted: G W syzkaller #0 PREEMPT(full) [ 186.016602][ T9171] Tainted: [W]=WARN [ 186.016610][ T9171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.016624][ T9171] Call Trace: [ 186.016632][ T9171] [ 186.016641][ T9171] __dump_stack+0x1d/0x30 [ 186.016672][ T9171] dump_stack_lvl+0x95/0xd0 [ 186.016706][ T9171] dump_stack+0x15/0x1b [ 186.016747][ T9171] should_fail_ex+0x263/0x280 [ 186.016778][ T9171] should_failslab+0x8c/0xb0 [ 186.016800][ T9171] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 186.016835][ T9171] ? __alloc_skb+0x2d6/0x690 [ 186.016867][ T9171] __alloc_skb+0x2d6/0x690 [ 186.016948][ T9171] ? __alloc_skb+0x200/0x690 [ 186.016972][ T9171] netlink_alloc_large_skb+0xbf/0xf0 [ 186.017031][ T9171] netlink_sendmsg+0x40c/0x6f0 [ 186.017070][ T9171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.017106][ T9171] ____sys_sendmsg+0x5af/0x600 [ 186.017153][ T9171] ___sys_sendmsg+0x195/0x1e0 [ 186.017195][ T9171] __x64_sys_sendmsg+0xd4/0x160 [ 186.017229][ T9171] x64_sys_call+0x194c/0x3020 [ 186.017286][ T9171] do_syscall_64+0x12c/0x370 [ 186.017311][ T9171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.017335][ T9171] RIP: 0033:0x7fe61de5c799 [ 186.017354][ T9171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.017375][ T9171] RSP: 002b:00007fe61c8b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.017399][ T9171] RAX: ffffffffffffffda RBX: 00007fe61e0d5fa0 RCX: 00007fe61de5c799 [ 186.017423][ T9171] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 186.017514][ T9171] RBP: 00007fe61c8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 186.017528][ T9171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.017579][ T9171] R13: 00007fe61e0d6038 R14: 00007fe61e0d5fa0 R15: 00007fff6c44b398 [ 186.017602][ T9171] [ 186.237908][ T5069] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 186.251431][ T5069] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 186.325081][ T9177] loop1: detected capacity change from 0 to 512 [ 186.343946][ T9177] EXT4-fs: Ignoring removed i_version option [ 186.345254][ T1663] Bluetooth: hci0: Frame reassembly failed (-84) [ 186.362119][ T9177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.375022][ T9160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.391866][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.440765][ T9182] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1549'. [ 186.455690][ T9182] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1549'. [ 186.544733][ T1663] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.579887][ T1663] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.631505][ T1663] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.710355][ T9192] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 186.730448][ T1663] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.839912][ T9188] xfrm0 speed is unknown, defaulting to 1000 [ 186.856202][ T1663] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.865425][ T1663] bridge_slave_0: left allmulticast mode [ 186.877452][ T1663] bridge_slave_0: left promiscuous mode [ 186.886884][ T1663] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.025196][ T9188] lo speed is unknown, defaulting to 1000 [ 187.100935][ T9229] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1562'. [ 187.124263][ T1663] hsr_slave_0: left promiscuous mode [ 187.139696][ T1663] hsr_slave_1: left promiscuous mode [ 187.148955][ T1663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.157057][ T1663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.165620][ T1663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.173296][ T1663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.186745][ T1663] veth1_macvtap: left promiscuous mode [ 187.193401][ T1663] veth0_macvtap: left promiscuous mode [ 187.199175][ T1663] veth1_vlan: left promiscuous mode [ 187.204515][ T1663] veth0_vlan: left promiscuous mode [ 187.271340][ T1663] team0 (unregistering): Port device team_slave_1 removed [ 187.281011][ T1663] team0 (unregistering): Port device team_slave_0 removed [ 187.316902][ T9240] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1562'. [ 187.337489][ T9188] chnl_net:caif_netlink_parms(): no params data found [ 187.381493][ T9188] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.399794][ T9188] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.407583][ T9188] bridge_slave_0: entered allmulticast mode [ 187.415100][ T9188] bridge_slave_0: entered promiscuous mode [ 187.429397][ T9188] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.439554][ T9188] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.447836][ T9188] bridge_slave_1: entered allmulticast mode [ 187.454749][ T9188] bridge_slave_1: entered promiscuous mode [ 187.476863][ T9188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.489387][ T9188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.513810][ T9188] team0: Port device team_slave_0 added [ 187.525263][ T9188] team0: Port device team_slave_1 added [ 187.543865][ T9188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.551356][ T9188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.578229][ T9188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.592235][ T9188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.599466][ T9188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.626937][ T9188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.646301][ T1663] IPVS: stop unused estimator thread 0... [ 187.674115][ T9188] hsr_slave_0: entered promiscuous mode [ 187.681094][ T9188] hsr_slave_1: entered promiscuous mode [ 187.817140][ T9188] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 187.846064][ T9188] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 187.864870][ T9188] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 187.909585][ T9291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.926208][ T9188] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 187.994278][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 187.994297][ T28] audit: type=1400 audit(1772220096.322:1503): avc: denied { watch } for pid=9309 comm="syz.0.1572" path="/305/file0" dev="tmpfs" ino=1631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 188.006375][ T9188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.080687][ T9188] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.101201][ T1663] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.111791][ T1663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.181458][ T9188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 188.198160][ T9188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.243045][ T1663] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.250823][ T1663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.267069][ T9334] FAULT_INJECTION: forcing a failure. [ 188.267069][ T9334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.323343][ T9334] CPU: 0 UID: 0 PID: 9334 Comm: syz.0.1578 Tainted: G W syzkaller #0 PREEMPT(full) [ 188.323383][ T9334] Tainted: [W]=WARN [ 188.323426][ T9334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 188.323438][ T9334] Call Trace: [ 188.323444][ T9334] [ 188.323451][ T9334] __dump_stack+0x1d/0x30 [ 188.323530][ T9334] dump_stack_lvl+0x95/0xd0 [ 188.323558][ T9334] dump_stack+0x15/0x1b [ 188.323582][ T9334] should_fail_ex+0x263/0x280 [ 188.323602][ T9334] should_fail+0xb/0x20 [ 188.323635][ T9334] should_fail_usercopy+0x1a/0x20 [ 188.323660][ T9334] _copy_to_user+0x20/0xa0 [ 188.323691][ T9334] simple_read_from_buffer+0xb5/0x130 [ 188.323727][ T9334] proc_fail_nth_read+0x10e/0x150 [ 188.323767][ T9334] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.323798][ T9334] vfs_read+0x1ab/0x7f0 [ 188.323827][ T9334] ? sock_common_getsockopt+0x60/0x70 [ 188.323886][ T9334] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 188.323941][ T9334] ? do_sock_getsockopt+0x1c4/0x210 [ 188.323971][ T9334] ksys_read+0xdc/0x1a0 [ 188.324004][ T9334] __x64_sys_read+0x40/0x50 [ 188.324040][ T9334] x64_sys_call+0x2886/0x3020 [ 188.324063][ T9334] do_syscall_64+0x12c/0x370 [ 188.324082][ T9334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.324104][ T9334] RIP: 0033:0x7f120b79cfce [ 188.324122][ T9334] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 188.324180][ T9334] RSP: 002b:00007f120a236fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 188.324279][ T9334] RAX: ffffffffffffffda RBX: 00007f120a2376c0 RCX: 00007f120b79cfce [ 188.324293][ T9334] RDX: 000000000000000f RSI: 00007f120a2370a0 RDI: 0000000000000005 [ 188.324305][ T9334] RBP: 00007f120a237090 R08: 0000000000000000 R09: 0000000000000000 [ 188.324320][ T9334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.324334][ T9334] R13: 00007f120ba56038 R14: 00007f120ba55fa0 R15: 00007fff5a9270c8 [ 188.324356][ T9334] [ 188.388945][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 188.401391][ T3620] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 188.555404][ T9179] FAULT_INJECTION: forcing a failure. [ 188.555404][ T9179] name failslab, interval 1, probability 0, space 0, times 0 [ 188.574399][ T9188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.605177][ T28] audit: type=1400 audit(1772220096.932:1504): avc: denied { ioctl } for pid=9344 comm="syz.0.1579" path="socket:[27043]" dev="sockfs" ino=27043 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 188.610316][ T9179] CPU: 0 UID: 0 PID: 9179 Comm: syz.7.1548 Tainted: G W syzkaller #0 PREEMPT(full) [ 188.610375][ T9179] Tainted: [W]=WARN [ 188.610383][ T9179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 188.610395][ T9179] Call Trace: [ 188.610402][ T9179] [ 188.610410][ T9179] __dump_stack+0x1d/0x30 [ 188.610438][ T9179] dump_stack_lvl+0x95/0xd0 [ 188.610532][ T9179] dump_stack+0x15/0x1b [ 188.610606][ T9179] should_fail_ex+0x263/0x280 [ 188.610680][ T9179] should_failslab+0x8c/0xb0 [ 188.610700][ T9179] __kmalloc_noprof+0xb8/0x4e0 [ 188.610722][ T9179] ? kobject_get_path+0x92/0x1c0 [ 188.610745][ T9179] kobject_get_path+0x92/0x1c0 [ 188.610769][ T9179] kobject_uevent_env+0x1da/0x570 [ 188.610829][ T9179] kobject_uevent+0x1d/0x30 [ 188.610925][ T9179] device_del+0x70f/0x790 [ 188.611017][ T9179] rfkill_unregister+0x80/0x170 [ 188.611049][ T9179] hci_unregister_dev+0x26c/0x2b0 [ 188.611072][ T9179] hci_uart_tty_close+0x115/0x170 [ 188.611093][ T9179] ? __pfx_hci_uart_tty_close+0x10/0x10 [ 188.611140][ T9179] tty_ldisc_hangup+0x366/0x480 [ 188.611163][ T9179] __tty_hangup+0x3c2/0x540 [ 188.611194][ T9179] tty_ioctl+0x601/0xb80 [ 188.611287][ T9179] ? __pfx_tty_ioctl+0x10/0x10 [ 188.611378][ T9179] __se_sys_ioctl+0xce/0x140 [ 188.611461][ T9179] __x64_sys_ioctl+0x43/0x50 [ 188.611490][ T9179] x64_sys_call+0x1563/0x3020 [ 188.611516][ T9179] do_syscall_64+0x12c/0x370 [ 188.611603][ T9179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.611689][ T9179] RIP: 0033:0x7fe61de5c799 [ 188.611706][ T9179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.611724][ T9179] RSP: 002b:00007fe61c8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.611746][ T9179] RAX: ffffffffffffffda RBX: 00007fe61e0d5fa0 RCX: 00007fe61de5c799 [ 188.611761][ T9179] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000003 [ 188.611774][ T9179] RBP: 00007fe61c8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 188.611787][ T9179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.611830][ T9179] R13: 00007fe61e0d6038 R14: 00007fe61e0d5fa0 R15: 00007fff6c44b398 [ 188.611926][ T9179] [ 188.963087][ T9328] loop1: detected capacity change from 0 to 1024 [ 189.064461][ T9328] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 189.076831][ T9328] System zones: 0-1, 3-36 [ 189.107154][ T9188] veth0_vlan: entered promiscuous mode [ 189.135026][ T9328] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1576: bad orphan inode 134217728 [ 189.149699][ T9188] veth1_vlan: entered promiscuous mode [ 189.158185][ T9188] veth0_macvtap: entered promiscuous mode [ 189.174078][ T9328] loop1: lost filesystem error report for type 5 error -117 [ 189.317911][ T9328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.270543][ T9188] veth1_macvtap: entered promiscuous mode [ 190.282306][ T9188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.292217][ T9188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.354786][ T1663] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.364627][ T1663] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.377422][ T1663] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.417831][ T1663] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.466599][ T28] audit: type=1400 audit(1772220098.792:1505): avc: denied { mount } for pid=9188 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 190.505499][ T3310] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 190.520931][ T28] audit: type=1400 audit(1772220098.832:1506): avc: denied { unlink } for pid=3310 comm="syz-executor" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 190.552171][ T28] audit: type=1400 audit(1772220098.832:1507): avc: denied { unlink } for pid=3310 comm="syz-executor" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 190.579739][ T3310] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 190.593243][ T9401] loop8: detected capacity change from 0 to 1024 [ 190.640455][ T9401] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 190.653476][ T9401] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.670670][ T28] audit: type=1400 audit(1772220099.002:1508): avc: denied { write } for pid=9400 comm="syz.8.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 190.697627][ T28] audit: type=1326 audit(1772220099.022:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9406 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebdabc799 code=0x7ffc0000 [ 190.725157][ T28] audit: type=1326 audit(1772220099.052:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9406 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebdabc799 code=0x7ffc0000 [ 190.763590][ T28] audit: type=1326 audit(1772220099.052:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9406 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebdabc799 code=0x7ffc0000 [ 190.802058][ T28] audit: type=1326 audit(1772220099.052:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9406 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8ebdabc799 code=0x7ffc0000 [ 190.802573][ T9188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 190.829322][ T7117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.972105][ T9418] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 190.978772][ T9418] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.986637][ T9418] vhci_hcd vhci_hcd.0: Device attached [ 190.997259][ T9418] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(12) [ 191.004064][ T9418] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 191.012218][ T9418] vhci_hcd vhci_hcd.0: Device attached [ 191.079279][ T9420] vhci_hcd: connection closed [ 191.079413][ T9422] vhci_hcd: connection closed [ 191.084637][ T69] vhci_hcd vhci_hcd.8: stop threads [ 191.095989][ T69] vhci_hcd vhci_hcd.8: release socket [ 191.101876][ T69] vhci_hcd vhci_hcd.8: disconnect device [ 191.108497][ T69] vhci_hcd vhci_hcd.8: stop threads [ 191.114177][ T69] vhci_hcd vhci_hcd.8: release socket [ 191.120086][ T69] vhci_hcd vhci_hcd.8: disconnect device [ 191.158269][ T3413] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 191.182149][ T9435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1600'. [ 191.210287][ T9425] xfrm0 speed is unknown, defaulting to 1000 [ 191.270823][ T9425] lo speed is unknown, defaulting to 1000 [ 191.542944][ T9425] chnl_net:caif_netlink_parms(): no params data found [ 191.866896][ T9425] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.874669][ T9425] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.883819][ T9425] bridge_slave_0: entered allmulticast mode [ 191.890582][ T9425] bridge_slave_0: entered promiscuous mode [ 191.897671][ T9425] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.905415][ T9425] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.913059][ T9425] bridge_slave_1: entered allmulticast mode [ 191.919638][ T9425] bridge_slave_1: entered promiscuous mode [ 191.939895][ T9425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.952131][ T9425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.975022][ T9425] team0: Port device team_slave_0 added [ 191.982167][ T9425] team0: Port device team_slave_1 added [ 192.000720][ T9425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.007787][ T9425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.034876][ T9425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.058828][ T9425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.066185][ T9425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.162157][ T9425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.199032][ T9425] hsr_slave_0: entered promiscuous mode [ 192.205986][ T9425] hsr_slave_1: entered promiscuous mode [ 192.212335][ T9425] debugfs: 'hsr0' already exists in 'hsr' [ 192.218517][ T9425] Cannot create hsr debugfs directory [ 192.225100][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1612'. [ 192.265292][ T9455] loop7: detected capacity change from 0 to 1024 [ 192.284487][ T9455] EXT4-fs: inline encryption not supported [ 192.384941][ T9425] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 192.432941][ T9425] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 192.446512][ T9425] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 192.484928][ T9425] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 192.509212][ T9493] netlink: 'syz.8.1620': attribute type 2 has an invalid length. [ 192.531142][ T9493] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1620'. [ 192.555559][ T9425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.570546][ T9425] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.581342][ T1663] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.589154][ T1663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.609682][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.617677][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.645118][ T9501] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1621'. [ 192.656057][ T9425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.666972][ T9425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.737896][ T9425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.900786][ T9519] xfrm0 speed is unknown, defaulting to 1000 [ 192.943531][ T9425] veth0_vlan: entered promiscuous mode [ 192.963716][ T9425] veth1_vlan: entered promiscuous mode [ 193.019246][ T9526] FAULT_INJECTION: forcing a failure. [ 193.019246][ T9526] name failslab, interval 1, probability 0, space 0, times 0 [ 193.032427][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 193.032446][ T28] audit: type=1400 audit(1772220101.352:1566): avc: denied { create } for pid=9525 comm="syz.8.1624" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 193.078818][ T9425] veth0_macvtap: entered promiscuous mode [ 193.100244][ T9425] veth1_macvtap: entered promiscuous mode [ 193.123423][ T9425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.131175][ T9526] CPU: 1 UID: 0 PID: 9526 Comm: syz.8.1624 Tainted: G W syzkaller #0 PREEMPT(full) [ 193.131248][ T9526] Tainted: [W]=WARN [ 193.131256][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.131268][ T9526] Call Trace: [ 193.131273][ T9526] [ 193.131281][ T9526] __dump_stack+0x1d/0x30 [ 193.131310][ T9526] dump_stack_lvl+0x95/0xd0 [ 193.131383][ T9526] dump_stack+0x15/0x1b [ 193.131408][ T9526] should_fail_ex+0x263/0x280 [ 193.131463][ T9526] ? __pfx_sock_alloc_inode+0x10/0x10 [ 193.131482][ T9526] should_failslab+0x8c/0xb0 [ 193.131513][ T9526] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 193.131536][ T9526] ? sock_alloc_inode+0x34/0xa0 [ 193.131556][ T9526] ? __pfx_sock_alloc_inode+0x10/0x10 [ 193.131578][ T9526] sock_alloc_inode+0x34/0xa0 [ 193.131673][ T9526] alloc_inode+0x40/0x170 [ 193.131768][ T9526] __sock_create+0x120/0x580 [ 193.131801][ T9526] __sys_socketpair+0x16f/0x420 [ 193.131825][ T9526] ? ksys_write+0x194/0x1a0 [ 193.131905][ T9526] __x64_sys_socketpair+0x52/0x60 [ 193.131927][ T9526] x64_sys_call+0x2de5/0x3020 [ 193.132005][ T9526] do_syscall_64+0x12c/0x370 [ 193.132026][ T9526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.132049][ T9526] RIP: 0033:0x7f3fce86c799 [ 193.132066][ T9526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.132084][ T9526] RSP: 002b:00007f3fcd2bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 193.132171][ T9526] RAX: ffffffffffffffda RBX: 00007f3fceae5fa0 RCX: 00007f3fce86c799 [ 193.132188][ T9526] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 193.132250][ T9526] RBP: 00007f3fcd2bf090 R08: 0000000000000000 R09: 0000000000000000 [ 193.132265][ T9526] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 193.132279][ T9526] R13: 00007f3fceae6038 R14: 00007f3fceae5fa0 R15: 00007fffa42b03e8 [ 193.132298][ T9526] [ 193.132385][ T9526] socket: no more sockets [ 193.310671][ T9519] lo speed is unknown, defaulting to 1000 [ 193.341311][ T9425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.399372][ T6316] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.423181][ T6316] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.433168][ T6316] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.461989][ T9536] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1629'. [ 193.479280][ T6316] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.605379][ T28] audit: type=1400 audit(1772220101.932:1567): avc: denied { lock } for pid=9541 comm="syz.2.1632" path="socket:[28354]" dev="sockfs" ino=28354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 193.657850][ T9554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1080 sclass=netlink_route_socket pid=9554 comm=syz.2.1632 [ 193.926000][ T28] audit: type=1400 audit(1772220102.252:1568): avc: denied { shutdown } for pid=9565 comm="syz.9.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 193.973921][ T28] audit: type=1326 audit(1772220102.302:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9568 comm="syz.9.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982fb4c799 code=0x7ffc0000 [ 194.058322][ T28] audit: type=1326 audit(1772220102.342:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9568 comm="syz.9.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982fb4c799 code=0x7ffc0000 [ 194.107009][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 194.125219][ T9571] loop0: detected capacity change from 0 to 8192 [ 194.132169][ T28] audit: type=1326 audit(1772220102.342:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9568 comm="syz.9.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982fb4c799 code=0x7ffc0000 [ 194.142306][ T9573] syzkaller0: entered promiscuous mode [ 194.157585][ T28] audit: type=1326 audit(1772220102.342:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9568 comm="syz.9.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f982fb4c799 code=0x7ffc0000 [ 194.186570][ T28] audit: type=1326 audit(1772220102.342:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9568 comm="syz.9.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982fb4c799 code=0x7ffc0000 [ 194.202140][ T9573] syzkaller0: entered allmulticast mode [ 194.213388][ T28] audit: type=1326 audit(1772220102.342:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9568 comm="syz.9.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982fb4c799 code=0x7ffc0000 [ 194.247505][ T28] audit: type=1326 audit(1772220102.342:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9568 comm="syz.9.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982fb4c799 code=0x7ffc0000 [ 194.687708][ T9591] loop8: detected capacity change from 0 to 512 [ 194.694511][ T9591] EXT4-fs: Ignoring removed nobh option [ 194.702111][ T9591] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 194.723661][ T9591] EXT4-fs (loop8): 1 truncate cleaned up [ 194.730094][ T9591] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.792884][ T9591] tmpfs: Bad value for 'mpol' [ 194.812389][ T9188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.860677][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1646'. [ 195.239739][ T9609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1650'. [ 195.292595][ T9611] xfrm0 speed is unknown, defaulting to 1000 [ 195.334019][ T9611] lo speed is unknown, defaulting to 1000 [ 195.695722][ T9620] tipc: Enabled bearer , priority 0 [ 195.705098][ T9620] FAULT_INJECTION: forcing a failure. [ 195.705098][ T9620] name failslab, interval 1, probability 0, space 0, times 0 [ 195.721097][ T9620] CPU: 0 UID: 0 PID: 9620 Comm: syz.0.1654 Tainted: G W syzkaller #0 PREEMPT(full) [ 195.721204][ T9620] Tainted: [W]=WARN [ 195.721292][ T9620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 195.721306][ T9620] Call Trace: [ 195.721313][ T9620] [ 195.721322][ T9620] __dump_stack+0x1d/0x30 [ 195.721346][ T9620] dump_stack_lvl+0x95/0xd0 [ 195.721483][ T9620] dump_stack+0x15/0x1b [ 195.721522][ T9620] should_fail_ex+0x263/0x280 [ 195.721541][ T9620] should_failslab+0x8c/0xb0 [ 195.721559][ T9620] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 195.721579][ T9620] ? __alloc_skb+0x2d6/0x690 [ 195.721639][ T9620] __alloc_skb+0x2d6/0x690 [ 195.721658][ T9620] ? __alloc_skb+0x200/0x690 [ 195.721676][ T9620] inet6_netconf_notify_devconf+0x10f/0x1d0 [ 195.721704][ T9620] addrconf_ifdown+0xe12/0xf90 [ 195.721936][ T9620] ? tls_dev_event+0x47c/0x9b0 [ 195.721970][ T9620] addrconf_notify+0x222/0x8f0 [ 195.722029][ T9620] ? __pfx_addrconf_notify+0x10/0x10 [ 195.722093][ T9620] raw_notifier_call_chain+0x83/0x1c0 [ 195.722119][ T9620] call_netdevice_notifiers_info+0x92/0xd0 [ 195.722156][ T9620] netif_set_mtu_ext+0x3e3/0x520 [ 195.722183][ T9620] netif_set_mtu+0x4a/0xe0 [ 195.722241][ T9620] dev_set_mtu+0xc1/0x170 [ 195.722260][ T9620] dev_ifsioc+0x48d/0xf60 [ 195.722290][ T9620] ? mutex_lock+0x57/0x90 [ 195.722391][ T9620] dev_ioctl+0x709/0x960 [ 195.722423][ T9620] sock_do_ioctl+0x1aa/0x230 [ 195.722472][ T9620] sock_ioctl+0x41b/0x610 [ 195.722505][ T9620] ? mutex_lock+0x57/0x90 [ 195.722533][ T9620] ? __pfx_sock_ioctl+0x10/0x10 [ 195.722561][ T9620] __se_sys_ioctl+0xce/0x140 [ 195.722590][ T9620] __x64_sys_ioctl+0x43/0x50 [ 195.722620][ T9620] x64_sys_call+0x1563/0x3020 [ 195.722655][ T9620] do_syscall_64+0x12c/0x370 [ 195.722796][ T9620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.722821][ T9620] RIP: 0033:0x7f120b7dc799 [ 195.722839][ T9620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.722856][ T9620] RSP: 002b:00007f120a237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.722877][ T9620] RAX: ffffffffffffffda RBX: 00007f120ba55fa0 RCX: 00007f120b7dc799 [ 195.722907][ T9620] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 195.722923][ T9620] RBP: 00007f120a237090 R08: 0000000000000000 R09: 0000000000000000 [ 195.722935][ T9620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.722984][ T9620] R13: 00007f120ba56038 R14: 00007f120ba55fa0 R15: 00007fff5a9270c8 [ 195.723002][ T9620] [ 195.723075][ T9620] syzkaller0: MTU too low for tipc bearer [ 195.992518][ T9620] tipc: Disabling bearer [ 196.043552][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1655'. [ 196.053325][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1655'. [ 196.148322][ T3620] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 196.160300][ T9630] loop0: detected capacity change from 0 to 1024 [ 196.179328][ T9630] EXT4-fs: inline encryption not supported [ 196.206475][ T9630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.225672][ T9630] EXT4-fs (loop0): shut down requested (1) [ 196.279301][ T82] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.294672][ T9636] loop8: detected capacity change from 0 to 512 [ 196.302973][ T9638] loop9: detected capacity change from 0 to 128 [ 196.314601][ T9636] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 196.382915][ T9636] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1659: bad orphan inode 131083 [ 196.404860][ T9630] syzkaller0: entered promiscuous mode [ 196.435707][ T9636] loop8: lost filesystem error report for type 5 error -117 [ 196.436487][ T9636] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.476764][ T9630] syzkaller0: entered allmulticast mode [ 196.530236][ T9630] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 196.539880][ T9188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.539934][ T9630] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 196.558519][ T9630] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 196.622414][ T82] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.723239][ T82] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.743492][ T9656] xfrm0 speed is unknown, defaulting to 1000 [ 196.796117][ T9656] lo speed is unknown, defaulting to 1000 [ 196.809326][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.831720][ T82] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.877358][ T9668] ================================================================== [ 196.886029][ T9668] BUG: KCSAN: data-race in bdev_statx / queue_limits_commit_update [ 196.894490][ T9668] [ 196.896918][ T9668] read to 0xffff888101deaa48 of 4 bytes by task 9151 on cpu 1: [ 196.905117][ T9668] bdev_statx+0x295/0x2d0 [ 196.910175][ T9668] vfs_getattr_nosec+0x1b6/0x1e0 [ 196.915499][ T9668] vfs_getattr+0x48/0x60 [ 196.920236][ T9668] vfs_statx_path+0x28/0x140 [ 196.925241][ T9668] vfs_statx+0xc4/0x170 [ 196.931558][ T9668] vfs_fstatat+0x118/0x170 [ 196.936248][ T9668] __se_sys_newfstatat+0x55/0x3e0 [ 196.941478][ T9668] __x64_sys_newfstatat+0x55/0x70 [ 196.946944][ T9668] x64_sys_call+0x2c64/0x3020 [ 196.951820][ T9668] do_syscall_64+0x12c/0x370 [ 196.956629][ T9668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.962743][ T9668] [ 196.965337][ T9668] write to 0xffff888101deaa08 of 192 bytes by task 9668 on cpu 0: [ 196.973317][ T9668] queue_limits_commit_update+0x4b/0x160 [ 196.979587][ T9668] loop_configure+0x78c/0x9c0 [ 196.984370][ T9668] lo_ioctl+0x1e1/0x13a0 [ 196.988970][ T9668] blkdev_ioctl+0x387/0x460 [ 196.993596][ T9668] __se_sys_ioctl+0xce/0x140 [ 196.998387][ T9668] __x64_sys_ioctl+0x43/0x50 [ 197.003884][ T9668] x64_sys_call+0x1563/0x3020 [ 197.008845][ T9668] do_syscall_64+0x12c/0x370 [ 197.013765][ T9668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.020035][ T9668] [ 197.022369][ T9668] Reported by Kernel Concurrency Sanitizer on: [ 197.029044][ T9668] CPU: 0 UID: 0 PID: 9668 Comm: syz.0.1667 Tainted: G W syzkaller #0 PREEMPT(full) [ 197.040534][ T9668] Tainted: [W]=WARN [ 197.044515][ T9668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 197.055142][ T9668] ================================================================== [ 197.082912][ T9668] loop0: detected capacity change from 0 to 512 [ 197.094791][ T9668] EXT4-fs: Ignoring removed nobh option [ 197.141015][ T9668] EXT4-fs: Ignoring removed orlov option [ 197.153996][ T9668] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.161394][ T82] batadv1: left allmulticast mode [ 197.169025][ T82] batadv1: left promiscuous mode [ 197.178630][ T9668] EXT4-fs error (device loop0): __ext4_iget:5378: inode #11: block 1: comm syz.0.1667: invalid block [ 197.192656][ T82] bridge0: port 1(batadv1) entered disabled state [ 197.206351][ T9668] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 197.208518][ T9668] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1667: couldn't read orphan inode 11 (err -117) [ 197.218776][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 197.218798][ C1] EXT4-fs (loop0): initial error at time 1772220105: __ext4_iget:5378: inode 11: block 1 [ 197.218836][ C1] EXT4-fs (loop0): last error at time 1772220105: __ext4_iget:5378: inode 11: block 1 [ 197.266430][ T9668] loop0: lost filesystem error report for type 5 error -117 [ 197.276885][ T9668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.329594][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.431691][ T82] bond0 (unregistering): Released all slaves [ 197.441416][ T82] bond1 (unregistering): Released all slaves [ 197.452793][ T82] bond2 (unregistering): Released all slaves [ 197.566127][ T82] hsr_slave_0: left promiscuous mode [ 197.579065][ T82] hsr_slave_1: left promiscuous mode [ 197.598536][ T6316] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 197.612090][ T82] veth1_macvtap: left promiscuous mode [ 197.623415][ T82] veth0_macvtap: left promiscuous mode [ 197.630716][ T82] veth1_vlan: left promiscuous mode [ 197.637234][ T82] veth0_vlan: left promiscuous mode [ 197.992109][ T82] IPVS: stop unused estimator thread 0...