last executing test programs: 7m53.355907918s ago: executing program 2 (id=1113): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x1) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)="88cc32fe850acd57b0e51f65eb4722bfcffc8d84ce34941f838b70ad", 0x1c}, {&(0x7f0000000000)="fda7", 0x2}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') open_tree(r1, 0x0, 0x89901) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004800) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xffffffffffff8001, 0x7, 0x0, 0x7}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, 0x0}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x4c}}, 0x8000002) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) 7m53.192796453s ago: executing program 2 (id=1116): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_ublk_setup_io_uring(0x9df, &(0x7f0000000180)={0x0, 0x56de, 0x8200, 0x1, 0x268}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000003f80)=[{0x2, 0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f0000000440)=""/56, 0x38}], &(0x7f00000004c0)=[0x4, 0x6, 0x2, 0x6, 0x2, 0x6, 0x37, 0x4, 0x7b01]}, {0xa, 0x1, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000000540)=""/101, 0x65}, {&(0x7f00000005c0)=""/141, 0x8d}, {&(0x7f0000004000)=""/4105, 0x1009}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/19, 0x13}, {&(0x7f0000002900)=""/148, 0x94}, {&(0x7f00000029c0)=""/172, 0xac}, {&(0x7f0000002a80)=""/253, 0xfd}, {&(0x7f0000002b80)=""/73, 0x49}, {&(0x7f0000002c00)=""/182, 0xb6}], &(0x7f0000002d80)=[0x56, 0x9, 0x1fca9b3a, 0x80, 0x6]}, {0x0, 0x0, 0x0, &(0x7f0000003f00), &(0x7f0000003f40)=[0x7fffffffffffffff, 0x0, 0x68a1a9d4]}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @lsm=0x1b}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x800}) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) preadv2(r1, &(0x7f0000000580)=[{&(0x7f0000002100)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000100)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 7m53.169474924s ago: executing program 2 (id=1117): syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 7m53.078465717s ago: executing program 2 (id=1118): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={@empty, 0x1, 0x0, 0x10, 0x0, [{@broadcast}]}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, @private=0xa010102, 0xb, 0xa}}) 7m52.98777595s ago: executing program 2 (id=1120): socket$kcm(0xa, 0x5, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000001) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r2) close(r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r3, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r1, 0x0, 0x40000) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8916, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}]}]}}]}, 0x44}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x10000006, 0x2, 0x87, 0xffffffff, 0x40}) brk(0x200004ffc000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r5, 0x7}, 0x8) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f0000000080)=0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_usbip_server_init(0x2) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xc4) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0x0, 0x900, 0x70bd2b, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) 2m49.982970067s ago: executing program 33 (id=2495): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/107], 0x119) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}]}]}}]}, 0x44}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x10000006, 0x2, 0x87, 0xffffffff, 0x40}) brk(0x200004ffc000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r5, 0x7}, 0x8) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f0000000080)=0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_usbip_server_init(0x2) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xc4) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0x0, 0x900, 0x70bd2b, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) 2m33.753794873s ago: executing program 1 (id=2598): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xfbcd, 0x1530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x1, @perf_bp={0x0}, 0xb120, 0x10003, 0x20da, 0x9, 0x7, 0x20209, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x74) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$XFS_IOC_SCRUBV_METADATA(r5, 0xc0285840, &(0x7f0000000280)={0x1, 0x9, 0xfffffffd, 0x0, 0x2, 0x1, 0x0, &(0x7f00000001c0)=[{0xe, 0xfe, 0x81}]}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000005c0)={{r0, &(0x7f0000000080)='/dev/ttyS3\x00', 0x109000, &(0x7f0000000100)={@align=0x4, {0x0, 0x7, 0x4, 0x100000001}}, 0x5, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x8}, {[0x3, 0x6, 0x4, 0xfffffffb]}, 0x7, 0xe4, &(0x7f00000004c0)=""/228}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2, 0x7, 0xa8, 0x200, 0x1, 0x254, '\x00', 0x0, r9, 0x188, 0x1, 0x1, 0x6}, 0x50) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000300)=0x1) 2m32.2978978s ago: executing program 1 (id=2602): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x20000001}, 0x995d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2f1, &(0x7f0000000b00)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x16, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x1000006}, 0x8909, 0x8000, 0x800000, 0x4, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ppoll(&(0x7f0000000d40)=[{0xffffffffffffffff, 0x8000}], 0x20000000000000e0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 2m31.934159733s ago: executing program 1 (id=2606): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x2, 0x6, 0x5f8, 0x488, 0x290, 0x488, 0x0, 0x0, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xff, 0xff000000, 0xffffff00], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x138, 0x180, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x6, 0x81, 0x3, 0x1, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, @private2, [0xffffff, 0xffffffff, 0xffffff00, 0xffffff00], [0xff, 0xffffffff, 0xff000000, 0xffffff00], [0xffffffff, 0xffff00, 0xff, 0xffffff00], 0x800, 0x2041}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x21}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0xffff, 0x44, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@loopback, 0x1, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)="b9aac25d94f5874d5166c58b96b81923c01a5a88f21d9f40580832bd6978e10dcdf4a7aeb4542dd56b3bae5481c825173463897efaf49a0b858cef12412d77229033adc47e20eb44b90a7fbee894135b1375bd402a424138dcee35bcb95c0e90f6ee3b357a55fb5ec1cb0cf02e9c14f947ac3e12fe2a39602ac713814565e37c82492728d7c30e7684cbc3ff7d6ce18232c0388fb07aaea55d7a2bbbfaf9917918cf1252801a280476556952e9df8532e8a4f79e0d813482f9bb7c77515ac48547bf97d70a4ee96dff9afcd91e6aa43b8f544d3e71220a6cf9961ecbbeaddeb6500cab0d00b5a145fcb69ea5e16b3056decab9f85b82a7c947", 0xf9}, {&(0x7f0000000640)="bebdfae2389765dad2b07e4c20bf568f2a6a41ea7717c3d2fb68c159322a25eddfb49c6d5572dab41210f7cd9d644209d7da2d019503f4c765d12f49abe5f7bf11bcfb9b8dc67b9b429298f2a34504277126d8ff75ca343375b1f7afb22248b595d3cf3255234823896c13d6d8a7e4a203ed0e5f6a0ad184639011a13916b81264455d88c0d24f058d3326592a5256251dcabb787c4b45082700ab27c27ae3307d1515577d7302c47387873cd28f4bd79f4bca2d50666eecc78014f8bd68b380347d2c36ae5d2da90d4b1eb860ec9e9a4e561fc082315ba15a07c60006556252e9d274ae61f2b4341a382057598cf872d329260fba8eaa", 0xf7}], 0x2, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x10}}], 0x30, 0x40}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000f00)="3657ef0b998efaa63fbd703cd0b412b3084bd91baf85fc26b5172f84648b6754c3c1d21024ff8054496e8cf1de371d66c3610866954eb4506fb816a9be7dea54238756e91db23345881553c1841140d67110825743be755a25d6d837b70cb1c166edb786bd39146f825fc452d66e99c360b78d38dad774686bc829e0e70f1279eaf3951ca9f37073fc2cf779705dcd17f9", 0x91}, {&(0x7f0000000fc0)="32ffd165d44f8a891c106ea27e64ea2a5e534f9a06ab9f7714a210c5ff654ffd1e40a9384f59c074c42f17dd72afbabd6024a73f0f060ed2728190b9385a1047ab1d0e9bfb09031df6f721d152586853348c1325d3942ec0da27b12192c708ffba08fc66ea", 0x65}, {&(0x7f0000001040)="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", 0xfc}], 0x3, &(0x7f0000001240)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r5, 0xffffffffffffffff, r2, r5, 0xffffffffffffffff, r1, r5, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x70, 0x20000080}}, {{&(0x7f0000001340)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000001600)=[{&(0x7f00000013c0)="f8d399f1b2777d8e7f1099c08e12c44253b2a755a6ebd2ccf90c23e1ecdeeac2832c90fa16ec4162660e8e572647bf4be58384e0f274b7534cff07e02bdbbe006baac9d1bd8620f08f203c94abf32c3962a2d94a9bfd457b", 0x58}, {&(0x7f0000001440)="eeb6188b95758a5c9959157f61cb9c8825139f8c10e6af36ed0dfd7bb0a72f2a79db6b499cc140d57d2bab69ec5994cb6bd331733ee2882443a36a55bb4f3f958d9fe910be8b82bbb216f619cb09526759d775ef19af28", 0x57}, {&(0x7f00000014c0)="c6c3a08ac4be7d142a05d0c18cf9d3bb4c9d8fba6b4898d92fefb7b029c8af929205928f1e", 0x25}, {&(0x7f0000001500)="2982e0030ac1d75d86c5524d2b9af562a640490dfa6e69e7e26ade851e840041e6ac8de5f921d3232bdcaed97bb1281256eff9ac4c3ce685d96055f2ffea595fbd42febc2469063dff272a08f2d4234743048c6f1fda7164179d8b112abb755e6b6f7838f6d8e2b8060472f9c32326839ab5e06617d42bfb8a801f49793d3ed69603216b5e22ed44304044ed655d4922f1de7e11001fe91669a51e556062185626aa38205e36e27c7f626ba50d7012a2bf2d", 0xb2}, {&(0x7f00000015c0)="012fa5a2cb2c5cd54642baa7611546c64ed2fe95931ca49a77492e0a0047ca", 0x1f}], 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000000000000010000000100000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="400089ad9bdd83da0000"], 0x48, 0x10}}, {{&(0x7f0000001940)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000000), 0x0, &(0x7f0000001b80)=[@rights={{0x24, 0x1, 0x1, [r4, r0, r1, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0xe0, 0x20000000}}], 0x4, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x392, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x8040, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4, 0x2}, 0xd) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r9 = fsopen(&(0x7f0000000180)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x82) 2m31.145747739s ago: executing program 1 (id=2611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x1200, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) 2m31.013745933s ago: executing program 1 (id=2612): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) sched_setscheduler(r0, 0x5, 0x0) ptrace$setopts(0x4200, r0, 0xfffffffffffffffc, 0x29) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xf}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, r0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x82744, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x800, 0xc8, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x0) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfdef) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000c80)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YGhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\xfaz\x00\x00\x00\x00\x00\x00\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\b\x00\x00\x00\x00\x00\x00\x00\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\"\xd8*\xa8\xd2\x94\xa3\x89\xcb\xa0\xc5\xc9=\xa5^\x00\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb1\x98\xe3\xc3Q\xb4+\xec\xf5(\xd6\xf5O\xaf\x1f\xc0\xd2I`\xa2\vsNQ\xc2\xb6q\x1d\x9a\xdc\xefnU\xeb\xa0x\xf4B\xce\f&\x9f\xc9\xeaU\xf3\x01u\x18\xfau\x0fd\xee\xca\xc9\f\xec\xa5\xd2\x1a\xab_)\xcc\x10\x82\xcdxy\xa7\x02-\x13\x8fb\\t\x9c\x16\x95\xde\xaa\xc1\xc3q\x82B\xf7\x8e\xce\xdd\xcd`\xb4;ZU\xa0\x96\tg\xfa\xa4nAn\xfc\x98\x92\xeaS\'\xfb\xd8W2X\x9e\xc6vY@\xfa\xe52\"\x04^\x00\x00\x8d~n+6\f\xbfb\x05\x00\x00\x00\x00\x00\x00\x00\x8b\'\x0f\xa1\xc0\xf6\x1f\xda\xca\a\x95\x93\x06\xdem\x10\x01\xaf$J8T\xf3\xae\xda\x03\xaf-\xc1D\xe6\x80\xdd\xf2\x13\xfc#\nXs\x95\xf9\xb2\x1e\xee\xf6\xbbi\xae.\x9eF\xce\x80\x90mju\x85VUc\xbf\xc6w\"\x179S\fm\x87\xcfU:B\xdc\x91,\xe6\xa3\xd9\x83\xe4\x01\xc7E\x16f\xbeLg\xf9\xa7Ja\xac_\x18P\x9f;\xabI\x02&\x8b\xe6\x1c\x97\xda\x13\xb8px\x1b\xb2\xd3)n\xff\x05\rl\x01G\x04\xae\xc2\x8a;\x8c\xd6\xd3\xc12\xbc`1u,\x80`\x7f\xab\x17\x8a\xf2\x8a\x1aL\t\xe6`\x92\x17?!\xfd\xbeK>\xc3\xee\xce5h\x88T# \x15\xfb\xd7\xa2Q>\xb7A\\\x0e\x7f\\\x14', &(0x7f0000000940)='Yockfs\x00\x01\f\xcc\x0e\xc94\x0f/\xb7~\x10\xf8\xe9\xd71\xc1s}\x9d\xd8\xc0\xb1>\xb4\x7f\xcf\x93\xf3^X\x1e<\xa1\xa992\x88\xd4/\xb9\xb3\xd2,\xa5:\x8d\x0e\x8ei\x03v\xf4\t%\x1aR\x84(\xe0\xb3O\xe2\x96a\xa2O\xa6\x90\xfd;0\\\xb8\x94\rz\x80\xbf{\xf1\xbfP\xd4#\xf1WH\x01#\xf3D\xa8/0T\xed\x92F\xe6&\x88\x83\x10\x83zU\xe4t\xf2\\\b\xa0\xef\x04\xeb\xe4\xbfu\x9a\x0eyb\xfb\x1d\xd6#\xaf\x18\xfa\xa8\xef\x9cm\x9dU\x9cg\xdek\x1fA\xa6\xd9\xc1\xc6a\x94\xec\xa7D\x05;\xd5\x95e\t\xc4y\x90\xbfx\x97\xe0\x04jp(>\xca\xfc\x18C\xa2\xa3aEk\x9f\vo\xe1\x11\xa2\x05\xd7\xd0e|\ns\xb1X\x86\xde\xea\xeaP\xdf\xe4\xe9\xe7\x128\xe9BP\xe0{<\xa8\x91\xa0>\xe1\xceR\x1a\xcd\x8c\x03A\xa1\x81*e\xd9\x06P\x87\x89\xf2\x96\x0f\xb8\x8eBG0\x04\xfd\n\x12\xfa\x01\'\xa8i\xd8\x19Ibm!5j\xd6\xae\xd8\xb5(w\xa9\xcdy\x84\xa0i\xcc\x8e\xba\xab\xd8p#m', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000f40)='\x00\xfb\xd4\xbe\xf0\x93D\x1f\xa9\x06\x00/8\xee\xce\x96*9\xa3/$\xa3\x1b\x92\xfe<\xf0\x94\f\xd6\x16\xbdD\x01y\x1a\xa4\x96\x88\x94K{\x7fs\xc0\xa8c\xe1\xfcH%\xd5\xe43H\xca\xa4!W\xa2@\xfbKgW=\x03\xc6\xdb%W\xfc\xaa\x93\xed\x8d\x86\xb3\x98\xd42\xc0\x95G\xd12\x12\x05}&\x10Y^\xb0\xcew\xc6\x00a2\xc9\x97(4\x05\x86\xd2\xc8\xc6\xb4K\x112\x1a\xd6\xcf\xa9\\j\x91\x9ag\x9e\xba\x87\x8b\"ttQ\n$\x9f\xaa\xf6\x12(\xb1\x84U\xf6M\xadD\xec\xeb\x99\xd1.\xc2\x96\xde\xcb\xcd\xca\xb0CA\x16o}9\xd9\xca_\xeb\x94A\xc8\x97\x88\x1dS\x82\xa7\\\x14\\\xb3\x8d/\x86d3:)S\xef[[|\xd2\xfe\xa9WS]bQ\xd2\x11\xe2\x9ao\xcc\xd4\x9e\xc3\xf0\xd67/\r\xdd*:\xe6w\xdaj\x11z\xe0\x15', &(0x7f00000001c0)='(\x18\x02', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r9, &(0x7f0000000140), 0x2, 0x0) 2m30.916637876s ago: executing program 1 (id=2613): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xfbcd, 0x1530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x1, @perf_bp={0x0}, 0xb120, 0x10003, 0x20da, 0x9, 0x7, 0x20209, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x74) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000005c0)={{r0, &(0x7f0000000080)='/dev/ttyS3\x00', 0x109000, &(0x7f0000000100)={@align=0x4, {0x0, 0x7, 0x4, 0x100000001}}, 0x5, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x8}, {[0x3, 0x6, 0x4, 0xfffffffb]}, 0x7, 0xe4, &(0x7f00000004c0)=""/228}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2, 0x7, 0xa8, 0x200, 0x1, 0x254, '\x00', 0x0, r8, 0x188, 0x1, 0x1, 0x6}, 0x50) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000300)=0x1) 2m28.316865202s ago: executing program 4 (id=2625): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0xc, 0x8, 0xd, 0x0, 0x0, 0x8, 0x1, 0x1}, &(0x7f0000000040)=0x20) (fail_nth: 4) 2m28.048619931s ago: executing program 4 (id=2628): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x480, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 2m27.809576109s ago: executing program 4 (id=2630): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400"}, 0x28) recvfrom$inet6(r0, &(0x7f0000000300)=""/218, 0xda, 0x120, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@usrquota}, {@norecovery}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x0, 0x1, 0x6, 0x5}) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f00000001c0)={0x2b, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x93}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_LINK_CREATE(0x8, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) ioctl$KDGKBSENT(r3, 0x4b48, 0x0) unshare(0x24060100) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) modify_ldt$write2(0x11, &(0x7f0000000200)={0x77b, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x6}}, 0xffffffffffffff81) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) file_getattr(0xffffffffffffffff, &(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002140), 0x18, 0x1000) 2m27.705840362s ago: executing program 4 (id=2631): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r0, 0x80045440, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@errors_remount}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x1) r1 = socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x896c48, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0), 0x4000) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x6000, 0x8, 0x0) setregid(0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000240)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, @in6={0xa, 0x4e22, 0x10, @empty, 0x2}, @in6={0xa, 0x4e24, 0x8, @loopback, 0x1}, @in={0x2, 0x4e21, @private=0xa010100}, @in={0x2, 0x4e23, @private=0xa010100}, @in={0x2, 0x4e21, @multicast1}], 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xd, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, &(0x7f0000000200)="c54c", 0x0, 0x3}, 0x50) 2m23.880887648s ago: executing program 4 (id=2634): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r3, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"}) r4 = syz_open_pts(r3, 0x40000) dup3(r4, r3, 0x0) splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, 0x0, 0x24000800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r6) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000006c0)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$kcm(0x23, 0x2, 0x0) r8 = io_uring_setup(0x1ddd, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000740)={0x0}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) read$nci(0xffffffffffffffff, 0x0, 0x0) r9 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$TIOCMGET(r9, 0x5415, &(0x7f0000000080)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2m23.692674955s ago: executing program 4 (id=2636): capset(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) socket$kcm(0x10, 0x2, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = memfd_secret(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000540)='.\x00', 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x200, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0xffffffffffffffff, r0, 0x8) sendmsg$inet(r1, 0x0, 0x40000) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8916, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5r0, &(0x7f0000000080)='/dev/ttyS3\x00', 0x109000, &(0x7f0000000100)={@align=0x4, {0x0, 0x7, 0x4, 0x100000001}}, 0x5, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x8}, {[0x3, 0x6, 0x4, 0xfffffffb]}, 0x7, 0xe4, &(0x7f00000004c0)=""/228}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2, 0x7, 0xa8, 0x200, 0x1, 0x254, '\x00', 0x0, r8, 0x188, 0x1, 0x1, 0x6}, 0x50) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000300)=0x1) 59.002799342s ago: executing program 6 (id=3067): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0xffffffffffdffffd}, 0x40, 0x10001, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x23000, 0x0}, &(0x7f0000000040)="8ac0568c0d79", 0x0, 0x0, 0x0, 0x0, 0x0}) 57.981444795s ago: executing program 6 (id=3077): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 57.951582886s ago: executing program 6 (id=3079): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) unshare(0x40400) fallocate(r1, 0x0, 0x0, 0x1000f4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000500)=@ipv4_newaddr={0x17, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x8, 0xcb}, [@IFA_LOCAL={0x8, 0x2, @remote}]}, 0x20}}, 0x0) 57.862002059s ago: executing program 6 (id=3080): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xc0000, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) ioprio_set$uid(0x3, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 57.687788865s ago: executing program 6 (id=3081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59cf27bd70000100000008"], 0x40}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) (fail_nth: 1) 56.585793901s ago: executing program 6 (id=3083): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1b) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/135, 0x87}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000392b8eb1f2c84b4c67c0da8ddce7cbd1cfbe28b54f644b193a4f560c411c54d9869c90d42d8d3a42c3e48a72aa9bb376abd3214ed571af36bf67695f19e14ec159c96d2f0d43d6a5c620c00a49086a67c11dc54130164b7ad825e025a9522d033d6e8052c4f2b7ebfd49c4e195dcf570ea8a4785e7ca53d95a05d7ebd2d23dcafcd3f7ad24d9513b0f0dbe11c0cdd0dfc0c86aca933c7705b373700bebb4adc2c3acf0b497a829fe17", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000100008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000208500000017000000bf91000000000000b7020000210000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000540)={0x81, 0xf1, 0x3, 0xffff, 0x4, "41de40f0183c8e2505b9c986bffca548fae32f", 0xffffffff, 0x9}) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000a00)="a11be79c589c8399205057b7555bc05e2469884e2080b717912b0f757ccb0f6a776a12f9ef1dc32ab0d55987e820b60b5984c137492f5df9c59c05d9ff230ab62f2f762330f86ab28ba6b984cb9bb6cc51c46f8ab87febf0a269b5e7317aeca8715a1e99daddabcd832d1a56cb0cc7875fe80c00875e8ff140da1fc83142e562419d0aed048068ba8b7f0bf093b98408331a6ee7073b28ad031d20488f914243f6dd95cb891424e777e38cd3d2dd06a4af871db5875bd7287a0fa3720925696933397d7b371f185730a1631d3c7e0d645621f91d8f7db1bb958298155f39ff00a0b12fce8a2e9af7490a0d", 0xeb}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000009339000c000300686173683a69700005000400000000000900020073797a3100000000140007800800134000001700000000000000010905000500020000000500010006"], 0x58}}, 0x4080) 56.515631174s ago: executing program 36 (id=3083): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1b) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/135, 0x87}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000392b8eb1f2c84b4c67c0da8ddce7cbd1cfbe28b54f644b193a4f560c411c54d9869c90d42d8d3a42c3e48a72aa9bb376abd3214ed571af36bf67695f19e14ec159c96d2f0d43d6a5c620c00a49086a67c11dc54130164b7ad825e025a9522d033d6e8052c4f2b7ebfd49c4e195dcf570ea8a4785e7ca53d95a05d7ebd2d23dcafcd3f7ad24d9513b0f0dbe11c0cdd0dfc0c86aca933c7705b373700bebb4adc2c3acf0b497a829fe17", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000100008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000208500000017000000bf91000000000000b7020000210000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000540)={0x81, 0xf1, 0x3, 0xffff, 0x4, "41de40f0183c8e2505b9c986bffca548fae32f", 0xffffffff, 0x9}) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000a00)="a11be79c589c8399205057b7555bc05e2469884e2080b717912b0f757ccb0f6a776a12f9ef1dc32ab0d55987e820b60b5984c137492f5df9c59c05d9ff230ab62f2f762330f86ab28ba6b984cb9bb6cc51c46f8ab87febf0a269b5e7317aeca8715a1e99daddabcd832d1a56cb0cc7875fe80c00875e8ff140da1fc83142e562419d0aed048068ba8b7f0bf093b98408331a6ee7073b28ad031d20488f914243f6dd95cb891424e777e38cd3d2dd06a4af871db5875bd7287a0fa3720925696933397d7b371f185730a1631d3c7e0d645621f91d8f7db1bb958298155f39ff00a0b12fce8a2e9af7490a0d", 0xeb}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000009339000c000300686173683a69700005000400000000000900020073797a3100000000140007800800134000001700000000000000010905000500020000000500010006"], 0x58}}, 0x4080) 6.180065266s ago: executing program 9 (id=3400): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x4, 0x0, 0x13, "00176a0000fcf7ffffa5e87d3608f30b9a7d4d"}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000280)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sigaltstack(0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000010101010000200000000000020000092000018006000340000200001400018008000100ac14141608000200ac1414c41c001980060000000800020080000000080002000001000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x406c450}, 0x8000) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) semget$private(0x0, 0x4000000009, 0x135) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x14c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r6, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="68000000090603000000000000000000050000400900020073797a3100000000050001000700000040000780060004404e24000005000700ff0000000c00018008000140e00040000c00148008000140ac1e0100060005404e2100000c00168048", @ANYRES16=r5, @ANYBLOB="9c0705b1c1d55554d80867092c173c1a74d6d42df1e47e286f9e5d25a42af8775e5ecf3cb3280356519d425573ee3bab1d818379fc3f5489e8ea24366192cae7f78e6b66bf64ca69e9a82406", @ANYRESHEX, @ANYRESHEX], 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) 5.805839818s ago: executing program 9 (id=3403): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup2(r3, r2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f000000d6c0)={0x0, 0x0, &(0x7f000000d680)={&(0x7f000000d580)=ANY=[@ANYBLOB="240000000408030000000000000000000700000a05000300ffffffff060002"], 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) pipe(&(0x7f0000000500)) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x70550, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x8}, 0x400, 0x0, 0x0, 0x9, 0x1, 0xaad2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r1}}, 0x18) r6 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r6, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.73950916s ago: executing program 9 (id=3404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r5 = semget$private(0x0, 0x6, 0x0) (rerun: 64) semop(r5, &(0x7f00000000c0)=[{0x0, 0xc63e, 0x1000}, {0x4, 0x4, 0x1800}], 0x2) semtimedop(r5, &(0x7f0000000000)=[{0x2, 0xf, 0x2800}, {0x3, 0xfff8}], 0x2, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {0x0, 0xfff1}, {0x8, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008044) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) close(0x3) 5.540149697s ago: executing program 9 (id=3407): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x40}, 0x8050, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x4, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES64=r0], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'sit0\x00', 0x0}) timer_create(0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5, r2}) perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x200, 0x122, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x18000, &(0x7f0000000240)={[{@data_ordered}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80000000}}, {@commit={'commit', 0x3d, 0x100}}, {@inlinecrypt}]}, 0x3, 0x4df, &(0x7f0000000680)="$eJzs3MFvFNUfAPDvbHdpCz9+VgQURCmgsTGxhYLCwQsmJh40MeJBjk1bCbKAoT0IIVISw53Eo4nxaLzpH6BH48k/AA/eDAkxXABPa2Z3pt1ud7e77ba17OeTbPve7Jt5782bN/tm3s4G0LdG0z9JxP8i4l5EPFOLLk8wWvv3+OHN6ScPb07HQqVy7u+kmu5RGs/k6+3KImOFiMJXScMGa+au37g0VS7PXsviE/OXP5+Yu37jjYuXpy7MXpi9MnnmzKmTJ06/Nflm95Vqkl9ar0cHv7x66MB75+9+MF3Mlw9l/+vr0VKxu2KMtnnv1e429Z+3uy6crNxPtza1MHRsKDusS2n/v1k+en6rCwRsmkqlUhls/fZCpdHtFUuAbSuJrS4BsDXyD/r0+jd/dTZyKPVi+LHlHpytXQCl9X6cvWrvFKOQpSk1XN/20mhEfLLwz7fpK9rdh/hzgwoAAPSdX87mI8HG8V8h9tel+382hzISEc9GxJ6IeC4i9kbEvohq2ucj4oXGDJKISpv89zbEl/L/KZtFKNxfdyXbSMd/b2dzW8vHf/noL0YGstjuiHzAPHs82ydjURr89GJ59kSL7e9YJf/68V/6SvPPx4JZOe4XG27QzUzNT62ttis9uB1xsNhY/6SYNlw+jZNExIGIONjFdkfqwhdf//7QYiS/bPim9m/1+ldVmkzpdT0f10zlu4jXau2/EPXtnyzlmLSfn5wYivLs8Yn0KDjeNI/ffr/zYav829f/6HCTVd49/fO5ddc7l7b/zrrjP/L526VJ1JEkIlmcr52LqAx0l8edP1qvsNbjf0fycTWc968vpubnr52I2JG8v3L55NK6eTxPn9Z/7Fjz/r8nWyfdEy9GRHoQvxQRL0fE4azsR9JWiohjber/6zuvfLb2+m+stP4zTc9/y9p/ab6+w0C+crpk4NKRe09anDw6a/9T1dBYtqT5+S9ZdorotKTr23sAAACwPRSi+t3/wvhiuFAYH6/dA9obOwvlq3PzhyPiykztGYGRKBXyO121+8GlJL//OVIXn2yIn8zuG389MFyNj09fLc9sdeWhz+2q9vlkRf9P/dXlfV5gG+rBPBqwTa3W//ff3aSCAJuuw8//Ns8JAttVXf9faJFkwTdl4Onk+h/6V7P+fyt+aPvsgnMGbH8VfRn6mv4P/asYHy2Gq489N33aFnga+fyHvtTtc/2dBPLvCdy4VBlsnmYomvxiwFCPi5EFhpvktSWBdGTVww2WImL1xPumyuXhtWSRDwFb/8JDobsNDsbKtwai3VpJF7/jkAfSvbJq4gv7e37w57+J0uvD5selflqqa4viaq2z/sCmnoYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2zL8BAAD//xNYzWA=") r3 = epoll_create(0x3ff) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r4, 0x10c000) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r5 = epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x25, 0x1, @void}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000080)={0xa0000000, 0x1b54c8}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r5, &(0x7f0000000440)={0x2000000}) syz_open_dev$sg(0x0, 0x5, 0x165a82) r6 = mq_open(&(0x7f0000000140)='commit', 0x2, 0x20, &(0x7f0000000180)={0xffffffffffffff01, 0xbd, 0x3, 0x80000000}) clock_gettime(0x0, &(0x7f00000003c0)) mq_timedreceive(r6, &(0x7f0000000340)=""/65, 0x41, 0xb89, &(0x7f0000000400)) socket$inet6_mptcp(0xa, 0x1, 0x106) 3.93312441s ago: executing program 9 (id=3419): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCRMFF(r3, 0x40044581, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r5) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x800) r7 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x8, 0x240000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000280)}, 0x20) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x25dedbfd, {0x0, 0x0, 0x0, r10, {0xc, 0xd}, {0xc}, {0xe, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x21, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6eb, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @generic={0x9, 0x4, 0x5, 0xfff8, 0x200}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0x200, 0x1000, &(0x7f0000000740)=""/4096, 0x40f00, 0x8, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001740)={0x5, 0xd, 0x16, 0x9}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000001780)=[{0x4, 0x1, 0xb, 0xc}, {0x3, 0x4, 0x2, 0x2}, {0x5, 0x3, 0xa, 0x944379764c799543}, {0x5, 0x2, 0xd, 0x6}, {0x3, 0x3, 0x9, 0x5}, {0x3, 0x3, 0x10, 0xb}, {0x3, 0x2, 0x4, 0x1}, {0x5, 0x2, 0x2, 0x8}, {0x4, 0x2, 0xe, 0xa}, {0x2, 0x4, 0xa, 0x3}], 0x10, 0x893f}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) 2.992446131s ago: executing program 5 (id=3421): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0x8, 0x101}, 0xc58, 0x200, 0x5, 0x1, 0x9, 0x9, 0xfffb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40004000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c00038018000080080003"], 0xb4}}, 0x8044) 2.749989829s ago: executing program 5 (id=3424): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x102020, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) socket(0x2, 0x80805, 0x0) r6 = io_uring_setup(0x40000a71, &(0x7f0000000240)={0x0, 0x86a1, 0x10, 0x3, 0x277}) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000001c0), 0x4) sendmsg$inet(r8, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x241}, 0x20000015) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r8}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={r8}) close_range(r6, 0xffffffffffffffff, 0x0) 2.71544269s ago: executing program 0 (id=3425): openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, 0x0) 2.663474332s ago: executing program 0 (id=3426): mprotect(&(0x7f0000102000/0x3000)=nil, 0x3000, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd25f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x401224, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x150, r2, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x13c, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xdd}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x100}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x81}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x20}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1000}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe0000000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x15e}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x83d}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x209}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xa09}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe0a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x4010) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)={0x200003, 0x200003, 0x101, 0x6, 0x7, 0x8}) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x113042, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) rseq(&(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0x7, 0xfffffffffffffffe, 0x4}, 0x2}, 0x20, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0xc40, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.554063966s ago: executing program 8 (id=3427): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x2200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) unshare(0x2040400) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0xffffffffffffff8c, 0x0) 2.501337777s ago: executing program 8 (id=3428): socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x7, 0x3ff}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x7, 0x3}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x5, 0x3fe, 0x7fffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x10000000830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket(0x2b, 0xa, 0x8) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x48030) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000180)=0x4) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000003010229bd7000fedbdf2503000003ebca7667d3d6686309593c67aff5e6076e080e5136f0680a9db6802d7a6e044b7cd997803cac91b52eef29061daf3974f67fa5aacd92d7ce24c665bdf70df2e55fdf976397fa8b827aedd303aed2dc298187ffdabbb594fddc3e72e7462c661b2458fbe3d11bd3faf08155199d47e56455047d6e4c851b8b450528a6bedea4c237cdd24c05ede07aac1d70726b577890a9bb94de7b2f11042ba9e2b7ab4884c280cc9fdf2b3d0a92d482e7170a2430aae7bac0aa4523e89f913ebc4c71937615e19d74d2177aeb034ed1a2b92ee8c68129e656d58ffa"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff8, 0x40, 0xc, 0xffffffbb, 0x40, 0x1, 0x1}, &(0x7f00000003c0)=0x9c) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x11, 0x148, 0xf8, 0x0, 0x1d0, 0x2a8, 0x2a8, 0x1d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x3, 0x6], 0x4}, {0xffffffffffffffff}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x29}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2) 2.465629068s ago: executing program 8 (id=3429): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x40}, 0x8050, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x4, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES64=r0], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'sit0\x00', 0x0}) timer_create(0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5, r2}) perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x200, 0x122, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x18000, &(0x7f0000000240)={[{@data_ordered}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80000000}}, {@commit={'commit', 0x3d, 0x100}}, {@inlinecrypt}]}, 0x3, 0x4df, &(0x7f0000000680)="$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") r3 = epoll_create(0x3ff) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r4, 0x10c000) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r5 = epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x25, 0x1, @void}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000080)={0xa0000000, 0x1b54c8}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r5, &(0x7f0000000440)={0x2000000}) syz_open_dev$sg(0x0, 0x5, 0x165a82) r6 = mq_open(&(0x7f0000000140)='commit', 0x2, 0x20, &(0x7f0000000180)={0xffffffffffffff01, 0xbd, 0x3, 0x80000000}) clock_gettime(0x0, &(0x7f00000003c0)) mq_timedreceive(r6, &(0x7f0000000340)=""/65, 0x41, 0xb89, &(0x7f0000000400)) socket$inet6_mptcp(0xa, 0x1, 0x106) 2.322007323s ago: executing program 9 (id=3430): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd2, &(0x7f0000000140)={0x0, 0xf475, 0x80, 0x0, 0x2da}) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) rt_sigqueueinfo(r0, 0x27, &(0x7f0000000300)={0x2c, 0xfffff800, 0x9}) 2.163624018s ago: executing program 0 (id=3431): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000040)={0x10, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) close(0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x44008004) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) write(r2, &(0x7f0000000200)="c788a5c93a6b7b3c8e9a2fe0760f01", 0xf) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4f, 0x4, @perf_config_ext={0x3, 0x8}, 0x11c0ad, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r5, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb9", 0x9a}, {0x0}], 0x3) sendfile(r2, r1, 0x0, 0x7ffff000) 1.621050676s ago: executing program 5 (id=3432): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES16=r1], 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5402030}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=@deltaction={0x94, 0x31, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x94}}, 0x800) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsmount(r2, 0x1, 0xf6) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x7fffffff) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x1b, 0x0, 0x1, 0xf9, 0x6, @remote}, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4004018}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@getroute={0x14, 0x1a, 0x800, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) socket(0x2c, 0x3, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) gettid() 866.131462ms ago: executing program 7 (id=3434): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000080) 859.940292ms ago: executing program 7 (id=3435): syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6200, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x10912, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x230, 0x2e8, 0x2e8, 0x230, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x8, 0x80, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x400, 0xa66, 0x2}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x8000000, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat(0xffffffffffffff9c, 0x0, 0x3e1403, 0x15) pwrite64(r1, &(0x7f0000000280)="bdfc938ac2a6124e7fa5ecb4bf98161439f7539674e75d14e18ecdc4ffdddf2b97049d7542bd1c821de9868bce6324306c1528a5ca382d1883cc9135eb557901cb6dde3f615900f0308a30bb42a98bb1e2060017e6227c719fb170f82bc2a3d83bb92844", 0x64, 0xe7c) ftruncate(r0, 0xd) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000003b0009002bbd7000fddbff2502"], 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x4000014) 794.797884ms ago: executing program 0 (id=3436): openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, 0x0) 733.051935ms ago: executing program 7 (id=3437): r0 = socket$kcm(0x2, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x10000}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vcan0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000001d00)=ANY=[], &(0x7f00000006c0)=""/178, 0x89, 0xb2, 0x1, 0x7fff}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000018c0)={r1, 0x20, &(0x7f0000001840)={&(0x7f0000000800)=""/4096, 0x1000, 0x0, &(0x7f0000001800)=""/7, 0x7}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001900), 0x440002, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001980)=@o_path={&(0x7f0000001940)='./file0\x00', 0x0, 0x4000, r0}, 0x18) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="701200003c00070101000000fbdbdf25017c000004004080571201"], 0x1270}, 0x1, 0x0, 0x0, 0x40c0}, 0xc880) 725.002056ms ago: executing program 8 (id=3438): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01002000000000001ce40c0000204864ef89a27d5a4a0c0000ad7117728b7eddf0379a01e72efb406c6a0b65c30989513dbb394d471b0ea1883aa408ea536127a7a3a148015becd1523e30ddf1e07d33e6f276f1b127507ff4249916c2b6300b81cbdf838bfe19b66e1cecb7ebacddd70abba5ded846f06efd83eaab95af286fc1ec671c8f8c10eefe69b4813c003337f6feb2c82dc28c346b1cbf82bd6cae669947607283319cb87dece8d006754a59eca4ffe43b1fa75d72f9fd9823a9a951"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x84080) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x280000}}]}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040005000000000000000000000000000000000000000000bb22cc088ecfa0f35ab306b843f64056e3b81d6d9ed869b45d48ea302a0b6fe3383932aeac7b8947fbf745e40a531e2bc715277f936cce64ea67b8be10cdfdfcc8c06d40f6be0bdf7e075fd6504e787bb2949fa641bd63c0628f4b1ae6dfaaa497bb148b3e50958b69168f4c4463df99eb1b9829677bdcae3fb2b291da0109483f14a316ea9d19f3901d82ead873"], 0x50) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000200)={0x2, 0x4}) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x12000d0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0xfe, 0x73a, &(0x7f0000001a00)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 618.08653ms ago: executing program 0 (id=3439): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c01000010001307fffffff0ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 604.18098ms ago: executing program 0 (id=3440): r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x9820, 0x1, 0xbd6, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r2, 0xffffffffffffffff, r0, 0xb) ptrace(0x10, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000a00), 0x0, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a38d11e1bf4f564e4379ac8b8e76076a335e6307bf7572aa1f72d48d2385170c0f", 0x18}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r4, &(0x7f0000001000)=""/61, 0x3d) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000600)={[{@sysvgroups}, {@delalloc}, {@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@debug}, {@jqfmt_vfsold}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$eJzs3c9vHFcdAPDvbLxufji1SzlAJUqBoqSC7MY1bS0OJUgITpUQ5R6MvbGsrL2Rd93GViScvwAJIUBwggsXJP4AJBSJC0eEFAnOIBWBEDhwQAIy1cyOHdeZ3WzSza5/fD7SZN68+fF9bzYznjfzNBPAifVSRFyJiPtpmr4SEdNFfqUYYrs7ZMvd27m1mA1JpOnb/0giKfJ2t5UU43PFaqcj4htfi/h28nDc9ubW9YVms7FeTNc7qzfq7c2tSyurC8uN5cba3Nzs6/NvzL82f3ko9TwfEW9+5S8/+O7Pv/rmrz//7p+v/u1iVu2YKubvr8djyHbRRL8FulWv5vtiV7bC+hMEO6wm8hoWzpQtkaZpej+d3pdzeyQlAwDgoOwC9iMR8emIeCWm41T/y1kAAADgCEq/NBX/S7pPaEpM9sgHAAAAjpBK3gc2qdSKvgBTUanUat0+vB+Ns5Vmq9353LXWxtrS3R9PRcRMVCvXVpqNy0Vf4ZmoJtn0bJ5+MP3qgem5iHguIr4/fSafri22mkvjvvkBAAAAJ8S5A+3/f0932/8AAADAMTPzcFZlHOUAAAAAnp6S9j8AAABwzGj/AwAAwLH29bfeyoZ09/vXS+9sblxvvXNpqdG+XlvdWKwtttZv1JZbreX8nX2r+9c9VbK9Zqt14wuxtnGz3mm0O/X25tbV1dbGWufqygc+gQ0AAACM0HOfvPPHJCK2v3gmHzKT4y4UMBITe6mkGJcc/X96tjt+b0SFAkai7B7+Qe89M4KCACM38URrpYOcNoBDrjruAgBjlzxifs/OO78rxp8abnkAAIDhu/Dx3s//+38DYNsnAuCIcxDDyXXgQV46Pa6CACOXP/8ftMOviwU4VqoD9QAEjrMP/fz/kdL0sQoEAAAM3VQ+JJVacXtvKiqVWi3ifP5ZgGpybaXZuBwRz0bEH6arz2TTs/maySPbDAAAAAAAAAAAAAAAAAAAAAAAAABAV5omkfZzpe9cAAAA4AiIqPw1+U33Xf4Xpl+eOnh/YDL5T/5J4MmIePcnb//w5kKnsz6b5f9zL7/zoyL/1XHcwQAAAAAO2m2n77bjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCY7u3cWry3cyv9786txVHG/fuXI2JmL34+dOdMxOl8fDqqEXH2X0lM7FsviYhTQ4i/fTsiPlYWP8mKtReyLP6Zpx8/Zoq9UBb/3BDiw0l2Jzv/XCk7/irxUj4uP/4mIj4w/aR6n/9i7/x3qsfxf37AGC/c/WW9Z/zbES9MlJ9/duMnD8VPinFloPjf+ubWVq956U8jLkR5/P3R6p3VG/X25talldWF5cZyY21ubvb1+TfmX5u/XL+20mwU/5bG+N4nfnW/X/3P9og/07P+3TK9PFDtI/5/9+bO8z3+XmXxL36mJP5vf1Ys8XD8SrGtzxbpbP6F3fR2N73fi7/4/Yv96r/0oP7VwX7/bsyL/av94AccxoECAAxNe3Pr+kKz2Vg/Conqk6yVtdLLZj1f7IEPX7DJw7J/JB4z8Z2hbjBN07TH/6g7ETHIdpI4DLslT4z3vAQAAAzfg4v+cZcEAAAAAAAAAAAAAAAAAAAATq4hvjNssvQ1eyVvFtjeSyXeDAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBrvBwAA//9pfNv4") mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00 \x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x2, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x138}, 0x0) 284.000361ms ago: executing program 5 (id=3444): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000cbfe", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x3c}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0xce}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) write$sndseq(r5, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @time={0x7fffffff, 0x6}, {}, {}, @raw32}], 0x1c) 208.760083ms ago: executing program 5 (id=3445): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000080) 93.295687ms ago: executing program 5 (id=3446): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0xee01, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0x2000c884, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10) prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000002300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000022c0)={&(0x7f0000000640)={0x115c, r6, 0x20, 0x70bd27, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xd0, 0xa8, @random="5b59ade66677c71566b4f3e9566135f3693325dbc19a036d680c995099d0dd852d17abf3ce04265193b259a27d0dc397f6ac4e68991988d45c75c5d22f09f30f5940d7f0fff8062ff6a8bad71b5f3ffb0ed8bb1a8e57605938549b65d9411ccb65a72492e990805b77b322caf6581b000d85a1754c30badf3bf15cf3334a0616c01ff79563a99b2ecb7c3ed647a929c790e3395b1d43945afc887d395d85975d2c7203c40355791d36846ec494ed1ddd46d59c53def7ccaa268542070e6781a3c67bb8eb111e081f7b88ed00"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="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"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x115c}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x10278e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r7, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x26f}, 0x50) socket$kcm(0x29, 0x2, 0x0) 92.932077ms ago: executing program 8 (id=3447): syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6200, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x10912, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x230, 0x2e8, 0x2e8, 0x230, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x8, 0x80, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x400, 0xa66, 0x2}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x8000000, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat(0xffffffffffffff9c, 0x0, 0x3e1403, 0x15) pwrite64(r1, &(0x7f0000000280)="bdfc938ac2a6124e7fa5ecb4bf98161439f7539674e75d14e18ecdc4ffdddf2b97049d7542bd1c821de9868bce6324306c1528a5ca382d1883cc9135eb557901cb6dde3f615900f0308a30bb42a98bb1e2060017e6227c719fb170f82bc2a3d83bb92844", 0x64, 0xe7c) ftruncate(r0, 0xd) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000003b0009002bbd7000fddbff2502"], 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x4000014) 0s ago: executing program 8 (id=3448): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000040)={0x10, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) close(0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x44008004) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) write(r2, &(0x7f0000000200)="c788a5c93a6b7b3c8e9a2fe0760f01", 0xf) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4f, 0x4, @perf_config_ext={0x3, 0x8}, 0x11c0ad, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r5, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb9", 0x9a}, {0x0}], 0x3) sendfile(r2, r1, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): 0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.522951][T15069] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.539818][T15069] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 578.560943][ T28] audit: type=1400 audit(1778955490.142:3021): avc: denied { write } for pid=15068 comm="syz.7.2866" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 578.655692][T13887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.293789][T15084] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2871'. [ 579.758805][ T42] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 579.991685][T15092] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 580.089046][T15092] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.2873: iget: bad i_size value: 38620345925642 [ 580.148388][T15092] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 580.148656][T15092] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2873: couldn't read orphan inode 15 (err -117) [ 580.157883][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 580.157915][ C1] EXT4-fs (loop6): initial error at time 1778955491: ext4_orphan_get:1397: inode 15 [ 580.157944][ C1] EXT4-fs (loop6): last error at time 1778955491: ext4_orphan_get:1397: inode 15 [ 580.309876][T15092] loop6: lost filesystem error report for type 5 error -117 [ 580.310423][T15092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.452783][ T28] audit: type=1400 audit(1778955491.802:3022): avc: denied { write } for pid=15091 comm="syz.6.2873" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 580.505331][ T28] audit: type=1400 audit(1778955491.866:3023): avc: denied { write } for pid=15098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.581309][ T28] audit: type=1400 audit(1778955491.958:3024): avc: denied { write } for pid=15110 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.693616][T15122] xfrm0 speed is unknown, defaulting to 1000 [ 580.758312][T15119] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2876: bg 0: block 169: padding at end of block bitmap is not set [ 580.792251][T13130] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.808634][T15119] loop5: lost filesystem error report for type 5 error -117 [ 580.813017][T15119] Quota error (device loop5): write_blk: dquota write failed [ 580.821414][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 580.834318][ C0] EXT4-fs (loop5): initial error at time 1778955492: ext4_validate_block_bitmap:441 [ 580.843756][ C0] EXT4-fs (loop5): last error at time 1778955492: ext4_validate_block_bitmap:441 [ 580.904278][T15119] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2876: Failed to acquire dquot type 0 [ 580.951626][T15119] loop5: lost filesystem error report for type 5 error -117 [ 580.952338][T15119] EXT4-fs (loop5): 1 truncate cleaned up [ 580.969071][T15119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.992770][T15119] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.034595][T15119] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2876: Failed to acquire dquot type 0 [ 581.153683][ T7591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.200710][T15142] syzkaller0: entered promiscuous mode [ 581.217561][T15142] syzkaller0: entered allmulticast mode [ 581.313003][T15161] EXT4-fs: test_dummy_encryption option not supported [ 581.391883][T15161] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 581.405410][T15174] sg_write: data in/out 416732/90 bytes for SCSI command 0x0-- guessing data in; [ 581.405410][T15174] program syz.6.2887 not setting count and/or reply_len properly [ 581.548591][ T5709] Bluetooth: hci0: Frame reassembly failed (-84) [ 583.680452][T15195] FAULT_INJECTION: forcing a failure. [ 583.680452][T15195] name failslab, interval 1, probability 0, space 0, times 0 [ 583.919434][T15195] CPU: 0 UID: 0 PID: 15195 Comm: syz.8.2890 Tainted: G W syzkaller #0 PREEMPT(full) [ 583.919519][T15195] Tainted: [W]=WARN [ 583.919580][T15195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 583.919596][T15195] Call Trace: [ 583.919605][T15195] [ 583.919615][T15195] __dump_stack+0x1d/0x30 [ 583.919639][T15195] dump_stack_lvl+0x95/0xd0 [ 583.919658][T15195] dump_stack+0x15/0x1b [ 583.919679][T15195] should_fail_ex+0x263/0x280 [ 583.919763][T15195] should_failslab+0x8c/0xb0 [ 583.919791][T15195] __kmalloc_noprof+0xb8/0x4d0 [ 583.919825][T15195] ? security_sk_alloc+0x52/0x120 [ 583.919877][T15195] security_sk_alloc+0x52/0x120 [ 583.919912][T15195] sk_prot_alloc+0xc2/0x180 [ 583.919997][T15195] sk_alloc+0x35/0x3e0 [ 583.920022][T15195] unix_create1+0xa5/0x400 [ 583.920072][T15195] unix_stream_connect+0x2a1/0xaa0 [ 583.920107][T15195] ? selinux_netlbl_socket_connect+0x114/0x130 [ 583.920135][T15195] ? selinux_socket_connect+0x57/0x70 [ 583.920225][T15195] ? __pfx_unix_stream_connect+0x10/0x10 [ 583.920301][T15195] __sys_connect+0x1f1/0x2a0 [ 583.920323][T15195] __x64_sys_connect+0x3f/0x50 [ 583.920359][T15195] x64_sys_call+0x2df0/0x3020 [ 583.920385][T15195] do_syscall_64+0x12c/0x3b0 [ 583.920418][T15195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.920438][T15195] RIP: 0033:0x7f7b26bbce59 [ 583.920454][T15195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.920518][T15195] RSP: 002b:00007f7b25617028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 583.920541][T15195] RAX: ffffffffffffffda RBX: 00007f7b26e35fa0 RCX: 00007f7b26bbce59 [ 583.920558][T15195] RDX: 000000000000006e RSI: 0000200000000000 RDI: 0000000000000006 [ 583.920573][T15195] RBP: 00007f7b25617090 R08: 0000000000000000 R09: 0000000000000000 [ 583.920588][T15195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.920600][T15195] R13: 00007f7b26e36038 R14: 00007f7b26e35fa0 R15: 00007fffcd3db5b8 [ 583.920705][T15195] [ 584.725255][ T3561] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 585.031168][T15193] set_capacity_and_notify: 3 callbacks suppressed [ 585.031189][T15193] loop7: detected capacity change from 0 to 512 [ 585.044328][T15193] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 585.345962][T15199] loop6: detected capacity change from 0 to 1024 [ 585.363703][T15199] EXT4-fs: dax option not supported [ 585.388059][T15203] loop7: detected capacity change from 0 to 512 [ 585.426160][T15203] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2893: bg 0: block 169: padding at end of block bitmap is not set [ 585.472026][T15203] loop7: lost filesystem error report for type 5 error -117 [ 585.473305][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 585.487114][ C0] EXT4-fs (loop7): initial error at time 1778955496: ext4_validate_block_bitmap:441 [ 585.496539][ C0] EXT4-fs (loop7): last error at time 1778955496: ext4_validate_block_bitmap:441 [ 585.506041][T15203] __quota_error: 10 callbacks suppressed [ 585.506056][T15203] Quota error (device loop7): write_blk: dquota write failed [ 585.519443][T15203] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 585.529698][T15203] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.2893: Failed to acquire dquot type 0 [ 585.541257][T15203] loop7: lost filesystem error report for type 5 error -117 [ 585.547381][T15199] loop6: detected capacity change from 0 to 8192 [ 585.569924][T15203] EXT4-fs (loop7): 1 truncate cleaned up [ 585.587890][T15203] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.625790][T15217] sg_write: data in/out 416732/90 bytes for SCSI command 0x0-- guessing data in; [ 585.625790][T15217] program syz.0.2898 not setting count and/or reply_len properly [ 585.647484][T15203] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.681063][ T28] audit: type=1400 audit(1778955496.708:3032): avc: denied { write } for pid=15200 comm="syz.7.2893" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 585.681443][T15203] Quota error (device loop7): write_blk: dquota write failed [ 585.711982][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2900'. [ 585.750410][T15203] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 585.761002][T15203] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.2893: Failed to acquire dquot type 0 [ 585.786740][T15223] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2901'. [ 585.894699][T13887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.086208][T15235] loop5: detected capacity change from 0 to 512 [ 587.130331][T15235] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 589.187146][T15243] loop0: detected capacity change from 0 to 512 [ 589.194471][T15243] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 589.272518][T15235] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 589.272833][T15235] EXT4-fs: failed to create workqueue [ 589.566942][T15235] EXT4-fs (loop5): mount failed [ 589.709803][T15255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2912'. [ 589.757661][T15255] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2912'. [ 589.771566][T15252] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2913'. [ 589.785714][T15262] loop5: detected capacity change from 0 to 512 [ 589.805966][T15262] EXT4-fs: Ignoring removed bh option [ 589.827143][T15264] sg_write: data in/out 416732/90 bytes for SCSI command 0x0-- guessing data in; [ 589.827143][T15264] program syz.0.2914 not setting count and/or reply_len properly [ 589.847388][T15262] EXT4-fs: inline encryption not supported [ 589.892014][T15262] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 589.922628][T15262] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 589.951789][T15274] loop7: detected capacity change from 0 to 512 [ 589.964530][T15268] loop8: detected capacity change from 0 to 1024 [ 589.976116][T15262] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2910: bg 0: block 248: padding at end of block bitmap is not set [ 589.996002][T15268] EXT4-fs: Ignoring removed nomblk_io_submit option [ 590.025883][T15274] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 590.037065][T15262] loop5: lost filesystem error report for type 5 error -117 [ 590.037542][T15262] Quota error (device loop5): write_blk: dquota write failed [ 590.044944][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 590.044964][ C1] EXT4-fs (loop5): last error at time 1778955500: ext4_validate_block_bitmap:441 [ 590.071677][T15262] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 590.082281][T15262] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2910: Failed to acquire dquot type 1 [ 590.093638][T15274] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.2917: iget: bad i_size value: 38620345925642 [ 590.106339][T15274] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 590.107770][T15274] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.2917: couldn't read orphan inode 15 (err -117) [ 590.115836][T15268] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.116959][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 590.146865][T15262] loop5: lost filesystem error report for type 5 error -28 [ 590.147307][ C0] EXT4-fs (loop7): initial error at time 1778955500: ext4_orphan_get:1397: inode 15 [ 590.154530][ C0] EXT4-fs (loop7): last error at time 1778955500: ext4_orphan_get:1397: inode 15 [ 590.184390][ T28] audit: type=1400 audit(1778955500.848:3033): avc: denied { write } for pid=15267 comm="syz.8.2915" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 590.206294][T15262] EXT4-fs (loop5): 1 truncate cleaned up [ 590.217739][T15262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 590.245055][T14126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.265015][T15274] loop7: lost filesystem error report for type 5 error -117 [ 590.284057][T15274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.316637][T15281] netlink: 276 bytes leftover after parsing attributes in process `syz.8.2919'. [ 590.327058][T15258] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.2910: deleted inode referenced: 12 [ 590.342503][ T28] audit: type=1400 audit(1778955501.014:3034): avc: denied { write } for pid=15273 comm="syz.7.2917" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 590.364967][T15281] netlink: 276 bytes leftover after parsing attributes in process `syz.8.2919'. [ 590.401855][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2910'. [ 590.442240][T15284] loop8: detected capacity change from 0 to 512 [ 590.464076][T15284] EXT4-fs: inline encryption not supported [ 590.482790][T15284] EXT4-fs: Invalid want_extra_isize -2147483648 [ 590.545008][T15274] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2917: bg 0: block 5: invalid block bitmap [ 590.560451][T15274] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 888 with error 28 [ 590.562921][T15258] macsec1: entered promiscuous mode [ 590.578187][T15258] bond0: entered promiscuous mode [ 590.583298][T15258] bond_slave_0: entered promiscuous mode [ 590.589048][T15258] bond_slave_1: entered promiscuous mode [ 590.596308][T15274] EXT4-fs (loop7): This should not happen!! Data will be lost [ 590.596308][T15274] [ 590.621712][T15258] macsec1: entered allmulticast mode [ 590.623415][T15274] EXT4-fs (loop7): Total free blocks count 0 [ 590.627357][T15258] bond0: entered allmulticast mode [ 590.633366][ T3371] IPVS: starting estimator thread 0... [ 590.638214][T15258] bond_slave_0: entered allmulticast mode [ 590.638233][T15258] bond_slave_1: entered allmulticast mode [ 590.640128][T15258] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 590.662989][T15274] EXT4-fs (loop7): Free/Dirty block details [ 590.675500][T15274] EXT4-fs (loop7): free_blocks=0 [ 590.685243][T15274] EXT4-fs (loop7): dirty_blocks=888 [ 590.695488][T15274] EXT4-fs (loop7): Block reservation details [ 590.706330][T15274] EXT4-fs (loop7): i_reserved_data_blocks=888 [ 590.721330][T15258] bond0: left allmulticast mode [ 590.726248][T15258] bond_slave_0: left allmulticast mode [ 590.731739][T15258] bond_slave_1: left allmulticast mode [ 590.737345][T15258] bond0: left promiscuous mode [ 590.742129][T15258] bond_slave_0: left promiscuous mode [ 590.747618][T15258] bond_slave_1: left promiscuous mode [ 590.761267][T15285] EXT4-fs (loop7): shut down requested (0) [ 590.920546][T15291] IPVS: using max 2688 ests per chain, 134400 per kthread [ 590.964413][T15290] loop6: detected capacity change from 0 to 512 [ 590.981565][T15290] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 590.995399][T15290] EXT4-fs (loop6): 1 truncate cleaned up [ 591.001713][T15290] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.385337][ T7591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 591.640172][T13130] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.138544][T15312] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2927'. [ 592.653439][T15314] loop6: detected capacity change from 0 to 128 [ 592.676744][T15316] loop7: detected capacity change from 0 to 512 [ 592.709402][T15316] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 592.748546][T15316] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.2928: iget: bad i_size value: 38620345925642 [ 592.813031][T15316] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 592.813368][T15316] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.2928: couldn't read orphan inode 15 (err -117) [ 592.822619][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 592.822634][ C1] EXT4-fs (loop7): initial error at time 1778955503: ext4_orphan_get:1397: inode 15 [ 592.822657][ C1] EXT4-fs (loop7): last error at time 1778955503: ext4_orphan_get:1397: inode 15 [ 592.894509][T15316] loop7: lost filesystem error report for type 5 error -117 [ 592.895104][T15316] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.917910][T15322] loop5: detected capacity change from 0 to 512 [ 592.927654][T15322] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 592.951228][ T28] audit: type=1400 audit(1778955503.412:3035): avc: denied { write } for pid=15315 comm="syz.7.2928" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 592.961965][T15322] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2931: iget: bad i_size value: 38620345925642 [ 592.988935][T15322] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 592.989309][T15322] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2931: couldn't read orphan inode 15 (err -117) [ 593.010439][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 593.010462][ C1] EXT4-fs (loop5): initial error at time 1778955503: ext4_orphan_get:1397: inode 15 [ 593.010491][ C1] EXT4-fs (loop5): last error at time 1778955503: ext4_orphan_get:1397: inode 15 [ 593.035560][T15322] loop5: lost filesystem error report for type 5 error -117 [ 593.076715][T15322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.128301][T15324] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2928: bg 0: block 5: invalid block bitmap [ 593.158968][T15324] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 608 with error 28 [ 593.172087][ T28] audit: type=1400 audit(1778955503.615:3036): avc: denied { write } for pid=15321 comm="syz.5.2931" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 593.172351][T15324] EXT4-fs (loop7): This should not happen!! Data will be lost [ 593.172351][T15324] [ 593.243191][T15327] sg_write: data in/out 424924/122 bytes for SCSI command 0x0-- guessing data in; [ 593.243191][T15327] program syz.6.2933 not setting count and/or reply_len properly [ 593.280820][T15324] EXT4-fs (loop7): Total free blocks count 0 [ 593.296048][T15324] EXT4-fs (loop7): Free/Dirty block details [ 593.319135][T15324] EXT4-fs (loop7): free_blocks=0 [ 593.325987][T15322] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2931: bg 0: block 5: invalid block bitmap [ 593.336610][T15324] EXT4-fs (loop7): dirty_blocks=608 [ 593.356624][T15324] EXT4-fs (loop7): Block reservation details [ 593.365481][T15322] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 656 with error 28 [ 593.382727][T15324] EXT4-fs (loop7): i_reserved_data_blocks=608 [ 593.388910][T15322] EXT4-fs (loop5): This should not happen!! Data will be lost [ 593.388910][T15322] [ 593.409593][T15322] EXT4-fs (loop5): Total free blocks count 0 [ 593.416088][T15316] EXT4-fs (loop7): shut down requested (0) [ 593.432656][T15322] EXT4-fs (loop5): Free/Dirty block details [ 593.457776][T15322] EXT4-fs (loop5): free_blocks=0 [ 593.483010][T15322] EXT4-fs (loop5): dirty_blocks=660 [ 593.502404][T15322] EXT4-fs (loop5): Block reservation details [ 593.520082][T15322] EXT4-fs (loop5): i_reserved_data_blocks=660 [ 593.564643][T15322] EXT4-fs (loop5): shut down requested (0) [ 593.618757][T15336] loop8: detected capacity change from 0 to 1024 [ 593.646005][T15334] loop7: detected capacity change from 0 to 512 [ 593.652892][T15336] EXT4-fs: Invalid want_extra_isize 0 [ 593.664697][T15334] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 593.692844][T15334] EXT4-fs (loop7): 1 truncate cleaned up [ 593.704861][T15334] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.503588][T13887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.505593][T15351] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2940'. [ 594.827184][T15360] loop7: detected capacity change from 0 to 512 [ 594.854765][T15360] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 594.942361][T15360] EXT4-fs (loop7): 1 truncate cleaned up [ 594.953159][T15360] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.902366][T15368] loop8: detected capacity change from 0 to 512 [ 595.963452][T15368] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2943: bg 0: block 169: padding at end of block bitmap is not set [ 596.018172][T15368] loop8: lost filesystem error report for type 5 error -117 [ 596.018414][T15368] Quota error (device loop8): write_blk: dquota write failed [ 596.025896][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 596.025913][ C0] EXT4-fs (loop8): initial error at time 1778955506: ext4_validate_block_bitmap:441 [ 596.025933][ C0] EXT4-fs (loop8): last error at time 1778955506: ext4_validate_block_bitmap:441 [ 596.179184][T15368] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 596.220564][T15368] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.2943: Failed to acquire dquot type 0 [ 596.266350][T13887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.278471][T15368] loop8: lost filesystem error report for type 5 error -117 [ 596.279000][T15368] EXT4-fs (loop8): 1 truncate cleaned up [ 596.311730][T15368] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.337083][T15368] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.399712][ T28] audit: type=1400 audit(1778955506.594:3037): avc: denied { write } for pid=15367 comm="syz.8.2943" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 596.437172][T15373] loop6: detected capacity change from 0 to 128 [ 596.444534][T15373] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 596.479960][T15368] Quota error (device loop8): write_blk: dquota write failed [ 596.487458][T15368] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 596.497315][T15368] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.2943: Failed to acquire dquot type 0 [ 596.637878][T14126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.673013][T15376] netlink: 'syz.7.2945': attribute type 2 has an invalid length. [ 596.806288][T15380] loop0: detected capacity change from 0 to 1024 [ 596.837974][T15380] EXT4-fs: Ignoring removed orlov option [ 596.865637][T15380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.878427][ T28] audit: type=1400 audit(1778955507.036:3038): avc: denied { write } for pid=15379 comm="syz.0.2947" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 596.926257][ T28] audit: type=1400 audit(1778955507.073:3039): avc: denied { write } for pid=15379 comm="syz.0.2947" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 597.018205][T15381] loop8: detected capacity change from 0 to 512 [ 597.043935][T15381] EXT4-fs: test_dummy_encryption option not supported [ 597.068638][T14948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.094918][T15381] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 597.145307][T15392] sg_write: data in/out 424924/122 bytes for SCSI command 0x0-- guessing data in; [ 597.145307][T15392] program syz.0.2949 not setting count and/or reply_len properly [ 597.181436][ T5709] Bluetooth: hci0: Frame reassembly failed (-84) [ 597.318378][T15401] loop7: detected capacity change from 0 to 128 [ 597.482306][ T5729] bio_check_eod: 31 callbacks suppressed [ 597.482321][ T5729] kworker/u8:20: attempt to access beyond end of device [ 597.482321][ T5729] loop7: rw=1, sector=145, nr_sectors = 16 limit=128 [ 597.520704][ T5729] kworker/u8:20: attempt to access beyond end of device [ 597.520704][ T5729] loop7: rw=1, sector=169, nr_sectors = 8 limit=128 [ 597.546277][ T5729] kworker/u8:20: attempt to access beyond end of device [ 597.546277][ T5729] loop7: rw=1, sector=185, nr_sectors = 8 limit=128 [ 597.567206][ T5729] kworker/u8:20: attempt to access beyond end of device [ 597.567206][ T5729] loop7: rw=1, sector=201, nr_sectors = 8 limit=128 [ 597.584781][ T5729] kworker/u8:20: attempt to access beyond end of device [ 597.584781][ T5729] loop7: rw=1, sector=217, nr_sectors = 8 limit=128 [ 597.599200][T15406] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2956'. [ 597.599203][ T5729] kworker/u8:20: attempt to access beyond end of device [ 597.599203][ T5729] loop7: rw=1, sector=233, nr_sectors = 8 limit=128 [ 597.599242][ T5729] kworker/u8:20: attempt to access beyond end of device [ 597.599242][ T5729] loop7: rw=1, sector=249, nr_sectors = 8 limit=128 [ 597.599361][ T5729] kworker/u8:20: attempt to access beyond end of device [ 597.599361][ T5729] loop7: rw=1, sector=265, nr_sectors = 8 limit=128 [ 597.649074][ T5729] kworker/u8:20: attempt to access beyond end of device [ 597.649074][ T5729] loop7: rw=1, sector=281, nr_sectors = 8 limit=128 [ 597.665141][ T5729] kworker/u8:20: attempt to access beyond end of device [ 597.665141][ T5729] loop7: rw=1, sector=297, nr_sectors = 8 limit=128 [ 597.868946][T15418] loop7: detected capacity change from 0 to 512 [ 597.881159][T15418] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 598.054980][T15418] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.2958: iget: bad i_size value: 38620345925642 [ 598.090811][T15418] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 598.091793][T15418] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.2958: couldn't read orphan inode 15 (err -117) [ 598.100988][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 598.101021][ C1] EXT4-fs (loop7): initial error at time 1778955508: ext4_orphan_get:1397: inode 15 [ 598.101054][ C1] EXT4-fs (loop7): last error at time 1778955508: ext4_orphan_get:1397: inode 15 [ 598.360050][T15418] loop7: lost filesystem error report for type 5 error -117 [ 598.363467][T15418] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.488920][ T28] audit: type=1400 audit(1778955508.521:3040): avc: denied { write } for pid=15417 comm="syz.7.2958" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 598.603587][T15418] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2958: bg 0: block 5: invalid block bitmap [ 598.692039][T15418] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 208 with error 28 [ 598.733423][T15418] EXT4-fs (loop7): This should not happen!! Data will be lost [ 598.733423][T15418] [ 598.761987][T15418] EXT4-fs (loop7): Total free blocks count 0 [ 598.779102][T15418] EXT4-fs (loop7): Free/Dirty block details [ 598.801683][T15418] EXT4-fs (loop7): free_blocks=0 [ 598.817678][T15418] EXT4-fs (loop7): dirty_blocks=208 [ 598.832410][T15418] EXT4-fs (loop7): Block reservation details [ 598.850954][T15418] EXT4-fs (loop7): i_reserved_data_blocks=208 [ 598.870864][T15422] EXT4-fs (loop7): shut down requested (0) [ 599.138691][T15426] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2960'. [ 599.297944][T15433] sg_write: data in/out 424924/122 bytes for SCSI command 0x0-- guessing data in; [ 599.297944][T15433] program syz.7.2963 not setting count and/or reply_len properly [ 599.353163][ T3561] Bluetooth: hci0: command 0x1003 tx timeout [ 599.353176][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 599.444193][T15437] ÿÿÿÿ: renamed from bridge_slave_1 (while UP) [ 599.540340][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2967'. [ 599.553568][T15446] loop0: detected capacity change from 0 to 1024 [ 599.570377][T15446] EXT4-fs: test_dummy_encryption option not supported [ 599.717400][T15452] tipc: Can't bind to reserved service type 1 [ 599.802658][T15454] loop7: detected capacity change from 0 to 512 [ 599.812137][T15454] EXT4-fs (loop7): 1 truncate cleaned up [ 599.826482][T15454] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.849964][T15454] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.7.2973: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 599.893756][T15448] xfrm0 speed is unknown, defaulting to 1000 [ 599.920098][T15463] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2972'. [ 600.012724][T15465] syzkaller0: entered promiscuous mode [ 600.024445][T15465] syzkaller0: entered allmulticast mode [ 600.033458][T15454] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 600.049301][T15462] dummy0: entered promiscuous mode [ 600.055133][T15454] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.7.2973: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 600.074733][T15462] erspan0: entered promiscuous mode [ 600.081327][T15462] hsr1: entered allmulticast mode [ 600.086648][T15462] dummy0: entered allmulticast mode [ 600.092061][T15462] erspan0: entered allmulticast mode [ 600.098758][T15465] net_ratelimit: 5 callbacks suppressed [ 600.098772][T15465] syzkaller0: mtu less than device minimum [ 600.172582][T15465] tmpfs: Unknown parameter 'ysw„MƒU1' [ 600.187470][T15470] loop0: detected capacity change from 0 to 512 [ 600.197578][T13887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.261151][T15470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.294613][T15477] loop5: detected capacity change from 0 to 128 [ 600.376167][T15470] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.609664][T15491] loop5: detected capacity change from 0 to 256 [ 600.705922][T15491] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 600.877171][T15490] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.905862][T15491] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 601.018049][T15490] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.161883][ T28] audit: type=1400 audit(1778955510.983:3041): avc: denied { write } for pid=15478 comm="syz.8.2978" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 601.203252][T15490] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2978'. [ 601.406887][ T28] audit: type=1400 audit(1778955511.011:3042): avc: denied { write } for pid=15478 comm="syz.8.2978" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 601.506779][ T28] audit: type=1400 audit(1778955511.011:3043): avc: denied { rename } for pid=15478 comm="syz.8.2978" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 601.536065][T15497] EXT4-fs: test_dummy_encryption option not supported [ 601.567870][T14126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.687487][T15503] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2983'. [ 601.739482][T15497] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 601.803862][ T5709] Bluetooth: hci0: Frame reassembly failed (-84) [ 603.676490][T15534] netlink: 'syz.8.2990': attribute type 21 has an invalid length. [ 603.690685][T15534] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2990'. [ 603.710830][T15534] netlink: 'syz.8.2990': attribute type 4 has an invalid length. [ 603.729721][T15534] netlink: 'syz.8.2990': attribute type 5 has an invalid length. [ 603.744860][T15534] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2990'. [ 603.769434][T15535] set_capacity_and_notify: 3 callbacks suppressed [ 603.769452][T15535] loop8: detected capacity change from 0 to 512 [ 603.817043][T15535] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.832627][T15535] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 603.870424][T15534] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.2990: corrupted xattr block 33: invalid header [ 603.885626][T15534] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 603.907066][T15534] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.2990: corrupted xattr block 33: invalid header [ 603.924533][T15534] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 603.924533][T15539] loop6: detected capacity change from 0 to 128 [ 603.995733][T14126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.037901][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 604.044164][ T3561] Bluetooth: hci0: command 0x1003 tx timeout [ 604.221882][T15545] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 604.237086][T15545] team0 (unregistering): Port device team_slave_0 removed [ 604.424036][T14948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.578299][T15548] loop8: detected capacity change from 0 to 512 [ 604.585063][T15548] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 604.612503][T15545] team0 (unregistering): Failed to send options change via netlink (err -105) [ 605.272889][T15545] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 605.290332][T15545] team0 (unregistering): Port device team_slave_1 removed [ 605.675546][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2995'. [ 606.321112][T15550] loop7: detected capacity change from 0 to 512 [ 606.846572][ T979] IPVS: starting estimator thread 0... [ 607.300173][T15550] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.7.2993: corrupted xattr block 95: invalid header [ 607.313947][T15550] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 607.314204][T15550] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2993: bg 0: block 7: invalid block bitmap [ 607.335631][T15550] loop7: lost filesystem error report for type 5 error -117 [ 607.335932][T15550] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 607.351975][T15550] loop7: lost filesystem error report for type 5 error -117 [ 607.355358][T15550] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2972: inode #11: comm syz.7.2993: corrupted xattr block 95: invalid header [ 607.376353][T15550] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 607.376631][T15550] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -117) [ 607.395102][T15550] EXT4-fs (loop7): 1 orphan inode deleted [ 607.401569][ C0] EXT4-fs (loop7): error count since last fsck: 4 [ 607.401779][ C0] EXT4-fs (loop7): initial error at time 1778955516: ext4_expand_extra_isize_ea:2810: inode 11 [ 607.402123][ C0] EXT4-fs (loop7): last error at time 1778955516: ext4_xattr_delete_inode:2972: inode 11 [ 607.429542][T15562] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2994'. [ 607.442054][T15550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.547023][T15558] IPVS: using max 2352 ests per chain, 117600 per kthread [ 607.911336][T13887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.618114][T15579] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3001'. [ 608.670670][T15576] loop7: detected capacity change from 0 to 512 [ 608.785171][T15576] EXT4-fs: test_dummy_encryption option not supported [ 608.920785][T15576] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 608.961104][T15591] loop5: detected capacity change from 0 to 512 [ 608.974093][ T5723] Bluetooth: hci0: Frame reassembly failed (-84) [ 609.110575][T15591] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 609.192961][T15598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3007'. [ 609.277858][T15591] EXT4-fs (loop5): 1 truncate cleaned up [ 609.290004][T15591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.398733][T15611] netlink: 'syz.8.3010': attribute type 10 has an invalid length. [ 609.406701][T15611] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3010'. [ 609.415864][T15611] vlan1: entered promiscuous mode [ 609.421465][T15611] vlan1: entered allmulticast mode [ 609.426627][T15611] veth0_vlan: entered allmulticast mode [ 609.433502][T15611] bridge0: port 3(vlan1) entered blocking state [ 609.440243][T15611] bridge0: port 3(vlan1) entered disabled state [ 609.447651][T15611] bridge0: port 3(vlan1) entered blocking state [ 609.453993][T15611] bridge0: port 3(vlan1) entered forwarding state [ 609.540978][T15617] loop0: detected capacity change from 0 to 1024 [ 609.581326][T15617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.624748][ T28] audit: type=1400 audit(1778955518.794:3044): avc: denied { write } for pid=15616 comm="syz.0.3011" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 609.665524][T14948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.792117][ T7591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.277919][T15640] loop5: detected capacity change from 0 to 512 [ 610.285253][T15640] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 611.151090][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 611.157247][ T3561] Bluetooth: hci0: command 0x1003 tx timeout [ 611.441046][T15652] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3020'. [ 611.759784][T15658] loop7: detected capacity change from 0 to 1024 [ 611.772008][T15658] EXT4-fs: Ignoring removed nobh option [ 611.787275][T15658] EXT4-fs: Ignoring removed i_version option [ 611.817253][T15658] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.833673][ T28] audit: type=1400 audit(1778955520.823:3045): avc: denied { write } for pid=15656 comm="syz.7.3023" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 611.896589][T15668] loop5: detected capacity change from 0 to 512 [ 611.908086][T15658] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 611.922951][T15658] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 611.934220][T15668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.936439][T15658] EXT4-fs (loop7): This should not happen!! Data will be lost [ 611.936439][T15658] [ 611.958032][T15658] EXT4-fs (loop7): Total free blocks count 0 [ 611.964205][T15658] EXT4-fs (loop7): Free/Dirty block details [ 611.970594][T15658] EXT4-fs (loop7): free_blocks=20480 [ 611.977649][T15658] EXT4-fs (loop7): dirty_blocks=2336 [ 611.983206][T15658] EXT4-fs (loop7): Block reservation details [ 611.990298][T15658] EXT4-fs (loop7): i_reserved_data_blocks=146 [ 612.021873][ T7591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.161243][ T773] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1816 with error 28 [ 612.161911][T15676] loop0: detected capacity change from 0 to 128 [ 612.191277][T15676] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 612.206779][T13887] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 612.215112][T15676] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 612.233891][T15678] loop5: detected capacity change from 0 to 512 [ 612.247376][T15676] ext2 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 612.287528][T15678] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 612.313760][ T28] audit: type=1400 audit(1778955521.266:3046): avc: denied { write } for pid=15674 comm="syz.0.3027" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 612.329840][T15678] EXT4-fs (loop5): 1 truncate cleaned up [ 612.341613][T15678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.359470][ T28] audit: type=1400 audit(1778955521.303:3047): avc: denied { write } for pid=15674 comm="syz.0.3027" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 612.382104][ T28] audit: type=1400 audit(1778955521.331:3048): avc: denied { write } for pid=15674 comm="syz.0.3027" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 612.404822][ T28] audit: type=1400 audit(1778955521.358:3049): avc: denied { write } for pid=15674 comm="syz.0.3027" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 612.488844][T15676] EXT4-fs error (device loop0): dx_make_map:1296: inode #2: block 20: comm syz.0.3027: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 612.509528][T15686] loop6: detected capacity change from 0 to 136 [ 612.512907][T15676] EXT4-fs (loop0): Remounting filesystem read-only [ 612.524179][ T28] audit: type=1400 audit(1778955521.460:3050): avc: denied { write } for pid=15674 comm="syz.0.3027" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 612.550170][T15686] iso9660: Unknown parameter 'sessionI“Zו²PÙ8†ÀÖ·' [ 612.834295][T15695] loop6: detected capacity change from 0 to 512 [ 612.840983][T15695] EXT4-fs: test_dummy_encryption option not supported [ 612.854845][T15695] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 612.882823][ T5709] Bluetooth: hci0: Frame reassembly failed (-84) [ 612.913423][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3033'. [ 613.060175][T14948] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 613.071291][ T7591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.106238][T15702] loop7: detected capacity change from 0 to 512 [ 613.157836][T15702] EXT4-fs: test_dummy_encryption option not supported [ 613.244596][T15702] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 613.385627][ T5709] Bluetooth: hci1: Frame reassembly failed (-84) [ 613.398370][T15716] loop0: detected capacity change from 0 to 128 [ 614.368349][T15730] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15730 comm=syz.5.3042 [ 614.647083][T15740] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 614.655291][T15740] System zones: 0-5 [ 614.660182][T15740] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.727754][T14126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.938154][T15744] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 614.949410][T15744] EXT4-fs (loop8): 1 truncate cleaned up [ 614.955550][T15744] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.065721][ T3554] Bluetooth: hci0: command 0x1003 tx timeout [ 615.065731][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 615.140168][T15747] set_capacity_and_notify: 2 callbacks suppressed [ 615.140180][T15747] loop6: detected capacity change from 0 to 512 [ 615.157238][T15747] EXT4-fs (loop6): 1 orphan inode deleted [ 615.163332][T15747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.178174][T15747] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.192706][T15747] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 615.499412][ T3561] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 615.499850][ T42] Bluetooth: hci1: command 0x1003 tx timeout [ 615.728038][T14126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.047075][T15781] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3058'. [ 616.073328][T15783] ucma_write: process 272 (syz.7.3059) changed security contexts after opening file descriptor, this is not allowed. [ 616.166679][T15789] 9p: Bad value for 'rfdno' [ 616.717184][T15801] loop0: detected capacity change from 0 to 512 [ 616.730806][T15801] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 616.744832][T15803] FAULT_INJECTION: forcing a failure. [ 616.744832][T15803] name failslab, interval 1, probability 0, space 0, times 0 [ 616.745529][ T28] audit: type=1326 audit(1778955525.351:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.8.3065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b26bbce59 code=0x7ffc0000 [ 616.762540][T15803] CPU: 1 UID: 0 PID: 15803 Comm: syz.8.3065 Tainted: G W syzkaller #0 PREEMPT(full) [ 616.762745][T15803] Tainted: [W]=WARN [ 616.762770][T15803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 616.762807][T15803] Call Trace: [ 616.762826][T15803] [ 616.762846][T15803] __dump_stack+0x1d/0x30 [ 616.763032][T15803] dump_stack_lvl+0x95/0xd0 [ 616.763151][T15803] dump_stack+0x15/0x1b [ 616.763207][T15803] should_fail_ex+0x263/0x280 [ 616.763303][T15803] ? audit_log_d_path+0x8d/0x150 [ 616.763412][T15803] should_failslab+0x8c/0xb0 [ 616.763535][T15803] __kmalloc_cache_noprof+0x5f/0x400 [ 616.763654][T15803] audit_log_d_path+0x8d/0x150 [ 616.763738][T15803] audit_log_d_path_exe+0x42/0x70 [ 616.763818][T15803] audit_log_task+0x1e8/0x250 [ 616.764029][T15803] audit_seccomp+0x60/0x100 [ 616.764082][T15803] ? __seccomp_filter+0x8db/0x1350 [ 616.764175][T15803] __seccomp_filter+0x8ec/0x1350 [ 616.764314][T15803] ? __rcu_read_unlock+0x4e/0x70 [ 616.764387][T15803] ? __fget_files+0x184/0x1c0 [ 616.764444][T15803] ? mutex_lock+0x57/0x90 [ 616.764508][T15803] ? mutex_unlock+0x4e/0x90 [ 616.764609][T15803] __secure_computing+0x81/0x150 [ 616.764797][T15803] do_syscall_64+0xce/0x3b0 [ 616.764881][T15803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.764946][T15803] RIP: 0033:0x7f7b26bbce59 [ 616.765002][T15803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.765100][T15803] RSP: 002b:00007f7b25617028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 616.765175][T15803] RAX: ffffffffffffffda RBX: 00007f7b26e35fa0 RCX: 00007f7b26bbce59 [ 616.765215][T15803] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 616.765257][T15803] RBP: 00007f7b25617090 R08: 0000000000000000 R09: 0000000000000000 [ 616.765292][T15803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.765335][T15803] R13: 00007f7b26e36038 R14: 00007f7b26e35fa0 R15: 00007fffcd3db5b8 [ 616.765387][T15803] [ 616.844720][T15801] EXT4-fs (loop0): 1 truncate cleaned up [ 616.854170][ T28] audit: type=1326 audit(1778955525.351:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.8.3065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b26bbce59 code=0x7ffc0000 [ 616.854215][ T28] audit: type=1326 audit(1778955525.351:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.8.3065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b26bbce59 code=0x7ffc0000 [ 616.906173][T15801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.059393][ T28] audit: type=1326 audit(1778955525.351:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.8.3065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b26b7d68e code=0x7ffc0000 [ 617.193386][ T28] audit: type=1326 audit(1778955525.351:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.8.3065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7b26b7d68e code=0x7ffc0000 [ 617.218818][ T28] audit: type=1326 audit(1778955525.351:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.8.3065" exe="" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f7b26bbce59 code=0x7ffc0000 [ 617.244006][ T28] audit: type=1326 audit(1778955525.370:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.8.3065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7b26b7d68e code=0x7ffc0000 [ 617.277493][ T28] audit: type=1326 audit(1778955525.370:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.8.3065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7b26b7d68e code=0x7ffc0000 [ 617.303465][ T28] audit: type=1326 audit(1778955525.370:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.8.3065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7b26b7d68e code=0x7ffc0000 [ 617.329465][ T28] audit: type=1326 audit(1778955525.370:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.8.3065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b26bbce59 code=0x7ffc0000 [ 617.399426][T15823] loop7: detected capacity change from 0 to 512 [ 617.408798][T15823] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 617.420624][T15823] EXT4-fs (loop7): 1 truncate cleaned up [ 617.426904][T15823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.473898][T15827] loop5: detected capacity change from 0 to 4096 [ 617.493396][T15827] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.569992][T14948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.594678][T15831] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3073'. [ 617.604769][T15831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3073'. [ 617.617284][T15831] loop0: detected capacity change from 0 to 512 [ 617.630680][T15831] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 617.641227][T15831] EXT4-fs (loop0): failed to open journal device unknown-block(8,3) -6 [ 617.677938][T15832] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3072'. [ 617.723639][T15834] netem: change failed [ 617.833444][T15838] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3076'. [ 618.025125][T15850] loop6: detected capacity change from 0 to 1024 [ 618.126655][T15850] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.390621][T15853] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.367956][T13887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.563427][T15872] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3085'. [ 619.605288][T15872] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3085'. [ 619.729645][T15860] xfrm0 speed is unknown, defaulting to 1000 [ 620.028820][T15860] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.043479][T15860] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.060831][T15860] bridge_slave_0: entered allmulticast mode [ 620.069311][T15860] bridge_slave_0: entered promiscuous mode [ 620.076836][T15860] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.083987][T15860] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.097304][T15860] bridge_slave_1: entered allmulticast mode [ 620.105577][T15860] bridge_slave_1: entered promiscuous mode [ 620.116065][ T7591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.154048][T15860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.176738][T15860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.199757][T15860] team0: Port device team_slave_0 added [ 620.206771][T15860] team0: Port device team_slave_1 added [ 620.213119][T15897] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.3087'. [ 620.229624][T15897] netlink: zone id is out of range [ 620.235029][T15897] netlink: zone id is out of range [ 620.268463][T15894] syzkaller0: entered promiscuous mode [ 620.279314][T15897] netlink: set zone limit has 8 unknown bytes [ 620.399295][T15894] syzkaller0: entered allmulticast mode [ 620.483109][T15894] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3086'. [ 621.394436][T15860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.437664][T15860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.467300][T15860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.478921][T15860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.485893][T15860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.511889][T15860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.562777][T15920] loop8: detected capacity change from 0 to 512 [ 621.573487][T15920] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 621.624829][T15860] hsr_slave_0: entered promiscuous mode [ 621.667225][T15860] hsr_slave_1: entered promiscuous mode [ 622.671478][T15860] debugfs: 'hsr0' already exists in 'hsr' [ 622.688639][T15860] Cannot create hsr debugfs directory [ 622.767719][T15929] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3090'. [ 622.802972][T15931] loop8: detected capacity change from 0 to 512 [ 622.841520][T15931] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 622.959421][T15934] loop5: detected capacity change from 0 to 512 [ 623.002655][T15934] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 623.018291][T15931] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.3092: iget: bad i_size value: 38620345925642 [ 623.054341][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 623.054359][ T28] audit: type=1326 audit(1778955531.170:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.0.3094" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931189ce59 code=0x7ffc0000 [ 623.097095][T15931] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 623.100680][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 623.116308][ C0] EXT4-fs (loop8): initial error at time 1778955531: ext4_orphan_get:1397: inode 15 [ 623.125738][ C0] EXT4-fs (loop8): last error at time 1778955531: ext4_orphan_get:1397: inode 15 [ 623.139272][T15931] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3092: couldn't read orphan inode 15 (err -117) [ 623.164454][T15931] loop8: lost filesystem error report for type 5 error -117 [ 623.169592][T15931] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.173922][ T28] audit: type=1326 audit(1778955531.170:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.0.3094" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931189ce59 code=0x7ffc0000 [ 623.213105][T15934] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.3093: iget: bad i_size value: 38620345925642 [ 623.249901][ T28] audit: type=1326 audit(1778955531.170:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.0.3094" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931189ce59 code=0x7ffc0000 [ 623.252928][T15934] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 623.276945][T15934] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.3093: couldn't read orphan inode 15 (err -117) [ 623.284474][T15924] FAULT_INJECTION: forcing a failure. [ 623.284474][T15924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.286192][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 623.298040][T15924] CPU: 1 UID: 0 PID: 15924 Comm: syz.7.3091 Tainted: G W syzkaller #0 PREEMPT(full) [ 623.298181][T15924] Tainted: [W]=WARN [ 623.298213][T15924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 623.298321][T15924] Call Trace: [ 623.298347][T15924] [ 623.298374][T15924] __dump_stack+0x1d/0x30 [ 623.298441][T15924] dump_stack_lvl+0x95/0xd0 [ 623.298508][T15924] dump_stack+0x15/0x1b [ 623.298566][T15924] should_fail_ex+0x263/0x280 [ 623.298649][T15924] should_fail+0xb/0x20 [ 623.298738][T15924] should_fail_usercopy+0x1a/0x20 [ 623.298882][T15924] _copy_from_iter+0xcf/0xea0 [ 623.298993][T15924] ? __alloc_skb+0x4f6/0x690 [ 623.299049][T15924] ? __alloc_skb+0x200/0x690 [ 623.299113][T15924] netlink_sendmsg+0x4ae/0x6f0 [ 623.299214][T15924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 623.299303][T15924] ____sys_sendmsg+0x563/0x5b0 [ 623.299406][T15924] ___sys_sendmsg+0x195/0x1e0 [ 623.299551][T15924] __x64_sys_sendmsg+0xd4/0x160 [ 623.299654][T15924] x64_sys_call+0x194c/0x3020 [ 623.299738][T15924] do_syscall_64+0x12c/0x3b0 [ 623.299830][T15924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.299915][T15924] RIP: 0033:0x7f7283f6ce59 [ 623.299965][T15924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.299989][T15924] RSP: 002b:00007f72829bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 623.300045][T15924] RAX: ffffffffffffffda RBX: 00007f72841e5fa0 RCX: 00007f7283f6ce59 [ 623.300090][T15924] RDX: 0000000004040000 RSI: 0000200000000100 RDI: 0000000000000009 [ 623.300199][T15924] RBP: 00007f72829bf090 R08: 0000000000000000 R09: 0000000000000000 [ 623.300237][T15924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.300282][T15924] R13: 00007f72841e6038 R14: 00007f72841e5fa0 R15: 00007ffec8c51d08 [ 623.300339][T15924] [ 623.369325][ T28] audit: type=1326 audit(1778955531.170:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.0.3094" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f931189ce59 code=0x7ffc0000 [ 623.370449][ C0] EXT4-fs (loop5): initial error at time 1778955531: ext4_orphan_get:1397 [ 623.394532][ T28] audit: type=1326 audit(1778955531.170:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.0.3094" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931189ce59 code=0x7ffc0000 [ 623.399505][ C0] : inode 15 [ 623.453645][T15860] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 623.461583][ C0] EXT4-fs (loop5): last error at time 1778955531: ext4_orphan_get:1397: inode 15 [ 623.471344][ T28] audit: type=1326 audit(1778955531.207:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.0.3094" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931189ce59 code=0x7ffc0000 [ 623.477576][ C0] [ 623.619723][T15934] loop5: lost filesystem error report for type 5 error -117 [ 623.626603][T15931] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.3092: bg 0: block 5: invalid block bitmap [ 623.646690][ T28] audit: type=1326 audit(1778955531.207:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.0.3094" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931189ce59 code=0x7ffc0000 [ 623.648362][T15934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.672988][ T28] audit: type=1326 audit(1778955531.207:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.0.3094" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f931189ce59 code=0x7ffc0000 [ 623.711844][T15931] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1212 with error 28 [ 623.729363][T15860] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 623.749597][T15860] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 623.760466][T15931] EXT4-fs (loop8): This should not happen!! Data will be lost [ 623.760466][T15931] [ 623.773672][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3096'. [ 623.790194][T15860] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 623.795801][T15931] EXT4-fs (loop8): Total free blocks count 0 [ 623.804123][T15931] EXT4-fs (loop8): Free/Dirty block details [ 623.808051][T15860] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 623.825828][T15931] EXT4-fs (loop8): free_blocks=0 [ 623.830850][T15931] EXT4-fs (loop8): dirty_blocks=1216 [ 623.836154][T15931] EXT4-fs (loop8): Block reservation details [ 623.840252][ T28] audit: type=1326 audit(1778955531.263:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.0.3094" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931189ce59 code=0x7ffc0000 [ 623.842174][T15931] EXT4-fs (loop8): i_reserved_data_blocks=1216 [ 623.875917][T15860] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 623.884139][T15860] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 623.891455][T15943] EXT4-fs (loop8): shut down requested (0) [ 623.926780][T15860] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 623.941066][T15934] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3093: bg 0: block 5: invalid block bitmap [ 623.947179][ T28] audit: type=1326 audit(1778955531.263:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.0.3094" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f931189cbc2 code=0x7ffc0000 [ 623.978437][T15934] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 620 with error 28 [ 623.991588][T15934] EXT4-fs (loop5): This should not happen!! Data will be lost [ 623.991588][T15934] [ 624.011686][T15934] EXT4-fs (loop5): Total free blocks count 0 [ 624.018400][T15934] EXT4-fs (loop5): Free/Dirty block details [ 624.029955][T15934] EXT4-fs (loop5): free_blocks=0 [ 624.052660][T15934] EXT4-fs (loop5): dirty_blocks=624 [ 624.066654][T15934] EXT4-fs (loop5): Block reservation details [ 624.089071][T15934] EXT4-fs (loop5): i_reserved_data_blocks=624 [ 624.132204][T15934] EXT4-fs (loop5): shut down requested (0) [ 624.142620][T15860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.189384][T15860] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.228152][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.235290][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.417344][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.424598][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.490479][T15976] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3102'. [ 625.403094][T15979] syzkaller0: entered promiscuous mode [ 625.408631][T15979] syzkaller0: entered allmulticast mode [ 625.679975][T15860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 625.765523][T15860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 625.968429][T16007] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3103'. [ 626.375195][T15860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.476569][T16029] loop8: detected capacity change from 0 to 128 [ 626.730627][T15860] veth0_vlan: entered promiscuous mode [ 626.748690][T15860] veth1_vlan: entered promiscuous mode [ 626.776642][T16047] loop8: detected capacity change from 0 to 512 [ 626.792904][T15860] veth0_macvtap: entered promiscuous mode [ 626.800270][T16047] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 626.819186][T16047] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.3108: iget: bad i_size value: 38620345925642 [ 626.840501][T15860] veth1_macvtap: entered promiscuous mode [ 626.880814][T15860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.903434][T16047] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 626.903773][T16047] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3108: couldn't read orphan inode 15 (err -117) [ 626.913015][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 626.913038][ C1] EXT4-fs (loop8): initial error at time 1778955534: ext4_orphan_get:1397: inode 15 [ 626.913090][ C1] EXT4-fs (loop8): last error at time 1778955534: ext4_orphan_get:1397: inode 15 [ 626.955593][T15860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.961950][T16047] loop8: lost filesystem error report for type 5 error -117 [ 626.963837][T16047] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.988802][ T5709] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.020405][ T5709] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.040934][ T5709] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.066639][ T5709] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.076438][T16047] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.3108: bg 0: block 5: invalid block bitmap [ 627.098398][T16047] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1044 with error 28 [ 627.118233][T16047] EXT4-fs (loop8): This should not happen!! Data will be lost [ 627.118233][T16047] [ 627.140970][T16047] EXT4-fs (loop8): Total free blocks count 0 [ 627.154181][T16047] EXT4-fs (loop8): Free/Dirty block details [ 627.167260][T16047] EXT4-fs (loop8): free_blocks=0 [ 627.177988][T16047] EXT4-fs (loop8): dirty_blocks=1044 [ 627.184562][T16047] EXT4-fs (loop8): Block reservation details [ 627.194840][T16047] EXT4-fs (loop8): i_reserved_data_blocks=1044 [ 627.221450][T16053] EXT4-fs (loop8): shut down requested (0) [ 627.571125][T16066] loop5: detected capacity change from 0 to 512 [ 627.592963][T16066] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 627.625526][T16066] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 627.663158][T16066] System zones: 1-12 [ 627.670710][T16069] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3114'. [ 627.692475][T16066] EXT4-fs (loop5): 1 truncate cleaned up [ 627.713136][T16066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 627.816208][T16073] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3125'. [ 627.832689][T16076] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3115'. [ 627.945118][T16081] loop8: detected capacity change from 0 to 128 [ 628.038839][T16083] loop7: detected capacity change from 0 to 512 [ 628.129636][T16083] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.144468][ T7591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.153926][T16083] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.308182][T16092] loop5: detected capacity change from 0 to 512 [ 628.332792][T13887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.344274][T16092] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 628.373426][T16092] EXT4-fs (loop5): 1 truncate cleaned up [ 628.443669][T16092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 628.565613][T16103] xfrm0 speed is unknown, defaulting to 1000 [ 628.699297][T16107] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3126'. [ 628.733089][T16106] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3127'. [ 629.319785][T16117] loop0: detected capacity change from 0 to 512 [ 629.363023][ T7591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.398965][T16117] EXT4-fs (loop0): 1 truncate cleaned up [ 629.468864][T16117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.552796][T16120] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3130'. [ 629.593033][T16117] FAULT_INJECTION: forcing a failure. [ 629.593033][T16117] name failslab, interval 1, probability 0, space 0, times 0 [ 629.713924][T16117] CPU: 0 UID: 0 PID: 16117 Comm: syz.0.3129 Tainted: G W syzkaller #0 PREEMPT(full) [ 629.713960][T16117] Tainted: [W]=WARN [ 629.713967][T16117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 629.713978][T16117] Call Trace: [ 629.713985][T16117] [ 629.713993][T16117] __dump_stack+0x1d/0x30 [ 629.714095][T16117] dump_stack_lvl+0x95/0xd0 [ 629.714153][T16117] dump_stack+0x15/0x1b [ 629.714203][T16117] should_fail_ex+0x263/0x280 [ 629.714230][T16117] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 629.714251][T16117] should_failslab+0x8c/0xb0 [ 629.714347][T16117] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 629.714526][T16117] ? ext4_alloc_inode+0x38/0x330 [ 629.714711][T16117] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 629.714734][T16117] ext4_alloc_inode+0x38/0x330 [ 629.714758][T16117] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 629.714880][T16117] alloc_inode+0x40/0x170 [ 629.714949][T16117] iget_locked+0x101/0x440 [ 629.714983][T16117] __ext4_iget+0x152/0x23f0 [ 629.715002][T16117] ? kmem_cache_alloc_lru_noprof+0x1eb/0x400 [ 629.715035][T16117] ? __d_alloc+0x37/0x340 [ 629.715088][T16117] ext4_lookup+0x173/0x3a0 [ 629.715112][T16117] lookup_one_qstr_excl+0xc7/0x240 [ 629.715135][T16117] __start_renaming+0x13f/0x2a0 [ 629.715267][T16117] filename_renameat2+0x2d0/0x6e0 [ 629.715298][T16117] __se_sys_rename+0x4a/0x1c0 [ 629.715335][T16117] __x64_sys_rename+0x31/0x40 [ 629.715357][T16117] x64_sys_call+0x2b3/0x3020 [ 629.715378][T16117] do_syscall_64+0x12c/0x3b0 [ 629.715476][T16117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.715501][T16117] RIP: 0033:0x7f931189ce59 [ 629.715515][T16117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.715531][T16117] RSP: 002b:00007f93102ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 629.715549][T16117] RAX: ffffffffffffffda RBX: 00007f9311b15fa0 RCX: 00007f931189ce59 [ 629.715609][T16117] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000080 [ 629.715624][T16117] RBP: 00007f93102ef090 R08: 0000000000000000 R09: 0000000000000000 [ 629.715639][T16117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 629.715700][T16117] R13: 00007f9311b16038 R14: 00007f9311b15fa0 R15: 00007fff0ddf4828 [ 629.715717][T16117] [ 630.184080][T16126] loop8: detected capacity change from 0 to 128 [ 630.195334][T14948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.345099][T16131] loop5: detected capacity change from 0 to 128 [ 630.396047][T16123] SELinux: failed to load policy [ 630.490072][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 630.490092][ T28] audit: type=1400 audit(1778955537.976:3144): avc: denied { map } for pid=16137 comm="syz.8.3135" path="socket:[43947]" dev="sockfs" ino=43947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 630.584634][T16143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3137'. [ 630.612019][ T28] audit: type=1400 audit(1778955537.976:3145): avc: denied { accept } for pid=16137 comm="syz.8.3135" path="socket:[43947]" dev="sockfs" ino=43947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 630.907249][T16151] loop8: detected capacity change from 0 to 512 [ 630.941068][T16139] loop9: detected capacity change from 0 to 512 [ 630.942576][T16151] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 630.948103][T16139] EXT4-fs: test_dummy_encryption option not supported [ 630.979155][T16151] EXT4-fs (loop8): 1 truncate cleaned up [ 630.994071][T16151] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 631.007043][T16125] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 631.020475][ T5715] Bluetooth: hci0: Frame reassembly failed (-84) [ 631.055179][T16158] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3143'. [ 631.065897][T16158] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3143'. [ 631.077852][T16161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3142'. [ 631.110734][ T28] audit: type=1400 audit(1778955538.557:3146): avc: denied { create } for pid=16163 comm="syz.7.3144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 631.133345][T16161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3142'. [ 631.149522][ T28] audit: type=1400 audit(1778955538.613:3147): avc: denied { setopt } for pid=16163 comm="syz.7.3144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 631.185928][T16164] syzkaller1: entered allmulticast mode [ 631.200693][T16164] loop7: detected capacity change from 0 to 256 [ 631.222916][T16164] vfat: Unknown parameter '00000000000000000012' [ 631.534194][T16173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16173 comm=syz.0.3148 [ 631.687639][T14126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.725871][T16180] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3151'. [ 631.931788][T16194] iso9660: Unknown parameter '0xffffffffffffffff000000000000000000030xffffffffffffffffÿÿÿÿÿÿÿÿ' [ 632.859482][T16201] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3156'. [ 633.282899][ T3561] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 633.681679][ T28] audit: type=1400 audit(1778955540.964:3148): avc: denied { write } for pid=16221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.720410][ T28] audit: type=1400 audit(1778955541.010:3149): avc: denied { write } for pid=16239 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.933554][ T28] audit: type=1400 audit(1778955541.204:3150): avc: denied { write } for pid=16242 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.988371][ T28] audit: type=1400 audit(1778955541.241:3151): avc: denied { write } for pid=16262 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.208010][T16272] set_capacity_and_notify: 3 callbacks suppressed [ 635.208026][T16272] loop9: detected capacity change from 0 to 128 [ 635.263015][T16277] loop9: detected capacity change from 0 to 128 [ 635.279889][T16278] __nla_validate_parse: 1 callbacks suppressed [ 635.279916][T16278] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3172'. [ 636.807844][T16297] loop5: detected capacity change from 0 to 512 [ 636.815253][T16289] loop9: detected capacity change from 0 to 512 [ 636.828470][T16297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.860747][T16297] ext4 filesystem being mounted at /400/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.997862][ T28] audit: type=1400 audit(1778955543.971:3152): avc: denied { write } for pid=16296 comm="syz.5.3177" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 637.044129][T16289] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #16: comm syz.9.3174: corrupted inode contents [ 637.056122][T16289] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 637.056988][T16289] EXT4-fs error (device loop9): ext4_dirty_inode:6587: inode #16: comm syz.9.3174: mark_inode_dirty error [ 637.077692][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 637.077732][ C1] EXT4-fs (loop9): initial error at time 1778955544: ext4_do_update_inode:5690: inode 16 [ 637.077807][ C1] EXT4-fs (loop9): last error at time 1778955544: ext4_do_update_inode:5690: inode 16 [ 637.104885][T16289] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 637.105483][T16289] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #16: comm syz.9.3174: corrupted inode contents [ 637.127233][T16289] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 637.132259][T16289] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #16: comm syz.9.3174: mark_inode_dirty error [ 637.153629][T16289] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 637.157774][T16289] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #16: comm syz.9.3174: corrupted inode contents [ 637.179847][T16289] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 637.182108][T16289] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 637.200724][T16289] loop9: lost filesystem error report for type 5 error -117 [ 637.202737][T16289] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #16: comm syz.9.3174: corrupted inode contents [ 637.223287][T16289] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 637.225170][T16289] EXT4-fs error (device loop9): ext4_truncate:4690: inode #16: comm syz.9.3174: mark_inode_dirty error [ 637.246063][T16289] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 637.251525][T16289] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 637.270986][T16289] loop9: lost filesystem error report for type 5 error -117 [ 637.275710][T16289] EXT4-fs (loop9): 1 truncate cleaned up [ 637.289679][T16289] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.302524][T16289] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.378431][T16310] EXT4-fs error (device loop9): ext4_lookup:1785: inode #15: comm syz.9.3174: iget: bad i_size value: 360287970189639690 [ 637.405850][ T5709] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 637.415660][ T5709] EXT4-fs error (device loop9): ext4_release_dquot:7070: comm kworker/u8:10: Failed to release dquot type 1 [ 637.458941][ T7591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.617038][T15860] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.686179][T16312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16312 comm=syz.5.3180 [ 637.756228][T16321] loop5: detected capacity change from 0 to 128 [ 637.906296][T16326] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3186'. [ 638.449064][T16355] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3196'. [ 638.564890][T16357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16357 comm=syz.7.3197 [ 638.634793][T16360] loop7: detected capacity change from 0 to 128 [ 639.737015][T16364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3200'. [ 640.709574][T16387] loop8: detected capacity change from 0 to 2048 [ 640.782204][T16387] msdos: Unknown parameter 'erroÎí±ontinue' [ 640.913002][T16388] loop5: detected capacity change from 0 to 512 [ 640.921408][T16388] EXT4-fs: test_dummy_encryption option not supported [ 640.941446][T16388] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 640.969568][T16392] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3208'. [ 640.981319][T16394] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3209'. [ 640.994044][ T5729] Bluetooth: hci0: Frame reassembly failed (-84) [ 641.230481][T16400] loop9: detected capacity change from 0 to 512 [ 641.317528][T16400] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 641.353426][T16405] loop0: detected capacity change from 0 to 128 [ 641.372509][T16400] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.3211: iget: bad i_size value: 38620345925642 [ 641.401944][T16400] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 641.402518][T16400] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.3211: couldn't read orphan inode 15 (err -117) [ 641.411754][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 641.411787][ C0] EXT4-fs (loop9): initial error at time 1778955548: ext4_orphan_get:1397: inode 15 [ 641.411825][ C0] EXT4-fs (loop9): last error at time 1778955548: ext4_orphan_get:1397: inode 15 [ 641.471311][T16400] loop9: lost filesystem error report for type 5 error -117 [ 641.471886][T16400] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.573661][ T28] audit: type=1400 audit(1778955548.240:3153): avc: denied { write } for pid=16399 comm="syz.9.3211" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 641.682558][T16410] loop0: detected capacity change from 0 to 512 [ 641.697936][T16410] EXT4-fs: dax option not supported [ 641.764356][T16400] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.3211: bg 0: block 5: invalid block bitmap [ 641.782748][T16410] loop0: detected capacity change from 0 to 512 [ 641.810934][T16400] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1484 with error 28 [ 641.823427][T16400] EXT4-fs (loop9): This should not happen!! Data will be lost [ 641.823427][T16400] [ 641.833077][T16400] EXT4-fs (loop9): Total free blocks count 0 [ 641.839068][T16400] EXT4-fs (loop9): Free/Dirty block details [ 641.845035][T16400] EXT4-fs (loop9): free_blocks=0 [ 641.850094][T16400] EXT4-fs (loop9): dirty_blocks=1488 [ 641.855522][T16400] EXT4-fs (loop9): Block reservation details [ 641.861522][T16400] EXT4-fs (loop9): i_reserved_data_blocks=1488 [ 641.979514][T16410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.015266][T16400] EXT4-fs (loop9): shut down requested (0) [ 642.021446][T16410] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.120755][T14948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.322638][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3216'. [ 642.373236][T16420] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3216'. [ 642.395053][T16422] loop0: detected capacity change from 0 to 128 [ 642.665812][T16428] loop0: detected capacity change from 0 to 1024 [ 642.672587][T16428] EXT4-fs: Ignoring removed bh option [ 642.686280][T16428] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 642.707806][T16428] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 642.716011][T16428] System zones: 0-1, 3-12 [ 642.721015][T16428] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #3: block 1: comm syz.0.3219: lblock 1 mapped to illegal pblock 1 (length 1) [ 642.766892][T16428] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 642.767055][T16428] EXT4-fs (loop0): Remounting filesystem read-only [ 642.776267][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 642.776300][ C0] EXT4-fs (loop0): initial error at time 1778955550: ext4_map_blocks:833: inode 3: block 1 [ 642.776348][ C0] EXT4-fs (loop0): last error at time 1778955550: ext4_map_blocks:833: inode 3: block 1 [ 642.840512][T16428] Quota error (device loop0): write_blk: dquota write failed [ 642.892000][T16428] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 642.933361][T16435] FAULT_INJECTION: forcing a failure. [ 642.933361][T16435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.933838][T16428] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 642.933909][T16428] EXT4-fs (loop0): 1 orphan inode deleted [ 642.934328][T16428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.967200][T16435] CPU: 1 UID: 0 PID: 16435 Comm: syz.9.3222 Tainted: G W syzkaller #0 PREEMPT(full) [ 642.967317][T16435] Tainted: [W]=WARN [ 642.967337][T16435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 642.967374][T16435] Call Trace: [ 642.967398][T16435] [ 642.967419][T16435] __dump_stack+0x1d/0x30 [ 642.967492][T16435] dump_stack_lvl+0x95/0xd0 [ 642.967616][T16435] dump_stack+0x15/0x1b [ 642.967708][T16435] should_fail_ex+0x263/0x280 [ 642.967800][T16435] should_fail+0xb/0x20 [ 642.967904][T16435] should_fail_usercopy+0x1a/0x20 [ 642.968030][T16435] _copy_to_user+0x20/0xa0 [ 642.968192][T16435] simple_read_from_buffer+0xb5/0x130 [ 642.968293][T16435] proc_fail_nth_read+0x10e/0x150 [ 642.968437][T16435] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 642.968514][T16435] vfs_read+0x1ab/0x7f0 [ 642.968670][T16435] ? __rcu_read_unlock+0x4e/0x70 [ 642.968732][T16435] ? __fget_files+0x184/0x1c0 [ 642.968787][T16435] ? mutex_lock+0x57/0x90 [ 642.968848][T16435] ksys_read+0xdc/0x1a0 [ 642.968926][T16435] __x64_sys_read+0x40/0x50 [ 642.969004][T16435] x64_sys_call+0x2886/0x3020 [ 642.969124][T16435] do_syscall_64+0x12c/0x3b0 [ 642.969209][T16435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.969270][T16435] RIP: 0033:0x7f54f5add68e [ 642.969332][T16435] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 642.969438][T16435] RSP: 002b:00007f54f456efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 642.969558][T16435] RAX: ffffffffffffffda RBX: 00007f54f456f6c0 RCX: 00007f54f5add68e [ 642.969608][T16435] RDX: 000000000000000f RSI: 00007f54f456f0a0 RDI: 0000000000000005 [ 642.969641][T16435] RBP: 00007f54f456f090 R08: 0000000000000000 R09: 0000000000000000 [ 642.969686][T16435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.969742][T16435] R13: 00007f54f5d96038 R14: 00007f54f5d95fa0 R15: 00007ffc19c0fdc8 [ 642.969799][T16435] [ 643.067432][T16439] loop9: detected capacity change from 0 to 128 [ 643.083885][ T28] audit: type=1400 audit(1778955550.641:3154): avc: denied { write } for pid=16425 comm="syz.0.3219" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 643.252381][ T3561] Bluetooth: hci0: command 0x1003 tx timeout [ 643.259988][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 643.278406][T16445] xt_connbytes: Forcing CT accounting to be enabled [ 643.322749][T14948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.349912][T16447] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 643.505258][T16453] loop8: detected capacity change from 0 to 128 [ 643.539745][T16459] EXT4-fs: test_dummy_encryption option not supported [ 643.584353][T16459] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 643.607515][ T5731] Bluetooth: hci0: Frame reassembly failed (-84) [ 643.609086][T16461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3231'. [ 643.660673][T16466] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3231'. [ 643.815868][T16469] netlink: 276 bytes leftover after parsing attributes in process `syz.5.3233'. [ 643.853996][T16469] netlink: 276 bytes leftover after parsing attributes in process `syz.5.3233'. [ 644.161049][T16473] EXT4-fs: test_dummy_encryption option not supported [ 644.245684][T16473] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 644.309829][ T5715] Bluetooth: hci1: Frame reassembly failed (-84) [ 644.840567][T16483] EXT4-fs: test_dummy_encryption option not supported [ 644.859620][T16482] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 644.926250][ T773] Bluetooth: hci2: Frame reassembly failed (-84) [ 645.056175][T16495] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 645.068495][T16495] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.3241: iget: bad i_size value: 38620345925642 [ 645.082243][T16495] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 645.082479][T16495] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3241: couldn't read orphan inode 15 (err -117) [ 645.092057][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 645.092081][ C0] EXT4-fs (loop8): initial error at time 1778955552: ext4_orphan_get:1397: inode 15 [ 645.092113][ C0] EXT4-fs (loop8): last error at time 1778955552: ext4_orphan_get:1397: inode 15 [ 645.132545][T16495] loop8: lost filesystem error report for type 5 error -117 [ 645.133126][T16495] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.158739][ T28] audit: type=1400 audit(1778955552.550:3155): avc: denied { write } for pid=16494 comm="syz.8.3241" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 645.278961][T16495] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.3241: bg 0: block 5: invalid block bitmap [ 645.291659][T16495] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 645.304259][T16495] EXT4-fs (loop8): This should not happen!! Data will be lost [ 645.304259][T16495] [ 645.314062][T16495] EXT4-fs (loop8): Total free blocks count 0 [ 645.320252][T16495] EXT4-fs (loop8): Free/Dirty block details [ 645.326169][T16495] EXT4-fs (loop8): free_blocks=0 [ 645.331298][T16495] EXT4-fs (loop8): dirty_blocks=2088 [ 645.336823][T16495] EXT4-fs (loop8): Block reservation details [ 645.343267][T16495] EXT4-fs (loop8): i_reserved_data_blocks=2088 [ 645.779160][ T5715] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 32 with error 28 [ 645.877841][T16503] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 645.898059][T16488] Bluetooth: hci0: command 0x1003 tx timeout [ 645.904955][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 646.147102][T16505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3244'. [ 646.164580][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3244'. [ 646.555485][ T3561] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 647.152049][ T42] Bluetooth: hci2: command 0x1003 tx timeout [ 647.166471][T16522] set_capacity_and_notify: 6 callbacks suppressed [ 647.166764][T16522] loop7: detected capacity change from 0 to 128 [ 647.188888][ T3554] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 647.631866][T16533] loop9: detected capacity change from 0 to 512 [ 647.651786][T16530] loop5: detected capacity change from 0 to 128 [ 647.661775][T16533] EXT4-fs error (device loop9): __ext4_fill_super:5596: inode #2: comm syz.9.3252: invalid fast symlink length 39 [ 647.680140][T16530] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 647.692855][T16533] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 647.692980][T16530] ext4 filesystem being mounted at /411/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 647.702176][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 647.702193][ C1] EXT4-fs (loop9): initial error at time 1778955554: __ext4_fill_super:5596: inode 2 [ 647.702223][ C1] EXT4-fs (loop9): last error at time 1778955554: __ext4_fill_super:5596: inode 2 [ 647.759612][T16533] EXT4-fs (loop9): get root inode failed [ 647.765763][T16533] EXT4-fs (loop9): mount failed [ 647.847577][ T28] audit: type=1400 audit(1778955555.040:3156): avc: denied { write } for pid=16528 comm="syz.5.3254" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 647.934226][T16530] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 647.969870][T16541] __nla_validate_parse: 2 callbacks suppressed [ 647.970090][T16541] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3256'. [ 647.998759][T16530] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 648.049850][ T28] audit: type=1400 audit(1778955555.225:3157): avc: denied { map } for pid=16548 comm="syz.7.3259" path="socket:[46741]" dev="sockfs" ino=46741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 649.057921][T16553] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3260'. [ 649.127862][T16559] FAULT_INJECTION: forcing a failure. [ 649.127862][T16559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.157858][T16559] CPU: 0 UID: 0 PID: 16559 Comm: syz.8.3262 Tainted: G W syzkaller #0 PREEMPT(full) [ 649.157897][T16559] Tainted: [W]=WARN [ 649.157906][T16559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 649.157989][T16559] Call Trace: [ 649.157996][T16559] [ 649.158005][T16559] __dump_stack+0x1d/0x30 [ 649.158071][T16559] dump_stack_lvl+0x95/0xd0 [ 649.158095][T16559] dump_stack+0x15/0x1b [ 649.158181][T16559] should_fail_ex+0x263/0x280 [ 649.158216][T16559] should_fail+0xb/0x20 [ 649.158245][T16559] should_fail_usercopy+0x1a/0x20 [ 649.158315][T16559] _copy_to_user+0x20/0xa0 [ 649.158372][T16559] simple_read_from_buffer+0xb5/0x130 [ 649.158410][T16559] proc_fail_nth_read+0x10e/0x150 [ 649.158441][T16559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 649.158511][T16559] vfs_read+0x1ab/0x7f0 [ 649.158546][T16559] ? ksys_read+0xc5/0x1a0 [ 649.158684][T16559] ksys_read+0xdc/0x1a0 [ 649.158710][T16559] __x64_sys_read+0x40/0x50 [ 649.158812][T16559] x64_sys_call+0x2886/0x3020 [ 649.158882][T16559] do_syscall_64+0x12c/0x3b0 [ 649.158917][T16559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.158943][T16559] RIP: 0033:0x7f7b26b7d68e [ 649.158959][T16559] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 649.158975][T16559] RSP: 002b:00007f7b25616fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 649.159047][T16559] RAX: ffffffffffffffda RBX: 00007f7b256176c0 RCX: 00007f7b26b7d68e [ 649.159059][T16559] RDX: 000000000000000f RSI: 00007f7b256170a0 RDI: 0000000000000005 [ 649.159071][T16559] RBP: 00007f7b25617090 R08: 0000000000000000 R09: 0000000000000000 [ 649.159087][T16559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.159110][T16559] R13: 00007f7b26e36038 R14: 00007f7b26e35fa0 R15: 00007fffcd3db5b8 [ 649.159127][T16559] [ 649.360561][T16557] loop9: detected capacity change from 0 to 512 [ 649.367897][T16557] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 649.386742][ T7591] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 649.694496][T16577] loop8: detected capacity change from 0 to 128 [ 649.701665][T16578] loop5: detected capacity change from 0 to 128 [ 649.783572][T16574] SELinux: failed to load policy [ 649.893998][T16586] loop5: detected capacity change from 0 to 2048 [ 649.925961][T16586] msdos: Unknown parameter 'ÿÿÿÿ' [ 649.969388][T16588] loop8: detected capacity change from 0 to 1024 [ 649.987163][T16589] loop0: detected capacity change from 0 to 256 [ 650.001358][T16588] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block [ 650.001358][T16588] [ 650.055771][T16589] FAT-fs (loop0): bogus logical sector size 1536 [ 650.079162][T16588] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 650.109560][T16589] FAT-fs (loop0): Can't find a valid FAT filesystem [ 650.173261][T16589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3270'. [ 650.204098][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3272'. [ 650.265356][T16589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3270'. [ 650.416277][T16595] loop0: detected capacity change from 0 to 8192 [ 650.569829][T16598] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3275'. [ 650.583820][T16601] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3276'. [ 650.842193][ T28] audit: type=1400 audit(1778955557.798:3158): avc: denied { write } for pid=16603 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.001715][ T28] audit: type=1400 audit(1778955557.936:3159): avc: denied { write } for pid=16632 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.786290][T16646] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 651.932227][T16646] SELinux: failed to load policy [ 652.211041][ T28] audit: type=1400 audit(1778955558.735:3160): avc: denied { write } for pid=16636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.234486][ T28] audit: type=1400 audit(1778955558.894:3161): avc: denied { write } for pid=16658 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.016950][T16668] set_capacity_and_notify: 4 callbacks suppressed [ 653.017071][T16668] loop8: detected capacity change from 0 to 512 [ 653.035122][T16668] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 653.639816][T16673] FAULT_INJECTION: forcing a failure. [ 653.639816][T16673] name failslab, interval 1, probability 0, space 0, times 0 [ 653.652519][T16673] CPU: 0 UID: 0 PID: 16673 Comm: syz.7.3289 Tainted: G W syzkaller #0 PREEMPT(full) [ 653.652658][T16673] Tainted: [W]=WARN [ 653.652668][T16673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 653.652683][T16673] Call Trace: [ 653.652691][T16673] [ 653.652699][T16673] __dump_stack+0x1d/0x30 [ 653.652726][T16673] dump_stack_lvl+0x95/0xd0 [ 653.652750][T16673] dump_stack+0x15/0x1b [ 653.652865][T16673] should_fail_ex+0x263/0x280 [ 653.652911][T16673] should_failslab+0x8c/0xb0 [ 653.652947][T16673] kmem_cache_alloc_noprof+0x66/0x3f0 [ 653.653043][T16673] ? radix_tree_node_alloc+0x8a/0x1f0 [ 653.653074][T16673] radix_tree_node_alloc+0x8a/0x1f0 [ 653.653101][T16673] idr_get_free+0x1fa/0x550 [ 653.653247][T16673] idr_alloc_u32+0xf2/0x1a0 [ 653.653294][T16673] idr_alloc_cyclic+0x7b/0x140 [ 653.653332][T16673] bpf_map_alloc_id+0x41/0xf0 [ 653.653370][T16673] map_create+0xcd5/0xda0 [ 653.653402][T16673] ? security_bpf+0x2b/0x90 [ 653.653429][T16673] __sys_bpf+0x5c8/0x7e0 [ 653.653482][T16673] __x64_sys_bpf+0x41/0x50 [ 653.653502][T16673] x64_sys_call+0x10cb/0x3020 [ 653.653526][T16673] do_syscall_64+0x12c/0x3b0 [ 653.653638][T16673] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 653.653673][T16673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.653699][T16673] RIP: 0033:0x7f7283f6ce59 [ 653.653729][T16673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.653753][T16673] RSP: 002b:00007f72829bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 653.653775][T16673] RAX: ffffffffffffffda RBX: 00007f72841e5fa0 RCX: 00007f7283f6ce59 [ 653.653789][T16673] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 653.653867][T16673] RBP: 00007f72829bf090 R08: 0000000000000000 R09: 0000000000000000 [ 653.653882][T16673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.653916][T16673] R13: 00007f72841e6038 R14: 00007f72841e5fa0 R15: 00007ffec8c51d08 [ 653.653998][T16673] [ 654.599992][T16679] netlink: 'syz.9.3291': attribute type 2 has an invalid length. [ 654.761654][T16690] loop8: detected capacity change from 0 to 512 [ 654.779604][T16693] loop9: detected capacity change from 0 to 128 [ 654.804348][T16693] SELinux: ebitmap: map size 448 does not match my size 64 (high bit was 2048) [ 654.827311][T16690] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 654.829209][T16693] SELinux: failed to load policy [ 654.870198][T16690] EXT4-fs (loop8): 1 truncate cleaned up [ 654.881986][T16690] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.894147][ T28] audit: type=1400 audit(1778955561.161:3162): avc: denied { nlmsg_read } for pid=16699 comm="syz.7.3298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 654.958486][T16706] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3299'. [ 654.969640][T16706] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3299'. [ 654.974974][T16695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3296'. [ 655.033340][T16695] vlan2: entered promiscuous mode [ 655.040062][T16695] geneve1: entered promiscuous mode [ 655.046848][T16695] vlan2: entered allmulticast mode [ 655.052516][T16695] geneve1: entered allmulticast mode [ 655.069825][ T28] audit: type=1400 audit(1778955561.317:3163): avc: denied { write } for pid=16711 comm="syz.9.3302" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 656.322567][T16721] loop7: detected capacity change from 0 to 512 [ 656.329305][T16721] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 656.417416][T14126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.790827][T16731] loop0: detected capacity change from 0 to 128 [ 657.886171][T16746] loop9: detected capacity change from 0 to 128 [ 657.936335][T16746] SELinux: ebitmap: map size 448 does not match my size 64 (high bit was 2048) [ 657.992206][T16746] SELinux: failed to load policy [ 659.099929][T16767] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3316'. [ 659.151011][T16765] bridge0: port 3(vlan1) entered disabled state [ 659.301522][T16777] xt_ecn: cannot match TCP bits for non-tcp packets [ 659.405786][T16765] bridge0: port 3(vlan1) entered disabled state [ 659.732162][T16785] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3320'. [ 659.930776][T16781] loop9: detected capacity change from 0 to 512 [ 659.938197][T16781] EXT4-fs: test_dummy_encryption option not supported [ 659.956684][T16781] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 659.970328][ T5731] Bluetooth: hci0: Frame reassembly failed (-84) [ 660.053056][T16792] loop7: detected capacity change from 0 to 128 [ 660.387233][T16795] netlink: 'syz.8.3324': attribute type 21 has an invalid length. [ 660.395230][T16795] IPv6: NLM_F_CREATE should be specified when creating new route [ 660.403133][T16795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 660.410479][T16795] IPv6: NLM_F_CREATE should be set when creating new route [ 660.417764][T16795] IPv6: NLM_F_CREATE should be set when creating new route [ 660.425133][T16795] IPv6: NLM_F_CREATE should be set when creating new route [ 660.433510][T16795] netlink: 'syz.8.3324': attribute type 21 has an invalid length. [ 660.441545][T16795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 660.502069][T16795] vlan0: entered promiscuous mode [ 660.507265][T16795] bridge0: entered promiscuous mode [ 660.517688][T16795] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3324'. [ 660.529610][ T28] audit: type=1400 audit(1778955566.196:3164): avc: denied { ioctl } for pid=16794 comm="syz.8.3324" path="socket:[47512]" dev="sockfs" ino=47512 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 660.702258][T16803] loop8: detected capacity change from 0 to 128 [ 661.247777][T16810] netlink: 'syz.7.3328': attribute type 11 has an invalid length. [ 661.359964][T16818] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3330'. [ 661.370954][T16819] vcan0: mtu less than device minimum [ 661.569384][T16827] loop8: detected capacity change from 0 to 512 [ 661.613156][T16827] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 661.658639][T16827] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.3334: iget: bad i_size value: 38620345925642 [ 661.692906][T16823] syzkaller0: entered promiscuous mode [ 661.700145][T16827] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 661.702055][T16827] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3334: couldn't read orphan inode 15 (err -117) [ 661.711224][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 661.711239][ C0] EXT4-fs (loop8): initial error at time 1778955567: ext4_orphan_get:1397: inode 15 [ 661.711295][ C0] EXT4-fs (loop8): last error at time 1778955567: ext4_orphan_get:1397: inode 15 [ 661.759250][T16823] syzkaller0: entered allmulticast mode [ 661.814313][T16827] loop8: lost filesystem error report for type 5 error -117 [ 661.814966][T16827] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.924317][T14126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.243946][ T3554] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 662.297421][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 662.538911][T16851] loop0: detected capacity change from 0 to 512 [ 662.586154][T16851] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 662.663161][T16851] EXT4-fs (loop0): 1 truncate cleaned up [ 662.669607][T16851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.684953][T16863] xt_ecn: cannot match TCP bits for non-tcp packets [ 662.726975][T16868] loop5: detected capacity change from 0 to 512 [ 662.737220][T16868] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 662.747860][T16868] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.3346: iget: bad i_size value: 38620345925642 [ 662.762542][T16868] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 662.762699][T16868] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.3346: couldn't read orphan inode 15 (err -117) [ 662.783762][T16868] loop5: lost filesystem error report for type 5 error -117 [ 662.800995][T16868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.884795][ T7591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.935101][T16873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3347'. [ 663.081029][T16881] loop9: detected capacity change from 0 to 128 [ 663.110872][T16882] xfrm0 speed is unknown, defaulting to 1000 [ 663.591049][T14948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.859136][T16900] loop0: detected capacity change from 0 to 128 [ 664.122243][T16908] loop8: detected capacity change from 0 to 512 [ 664.153465][T16908] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 664.194997][T16911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3358'. [ 664.211262][T16908] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.3357: iget: bad i_size value: 38620345925642 [ 664.223989][T16908] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 664.253321][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 664.269035][ C0] EXT4-fs (loop8): initial error at time 1778955569: ext4_orphan_get:1397: inode 15 [ 664.278495][ C0] EXT4-fs (loop8): last error at time 1778955569: ext4_orphan_get:1397: inode 15 [ 664.291266][T16908] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3357: couldn't read orphan inode 15 (err -117) [ 664.308630][T16908] loop8: lost filesystem error report for type 5 error -117 [ 664.321845][T16908] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.348350][T16915] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3359'. [ 664.427177][T16913] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 664.450765][T14126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.539811][T16928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3364'. [ 664.584108][T16930] loop5: detected capacity change from 0 to 512 [ 664.594856][T16930] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 664.610571][T16926] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 664.619693][T16926] syzkaller0: entered promiscuous mode [ 664.625213][T16926] syzkaller0: entered allmulticast mode [ 664.633876][T16930] EXT4-fs (loop5): 1 truncate cleaned up [ 664.640133][T16930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.754898][ T3379] IPVS: starting estimator thread 0... [ 664.906716][T16935] IPVS: using max 2112 ests per chain, 105600 per kthread [ 664.930848][T16941] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3368'. [ 664.972330][T16943] netlink: 468 bytes leftover after parsing attributes in process `syz.0.3367'. [ 664.983386][T16941] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3368'. [ 664.998602][T16943] pim6reg: entered allmulticast mode [ 665.047843][T16945] SELinux: ebitmap: map size 448 does not match my size 64 (high bit was 2048) [ 665.059970][T16947] netem: change failed [ 665.068735][T16945] SELinux: failed to load policy [ 665.082621][T16949] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3370'. [ 665.128598][T16951] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 665.158473][T16951] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.3372: iget: bad i_size value: 38620345925642 [ 665.172518][T16960] ext3: Unknown parameter 'noquota"test_dummy_encryption' [ 665.180159][T16951] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 665.180672][T16958] EXT4-fs: inline encryption not supported [ 665.189822][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 665.189836][ C1] EXT4-fs (loop8): initial error at time 1778955570: ext4_orphan_get:1397: inode 15 [ 665.189861][ C1] EXT4-fs (loop8): last error at time 1778955570: ext4_orphan_get:1397: inode 15 [ 665.223114][T16951] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3372: couldn't read orphan inode 15 (err -117) [ 665.249077][T16951] loop8: lost filesystem error report for type 5 error -117 [ 665.249867][T16951] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.270101][T16958] EXT4-fs: Invalid want_extra_isize -2147483648 [ 665.277975][ T28] audit: type=1400 audit(1778955570.539:3165): avc: denied { write } for pid=16950 comm="syz.8.3372" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 665.348319][T16962] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.3372: bg 0: block 5: invalid block bitmap [ 665.375307][T16962] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1328 with error 28 [ 665.399032][T16962] EXT4-fs (loop8): This should not happen!! Data will be lost [ 665.399032][T16962] [ 665.412380][ T7591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.445035][T16962] EXT4-fs (loop8): Total free blocks count 0 [ 665.458489][T16964] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3376'. [ 665.480312][T16962] EXT4-fs (loop8): Free/Dirty block details [ 665.494785][T16962] EXT4-fs (loop8): free_blocks=0 [ 665.505803][T16962] EXT4-fs (loop8): dirty_blocks=1328 [ 665.516660][T16962] EXT4-fs (loop8): Block reservation details [ 665.533680][T16962] EXT4-fs (loop8): i_reserved_data_blocks=1328 [ 665.575145][T16962] EXT4-fs (loop8): shut down requested (0) [ 665.734681][T16972] set_capacity_and_notify: 4 callbacks suppressed [ 665.734696][T16972] loop8: detected capacity change from 0 to 512 [ 665.749394][T16972] EXT4-fs: test_dummy_encryption option not supported [ 666.150737][ T28] audit: type=1400 audit(1778955571.280:3166): avc: denied { shutdown } for pid=16971 comm="syz.8.3379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 667.364283][T16988] loop8: detected capacity change from 0 to 128 [ 667.411892][T16988] SELinux: failed to load policy [ 667.701017][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3385'. [ 667.995420][T17002] loop5: detected capacity change from 0 to 512 [ 668.014778][T17002] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 668.057626][T17002] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.3390: iget: bad i_size value: 38620345925642 [ 668.080962][T17002] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 668.083929][T17002] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.3390: couldn't read orphan inode 15 (err -117) [ 668.093489][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 668.093508][ C0] EXT4-fs (loop5): initial error at time 1778955572: ext4_orphan_get:1397: inode 15 [ 668.093553][ C0] EXT4-fs (loop5): last error at time 1778955572: ext4_orphan_get:1397: inode 15 [ 668.167205][T17002] loop5: lost filesystem error report for type 5 error -117 [ 668.172698][T17002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.263231][ T28] audit: type=1400 audit(1778955573.024:3167): avc: denied { write } for pid=17001 comm="syz.5.3390" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 668.368214][T17002] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3390: bg 0: block 5: invalid block bitmap [ 668.398153][T17002] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1172 with error 28 [ 668.427531][T17002] EXT4-fs (loop5): This should not happen!! Data will be lost [ 668.427531][T17002] [ 668.450116][T17002] EXT4-fs (loop5): Total free blocks count 0 [ 668.464175][T17002] EXT4-fs (loop5): Free/Dirty block details [ 668.477167][T17002] EXT4-fs (loop5): free_blocks=0 [ 668.488503][T17002] EXT4-fs (loop5): dirty_blocks=1176 [ 668.515932][T17002] EXT4-fs (loop5): Block reservation details [ 668.539999][T17002] EXT4-fs (loop5): i_reserved_data_blocks=1176 [ 668.600747][T17014] EXT4-fs (loop5): shut down requested (0) [ 669.740902][T17035] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3400'. [ 669.948789][T17040] loop5: detected capacity change from 0 to 128 [ 670.223452][T17055] loop7: detected capacity change from 0 to 128 [ 670.360780][T17059] loop9: detected capacity change from 0 to 512 [ 670.390054][T17059] EXT4-fs: inline encryption not supported [ 670.413353][T17059] EXT4-fs: Invalid want_extra_isize -2147483648 [ 670.942102][T17064] tipc: Started in network mode [ 670.958007][T17064] tipc: Node identity 16e31ef036e1, cluster identity 4711 [ 670.983489][T17064] tipc: Enabled bearer , priority 0 [ 671.014743][T17064] tipc: Resetting bearer [ 671.305847][T17076] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3414'. [ 672.132026][ T3378] tipc: Node number set to 537009904 [ 672.595278][T17091] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.700075][T17091] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.827477][T17091] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.903542][T17098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3421'. [ 672.928819][T17091] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.959198][T17103] loop0: detected capacity change from 0 to 128 [ 673.060100][ T3492] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.092038][ T3492] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.113803][ T3492] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.134653][ T3492] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.422951][T17120] loop8: detected capacity change from 0 to 512 [ 673.438177][T17120] EXT4-fs: inline encryption not supported [ 673.460529][T17120] EXT4-fs: Invalid want_extra_isize -2147483648 [ 673.758590][T17126] loop0: detected capacity change from 0 to 4096 [ 673.788389][T17126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.851877][ T28] audit: type=1400 audit(1778955577.928:3168): avc: denied { write } for pid=17125 comm="syz.0.3431" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 673.954377][ T28] audit: type=1400 audit(1778955577.964:3169): avc: denied { write } for pid=17125 comm="syz.0.3431" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 674.474094][T17142] netlink: 312 bytes leftover after parsing attributes in process `syz.7.3433'. [ 674.492655][T17142] netlink: 'syz.7.3433': attribute type 1 has an invalid length. [ 675.063452][T17147] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3435'. [ 675.082755][T14948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.205201][T17150] netlink: zone id is out of range [ 675.232082][T17150] netlink: zone id is out of range [ 675.480534][T17158] loop0: detected capacity change from 0 to 512 [ 675.535136][T17158] EXT4-fs: test_dummy_encryption option not supported [ 675.542630][T17158] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 675.556832][ T5729] Bluetooth: hci0: Frame reassembly failed (-84) [ 675.757187][T17175] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3447'. [ 675.918097][T17177] loop8: detected capacity change from 0 to 4096 [ 675.940342][T17177] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.008968][ T28] audit: type=1400 audit(1778955579.878:3170): avc: denied { write } for pid=17176 comm="syz.8.3448" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 676.072162][ T28] audit: type=1400 audit(1778955579.924:3171): avc: denied { write } for pid=17176 comm="syz.8.3448" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 676.544036][ T5715] ================================================================== [ 676.552176][ T5715] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 676.561683][ T5715] [ 676.564037][ T5715] write to 0xffff88810b44910d of 17 bytes by task 17183 on cpu 0: [ 676.571861][ T5715] copy_folio_from_iter_atomic+0x743/0x10b0 [ 676.577785][ T5715] generic_perform_write+0x2c1/0x490 [ 676.583085][ T5715] ext4_buffered_write_iter+0x304/0x4c0 [ 676.588658][ T5715] ext4_file_write_iter+0x380/0xfa0 [ 676.593880][ T5715] iter_file_splice_write+0x6c4/0xa80 [ 676.599281][ T5715] direct_splice_actor+0x156/0x2a0 [ 676.604424][ T5715] splice_direct_to_actor+0x311/0x670 [ 676.609819][ T5715] do_splice_direct+0x119/0x1a0 [ 676.614700][ T5715] do_sendfile+0x382/0x650 [ 676.619134][ T5715] __x64_sys_sendfile64+0x105/0x150 [ 676.624374][ T5715] x64_sys_call+0x2dc4/0x3020 [ 676.629091][ T5715] do_syscall_64+0x12c/0x3b0 [ 676.633714][ T5715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.639629][ T5715] [ 676.641967][ T5715] read to 0xffff88810b449000 of 4096 bytes by task 5715 on cpu 1: [ 676.649797][ T5715] copy_folio_from_iter_atomic+0x743/0x10b0 [ 676.655814][ T5715] generic_perform_write+0x2c1/0x490 [ 676.661123][ T5715] shmem_file_write_iter+0xc5/0xf0 [ 676.666254][ T5715] lo_rw_aio+0x67d/0x730 [ 676.670526][ T5715] loop_process_work+0x56c/0xac0 [ 676.675512][ T5715] loop_workfn+0x31/0x40 [ 676.679787][ T5715] process_scheduled_works+0x4f0/0x9c0 [ 676.685297][ T5715] worker_thread+0x58a/0x780 [ 676.689915][ T5715] kthread+0x22a/0x280 [ 676.694012][ T5715] ret_from_fork+0x146/0x330 [ 676.698637][ T5715] ret_from_fork_asm+0x1a/0x30 [ 676.703436][ T5715] [ 676.705781][ T5715] Reported by Kernel Concurrency Sanitizer on: [ 676.711949][ T5715] CPU: 1 UID: 0 PID: 5715 Comm: kworker/u8:13 Tainted: G W syzkaller #0 PREEMPT(full) [ 676.723096][ T5715] Tainted: [W]=WARN [ 676.726910][ T5715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 676.736997][ T5715] Workqueue: loop8 loop_workfn [ 676.741801][ T5715] ================================================================== [ 677.132483][T14126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.793966][ T3554] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 677.794011][ T42] Bluetooth: hci0: command 0x1003 tx timeout