last executing test programs: 21m23.46173897s ago: executing program 32 (id=812): r0 = socket(0x2b, 0x80801, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'wg1\x00', 0x0}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) 19m14.150332708s ago: executing program 33 (id=1920): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x0) sendfile(r2, r2, 0x0, 0x1000000201005) truncate(0x0, 0x9471) sendfile(r1, r0, 0x0, 0x3ffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) r4 = add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r6) r8 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r7) r9 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r8) r10 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r9) r11 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r10) add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, r11) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000004180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 18m59.062805461s ago: executing program 34 (id=2066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendto$inet(r6, &(0x7f0000002840), 0x0, 0xfcd901ce0f01a928, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10) 7m37.666513611s ago: executing program 35 (id=6747): prctl$PR_SET_NAME(0x45, 0x0) r0 = fsopen(&(0x7f0000000400)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000140)='silent\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x8000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x758a, &(0x7f00000002c0)={0x0, 0xf657, 0x40, 0x9, 0x80000}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[r5], 0x1) 5m37.954552293s ago: executing program 2 (id=7985): pipe(&(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000340)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 5m37.657555248s ago: executing program 2 (id=7986): perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x800, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x815, 0x3}, 0x112200, 0x2, 0x20da, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x5, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x6, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setreuid(0xffffffffffffffff, 0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x4040011) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x28, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x208086, &(0x7f0000000500)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@bsdgroups}, {@jqfmt_vfsold}, {@nodiscard}], [{@flag='mand'}]}, 0x3, 0x459, &(0x7f0000001340)="$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") socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8667f7fc7455970c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x450000, 0x34) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 5m37.437702348s ago: executing program 2 (id=7987): r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a8000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000001c080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000002c0)={0x0, 'team_slave_0\x00', {0x2}, 0xffa0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xffffffffffffffa4}, 0x800, 0x0, 0x1, 0x0, 0x40, 0x8}, 0x20) 5m37.422121849s ago: executing program 2 (id=7988): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = open(&(0x7f0000000480)='./file1\x00', 0x16907e, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) dup3(r1, r1, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc496cf5de499ae74, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, 0x0) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYBLOB="002000ed6c6178"]) fallocate(r1, 0x0, 0x0, 0x1000f4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x8}, 0x10}, 0x94) 5m36.645600979s ago: executing program 2 (id=7991): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9c4, 0x0, 0x0, 0xffc}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000240)=0x882, 0x4) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r2, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0x5ee, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) eventfd(0x1ff) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r6, 0x7f, 0x0, 0x4) 5m36.209550548s ago: executing program 2 (id=7995): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x2334, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x6, 0x40, 0x80}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x800) 5m36.157336282s ago: executing program 36 (id=7995): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x2334, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x6, 0x40, 0x80}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x800) 5m19.965199601s ago: executing program 7 (id=8190): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r0, &(0x7f0000000100)=""/28, 0x1c, 0x60, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x208810, &(0x7f0000000100), 0xff, 0x4c4, &(0x7f00000001c0)="$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") r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x4d6, &(0x7f0000000540)="$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") r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000280)="14", 0x2001}], 0x1, 0x9, 0xfffffffc, 0xa0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e000108000740000000001c001080080003400000013308000240000000cd08000140000005ff060012400004"], 0x168}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x2) r5 = open(&(0x7f0000000000)='./file1\x00', 0x84242, 0x46) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="9dbaac999f69835fbc2825cd64f1", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fallocate(r4, 0x3, 0x4100, 0x8000c62) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000006d00673c28bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01103b39deab0200180034801c003500776732000000000000000000000000001400030076657468315f746f5f626f6e64"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08000000019078ac1e4001ac1414aa0b009078030000004500000000000000002f0000ac14140ae0000001040022ebff5f90ff"], 0x0) 5m19.357804354s ago: executing program 7 (id=8196): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xffffffffffffffa4}, 0x800, 0x0, 0x1, 0x0, 0x40, 0x8}, 0x20) 5m19.242530165s ago: executing program 7 (id=8199): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x0, 0x0, 0x400, 0x7cb}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x77}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2040400) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, 0x0, &(0x7f00000003c0)=""/69}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001030000000000000020020020044400000100000000080002000a010101"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000380)}) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000300)) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_DESTROY(r8, &(0x7f00000000c0), 0x4) 5m18.248405862s ago: executing program 7 (id=8204): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8902, &(0x7f00000013c0)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061137a0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x184905c, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000300)=@ethtool_sfeatures={0x3b, 0x2, [{0xffff, 0x7426}, {0x1, 0x10000}]}}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8912, &(0x7f0000000080)) 5m18.001608724s ago: executing program 7 (id=8206): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, 0x0, 0x0) 5m15.097459231s ago: executing program 7 (id=8237): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r3, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x1c}, 0x4, 0x700000000000000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r8, &(0x7f00000024c0)=""/205, 0x4c, 0x53) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x600, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000818}, 0x8000) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004014}, 0x42) 5m15.068982473s ago: executing program 37 (id=8237): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r3, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x1c}, 0x4, 0x700000000000000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r8, &(0x7f00000024c0)=""/205, 0x4c, 0x53) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x600, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000818}, 0x8000) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004014}, 0x42) 4m6.67348866s ago: executing program 8 (id=8986): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199", 0x62}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xf}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0}, 0x109805, 0x0, 0x7fc, 0x6, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private2, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r4, 0x0, 0x100}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r1}, &(0x7f0000000580), &(0x7f0000000800)=r2}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="ecffffffffffffffb704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="f0"], 0x7) perf_event_open(&(0x7f0000000100)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x8, 0x88661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x6, 0x0, 0x0, 0x106, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x110c, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x84}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r11 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000080)="00af230579af5d532e0b0e6645f8", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m5.87590998s ago: executing program 8 (id=8994): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="00c1f140", @ANYRES16=r1, @ANYBLOB="050225bd7000fcdbdf2517000000180001801400020076657468315f746f5f68737200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x200408c0}, 0x4000) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x6, 0x2000) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000080)=0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710436000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 4m5.785456438s ago: executing program 8 (id=8996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000380)=ANY=[@ANYBLOB="00fbea050440835092e2373046a7b62e3a5f4ed28a21b344d4778a9731d79b69580c0d5d0f708de186f8d8efe5e3dd387dac270829f1043828f3b58b0bf4d6e8fe2a5feb3d70801625c16f7f443b63895d7e1227f2ded76637057427905ea9a4652b41b590acca977490007183213185c56ce18e56cef90434b9975425ffd5f288facdf6d137c123563ac0adcd8f160dd209d1bbbba5aab8e36f2a79546bccc375ef82064a48fbdab5430ba391f0277453d429ec2a8c5c9349ef05f14ebf8aad919c0d140f5dfe100365a6b5fc745edaa8c61ca130c054dd2fffb53fd4cda78dd63c5a419931beaf8b79"], 0xea, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002380)=[{{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000780)=""/117, 0x75}, {&(0x7f0000000800)=""/223, 0xdf}, {&(0x7f0000000900)=""/214, 0xd6}], 0x3, &(0x7f0000000a00)=""/100, 0x64}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a80)=""/165, 0xa5}], 0x1, &(0x7f0000000b40)=""/96, 0x60}, 0x3}, {{&(0x7f0000000bc0)=@pppol2tpv3, 0x80, &(0x7f0000000600)=[{&(0x7f0000000c40)=""/4096, 0x1000}], 0x1, &(0x7f0000001c40)=""/217, 0xd9}, 0x3}, {{&(0x7f0000001d40)=@isdn, 0x80, &(0x7f0000002300)=[{&(0x7f0000001dc0)=""/174, 0xae}, {&(0x7f0000001e80)=""/127, 0x7f}, {&(0x7f0000001f40)=""/184, 0xb8}, {&(0x7f0000002000)=""/224, 0xe0}, {&(0x7f0000002100)=""/112, 0x70}, {&(0x7f0000002180)=""/203, 0xcb}, {&(0x7f0000002280)=""/90, 0x5a}], 0x7}, 0x4}], 0x4, 0x102, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000180)={0x80, 0x2, 0x0, 0xfdfd}) syz_clone3(&(0x7f0000000540)={0x4000000, 0x0, &(0x7f0000000180), 0x0, {0x20}, &(0x7f0000000300)=""/88, 0x58, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) flock(0xffffffffffffffff, 0x4) syz_clone(0x89008100, 0x0, 0x51, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r5, 0x1) listen(r5, 0x27) poll(&(0x7f0000000080)=[{r5, 0x101}], 0x1, 0x400) shutdown(r5, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x3e9, 0x8, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x1, 0x0, 0x2, 0x7, 0x200, 0x67cc, 0x0, 0x1, 0x2}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8890}, 0x20008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x0) 4m4.772852517s ago: executing program 8 (id=9003): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001280)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@abort}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001980)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 4m4.429718178s ago: executing program 8 (id=9004): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6b, '\x00', 0x0, @fallback=0x24, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @empty}, 0xc) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x7437, 0x80}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000200)={0x0, 0x4, 0x1000, &(0x7f0000001780)=""/4096}) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000005080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r9, 0x29, 0x10, 0x0, &(0x7f0000000000)) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r10, 0x0, 0xee01) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xa60a, 0x3}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r11, 0x0, &(0x7f0000001700)=""/53}, 0x20) 4m3.981393147s ago: executing program 8 (id=9008): r0 = gettid() r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000000c0)={'caif0\x00', {0x2, 0x4e24, @empty}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0xd9, 0xfffffff9, 0x20, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x10, 0x100, 0x1c30}}) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xac, 0x12, 0x308, 0x70bd26, 0x25dfdbff, {0x5, 0x7, 0x4, 0x1, {0x4e24, 0x4e22, [0xffffffff, 0x9, 0x7, 0x7], [0x9, 0x401, 0x2, 0x100], r4, [0x8, 0x17318290]}, 0x1, 0xffff}, [@INET_DIAG_REQ_BYTECODE={0x5a, 0x1, "612db2a9142f06cd4ab3899d7505ed94737e79e5802dd5a11a96eaa0204e970a4944963a64f4ed071e9b25b15e933c2ac7a470e5fece892a354c6072cfcf5064c9a66eba63b31a1811824b128b369f27df7e71889e7a"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x2040}, 0x40000) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x5, 0x9, 0x0, 0xd, 0x0, 0x8000000000000000, 0x88000, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xe, 0x1, @perf_config_ext={0x6, 0x3}, 0x10, 0x0, 0x2, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0xb) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0xdc) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f6fecf0", "53c272d8b763f690b35605dff8a4a8d2", "44000100", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) setsockopt$sock_int(r6, 0x1, 0x12, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x2, 0x107fff, 0x10, 0x4, 0x9, 0x200000a4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x4, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x90000000, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xfffffffc, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xc, 0x40, 0x40bed4, 0x8, 0x6, 0x3, 0x1, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x0, 0x81, 0x2, 0x17ffff, 0x4003, 0x6f9f, 0x5, 0x9c56, 0x3, 0x400, 0x2, 0x1, 0x9, 0x80000004, 0x7, 0x4009, 0x80000000, 0x4, 0x100002, 0x8, 0xc, 0x0, 0x3, 0x100, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xffeffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0x100, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0xfffffff8, 0x0, 0x4, 0x2, 0x40, 0x20000008, 0x3be, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x3, 0x101, 0x1ff, 0xffffffff]}}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x4010, r7, 0xbdb72000) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) 4m3.980886547s ago: executing program 38 (id=9008): r0 = gettid() r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000000c0)={'caif0\x00', {0x2, 0x4e24, @empty}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0xd9, 0xfffffff9, 0x20, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x10, 0x100, 0x1c30}}) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xac, 0x12, 0x308, 0x70bd26, 0x25dfdbff, {0x5, 0x7, 0x4, 0x1, {0x4e24, 0x4e22, [0xffffffff, 0x9, 0x7, 0x7], [0x9, 0x401, 0x2, 0x100], r4, [0x8, 0x17318290]}, 0x1, 0xffff}, [@INET_DIAG_REQ_BYTECODE={0x5a, 0x1, "612db2a9142f06cd4ab3899d7505ed94737e79e5802dd5a11a96eaa0204e970a4944963a64f4ed071e9b25b15e933c2ac7a470e5fece892a354c6072cfcf5064c9a66eba63b31a1811824b128b369f27df7e71889e7a"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x2040}, 0x40000) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x5, 0x9, 0x0, 0xd, 0x0, 0x8000000000000000, 0x88000, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xe, 0x1, @perf_config_ext={0x6, 0x3}, 0x10, 0x0, 0x2, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0xb) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0xdc) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f6fecf0", "53c272d8b763f690b35605dff8a4a8d2", "44000100", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) setsockopt$sock_int(r6, 0x1, 0x12, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x2, 0x107fff, 0x10, 0x4, 0x9, 0x200000a4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x4, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x90000000, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xfffffffc, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xc, 0x40, 0x40bed4, 0x8, 0x6, 0x3, 0x1, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x0, 0x81, 0x2, 0x17ffff, 0x4003, 0x6f9f, 0x5, 0x9c56, 0x3, 0x400, 0x2, 0x1, 0x9, 0x80000004, 0x7, 0x4009, 0x80000000, 0x4, 0x100002, 0x8, 0xc, 0x0, 0x3, 0x100, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xffeffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0x100, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0xfffffff8, 0x0, 0x4, 0x2, 0x40, 0x20000008, 0x3be, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x3, 0x101, 0x1ff, 0xffffffff]}}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x4010, r7, 0xbdb72000) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) 2m55.546848137s ago: executing program 0 (id=9609): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0xffffffffffffffe8, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x144}, 0x1, 0x0, 0x0, 0x8000}, 0x240000c0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x72, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "3b0db5", 0x3c, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @loopback, @private2, [], "fb36eeca6fad50b375a22a58"}}}}}}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0), 0x12) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1006) 2m54.559657044s ago: executing program 0 (id=9618): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x400000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 2m53.428699944s ago: executing program 0 (id=9625): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @multicast}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r4, 0x77, 0x20, 0x81d8, 0xb83}, &(0x7f0000000180)=0x18) 2m53.321074264s ago: executing program 0 (id=9626): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0xffffffffffffffe8, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x144}, 0x1, 0x0, 0x0, 0x8000}, 0x240000c0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x72, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "3b0db5", 0x3c, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @loopback, @private2, [], "fb36eeca6fad50b375a22a58"}}}}}}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc0060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0), 0x12) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1006) 2m51.427071781s ago: executing program 0 (id=9639): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) (async) dup(0xffffffffffffffff) (async, rerun: 64) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) mkdirat(r4, &(0x7f0000002040)='./file0\x00', 0x5) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone(0x0, &(0x7f0000000100)="1c4e9d3bb4b781ab35b30587a8cbdc6d775acf45cde9bd295aec5264377ee8173e7cde45560a77ad35f7a37caa6037923b7fbed600e60a9a8cc02c7c284ff2a8479e", 0x42, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)="441a62ed4b01bae560c33943c5ee64c7d99db244cf35f69f99bf48f6e2655d0cf378085b5beb39ee2c66b3b3e0") (async, rerun: 32) socket$isdn_base(0x22, 0x3, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fcf7ffff00000063ff9300000000c2149bb60e0d2b626ff8a3afab0008"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000640)='\x00\x00\xff\x03\x00\x00\x00\x00\x00\x00\x00') (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'team_slave_1\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x4b, 0x50, "04000787b600eca6aa0825471829a00700e5cde91eaf6df1497941f89ca551d1e71f0051669dbe000008005f19a8385223b39d711472d44718df38352306eb79db469789aefd21ecd50ce958372935c5"}}) (async, rerun: 64) ioctl$LOOP_CLR_FD(r1, 0x4c01) (rerun: 64) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffffe, 0x4012011, 0xffffffffffffffff, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x80, @empty, 0x8000}, {0xa, 0x4e20, 0x1, @local, 0x7fffffff}, 0xffffffffffffffff, 0x2}}, 0x48) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) recvmmsg(r8, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) connect$unix(r7, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x2d, 0x20040040) recvfrom(r7, 0x0, 0x0, 0x734, 0x0, 0x0) (async, rerun: 32) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x40086602, &(0x7f0000000340)={@desc={0x1, 0x0, @desc1}}) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) 2m50.835937743s ago: executing program 0 (id=9642): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002e0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) semctl$GETZCNT(0x0, 0x0, 0xf, &(0x7f0000000100)=""/95) 2m34.459431339s ago: executing program 39 (id=9642): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002e0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) semctl$GETZCNT(0x0, 0x0, 0xf, &(0x7f0000000100)=""/95) 1m7.352181326s ago: executing program 3 (id=10604): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1, @perf_config_ext={0x18, 0x830d}, 0x100148, 0x5, 0xfffffffe, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open$cgroup(&(0x7f0000000680)={0x0, 0x80, 0xb, 0x1, 0x7, 0xef, 0x0, 0xfffffffffffffffe, 0x10040, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000540), 0x4}, 0x80, 0x8, 0xfffffffd, 0x6, 0x2, 0x558a, 0x0, 0x0, 0x7, 0x0, 0x5}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) r2 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x498, 0x400, 0x1, 0x161}, &(0x7f0000000dc0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)={0x0, 0x3938700}, 0x1, 0x8, 0x1}) io_uring_enter(r3, 0x847ba, 0x4c86, 0x5, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="923c"]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) 1m6.304793138s ago: executing program 3 (id=10605): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) recvmmsg(r2, &(0x7f0000000000), 0x0, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x200000000000004f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$kcm(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1004000, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)='./file0/file0\x00') 1m4.758904765s ago: executing program 3 (id=10610): syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000423346da092cbe220de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e248deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd77125d98120358900000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de4295777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f502cdf1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfd125a9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141399ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea6239"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r1, 0x120) 1m4.573918672s ago: executing program 3 (id=10612): r0 = getpid() r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x13, 0x0, @val=@perf_event={0x5}}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r3, 0x0, 0x23, 0x0, 0x0, 0x0, r3}]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0xe, 0x0, &(0x7f0000000100)="00f3ff00"/14, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, 0x50) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r1, 0x4) r5 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x1000, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000140)='./file1\x00', 0x0, 0x4000, r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x10000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) umount2(0x0, 0x2) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000, 0x88) fcntl$getown(r7, 0x9) setns(r5, 0x24020000) ioctl$PIO_SCRNMAP(r6, 0x4b41, &(0x7f0000000440)="90a0025c5cae794bbb881f9f6b9aeb3320f1a3989812c1e18576d740f488523c40c9a34880db8d92f912a5f3dbeb5a397e56114b65c479588c3c1f7fc3e0e8f69f5c7d4ef3b5809915cf99a7b05586beefe35f97d7374cdde324a9f3f36c2a7c33e3c6e438e68ad91b49eeae5718ee1b832d059771fd29a96517c19ea9a2ac54f0ddf79c42a15d5b644ec4fd083721c76e4b2ab754fa30af800cfe140524e44ece72849b6ffd2f33d713a8a3dd64fe4299a957d6489be9c7d74c772da6dc8691c7964ae3f5117af8ae5c4abf24615e915bf5208ca8de3455d220815e") sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_clone(0xb31e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m4.332877873s ago: executing program 3 (id=10613): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4008000) socket$kcm(0x10, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="983eb411", @ANYRES16=0x0, @ANYBLOB="00062abd7000ffdbdf25150000000c0007800800010001000080240009800800020004000000080002000500000008000200010400000800020093000000540002800c00038008000200020000000800020003000000040004002c00038008000100f8a300000800010000000000080002000400000008000200040000000800020001000000040004000800010009000000"], 0x98}}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0xed2c4, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='net/protocols\x00') lseek(r2, 0x3, 0x0) preadv(r2, &(0x7f0000000a00)=[{&(0x7f0000000680)=""/161, 0xa1}], 0x1, 0x3d1, 0x1ff) r3 = socket$inet6(0xa, 0x2, 0x0) chmod(&(0x7f0000000d00)='./file0\x00', 0x46) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r3, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="40000000000000000000000007000000831b7dac141435ac1e010100010102000000000a010100ac1414aa441437c30000000000000001ffffffff000000020010000000000000000000000007000000"], 0x50}}], 0x1, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff27bd7100fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB="08000400ff"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24042841}, 0x20040040) 1m3.895292572s ago: executing program 3 (id=10614): syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60f7d8ff00203c01fe8000000000000000000000000000aaff0100000000000000000000000000010402000700000000fc0000000000000000000000000000014e220000000890786e7007232254646b74ac0891bd7f44b3181eb896abeb43b232ed58649728cb347f7c26475b359c372161dfba36a8da80b187af9e02eba7b88fadfeb2a79f43e18c8157c31c22ab128b0138e08038f8b19729b13cf133d043d40eaef6ae030fa5206736c915cadf99ebf9dee4dc408d223ed84c255245c68a3fcc883f03c4443d9c790fd616984b2a67036acaeccd0073828f56dba1fd03f1259e238a432dd2786ff81a52caf07647e7466cd4bce7a022211ed706506b0cd370e90c7d404960a0"], 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f00000000c0)=0x80000001, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000100)='=', 0xfffffd4a, 0x4fed3) r2 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) openat(r3, &(0x7f0000000b40)='.\x00', 0x413903, 0x9e) sendto$l2tp6(r1, &(0x7f0000000000)="12202eea7985b04c15fd2054543ff5fc43eda195d8bc6bad42db333a6a", 0x1d, 0x44410, &(0x7f0000000080)={0xa, 0x0, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2a60b4fe, 0x2}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, r1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x3e}}, './file0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000003000000000400000095000000000000004d6b4855a9617a11936e120ddd34317d9a3bbdaef98337c59f9b4ef5c8559a21cbd95b7fb954e51ec10279a251f34b149d428e0c03dbbeabff6c03854368e1072332a6200ada624bf6476feaf6fa651375bfed05de47365fb6872ae0de638fbe2b22d58debaea2061890625a1fc23c5f9edb1cb6b77403055ea74354e1c3a0d2cc51ab3ad9978ec15c5e5f"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) tee(r6, r6, 0x800, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800000000fddbdf770000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r8, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$x25(r1, &(0x7f00000000c0)="27772913140c81e87ca39e0bb65938f40c0e7cc7518babbdcf7fbea18fe341c27bcbd29eb63ed26449cb899f492abc3ee9ce0b06add14fc5", 0x38, 0x20000018, &(0x7f0000000180)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) recvfrom$inet_nvme(r5, &(0x7f0000000240)=""/140, 0x8c, 0x60, &(0x7f0000000340)=@l2={0x1f, 0xfff9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2, 0x2}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) 1m3.894812131s ago: executing program 40 (id=10614): syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60f7d8ff00203c01fe8000000000000000000000000000aaff0100000000000000000000000000010402000700000000fc0000000000000000000000000000014e220000000890786e7007232254646b74ac0891bd7f44b3181eb896abeb43b232ed58649728cb347f7c26475b359c372161dfba36a8da80b187af9e02eba7b88fadfeb2a79f43e18c8157c31c22ab128b0138e08038f8b19729b13cf133d043d40eaef6ae030fa5206736c915cadf99ebf9dee4dc408d223ed84c255245c68a3fcc883f03c4443d9c790fd616984b2a67036acaeccd0073828f56dba1fd03f1259e238a432dd2786ff81a52caf07647e7466cd4bce7a022211ed706506b0cd370e90c7d404960a0"], 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f00000000c0)=0x80000001, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000100)='=', 0xfffffd4a, 0x4fed3) r2 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) openat(r3, &(0x7f0000000b40)='.\x00', 0x413903, 0x9e) sendto$l2tp6(r1, &(0x7f0000000000)="12202eea7985b04c15fd2054543ff5fc43eda195d8bc6bad42db333a6a", 0x1d, 0x44410, &(0x7f0000000080)={0xa, 0x0, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2a60b4fe, 0x2}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, r1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x3e}}, './file0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000003000000000400000095000000000000004d6b4855a9617a11936e120ddd34317d9a3bbdaef98337c59f9b4ef5c8559a21cbd95b7fb954e51ec10279a251f34b149d428e0c03dbbeabff6c03854368e1072332a6200ada624bf6476feaf6fa651375bfed05de47365fb6872ae0de638fbe2b22d58debaea2061890625a1fc23c5f9edb1cb6b77403055ea74354e1c3a0d2cc51ab3ad9978ec15c5e5f"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) tee(r6, r6, 0x800, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800000000fddbdf770000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r8, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$x25(r1, &(0x7f00000000c0)="27772913140c81e87ca39e0bb65938f40c0e7cc7518babbdcf7fbea18fe341c27bcbd29eb63ed26449cb899f492abc3ee9ce0b06add14fc5", 0x38, 0x20000018, &(0x7f0000000180)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) recvfrom$inet_nvme(r5, &(0x7f0000000240)=""/140, 0x8c, 0x60, &(0x7f0000000340)=@l2={0x1f, 0xfff9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2, 0x2}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) 2.848218639s ago: executing program 6 (id=12354): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4364, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40048a0}, 0x4880) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x5, 0x3, 0x6361, 0x0, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x10000, 0x2, 0x9, 0xffffff7a}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c5}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000000c0)="800000800000210ee7decd", 0xb, 0x48d4, &(0x7f00000001c0)={0x11, 0x8, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2.578448853s ago: executing program 6 (id=12362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.405503188s ago: executing program 1 (id=12364): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4008000) socket$kcm(0x10, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="983eb411", @ANYRES16=0x0, @ANYBLOB="00062abd7000ffdbdf25150000000c0007800800010001000080240009800800020004000000080002000500000008000200010400000800020093000000540002800c00038008000200020000000800020003000000040004002c00038008000100f8a300000800010000000000080002000400000008000200040000000800020001000000040004000800010009000000"], 0x98}}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff27bd7100fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB="08000400ff"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24042841}, 0x20040040) 2.405160838s ago: executing program 6 (id=12365): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) 2.311036526s ago: executing program 6 (id=12366): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x5, 0xffffffffffffff7e, &(0x7f0000000540)=""/172, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x2, 0x3, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x3, 0x818ef258bbee01fa}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x58, &(0x7f0000000340)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32], 0x50) syz_clone(0x8100000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x2}, 0x0, 0xfffffffffffffffd, 0xc2ba, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x5a) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000010c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000001100), 0x9) 2.291071308s ago: executing program 1 (id=12367): syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xe83a, 0x80, 0x20000, 0x75}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000040), 0x22, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0xffffffffffffff4e) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010004001400000000c910fe"], 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010003bd7000fcdb71c300000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$getown(r5, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffbf00c}, {0x6}]}, 0x10) sendmmsg$inet(r8, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 2.096190926s ago: executing program 6 (id=12370): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x2a000, 0x1000, 0x0, 0x1}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000000b0, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x400000d07, 0x4}, 0x2000, 0x8, 0x0, 0x0, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) io_setup(0x5, &(0x7f0000000140)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000001, 0x3032, 0xffffffffffffffff, 0xabfd7000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1000410, &(0x7f0000000100), 0x6, 0x507, &(0x7f0000000500)="$eJzs3c9vI1cdAPDvzMab7NbbbKEHQECXUljQss6PbaOqHNheQKiqhKiQkDhsQ+JGUex1FCelCTlkj9yRqMQJ/gRuHJB64sCNG9y4lAPSAhGoQeIwaMbTxE3sdegmcdf+fKTxzHvj+Puenfee5znOC2Bs3YiIvYi4HBFvRsR0mZ+UW9ztbPn9PtjfXTrY311KIsve+EdSnM/zoutnck+VjzkVEd//TsSPk5Nx29s7a4uNRn2jTM9sNtdn2ts7t1fTMmd+YW5h9uU7L82fWV2fa/7m4bdXX/vB7377hff/uPf1n+bFqv7sWnGuux5nqVP1SlS78iYi4rXzCDYkE+XvD0+evLV9KiKeL9r/dFwqXk0AYJRl2XRk091pAGDU5df/1UjSWjkXUI00rdU6c3jPxtW00Wpv3ppubd1fjmIO63pU0rdWG/XZcq7welSSPD1XHB+l54+l70TEMxHx88krRbq21GosD/ONDwCMsaeOjf//nuyM/wDAiJsadgEAgAtn/AeA8WP8B4Dx83+M/74dCAAjwvU/AIwf4z8AjJ+B4/+DiykHAHAhvvf66/mWHZT//3r57e2tb1bfvr1cb6/VmltLtaXWxnptpdVaadRrS1k26PEardb63IuHyfb2zr1ma+v+5r3V5uJK/V69cs71AQAGe+a59/6cRMTeK1eKLbrWcjBWw2hLP5LqsVAPMLIuDbsAwND4Pg+Mr1Nc45sGgBE36Mq/758IvWvxV3hS3fys+X8YV+mwCwAMzceb///WmZcDuHjm/2F8ZVlizX8AGDPm+IGP8/n/D6P8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADGVLXYkrRWrAW+l9+mtVrEtYi4HpXkrdVGfTYino6IP01WJvP03LALDQA8pvRvSbn+183pF6rHz15O/jNZ7CPiJ7984xfvLG5ubszl+f88zN98t8yfvzyMCgAA3e6ezOqM0+W+60L+g/3dpQ+3iyziw1c7i4vmcQ/KrXNmIiaK/VRUIuLqv5Iy3ZG/X7l0BvH3HkTEZ47q/05XhGoxB9JZ+fR4/Dz2tXOIf/T8J5FlWXYUP/1I/LQoW76vFM/Fp8+gLDBu3nu100/m7e7K/m7exMr2l8aNYt+7/U8VPdTj+7D/OzjR/6WH/d+lE/GTos3fOEw/uiQPX/z9d09kZtOdcw8iPjfRK35yGD/p0/++cMo6/uXzX3y+37nsVxE3o3f8jmbRzc5sNtdn2ts7t1ebiyv1lfr9+fmFuYXZl++8ND9TzFF3bv/QK8bfX7n1dL/4ef2v9ok/NaD+Xzll/X/93zd/9KVHxP/al3u//s8+In4+Jn71lPEXr97ttXz3YfzlPvUf9PrfOmX89/+6s3zKuwIAF6C9vbO22GjUNwYc5O81B93HwZN5EHsRPU+l5xb0G1MRn4i6O+h3MOyeCThvR41+2CUBAAAAAAAAAAAAAAD6aW/vrE3G+X6daNh1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYHT9LwAA//9agtBN") ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x2, r0}, 0x10) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x13, 0xffffffffffffffff, 0x180000000) 1.59311311s ago: executing program 1 (id=12373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) 1.563512203s ago: executing program 1 (id=12375): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) write$binfmt_script(r0, &(0x7f0000000b00)={'#! ', './file0', [{0x20, 'SMC_PNETID\x00'}, {0x20, '/d\x85e\xfaR\x02\xce8\xa7\x0ep\x9d\xe9*S\x1cxiP\xc4Q\r(\xcd\x10\x81\x1d.\xaf\x7f\x9992\xb7\xa0%\xa1\x8f\x8a\x84c&\xfe\xe4[m\x01\x14n\x96\xa6\xd6^\xe0\x9aF\x84/\x8c\x86\xf9\xe2\xff\x14\xa5uhD\xaf\x85Mm\x0f\xfb5\xc8\x9d\xd0\xf8\xb9\xe8\xf8\xe4\x86\xb3 \x19M\x97\xd2%\xa7!\x03\xae\x06M|\x93R\xe0Md\f\x80\xca\xf0\xe9,\xdb\xb0\xe3Gt\x88<\n\x90}\xd45\xdc\xdc\xcdu\xc0$\xe9}O\n\\\x87\xb1k q\xc3\x83A\xf08T\xb9^\x7f\xd3C\x80;z\\\xee\xae\xe7\xf5\xe9\xcbC\xb1YUG\f\xd4)uJ\x8b\xd9\xb7Yn\x1c0~\x92\xb3\xf76\xba\xd5^\xc6\x00\xdb\x00'/230}, {0x20, 'syz1\xb3\xbe\xce-\xf7\xaa\xb2\x00'}, {}, {0x20, '\xd1'}, {0x20, 'syzkaller0\x00'}, {0x20, '\x90%'}], 0xa, "56792585e23479230cf82162fc147a2b5752c3e357cdea59f13ab45a489a258f3e25ce97a4cc46cb65a3"}, 0x274) syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400900, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.499293208s ago: executing program 1 (id=12378): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r2, 0x24, 0x0, 0xffff, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.433243904s ago: executing program 1 (id=12381): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x2006}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f00000000c0)=0x1, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f00000002c0)=0x8, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) chroot(0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x71}, 0x2c) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x37}, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@remote, 0x4e22, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x10001}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @mark={{0x14, 0x1, 0x24, 0x22}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0xa8}, 0x40000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") mknod$loop(0x0, 0x6000, 0x0) open(&(0x7f0000000480)='.\x00', 0x68800, 0x101) 947.598197ms ago: executing program 9 (id=12387): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) 947.191947ms ago: executing program 5 (id=12388): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x4, 0x4, 0x1}, 0x48) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1a, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, &(0x7f0000000080)) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffb3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x48}, 0x4008004) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a2, &(0x7f0000000080)) 865.705935ms ago: executing program 9 (id=12389): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4364, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40048a0}, 0x4880) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x5, 0x3, 0x6361, 0x0, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x10000, 0x2, 0x9, 0xffffff7a}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c5}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000000c0)="800000800000210ee7decd7a00", 0xd, 0x48d4, &(0x7f00000001c0)={0x11, 0x8, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 425.589073ms ago: executing program 5 (id=12390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 394.898776ms ago: executing program 9 (id=12391): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) write$binfmt_script(r0, &(0x7f0000000b00)={'#! ', './file0', [{0x20, 'SMC_PNETID\x00'}, {0x20, '/d\x85e\xfaR\x02\xce8\xa7\x0ep\x9d\xe9*S\x1cxiP\xc4Q\r(\xcd\x10\x81\x1d.\xaf\x7f\x9992\xb7\xa0%\xa1\x8f\x8a\x84c&\xfe\xe4[m\x01\x14n\x96\xa6\xd6^\xe0\x9aF\x84/\x8c\x86\xf9\xe2\xff\x14\xa5uhD\xaf\x85Mm\x0f\xfb5\xc8\x9d\xd0\xf8\xb9\xe8\xf8\xe4\x86\xb3 \x19M\x97\xd2%\xa7!\x03\xae\x06M|\x93R\xe0Md\f\x80\xca\xf0\xe9,\xdb\xb0\xe3Gt\x88<\n\x90}\xd45\xdc\xdc\xcdu\xc0$\xe9}O\n\\\x87\xb1k q\xc3\x83A\xf08T\xb9^\x7f\xd3C\x80;z\\\xee\xae\xe7\xf5\xe9\xcbC\xb1YUG\f\xd4)uJ\x8b\xd9\xb7Yn\x1c0~\x92\xb3\xf76\xba\xd5^\xc6\x00\xdb\x00'/230}, {0x20, 'syz1\xb3\xbe\xce-\xf7\xaa\xb2\x00'}, {}, {0x20, '\xd1'}, {0x20, 'syzkaller0\x00'}, {0x20, '\x90%'}], 0xa, "56792585e23479230cf82162fc147a2b5752c3e357cdea59f13ab45a489a258f3e25ce97a4cc46cb65a3"}, 0x274) syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 361.805969ms ago: executing program 4 (id=12393): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000201, 0x8002, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x400009, 0x0, 0x0, 0x4, 0x82f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x25, 0x5, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000340)='syz0\x00', 0x1ff) 229.40472ms ago: executing program 9 (id=12394): socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff0100000000", 0x1c}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 194.108354ms ago: executing program 4 (id=12395): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r3 = openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) write$cgroup_int(r3, 0x0, 0x0) 158.566537ms ago: executing program 5 (id=12396): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="5c0000001e006bcd9e3fe3dc6e080000070200001d0000007ea60864160af3653c005425198bc3488bc3a0e69ee517d34460bc24eab556a705251d6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e7", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x28000000) 158.253537ms ago: executing program 5 (id=12397): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r2, 0x24, 0x0, 0xffff, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 158.054487ms ago: executing program 4 (id=12398): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 129.498999ms ago: executing program 9 (id=12399): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001821", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) 80.375673ms ago: executing program 4 (id=12400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 80.136174ms ago: executing program 6 (id=12401): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4364, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40048a0}, 0x4880) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x5, 0x3, 0x6361, 0x0, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x10000, 0x2, 0x9, 0xffffff7a}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c5}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000000c0)="800000800000210ee7decd7a00", 0xd, 0x48d4, &(0x7f00000001c0)={0x11, 0x8, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 80.066654ms ago: executing program 5 (id=12402): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff27bd7100fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e0000", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 79.871534ms ago: executing program 9 (id=12403): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000000c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r1) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 67.989175ms ago: executing program 4 (id=12404): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 61.654805ms ago: executing program 5 (id=12405): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000201, 0x8002, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x400009, 0x0, 0x0, 0x4, 0x82f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x25, 0x5, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000340)='syz0\x00', 0x1ff) 0s ago: executing program 4 (id=12406): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) write$binfmt_script(r0, &(0x7f0000000b00)={'#! ', './file0', [{0x20, 'SMC_PNETID\x00'}, {0x20, '/d\x85e\xfaR\x02\xce8\xa7\x0ep\x9d\xe9*S\x1cxiP\xc4Q\r(\xcd\x10\x81\x1d.\xaf\x7f\x9992\xb7\xa0%\xa1\x8f\x8a\x84c&\xfe\xe4[m\x01\x14n\x96\xa6\xd6^\xe0\x9aF\x84/\x8c\x86\xf9\xe2\xff\x14\xa5uhD\xaf\x85Mm\x0f\xfb5\xc8\x9d\xd0\xf8\xb9\xe8\xf8\xe4\x86\xb3 \x19M\x97\xd2%\xa7!\x03\xae\x06M|\x93R\xe0Md\f\x80\xca\xf0\xe9,\xdb\xb0\xe3Gt\x88<\n\x90}\xd45\xdc\xdc\xcdu\xc0$\xe9}O\n\\\x87\xb1k q\xc3\x83A\xf08T\xb9^\x7f\xd3C\x80;z\\\xee\xae\xe7\xf5\xe9\xcbC\xb1YUG\f\xd4)uJ\x8b\xd9\xb7Yn\x1c0~\x92\xb3\xf76\xba\xd5^\xc6\x00\xdb\x00'/230}, {0x20, 'syz1\xb3\xbe\xce-\xf7\xaa\xb2\x00'}, {}, {0x20, '\xd1'}, {0x20, 'syzkaller0\x00'}, {0x20, '\x90%'}], 0xa, "56792585e23479230cf82162fc147a2b5752c3e357cdea59f13ab45a489a258f3e25ce97a4cc46cb65a3"}, 0x274) syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): : detected capacity change from 0 to 512 [ 1324.263637][ T8378] loop4: detected capacity change from 0 to 512 [ 1324.279025][ T8378] EXT4-fs: Ignoring removed mblk_io_submit option [ 1324.289866][ T8370] EXT4-fs: Ignoring removed mblk_io_submit option [ 1324.300893][ T8378] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1324.311958][ T8378] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.10544: attempt to clear invalid blocks 2 len 1 [ 1324.326874][ T8378] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1324.327975][ T8370] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 1324.332359][ T8378] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, [ 1324.337365][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1324.337494][ C0] EXT4-fs (loop4): initial error at time 1771619579: ext4_clear_blocks:876: inode 13 [ 1324.337675][ C0] EXT4-fs (loop4): last error at time 1771619579: ext4_clear_blocks:876: inode 13 [ 1324.351553][ T8370] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.10541: attempt to clear invalid blocks 2 len 1 [ 1324.355862][ T8378] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1324.357049][ T8378] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.10544: invalid indirect mapped block 1819239214 (level 0) [ 1324.374501][ T8370] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1324.382475][ T8378] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1324.385044][ T8378] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.10544: invalid indirect mapped block 1819239214 (level 1) [ 1324.398949][ T8370] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, [ 1324.405182][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1324.405290][ C0] EXT4-fs (loop1): initial error at time 1771619579: ext4_clear_blocks:876: inode 13 [ 1324.405560][ C0] EXT4-fs (loop1): last error at time 1771619579: ext4_clear_blocks:876: inode 13 [ 1324.406025][ T8378] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1324.422661][ T8370] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1324.439437][ T8378] EXT4-fs (loop4): 1 truncate cleaned up [ 1324.442261][ T8378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1324.456260][ T8370] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.10541: invalid indirect mapped block 1819239214 (level 0) [ 1324.473849][ T8378] EXT4-fs (loop4): Quota file not on filesystem root. Journaled quota will not work [ 1324.479637][ T8370] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1324.577615][ T1936] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1324.596185][ T8370] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.10541: invalid indirect mapped block 1819239214 (level 1) [ 1324.617138][ T8370] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1324.622821][ T8370] EXT4-fs (loop1): 1 truncate cleaned up [ 1324.624191][ T8389] netlink: 'syz.6.10546': attribute type 22 has an invalid length. [ 1324.650505][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10546'. [ 1324.659523][ T8390] netlink: 92 bytes leftover after parsing attributes in process `syz.4.10545'. [ 1324.673601][ T8370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1324.721819][ T8370] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work [ 1324.737550][ T8392] netlink: 'syz.4.10547': attribute type 4 has an invalid length. [ 1324.765424][ T5665] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1324.828313][ T8397] syzkaller0: entered promiscuous mode [ 1324.834045][ T8397] syzkaller0: entered allmulticast mode [ 1325.030976][ T8412] syzkaller0: entered promiscuous mode [ 1325.036465][ T8412] syzkaller0: entered allmulticast mode [ 1325.096901][ T8416] netlink: 'syz.4.10558': attribute type 4 has an invalid length. [ 1325.127894][ T8418] bond0: entered promiscuous mode [ 1325.133006][ T8418] bond_slave_0: entered promiscuous mode [ 1325.138719][ T8418] bond_slave_1: entered promiscuous mode [ 1325.148004][ T8418] bond0: left promiscuous mode [ 1325.152808][ T8418] bond_slave_0: left promiscuous mode [ 1325.158507][ T8418] bond_slave_1: left promiscuous mode [ 1325.407992][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 1325.430575][ T3706] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1325.478046][ T8424] netlink: 'syz.3.10560': attribute type 27 has an invalid length. [ 1325.503212][T31253] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1325.567175][ T8433] validate_nla: 1 callbacks suppressed [ 1325.567191][ T8433] netlink: 'syz.9.10564': attribute type 4 has an invalid length. [ 1325.598211][ T8410] loop1: detected capacity change from 0 to 512 [ 1325.634324][ T8433] netlink: 'syz.9.10564': attribute type 4 has an invalid length. [ 1325.720120][ T8410] EXT4-fs (loop1): 1 orphan inode deleted [ 1325.744922][ T8410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1326.077584][ T8449] loop6: detected capacity change from 0 to 256 [ 1326.249300][ T8444] loop4: detected capacity change from 0 to 512 [ 1326.285469][ T8444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1326.298270][ T8444] ext4 filesystem being mounted at /354/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1326.336406][ T8444] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #4: comm syz.4.10567: corrupted inode contents [ 1326.474248][ T8444] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #4: comm syz.4.10567: mark_inode_dirty error [ 1326.538141][ T8444] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #4: comm syz.4.10567: corrupted inode contents [ 1326.746817][ T8444] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #4: comm syz.4.10567: mark_inode_dirty error [ 1326.791628][T22824] Bluetooth: hci0: Frame reassembly failed (-84) [ 1326.817910][ T5665] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1326.858465][ T8468] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1326.871249][ T8468] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1326.971786][ T8444] Quota error (device loop4): write_blk: dquota write failed [ 1326.979192][ T8444] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 1327.011564][ T8444] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1327.069647][ T8444] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.10567: Failed to acquire dquot type 1 [ 1327.070898][ T8450] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #4: comm syz.4.10567: ES cache extent failed: add [2,1,44,0x1] conflict with existing [2,327680,576460752303423487,0x18] [ 1327.070898][ T8450] [ 1327.135490][ T8470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1327.153171][ T8479] netlink: 'syz.1.10577': attribute type 22 has an invalid length. [ 1327.218068][ T8479] __nla_validate_parse: 6 callbacks suppressed [ 1327.218084][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10577'. [ 1327.263085][ T8467] syz.3.10575 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1327.286145][ T8467] CPU: 0 UID: 0 PID: 8467 Comm: syz.3.10575 Tainted: G W syzkaller #0 PREEMPT(full) [ 1327.286174][ T8467] Tainted: [W]=WARN [ 1327.286180][ T8467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1327.286214][ T8467] Call Trace: [ 1327.286222][ T8467] [ 1327.286230][ T8467] __dump_stack+0x1d/0x30 [ 1327.286257][ T8467] dump_stack_lvl+0x95/0xd0 [ 1327.286278][ T8467] dump_stack+0x15/0x1b [ 1327.286296][ T8467] dump_header+0x80/0x240 [ 1327.286379][ T8467] oom_kill_process+0x295/0x350 [ 1327.286400][ T8467] out_of_memory+0x97d/0xb80 [ 1327.286418][ T8467] try_charge_memcg+0x62e/0xa10 [ 1327.286530][ T8467] obj_cgroup_charge_pages+0x23/0xc0 [ 1327.286558][ T8467] __memcg_kmem_charge_page+0x9e/0x170 [ 1327.286627][ T8467] __alloc_frozen_pages_noprof+0x18a/0x360 [ 1327.286658][ T8467] alloc_pages_bulk_noprof+0x4aa/0x530 [ 1327.286691][ T8467] ? policy_nodemask+0x417/0x5e0 [ 1327.286718][ T8467] ? __alloc_frozen_pages_noprof+0x2a4/0x360 [ 1327.286743][ T8467] alloc_pages_bulk_mempolicy_noprof+0x352/0xea0 [ 1327.286773][ T8467] ? alloc_pages_mpol+0x217/0x260 [ 1327.286827][ T8467] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 1327.286868][ T8467] __kvmalloc_node_noprof+0x3d4/0x650 [ 1327.286939][ T8467] ? futex_hash_allocate+0x190/0x9d0 [ 1327.286985][ T8467] ? __rcu_read_unlock+0x4e/0x70 [ 1327.287002][ T8467] ? futex_hash_allocate+0x190/0x9d0 [ 1327.287073][ T8467] futex_hash_allocate+0x190/0x9d0 [ 1327.287101][ T8467] ? preempt_schedule_irq+0x2d/0x50 [ 1327.287122][ T8467] ? irqentry_exit+0x91/0x520 [ 1327.287144][ T8467] ? cap_task_prctl+0x13f/0x6e0 [ 1327.287215][ T8467] futex_hash_prctl+0xd8/0xf0 [ 1327.287239][ T8467] __se_sys_prctl+0xa3d/0x13f0 [ 1327.287287][ T8467] __x64_sys_prctl+0x67/0x80 [ 1327.287309][ T8467] x64_sys_call+0x2533/0x3020 [ 1327.287429][ T8467] do_syscall_64+0x12c/0x370 [ 1327.287471][ T8467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.287491][ T8467] RIP: 0033:0x7f5295dbc629 [ 1327.287508][ T8467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.287527][ T8467] RSP: 002b:00007f5294817028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1327.287580][ T8467] RAX: ffffffffffffffda RBX: 00007f5296035fa0 RCX: 00007f5295dbc629 [ 1327.287596][ T8467] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1327.287610][ T8467] RBP: 00007f5295e52b39 R08: 0000000000000000 R09: 0000000000000000 [ 1327.287629][ T8467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1327.287643][ T8467] R13: 00007f5296036038 R14: 00007f5296035fa0 R15: 00007ffd2ca0a1b8 [ 1327.287690][ T8467] [ 1327.287696][ T8467] memory: usage 307200kB, limit 307200kB, failcnt 2378 [ 1327.296434][ T8450] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #4: comm syz.4.10567: corrupted inode contents [ 1327.304928][ T8467] memory+swap: usage 308000kB, limit 9007199254740988kB, failcnt 0 [ 1327.341771][ T8470] ext4 filesystem being mounted at /454/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1327.347334][ T8467] kmem: usage 307000kB, limit 9007199254740988kB, failcnt 0 [ 1327.425892][ T8450] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #4: comm syz.4.10567: mark_inode_dirty error [ 1327.427102][ T8467] Memory cgroup stats for [ 1327.588601][ T8450] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #4: comm syz.4.10567: corrupted inode contents [ 1327.601164][ T8467] /syz3: [ 1327.620905][ T8467] cache 12288 [ 1327.621135][ T8450] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #4: comm syz.4.10567: mark_inode_dirty error [ 1327.623879][ T8467] rss 8192 [ 1327.623888][ T8467] shmem 0 [ 1327.623894][ T8467] mapped_file 4096 [ 1327.630282][ T8450] Quota error (device loop4): write_blk: dquota write failed [ 1327.641510][ T8467] dirty 0 [ 1327.659867][ T8467] writeback 0 [ 1327.663224][ T8450] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1327.781455][ T8467] workingset_refault_anon 5567 [ 1327.786541][ T8467] workingset_refault_file 778 [ 1327.794863][ T8486] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10578'. [ 1327.807636][ T8486] bond0: entered promiscuous mode [ 1327.812774][ T8486] bond_slave_0: entered promiscuous mode [ 1327.818707][ T8486] bond_slave_1: entered promiscuous mode [ 1327.828206][ T8486] bond0: left promiscuous mode [ 1327.832984][ T8486] bond_slave_0: left promiscuous mode [ 1327.838677][ T8486] bond_slave_1: left promiscuous mode [ 1327.868211][ T8450] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.10567: Failed to acquire dquot type 1 [ 1327.882348][ T8467] swap 823296 [ 1327.918926][ T8489] netlink: 404 bytes leftover after parsing attributes in process `syz.1.10579'. [ 1327.931604][ T8467] swapcached 1990656 [ 1327.953222][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10579'. [ 1327.985718][ T8467] pgpgin 349449 [ 1328.019989][ T8467] pgpgout 349399 [ 1328.035661][ T8467] pgfault 441688 [ 1328.051101][ T8467] pgmajfault 808 [ 1328.062943][ T8467] inactive_anon 8192 [ 1328.066922][ T8467] active_anon 73728 [ 1328.070537][ T1936] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1328.070722][ T8467] inactive_file 0 [ 1328.083311][ T8467] active_file 20480 [ 1328.087323][ T8467] unevictable 0 [ 1328.090839][ T8467] hierarchical_memory_limit 314572800 [ 1328.096303][ T8467] hierarchical_memsw_limit 9223372036854771712 [ 1328.102680][ T8467] total_cache 12288 [ 1328.106628][ T8467] total_rss 8192 [ 1328.110309][ T8467] total_shmem 0 [ 1328.114676][ T8467] total_mapped_file 4096 [ 1328.120574][ T8467] total_dirty 0 [ 1328.124348][ T8467] total_writeback 0 [ 1328.135747][ T8467] total_workingset_refault_anon 5567 [ 1328.156638][ T8467] total_workingset_refault_file 778 [ 1328.182513][ T8467] total_swap 823296 [ 1328.193372][ T8467] total_swapcached 1990656 [ 1328.200496][ T8467] total_pgpgin 349449 [ 1328.204714][ T8467] total_pgpgout 349399 [ 1328.247635][ T8467] total_pgfault 441688 [ 1328.251767][ T8467] total_pgmajfault 808 [ 1328.255901][ T8467] total_inactive_anon 8192 [ 1328.269494][ T8467] total_active_anon 73728 [ 1328.281949][ T8467] total_inactive_file 0 [ 1328.292871][ T8467] total_active_file 20480 [ 1328.303109][ T8467] total_unevictable 0 [ 1328.311951][ T8467] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.10575,pid=8466,uid=0 [ 1328.327963][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10583'. [ 1328.345177][ T8467] Memory cgroup out of memory: Killed process 8467 (syz.3.10575) total-vm:94292kB, anon-rss:1348kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 1328.406441][T32217] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1328.488531][ T8494] set_capacity_and_notify: 2 callbacks suppressed [ 1328.488642][ T8494] loop4: detected capacity change from 0 to 512 [ 1328.511032][ T8494] EXT4-fs: Ignoring removed mblk_io_submit option [ 1328.587984][ T8494] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1328.600619][ T8494] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.10581: attempt to clear invalid blocks 2 len 1 [ 1328.615046][ T8494] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1328.615985][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1328.632590][ C1] EXT4-fs (loop4): initial error at time 1771619583: ext4_clear_blocks:876: inode 13 [ 1328.643202][ C1] EXT4-fs (loop4): last error at time 1771619583: ext4_clear_blocks:876: inode 13 [ 1328.645264][ T8521] netlink: 'syz.3.10592': attribute type 4 has an invalid length. [ 1328.655297][ T8494] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1328.667740][ T8521] netlink: 'syz.3.10592': attribute type 4 has an invalid length. [ 1328.676605][ T8494] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.10581: invalid indirect mapped block 1819239214 (level 0) [ 1328.700616][ T8494] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1328.708261][ T8494] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.10581: invalid indirect mapped block 1819239214 (level 1) [ 1328.734627][ T8494] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1328.739003][ T8494] EXT4-fs (loop4): 1 truncate cleaned up [ 1328.760493][ T8494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1328.795032][ T8494] EXT4-fs (loop4): Quota file not on filesystem root. Journaled quota will not work [ 1328.886838][ T3706] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1329.091371][ T1936] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1329.105852][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10594'. [ 1329.178519][T31253] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1329.266777][ T8533] netlink: 'syz.4.10595': attribute type 4 has an invalid length. [ 1329.275065][ T8533] netlink: 'syz.4.10595': attribute type 4 has an invalid length. [ 1329.310523][T30842] lo speed is unknown, defaulting to 1000 [ 1329.323463][T13436] lo speed is unknown, defaulting to 1000 [ 1329.355641][ T8535] loop9: detected capacity change from 0 to 512 [ 1329.375579][ T8536] loop1: detected capacity change from 0 to 512 [ 1329.476724][ T8536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1329.489665][ T8536] ext4 filesystem being mounted at /142/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1329.501255][ T8536] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #4: comm syz.1.10597: corrupted inode contents [ 1329.532028][ T8536] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #4: comm syz.1.10597: mark_inode_dirty error [ 1329.602080][ T8535] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1329.678484][ T8536] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #4: comm syz.1.10597: corrupted inode contents [ 1329.703043][ T8536] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #4: comm syz.1.10597: mark_inode_dirty error [ 1329.725805][ T8536] Quota error (device loop1): write_blk: dquota write failed [ 1329.733961][ T8535] ext4 filesystem being mounted at /516/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1329.744596][ T8536] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 1329.753654][ T8536] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1329.826427][ T8553] loop3: detected capacity change from 0 to 512 [ 1329.842905][ T8546] loop6: detected capacity change from 0 to 512 [ 1329.875545][ T8536] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.10597: Failed to acquire dquot type 1 [ 1329.902245][ T8547] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #4: comm syz.1.10597: ES cache extent failed: add [2,1,44,0x1] conflict with existing [2,327680,576460752303423487,0x18] [ 1329.902245][ T8547] [ 1329.957929][ T8546] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1329.998836][ T8553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1330.014901][ T8553] ext4 filesystem being mounted at /462/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1330.052197][T31253] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1330.063324][ T8546] ext4 filesystem being mounted at /72/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1330.142892][T32217] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1330.152068][ T8557] loop4: detected capacity change from 0 to 512 [ 1330.176685][T31253] CPU: 0 UID: 0 PID: 31253 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 1330.176743][T31253] Tainted: [W]=WARN [ 1330.176750][T31253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1330.176762][T31253] Call Trace: [ 1330.176768][T31253] [ 1330.176789][T31253] __dump_stack+0x1d/0x30 [ 1330.176812][T31253] dump_stack_lvl+0x95/0xd0 [ 1330.176832][T31253] dump_stack+0x15/0x1b [ 1330.176851][T31253] dump_header+0x80/0x240 [ 1330.176874][T31253] oom_kill_process+0x295/0x350 [ 1330.176946][T31253] out_of_memory+0x97d/0xb80 [ 1330.176968][T31253] try_charge_memcg+0x62e/0xa10 [ 1330.177004][T31253] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 1330.177072][T31253] __swap_cache_prepare_and_add+0x386/0x530 [ 1330.177102][T31253] swap_cache_alloc_folio+0xa2/0x120 [ 1330.177190][T31253] swap_cluster_readahead+0x26e/0x3d0 [ 1330.177270][T31253] swapin_readahead+0xde/0x840 [ 1330.177354][T31253] ? __rcu_read_unlock+0x4e/0x70 [ 1330.177380][T31253] ? __perf_event_task_sched_in+0xa65/0xad0 [ 1330.177402][T31253] ? __list_add_valid_or_report+0x38/0xe0 [ 1330.177429][T31253] ? xfd_validate_state+0x45/0xf0 [ 1330.177453][T31253] ? __rcu_read_unlock+0x4e/0x70 [ 1330.177473][T31253] ? swap_cache_get_folio+0x26f/0x280 [ 1330.177521][T31253] do_swap_page+0x309/0x2210 [ 1330.177559][T31253] ? __schedule+0x85a/0xd40 [ 1330.177582][T31253] ? __rcu_read_lock+0x36/0x50 [ 1330.177602][T31253] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1330.177625][T31253] handle_mm_fault+0xb40/0x3020 [ 1330.177657][T31253] ? vma_start_read+0x1c7/0x2c0 [ 1330.177685][T31253] do_user_addr_fault+0x62f/0x1050 [ 1330.177754][T31253] ? trace_page_fault_user+0x1f/0xe0 [ 1330.177778][T31253] exc_page_fault+0x62/0xa0 [ 1330.177827][T31253] asm_exc_page_fault+0x26/0x30 [ 1330.177846][T31253] RIP: 0033:0x7fec61437817 [ 1330.177861][T31253] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1330.177877][T31253] RSP: 002b:00007ffee09e9480 EFLAGS: 00010202 [ 1330.177922][T31253] RAX: 0000000000000000 RBX: 000055558439d500 RCX: 00007fec61437817 [ 1330.177934][T31253] RDX: 00007ffee09e94c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1330.177945][T31253] RBP: 00007ffee09e952c R08: 0000000000000000 R09: 0000000000000000 [ 1330.177990][T31253] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 1330.178004][T31253] R13: 00000000000927c0 R14: 00000000001396ef R15: 00007ffee09e9580 [ 1330.178047][T31253] [ 1330.178055][T31253] memory: usage 307200kB, limit 307200kB, failcnt 1121 [ 1330.229042][ T8546] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #4: comm syz.6.10599: corrupted inode contents [ 1330.449071][T31253] memory+swap: usage 307864kB, limit 9007199254740988kB, failcnt 0 [ 1330.456997][T31253] kmem: usage 307020kB, limit 9007199254740988kB, failcnt 0 [ 1330.501205][T31253] Memory cgroup stats for /syz9: [ 1330.501401][T31253] cache 8192 [ 1330.527805][T31253] rss 4096 [ 1330.534413][T31253] shmem 0 [ 1330.539734][T31253] mapped_file 0 [ 1330.552863][ T8568] 9p: Bad value for 'wfdno' [ 1330.564633][T31253] dirty 0 [ 1330.567678][T31253] writeback 0 [ 1330.583621][T31253] workingset_refault_anon 6828 [ 1330.614872][T31253] workingset_refault_file 65 [ 1330.619489][T31253] swap 679936 [ 1330.707562][T31253] swapcached 2023424 [ 1330.711533][T31253] pgpgin 352614 [ 1330.715050][T31253] pgpgout 352569 [ 1330.736344][T31253] pgfault 389615 [ 1330.739915][T31253] pgmajfault 1045 [ 1330.750747][T31253] inactive_anon 0 [ 1330.754436][T31253] active_anon 172032 [ 1330.761716][T31253] inactive_file 0 [ 1330.769251][T31253] active_file 12288 [ 1330.776297][T31253] unevictable 0 [ 1330.779766][T31253] hierarchical_memory_limit 314572800 [ 1330.796137][T31253] hierarchical_memsw_limit 9223372036854771712 [ 1330.802347][T31253] total_cache 8192 [ 1330.818040][T31253] total_rss 4096 [ 1330.821606][T31253] total_shmem 0 [ 1330.825061][T31253] total_mapped_file 0 [ 1330.840062][T31253] total_dirty 0 [ 1330.843551][T31253] total_writeback 0 [ 1330.847356][T31253] total_workingset_refault_anon 6828 [ 1330.863653][T31253] total_workingset_refault_file 65 [ 1330.868785][T31253] total_swap 679936 [ 1330.881076][T31253] total_swapcached 2023424 [ 1331.037399][T31253] total_pgpgin 352614 [ 1331.044476][T31253] total_pgpgout 352569 [ 1331.049884][T31253] total_pgfault 389615 [ 1331.053943][T31253] total_pgmajfault 1045 [ 1331.058158][T31253] total_inactive_anon 0 [ 1331.062315][T31253] total_active_anon 172032 [ 1331.066763][T31253] total_inactive_file 0 [ 1331.070901][T31253] total_active_file 12288 [ 1331.075205][T31253] total_unevictable 0 [ 1331.079316][T31253] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.10596,pid=8528,uid=0 [ 1331.094203][T31253] Memory cgroup out of memory: Killed process 8528 (syz.9.10596) total-vm:94160kB, anon-rss:1224kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 1331.112066][T22843] kworker/u8:40 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_HARDWALL), order=0, oom_score_adj=0 [ 1331.121774][ T8547] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #4: comm syz.1.10597: corrupted inode contents [ 1331.137693][ T8547] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #4: comm syz.1.10597: mark_inode_dirty error [ 1331.149867][ T8547] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #4: comm syz.1.10597: corrupted inode contents [ 1331.162038][T22843] CPU: 0 UID: 0 PID: 22843 Comm: kworker/u8:40 Tainted: G W syzkaller #0 PREEMPT(full) [ 1331.162071][T22843] Tainted: [W]=WARN [ 1331.162079][T22843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1331.162168][T22843] Workqueue: loop6 loop_rootcg_workfn [ 1331.162197][T22843] Call Trace: [ 1331.162202][T22843] [ 1331.162210][T22843] __dump_stack+0x1d/0x30 [ 1331.162230][T22843] dump_stack_lvl+0x95/0xd0 [ 1331.162249][T22843] dump_stack+0x15/0x1b [ 1331.162374][T22843] dump_header+0x80/0x240 [ 1331.162395][T22843] oom_kill_process+0x295/0x350 [ 1331.162482][T22843] out_of_memory+0x97d/0xb80 [ 1331.162556][T22843] try_charge_memcg+0x62e/0xa10 [ 1331.162631][T22843] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 1331.162745][T22843] __swap_cache_prepare_and_add+0x386/0x530 [ 1331.162778][T22843] swap_cache_alloc_folio+0xa2/0x120 [ 1331.162881][T22843] swap_cluster_readahead+0x36b/0x3d0 [ 1331.162908][T22843] shmem_swapin_folio+0x951/0x1360 [ 1331.162931][T22843] ? __rcu_read_unlock+0x4e/0x70 [ 1331.162952][T22843] ? filemap_get_entry+0x392/0x3d0 [ 1331.162976][T22843] shmem_get_folio_gfp+0x278/0xd60 [ 1331.163009][T22843] shmem_write_begin+0xfc/0x1f0 [ 1331.163034][T22843] generic_perform_write+0x183/0x490 [ 1331.163134][T22843] shmem_file_write_iter+0xc5/0xf0 [ 1331.163223][T22843] lo_rw_aio+0x67d/0x730 [ 1331.163252][T22843] loop_process_work+0x56c/0xac0 [ 1331.163332][T22843] ? wb_workfn+0x857/0x970 [ 1331.163357][T22843] ? pwq_dec_nr_in_flight+0x65c/0x760 [ 1331.163424][T22843] loop_rootcg_workfn+0x22/0x30 [ 1331.163442][T22843] process_scheduled_works+0x4de/0x9e0 [ 1331.163469][T22843] worker_thread+0x581/0x770 [ 1331.163550][T22843] ? __pfx_worker_thread+0x10/0x10 [ 1331.163577][T22843] kthread+0x22a/0x280 [ 1331.163594][T22843] ? __pfx_kthread+0x10/0x10 [ 1331.163609][T22843] ret_from_fork+0x150/0x360 [ 1331.163703][T22843] ? __pfx_kthread+0x10/0x10 [ 1331.163720][T22843] ret_from_fork_asm+0x1a/0x30 [ 1331.163748][T22843] [ 1331.174944][ T8547] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #4: comm syz.1.10597: mark_inode_dirty error [ 1331.178501][T22843] memory: usage 307200kB, limit 307200kB, failcnt 6526 [ 1331.179817][ T8547] Quota error (device loop1): write_blk: dquota write failed [ 1331.189445][T22843] memory+swap: usage 307636kB, limit 9007199254740988kB, failcnt 0 [ 1331.194636][ T8547] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1331.198438][T22843] kmem: usage 306996kB, limit 9007199254740988kB, failcnt 0 [ 1331.200766][ T8547] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.10597: Failed to acquire dquot type 1 [ 1331.205362][T22843] Memory cgroup stats for /syz6: [ 1331.417210][T22843] cache 12288 [ 1331.417472][T31253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1331.422129][T22843] rss 4096 [ 1331.422137][T22843] shmem 0 [ 1331.426941][ T5665] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1331.434648][T22843] mapped_file 0 [ 1331.452956][T22843] dirty 0 [ 1331.456301][T22843] writeback 4096 [ 1331.456350][ T8574] loop3: detected capacity change from 0 to 512 [ 1331.459840][T22843] workingset_refault_anon 59268 [ 1331.480174][T22843] workingset_refault_file 7981 [ 1331.481561][ T8574] EXT4-fs: Ignoring removed mblk_io_submit option [ 1331.494125][ T8574] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1331.502855][ T8574] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.10605: attempt to clear invalid blocks 2 len 1 [ 1331.516592][ T8574] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1331.517020][ T8574] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, [ 1331.526159][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1331.526177][ C1] EXT4-fs (loop3): initial error at time 1771619586: ext4_clear_blocks:876: inode 13 [ 1331.526201][ C1] EXT4-fs (loop3): last error at time 1771619586: ext4_clear_blocks:876: inode 13 [ 1331.559551][ T8574] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1331.574768][T22843] swap 446464 [ 1331.577783][ T8574] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.10605: invalid indirect mapped block 1819239214 (level 0) [ 1331.592081][T22843] swapcached 61186048 [ 1331.592092][T22843] pgpgin 1736509 [ 1331.592100][T22843] pgpgout 1736460 [ 1331.592106][T22843] pgfault 1810393 [ 1331.592113][T22843] pgmajfault 8688 [ 1331.592120][T22843] inactive_anon 176128 [ 1331.598150][ T8574] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1331.603250][T22843] active_anon 0 [ 1331.609417][ T8574] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.10605: invalid indirect mapped block 1819239214 (level 1) [ 1331.616706][T22843] inactive_file 24576 [ 1331.645314][ T8574] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1331.645534][T22843] active_file 0 [ 1331.658358][T22843] unevictable 0 [ 1331.661855][T22843] hierarchical_memory_limit 314572800 [ 1331.667302][T22843] hierarchical_memsw_limit 9223372036854771712 [ 1331.685980][T22843] total_cache 12288 [ 1331.689960][T22843] total_rss 4096 [ 1331.693517][T22843] total_shmem 0 [ 1331.697212][T22843] total_mapped_file 0 [ 1331.701259][T22843] total_dirty 0 [ 1331.705464][T22843] total_writeback 4096 [ 1331.709727][T22843] total_workingset_refault_anon 59268 [ 1331.715182][T22843] total_workingset_refault_file 7981 [ 1331.720624][T22843] total_swap 446464 [ 1331.726809][T22843] total_swapcached 61186048 [ 1331.731335][T22843] total_pgpgin 1736512 [ 1331.735545][T22843] total_pgpgout 1736463 [ 1331.740113][T22843] total_pgfault 1810414 [ 1331.885278][ T8585] loop9: detected capacity change from 0 to 128 [ 1331.892748][T22843] total_pgmajfault 8688 [ 1331.896909][T22843] total_inactive_anon 176128 [ 1331.901546][T22843] total_active_anon 0 [ 1331.905675][T22843] total_inactive_file 24576 [ 1331.910231][T22843] total_active_file 0 [ 1331.914286][T22843] total_unevictable 0 [ 1331.918439][T22843] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.10599,pid=8542,uid=0 [ 1331.933985][T22843] Memory cgroup out of memory: Killed process 8542 (syz.6.10599) total-vm:96340kB, anon-rss:1240kB, file-rss:22240kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 1332.316880][ T8588] loop1: detected capacity change from 0 to 128 [ 1332.361112][ T8585] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1332.374177][ T8585] ext4 filesystem being mounted at /517/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1332.407416][ T8588] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1332.420571][ T8588] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1332.531133][ T43] Bluetooth: hci0: sending frame failed (-49) [ 1332.537320][ T3706] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 1332.544309][ T8574] EXT4-fs (loop3): 1 truncate cleaned up [ 1332.550476][ T8574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1332.563239][T22852] Bluetooth: hci1: Frame reassembly failed (-84) [ 1332.573906][ T8557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1332.577648][ T8573] EXT4-fs (loop3): Quota file not on filesystem root. Journaled quota will not work [ 1332.586436][ T8557] ext4 filesystem being mounted at /359/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1332.598212][ T8546] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #4: comm syz.6.10599: mark_inode_dirty error [ 1332.669508][ T8546] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #4: comm syz.6.10599: corrupted inode contents [ 1332.702871][ T8557] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #4: comm syz.4.10603: corrupted inode contents [ 1332.721895][T31253] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1332.723393][ T8546] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #4: comm syz.6.10599: mark_inode_dirty error [ 1332.742773][T32217] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.752364][ T8557] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #4: comm syz.4.10603: mark_inode_dirty error [ 1332.771095][ T8546] Quota error (device loop6): write_blk: dquota write failed [ 1332.799314][ T8546] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 1332.808534][ T8546] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1332.830363][ T8546] EXT4-fs error (device loop6): ext4_acquire_dquot:7003: comm syz.6.10599: Failed to acquire dquot type 1 [ 1332.909446][ T7463] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.921154][ T8557] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #4: comm syz.4.10603: corrupted inode contents [ 1333.384525][ T8557] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #4: comm syz.4.10603: mark_inode_dirty error [ 1333.395915][ T8557] Quota error (device loop4): write_blk: dquota write failed [ 1333.403370][ T8557] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 1333.412714][ T8557] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1333.422761][ T8557] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.10603: Failed to acquire dquot type 1 [ 1333.434403][ T8562] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #4: comm syz.4.10603: ES cache extent failed: add [2,1,44,0x1] conflict with existing [2,327680,576460752303423487,0x18] [ 1333.434403][ T8562] [ 1333.455717][ T8562] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #4: comm syz.4.10603: corrupted inode contents [ 1333.468302][ T8562] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #4: comm syz.4.10603: mark_inode_dirty error [ 1333.481846][ T8562] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #4: comm syz.4.10603: corrupted inode contents [ 1333.497190][ T8603] netlink: 'syz.6.10611': attribute type 27 has an invalid length. [ 1333.497440][ T8562] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #4: comm syz.4.10603: mark_inode_dirty error [ 1333.509913][ T8603] bridge1: left promiscuous mode [ 1333.516755][ T8562] Quota error (device loop4): write_blk: dquota write failed [ 1333.521558][ T8603] bridge1: left allmulticast mode [ 1333.528927][ T8562] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1333.544692][ T8562] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.10603: Failed to acquire dquot type 1 [ 1333.594493][ T1936] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.634968][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10618'. [ 1333.644759][ T8614] netlink: 76 bytes leftover after parsing attributes in process `syz.6.10618'. [ 1333.727928][ T8622] loop9: detected capacity change from 0 to 1024 [ 1333.785584][ T8622] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1333.787221][ T8611] lo speed is unknown, defaulting to 1000 [ 1333.806740][ T28] audit: type=1400 audit(1771619588.452:16961): avc: denied { ioctl } for pid=8627 comm="syz.6.10620" path="socket:[133292]" dev="sockfs" ino=133292 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1333.899786][ T8628] EXT4-fs (loop6): 1 truncate cleaned up [ 1333.929348][ T8611] chnl_net:caif_netlink_parms(): no params data found [ 1333.939761][ T8628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1334.000297][ T8624] set_capacity_and_notify: 1 callbacks suppressed [ 1334.000310][ T8624] loop4: detected capacity change from 0 to 512 [ 1334.046513][ T8628] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10620: bg 0: block 465: padding at end of block bitmap is not set [ 1334.063691][T22852] bridge_slave_1: left allmulticast mode [ 1334.076989][T22852] bridge_slave_1: left promiscuous mode [ 1334.096338][ T8628] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 1334.112608][T22852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.136732][T22852] bridge_slave_0: left allmulticast mode [ 1334.142401][T22852] bridge_slave_0: left promiscuous mode [ 1334.176859][T22852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.268473][ T8656] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10623'. [ 1334.284532][ T8624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1334.301609][ T8656] netlink: 56 bytes leftover after parsing attributes in process `syz.6.10623'. [ 1334.330468][ T8622] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4224: comm syz.9.10619: Allocating blocks 497-513 which overlap fs metadata [ 1334.350917][ T8624] ext4 filesystem being mounted at /360/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1334.366843][T22852] bond1 (unregistering): (slave bond0): Releasing active interface [ 1334.379132][ T8641] EXT4-fs (loop9): pa ffff888107a50c40: logic 48, phys. 177, len 21 [ 1334.387209][ T8641] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5467: group 0, free 0, pa_free 1 [ 1334.398712][ T8660] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10624'. [ 1334.409048][T22852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1334.418098][ T8660] netlink: 56 bytes leftover after parsing attributes in process `syz.6.10624'. [ 1334.427950][T22852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1334.447646][T22852] bond0 (unregistering): Released all slaves [ 1334.455811][T22852] bond1 (unregistering): Released all slaves [ 1334.466133][T22852] bond2 (unregistering): Released all slaves [ 1334.474701][ T8624] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #4: comm syz.4.10617: corrupted inode contents [ 1334.481187][T22852] bond3 (unregistering): Released all slaves [ 1334.538323][T31253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1334.565593][ T8624] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #4: comm syz.4.10617: mark_inode_dirty error [ 1334.584426][ T8611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.639213][ T8677] netlink: 'syz.9.10626': attribute type 27 has an invalid length. [ 1334.647617][ T8673] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10627'. [ 1334.654584][ T1936] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1334.658431][ T8611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.683533][ T1936] CPU: 0 UID: 0 PID: 1936 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 1334.683612][ T1936] Tainted: [W]=WARN [ 1334.683620][ T1936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1334.683632][ T1936] Call Trace: [ 1334.683640][ T1936] [ 1334.683675][ T1936] __dump_stack+0x1d/0x30 [ 1334.683771][ T1936] dump_stack_lvl+0x95/0xd0 [ 1334.683790][ T1936] dump_stack+0x15/0x1b [ 1334.683810][ T1936] dump_header+0x80/0x240 [ 1334.683839][ T1936] oom_kill_process+0x295/0x350 [ 1334.683857][ T1936] out_of_memory+0x97d/0xb80 [ 1334.683881][ T1936] try_charge_memcg+0x62e/0xa10 [ 1334.683914][ T1936] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 1334.683991][ T1936] __swap_cache_prepare_and_add+0x386/0x530 [ 1334.684026][ T1936] swap_cache_alloc_folio+0xa2/0x120 [ 1334.684056][ T1936] swap_cluster_readahead+0x36b/0x3d0 [ 1334.684158][ T1936] swapin_readahead+0xde/0x840 [ 1334.684185][ T1936] ? __rcu_read_unlock+0x4e/0x70 [ 1334.684204][ T1936] ? __perf_event_task_sched_in+0xa65/0xad0 [ 1334.684300][ T1936] ? __list_add_valid_or_report+0x38/0xe0 [ 1334.684331][ T1936] ? __rcu_read_unlock+0x4e/0x70 [ 1334.684353][ T1936] ? swap_cache_get_folio+0x26f/0x280 [ 1334.684402][ T1936] do_swap_page+0x309/0x2210 [ 1334.684425][ T1936] ? __schedule+0x85a/0xd40 [ 1334.684452][ T1936] ? __rcu_read_lock+0x36/0x50 [ 1334.684473][ T1936] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1334.684505][ T1936] handle_mm_fault+0xb40/0x3020 [ 1334.684530][ T1936] ? vma_start_read+0x1c7/0x2c0 [ 1334.684629][ T1936] do_user_addr_fault+0x62f/0x1050 [ 1334.684663][ T1936] ? trace_page_fault_user+0x1f/0xe0 [ 1334.684725][ T1936] exc_page_fault+0x62/0xa0 [ 1334.684747][ T1936] asm_exc_page_fault+0x26/0x30 [ 1334.684765][ T1936] RIP: 0033:0x7f8d2e9b7817 [ 1334.684786][ T1936] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1334.684805][ T1936] RSP: 002b:00007ffcb17a8b90 EFLAGS: 00010202 [ 1334.684824][ T1936] RAX: 0000000000000000 RBX: 0000555585636500 RCX: 00007f8d2e9b7817 [ 1334.684839][ T1936] RDX: 00007ffcb17a8bd0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1334.684853][ T1936] RBP: 00007ffcb17a8c3c R08: 0000000000000000 R09: 0000000000000000 [ 1334.684865][ T1936] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 1334.684892][ T1936] R13: 00000000000927c0 R14: 000000000013a931 R15: 00007ffcb17a8c90 [ 1334.684909][ T1936] [ 1334.684923][ T1936] memory: usage 307200kB, limit 307200kB, failcnt 6772 [ 1334.707427][ T8611] bridge_slave_0: entered allmulticast mode [ 1334.722844][ T1936] memory+swap: usage 308028kB, limit 9007199254740988kB, failcnt 0 [ 1334.731440][ T8611] bridge_slave_0: entered promiscuous mode [ 1334.738714][ T1936] kmem: usage 306996kB, limit 9007199254740988kB, failcnt 0 [ 1334.771725][T29176] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1334.818454][ T1936] Memory cgroup stats for [ 1334.821844][ T8591] Bluetooth: hci1: command 0x1003 tx timeout [ 1334.845911][ T1936] /syz4 [ 1334.976289][T22852] hsr_slave_0: left promiscuous mode [ 1334.980990][ T1936] : [ 1335.008145][ T1936] cache 8192 [ 1335.017063][ T1936] rss 4096 [ 1335.023370][ T1936] shmem 0 [ 1335.029787][ T1936] mapped_file 0 [ 1335.037313][ T1936] dirty 0 [ 1335.043667][ T1936] writeback 0 [ 1335.048836][ T1936] workingset_refault_anon 63534 [ 1335.053875][ T1936] workingset_refault_file 12320 [ 1335.058766][ T1936] swap 847872 [ 1335.062112][ T1936] swapcached 27009024 [ 1335.066488][ T1936] pgpgin 1954311 [ 1335.070063][ T1936] pgpgout 1954260 [ 1335.073757][ T1936] pgfault 2050154 [ 1335.077809][ T1936] pgmajfault 8870 [ 1335.081495][T22852] hsr_slave_1: left promiscuous mode [ 1335.087326][T22852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1335.088263][ T1936] inactive_anon 102400 [ 1335.099343][T22852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.100419][ T1936] active_anon 73728 [ 1335.110346][ T1936] inactive_file 0 [ 1335.114047][ T1936] active_file 32768 [ 1335.117854][ T1936] unevictable 0 [ 1335.121370][ T1936] hierarchical_memory_limit 314572800 [ 1335.126802][ T1936] hierarchical_memsw_limit 9223372036854771712 [ 1335.134468][ T1936] total_cache 8192 [ 1335.138241][ T1936] total_rss 4096 [ 1335.141955][ T1936] total_shmem 0 [ 1335.145448][ T1936] total_mapped_file 0 [ 1335.149458][ T1936] total_dirty 0 [ 1335.153916][ T1936] total_writeback 0 [ 1335.157827][ T1936] total_workingset_refault_anon 63534 [ 1335.163494][ T1936] total_workingset_refault_file 12320 [ 1335.168891][ T1936] total_swap 847872 [ 1335.169462][ T5665] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1335.172723][ T1936] total_swapcached 27009024 [ 1335.186183][ T1936] total_pgpgin 1954311 [ 1335.190334][ T1936] total_pgpgout 1954260 [ 1335.194724][ T1936] total_pgfault 2050154 [ 1335.198883][ T1936] total_pgmajfault 8870 [ 1335.203022][ T1936] total_inactive_anon 102400 [ 1335.207691][ T1936] total_active_anon 73728 [ 1335.212019][ T1936] total_inactive_file 0 [ 1335.216205][ T1936] total_active_file 32768 [ 1335.220569][ T1936] total_unevictable 0 [ 1335.224538][ T1936] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.10617,pid=8615,uid=0 [ 1335.240636][ T1936] Memory cgroup out of memory: Killed process 8615 (syz.4.10617) total-vm:94292kB, anon-rss:1228kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 1335.258217][T22852] team0 (unregistering): Port device team_slave_1 removed [ 1335.265454][ T8689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10629'. [ 1335.274620][ T8689] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10629'. [ 1335.286290][T22852] team0 (unregistering): Port device team_slave_0 removed [ 1335.309882][ T8624] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #4: comm syz.4.10617: corrupted inode contents [ 1335.336320][ T8624] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #4: comm syz.4.10617: mark_inode_dirty error [ 1335.349501][ T8611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.355926][ T8624] Quota error (device loop4): write_blk: dquota write failed [ 1335.384259][ T8624] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.10617: Failed to acquire dquot type 1 [ 1335.456189][ T8611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.463419][ T8611] bridge_slave_1: entered allmulticast mode [ 1335.470233][ T8611] bridge_slave_1: entered promiscuous mode [ 1335.490032][ T8611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1335.503498][ T8611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1335.524787][ T1936] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1335.539740][ T8611] team0: Port device team_slave_0 added [ 1335.571905][ T8696] loop9: detected capacity change from 0 to 512 [ 1335.592712][ T8611] team0: Port device team_slave_1 added [ 1335.667831][ T8700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10630'. [ 1335.681794][ T8700] bond0: entered promiscuous mode [ 1335.686906][ T8700] bond_slave_0: entered promiscuous mode [ 1335.692717][ T8700] bond_slave_1: entered promiscuous mode [ 1335.700389][ T8700] bond0: left promiscuous mode [ 1335.705200][ T8700] bond_slave_0: left promiscuous mode [ 1335.710673][ T8700] bond_slave_1: left promiscuous mode [ 1335.724180][ T8696] EXT4-fs (loop9): 1 truncate cleaned up [ 1335.737706][ T8696] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1336.058386][ T8611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1336.065709][ T8611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1336.066953][ T8696] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.10632: bg 0: block 465: padding at end of block bitmap is not set [ 1336.091738][ T8334] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 1336.330297][T22847] Bluetooth: hci0: Frame reassembly failed (-84) [ 1336.463432][ T8696] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 1336.596823][ T8611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1336.608442][ T8611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1336.615410][ T8611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1336.642520][ T8611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1336.694209][ T8611] hsr_slave_0: entered promiscuous mode [ 1336.703392][ T8611] hsr_slave_1: entered promiscuous mode [ 1336.709448][ T8611] debugfs: 'hsr0' already exists in 'hsr' [ 1336.723557][ T8732] 9p: Bad value for 'wfdno' [ 1336.724187][ T8611] Cannot create hsr debugfs directory [ 1336.855738][T22852] IPVS: stop unused estimator thread 0... [ 1336.861971][ T8738] netlink: 'syz.1.10640': attribute type 4 has an invalid length. [ 1336.870829][ T8738] netlink: 'syz.1.10640': attribute type 4 has an invalid length. [ 1337.027083][T22824] Bluetooth: hci1: Frame reassembly failed (-84) [ 1337.608248][ T8611] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1337.617666][ T8611] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1337.627221][ T8611] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1337.636531][ T8611] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1337.689741][ T8611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1337.701044][ T8611] 8021q: adding VLAN 0 to HW filter on device team0 [ 1337.717935][ T8611] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1337.729484][ T8611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1337.758639][T22847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.765755][T22847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1337.786023][T22847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.793183][T22847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1337.847542][T22847] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1337.857299][T22847] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1337.871427][ T8611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1337.878895][T22847] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1337.899925][T22847] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1338.010126][ T8611] veth0_vlan: entered promiscuous mode [ 1338.018117][ T8611] veth1_vlan: entered promiscuous mode [ 1338.035127][ T8611] veth0_macvtap: entered promiscuous mode [ 1338.042571][ T8611] veth1_macvtap: entered promiscuous mode [ 1338.055186][ T8611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1338.076373][ T8611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1338.095098][T22852] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.123347][T22852] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.144532][T22852] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.153718][T22852] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.310475][ T8869] loop5: detected capacity change from 0 to 512 [ 1338.342176][ T8869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1338.370162][ T8869] ext4 filesystem being mounted at /0/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1338.424100][T29176] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1339.158442][ T8611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1339.172290][ T8927] loop1: detected capacity change from 0 to 512 [ 1339.237180][ T8932] FAULT_INJECTION: forcing a failure. [ 1339.237180][ T8932] name failslab, interval 1, probability 0, space 0, times 0 [ 1339.280591][T29176] Bluetooth: hci1: command 0x1003 tx timeout [ 1339.304202][ T8591] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1339.310523][ T8932] CPU: 0 UID: 0 PID: 8932 Comm: syz.6.10654 Tainted: G W syzkaller #0 PREEMPT(full) [ 1339.310595][ T8932] Tainted: [W]=WARN [ 1339.310601][ T8932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1339.310614][ T8932] Call Trace: [ 1339.310620][ T8932] [ 1339.310628][ T8932] __dump_stack+0x1d/0x30 [ 1339.310651][ T8932] dump_stack_lvl+0x95/0xd0 [ 1339.310719][ T8932] dump_stack+0x15/0x1b [ 1339.310746][ T8932] should_fail_ex+0x263/0x280 [ 1339.310844][ T8932] should_failslab+0x8c/0xb0 [ 1339.310865][ T8932] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1339.310888][ T8932] ? __alloc_skb+0x2d6/0x690 [ 1339.310928][ T8932] __alloc_skb+0x2d6/0x690 [ 1339.311005][ T8932] ? __alloc_skb+0x200/0x690 [ 1339.311027][ T8932] netlink_alloc_large_skb+0xbf/0xf0 [ 1339.311052][ T8932] netlink_sendmsg+0x40c/0x6f0 [ 1339.311111][ T8932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1339.311136][ T8932] ____sys_sendmsg+0x5af/0x600 [ 1339.311217][ T8932] ___sys_sendmsg+0x195/0x1e0 [ 1339.311254][ T8932] __x64_sys_sendmsg+0xd4/0x160 [ 1339.311284][ T8932] x64_sys_call+0x194c/0x3020 [ 1339.311381][ T8932] do_syscall_64+0x12c/0x370 [ 1339.311421][ T8932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.311443][ T8932] RIP: 0033:0x7f40de8cc629 [ 1339.311472][ T8932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1339.311491][ T8932] RSP: 002b:00007f40dd327028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1339.311513][ T8932] RAX: ffffffffffffffda RBX: 00007f40deb45fa0 RCX: 00007f40de8cc629 [ 1339.311527][ T8932] RDX: 0000000000004084 RSI: 0000200000000040 RDI: 0000000000000003 [ 1339.311595][ T8932] RBP: 00007f40dd327090 R08: 0000000000000000 R09: 0000000000000000 [ 1339.311609][ T8932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1339.311621][ T8932] R13: 00007f40deb46038 R14: 00007f40deb45fa0 R15: 00007fff1270eaf8 [ 1339.311642][ T8932] [ 1339.543861][ T8940] __nla_validate_parse: 12 callbacks suppressed [ 1339.543875][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10655'. [ 1339.561907][ T8901] loop4: detected capacity change from 0 to 512 [ 1339.578007][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10656'. [ 1339.590594][ T8901] EXT4-fs: Ignoring removed mblk_io_submit option [ 1339.597781][ T8940] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10655'. [ 1339.606896][ T8944] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10656'. [ 1339.619416][T22852] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.638413][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10655'. [ 1339.647632][T22852] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.679255][T22852] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.691723][ T8927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1339.713777][T22852] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.713924][ T8940] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10655'. [ 1339.744203][ T8901] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1339.767779][ T8927] ext4 filesystem being mounted at /155/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1339.812472][ T8901] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.10650: attempt to clear invalid blocks 2 len 1 [ 1339.852680][ T8965] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10660'. [ 1339.899977][ T8901] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1339.907834][ T8901] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, [ 1339.917415][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1339.917468][ C0] EXT4-fs (loop4): initial error at time 1771619594: ext4_clear_blocks:876: inode 13 [ 1339.917620][ C0] EXT4-fs (loop4): last error at time 1771619594: ext4_clear_blocks:876: inode 13 [ 1339.956737][ T8901] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1339.972062][ T8964] syzkaller0: entered promiscuous mode [ 1339.979744][ T8901] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.10650: invalid indirect mapped block 1819239214 (level 0) [ 1340.003282][ T8964] syzkaller0: entered allmulticast mode [ 1340.009149][ T8901] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1340.010704][ T8901] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.10650: invalid indirect mapped block 1819239214 (level 1) [ 1340.040955][ T8901] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1340.049251][ T8966] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1340.055961][ T8901] EXT4-fs (loop4): 1 truncate cleaned up [ 1340.101115][ T8966] batman_adv: batadv0: Adding interface: gretap1 [ 1340.108554][ T8901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1340.134671][ T8966] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1340.216051][ T8966] batman_adv: batadv0: Interface activated: gretap1 [ 1340.250996][ T8914] syz.1.10651 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1340.262185][ T8914] CPU: 1 UID: 0 PID: 8914 Comm: syz.1.10651 Tainted: G W syzkaller #0 PREEMPT(full) [ 1340.262216][ T8914] Tainted: [W]=WARN [ 1340.262224][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1340.262238][ T8914] Call Trace: [ 1340.262245][ T8914] [ 1340.262253][ T8914] __dump_stack+0x1d/0x30 [ 1340.262333][ T8914] dump_stack_lvl+0x95/0xd0 [ 1340.262402][ T8914] dump_stack+0x15/0x1b [ 1340.262490][ T8914] dump_header+0x80/0x240 [ 1340.262570][ T8914] oom_kill_process+0x295/0x350 [ 1340.262590][ T8914] out_of_memory+0x97d/0xb80 [ 1340.262616][ T8914] try_charge_memcg+0x62e/0xa10 [ 1340.262728][ T8914] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 1340.262757][ T8914] __swap_cache_prepare_and_add+0x386/0x530 [ 1340.262792][ T8914] swap_cache_alloc_folio+0xa2/0x120 [ 1340.262855][ T8914] swap_cluster_readahead+0x26e/0x3d0 [ 1340.262957][ T8914] swapin_readahead+0xde/0x840 [ 1340.262980][ T8914] ? _raw_spin_unlock+0x9/0x30 [ 1340.263001][ T8914] ? swap_put_entries_cluster+0x385/0x3a0 [ 1340.263027][ T8914] ? swap_put_entries_cluster+0xe1/0x3a0 [ 1340.263101][ T8914] ? __rcu_read_unlock+0x4e/0x70 [ 1340.263120][ T8914] ? swap_cache_get_folio+0x26f/0x280 [ 1340.263146][ T8914] do_swap_page+0x309/0x2210 [ 1340.263246][ T8914] ? css_rstat_updated+0xbb/0x280 [ 1340.263264][ T8914] ? __rcu_read_lock+0x36/0x50 [ 1340.263283][ T8914] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1340.263310][ T8914] handle_mm_fault+0xb40/0x3020 [ 1340.263368][ T8914] ? vma_start_read+0x1c7/0x2c0 [ 1340.263395][ T8914] do_user_addr_fault+0x62f/0x1050 [ 1340.263445][ T8914] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 1340.263510][ T8914] ? trace_page_fault_user+0x1f/0xe0 [ 1340.263540][ T8914] exc_page_fault+0x62/0xa0 [ 1340.263566][ T8914] asm_exc_page_fault+0x26/0x30 [ 1340.263617][ T8914] RIP: 0033:0x7f9db07077fe [ 1340.263634][ T8914] Code: 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 <59> 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 [ 1340.263653][ T8914] RSP: 002b:00007ffff09da200 EFLAGS: 00010246 [ 1340.263670][ T8914] RAX: 0000000000000000 RBX: 0000555567fc4500 RCX: 00007f9db070cece [ 1340.263682][ T8914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1340.263749][ T8914] RBP: 00007f9db09c7da0 R08: 0000000000000000 R09: 0000000000000000 [ 1340.263761][ T8914] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000013be3b [ 1340.263772][ T8914] R13: 00007f9db09c618c R14: 000000000013be09 R15: 00007f9db09c6180 [ 1340.263870][ T8914] [ 1340.263876][ T8914] memory: usage 307200kB, limit 307200kB, failcnt 1672 [ 1340.396721][ T8980] 9p: Bad value for 'wfdno' [ 1340.459995][ T1936] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.515781][ T8914] memory+swap: usage 308112kB, limit 9007199254740988kB, failcnt 0 [ 1340.591848][ T8914] kmem: usage 307000kB, limit 9007199254740988kB, failcnt 0 [ 1340.612854][ T8914] Memory cgroup stats for /syz1: [ 1340.613001][ T8914] cache 12288 [ 1340.628693][ T8914] rss 4096 [ 1340.631728][ T8914] shmem 0 [ 1340.634849][ T8914] mapped_file 0 [ 1340.652212][ T8914] dirty 0 [ 1340.655216][ T8914] writeback 0 [ 1340.665479][ T8914] workingset_refault_anon 538 [ 1340.681857][ T8914] workingset_refault_file 4904 [ 1340.691599][ T8914] swap 933888 [ 1340.694896][ T8914] swapcached 2641920 [ 1340.727193][ T8914] pgpgin 293283 [ 1340.730687][ T8914] pgpgout 293233 [ 1340.751897][ T8914] pgfault 414267 [ 1340.764964][ T8914] pgmajfault 401 [ 1340.776074][ T8914] inactive_anon 176128 [ 1340.780459][ T8914] active_anon 0 [ 1340.783972][ T8914] inactive_file 20480 [ 1340.790421][ T8914] active_file 8192 [ 1340.797702][ T8914] unevictable 0 [ 1340.814500][ T8914] hierarchical_memory_limit 314572800 [ 1340.843159][ T8914] hierarchical_memsw_limit 9223372036854771712 [ 1340.854260][ T8914] total_cache 12288 [ 1340.859310][ T8914] total_rss 4096 [ 1340.866124][ T8914] total_shmem 0 [ 1340.872243][ T9014] netlink: 'syz.6.10666': attribute type 27 has an invalid length. [ 1340.884321][ T8914] total_mapped_file 0 [ 1340.888316][ T8914] total_dirty 0 [ 1340.891851][ T8914] total_writeback 0 [ 1340.896834][ T8996] loop4: detected capacity change from 0 to 512 [ 1340.940987][ T8996] EXT4-fs: Ignoring removed mblk_io_submit option [ 1340.947476][ T8914] total_workingset_refault_anon 538 [ 1340.960728][ T8914] total_workingset_refault_file 4904 [ 1340.986329][ T8914] total_swap 933888 [ 1340.990863][ T8996] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1340.992607][ T8914] total_swapcached 2641920 [ 1341.003461][ T8914] total_pgpgin 293283 [ 1341.010194][ T8914] total_pgpgout 293233 [ 1341.015313][ T8996] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.10662: attempt to clear invalid blocks 2 len 1 [ 1341.029282][ T8996] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1341.029721][ T8914] total_pgfault 414267 [ 1341.039019][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1341.039038][ C0] EXT4-fs (loop4): initial error at time 1771619595: ext4_clear_blocks:876: inode 13 [ 1341.039061][ C0] EXT4-fs (loop4): last error at time 1771619595: ext4_clear_blocks:876: inode 13 [ 1341.058085][ T8996] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, [ 1341.059340][ T8914] total_pgmajfault 401 [ 1341.068506][ T8996] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1341.076791][ T8914] total_inactive_anon 176128 [ 1341.102112][ T8914] total_active_anon 0 [ 1341.106121][ T8914] total_inactive_file 20480 [ 1341.110784][ T8914] total_active_file 8192 [ 1341.116085][ T8914] total_unevictable 0 [ 1341.120066][ T8914] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.10651,pid=8914,uid=0 [ 1341.134850][ T8914] Memory cgroup out of memory: Killed process 8914 (syz.1.10651) total-vm:96340kB, anon-rss:1228kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 1341.166137][ T8996] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.10662: invalid indirect mapped block 1819239214 (level 0) [ 1341.180565][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10669'. [ 1341.192226][ T9035] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10669'. [ 1341.222019][ T8996] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1341.241860][ T8996] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.10662: invalid indirect mapped block 1819239214 (level 1) [ 1341.314165][ T8996] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1341.314627][ T8996] EXT4-fs (loop4): 1 truncate cleaned up [ 1341.372117][ T9044] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10672'. [ 1341.391752][ T8996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1341.525597][ T9041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.532763][ T9041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.629340][ T1936] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1341.702971][ T5665] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1341.822591][ T9053] netlink: 'syz.1.10674': attribute type 27 has an invalid length. [ 1341.831977][ T9041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1341.865791][ T9041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1342.340674][T22843] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1342.406778][T22843] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.431431][T22843] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1342.492152][T22843] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.512197][ T9069] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1342.655853][ T9069] batman_adv: batadv0: Adding interface: gretap1 [ 1342.800438][ T9074] loop1: detected capacity change from 0 to 128 [ 1342.868276][T22824] Bluetooth: hci0: Frame reassembly failed (-84) [ 1342.877317][ T9074] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1343.000248][ T9069] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1343.026005][ T9069] batman_adv: batadv0: Interface activated: gretap1 [ 1343.033007][T22843] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1343.046490][T22843] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.079195][T22843] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1343.105988][T22843] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.129829][T22843] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1343.164668][ T9093] 9p: Bad value for 'wfdno' [ 1343.172854][T22843] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1343.192405][T22843] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1343.213260][T22843] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1343.543011][T22852] Bluetooth: hci1: Frame reassembly failed (-84) [ 1343.802746][ T9104] syzkaller0: entered promiscuous mode [ 1343.810568][ T9104] syzkaller0: entered allmulticast mode [ 1343.818510][ T9088] loop5: detected capacity change from 0 to 512 [ 1343.827711][ T9088] EXT4-fs: Ignoring removed mblk_io_submit option [ 1343.844914][ T9088] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 1343.858260][ T9088] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.10692: attempt to clear invalid blocks 2 len 1 [ 1343.872031][ T9088] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1343.874270][ T9088] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, [ 1343.875397][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1343.885792][ T9088] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1343.891788][ C1] EXT4-fs (loop5): initial error at time 1771619597: ext4_clear_blocks:876: inode 13 [ 1343.891823][ C1] EXT4-fs (loop5): last error at time 1771619597: ext4_clear_blocks:876: inode 13 [ 1343.938357][ T9088] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.10692: invalid indirect mapped block 1819239214 (level 0) [ 1343.952990][ T9088] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1343.953593][ T9088] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.10692: invalid indirect mapped block 1819239214 (level 1) [ 1343.978407][ T9088] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1343.984146][ T9088] EXT4-fs (loop5): 1 truncate cleaned up [ 1344.018578][ T9088] EXT4-fs (loop5): Quota file not on filesystem root. Journaled quota will not work [ 1344.313217][ T9119] loop4: detected capacity change from 0 to 512 [ 1344.380667][ T9119] ext4 filesystem being mounted at /375/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1344.627813][ T9119] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #4: comm syz.4.10690: corrupted inode contents [ 1344.671169][ T9119] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #4: comm syz.4.10690: mark_inode_dirty error [ 1344.692997][ T9119] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #4: comm syz.4.10690: corrupted inode contents [ 1344.705346][ T9119] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #4: comm syz.4.10690: mark_inode_dirty error [ 1344.727228][ T9134] netlink: 'syz.6.10697': attribute type 27 has an invalid length. [ 1344.736857][ T9134] batman_adv: batadv0: Interface deactivated: gretap1 [ 1344.787175][ T9119] __quota_error: 2 callbacks suppressed [ 1344.787238][ T9119] Quota error (device loop4): write_blk: dquota write failed [ 1344.826529][ T9119] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 1344.859950][ T9119] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1344.921408][ T9119] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.10690: Failed to acquire dquot type 1 [ 1344.922698][ T9136] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #4: comm syz.4.10690: ES cache extent failed: add [2,1,44,0x1] conflict with existing [2,327680,576460752303423487,0x18] [ 1344.922698][ T9136] [ 1345.000037][ T9136] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #4: comm syz.4.10690: corrupted inode contents [ 1345.097172][ T8591] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1345.155570][ T9146] __nla_validate_parse: 9 callbacks suppressed [ 1345.155586][ T9146] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10701'. [ 1345.184017][ T9136] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #4: comm syz.4.10690: mark_inode_dirty error [ 1345.197768][ T9148] loop1: detected capacity change from 0 to 128 [ 1345.280141][T22678] kworker/u8:4 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_HARDWALL), order=0, oom_score_adj=0 [ 1345.315599][T22678] CPU: 1 UID: 0 PID: 22678 Comm: kworker/u8:4 Tainted: G W syzkaller #0 PREEMPT(full) [ 1345.315650][T22678] Tainted: [W]=WARN [ 1345.315657][T22678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1345.315749][T22678] Workqueue: loop4 loop_workfn [ 1345.315777][T22678] Call Trace: [ 1345.315784][T22678] [ 1345.315835][T22678] __dump_stack+0x1d/0x30 [ 1345.315860][T22678] dump_stack_lvl+0x95/0xd0 [ 1345.315883][T22678] dump_stack+0x15/0x1b [ 1345.315904][T22678] dump_header+0x80/0x240 [ 1345.315928][T22678] oom_kill_process+0x295/0x350 [ 1345.315993][T22678] out_of_memory+0x97d/0xb80 [ 1345.316012][T22678] try_charge_memcg+0x62e/0xa10 [ 1345.316046][T22678] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 1345.316073][T22678] __swap_cache_prepare_and_add+0x386/0x530 [ 1345.316162][T22678] swap_cache_alloc_folio+0xa2/0x120 [ 1345.316240][T22678] swap_cluster_readahead+0x36b/0x3d0 [ 1345.316267][T22678] shmem_swapin_folio+0x951/0x1360 [ 1345.316293][T22678] ? __rcu_read_unlock+0x4e/0x70 [ 1345.316319][T22678] ? filemap_get_entry+0x392/0x3d0 [ 1345.316345][T22678] shmem_get_folio_gfp+0x278/0xd60 [ 1345.316368][T22678] ? shmem_get_folio_gfp+0xa24/0xd60 [ 1345.316457][T22678] shmem_write_begin+0xfc/0x1f0 [ 1345.316483][T22678] generic_perform_write+0x183/0x490 [ 1345.316556][T22678] shmem_file_write_iter+0xc5/0xf0 [ 1345.316584][T22678] lo_rw_aio+0x67d/0x730 [ 1345.316613][T22678] loop_process_work+0x56c/0xac0 [ 1345.316701][T22678] ? __rcu_read_unlock+0x4e/0x70 [ 1345.316718][T22678] ? __perf_event_task_sched_in+0xa65/0xad0 [ 1345.316854][T22678] ? __list_add_valid_or_report+0x38/0xe0 [ 1345.316887][T22678] ? __perf_event_task_sched_out+0x192/0x710 [ 1345.316910][T22678] loop_workfn+0x31/0x40 [ 1345.316932][T22678] process_scheduled_works+0x4de/0x9e0 [ 1345.316963][T22678] worker_thread+0x581/0x770 [ 1345.317066][T22678] ? __pfx_worker_thread+0x10/0x10 [ 1345.317098][T22678] kthread+0x22a/0x280 [ 1345.317182][T22678] ? __pfx_kthread+0x10/0x10 [ 1345.317200][T22678] ret_from_fork+0x150/0x360 [ 1345.317230][T22678] ? __pfx_kthread+0x10/0x10 [ 1345.317329][T22678] ret_from_fork_asm+0x1a/0x30 [ 1345.317357][T22678] [ 1345.540469][T22678] memory: usage 307200kB, limit 307200kB, failcnt 7239 [ 1345.547607][T22678] memory+swap: usage 308040kB, limit 9007199254740988kB, failcnt 0 [ 1345.555736][T22678] kmem: usage 306996kB, limit 9007199254740988kB, failcnt 0 [ 1345.563108][T22678] Memory cgroup stats for /syz4: [ 1345.563411][T22678] cache 8192 [ 1345.599809][T22678] rss 4096 [ 1345.603276][T22847] kworker/u8:42: attempt to access beyond end of device [ 1345.603276][T22847] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 1345.605430][T22678] shmem 0 [ 1345.619005][T22847] kworker/u8:42: attempt to access beyond end of device [ 1345.619005][T22847] loop1: rw=1, sector=161, nr_sectors = 8 limit=128 [ 1345.619901][T29176] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1345.647214][T22678] mapped_file 0 [ 1345.652186][T22678] dirty 0 [ 1345.659190][T22678] writeback 0 [ 1345.662508][T22678] workingset_refault_anon 63652 [ 1345.667592][T22678] workingset_refault_file 12995 [ 1345.673022][T22678] swap 856064 [ 1345.703584][T22847] kworker/u8:42: attempt to access beyond end of device [ 1345.703584][T22847] loop1: rw=1, sector=177, nr_sectors = 8 limit=128 [ 1345.720431][T22678] swapcached 27389952 [ 1345.724549][T22678] pgpgin 1967623 [ 1345.728243][T22678] pgpgout 1967572 [ 1345.733250][T22678] pgfault 2066746 [ 1345.734081][ T9157] FAULT_INJECTION: forcing a failure. [ 1345.734081][ T9157] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.736952][T22678] pgmajfault 8970 [ 1345.736961][T22678] inactive_anon 4096 [ 1345.757048][T22678] active_anon 0 [ 1345.760512][T22678] inactive_file 0 [ 1345.764317][T22678] active_file 32768 [ 1345.768232][T22678] unevictable 0 [ 1345.771911][T22678] hierarchical_memory_limit 314572800 [ 1345.777429][T22678] hierarchical_memsw_limit 9223372036854771712 [ 1345.795945][T22847] kworker/u8:42: attempt to access beyond end of device [ 1345.795945][T22847] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 1345.815117][ T9157] CPU: 1 UID: 0 PID: 9157 Comm: syz.9.10706 Tainted: G W syzkaller #0 PREEMPT(full) [ 1345.815179][ T9157] Tainted: [W]=WARN [ 1345.815187][ T9157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1345.815200][ T9157] Call Trace: [ 1345.815207][ T9157] [ 1345.815216][ T9157] __dump_stack+0x1d/0x30 [ 1345.815308][ T9157] dump_stack_lvl+0x95/0xd0 [ 1345.815330][ T9157] dump_stack+0x15/0x1b [ 1345.815350][ T9157] should_fail_ex+0x263/0x280 [ 1345.815372][ T9157] should_failslab+0x8c/0xb0 [ 1345.815413][ T9157] __kmalloc_noprof+0xb8/0x4e0 [ 1345.815431][ T9157] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 1345.815514][ T9157] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 1345.815591][ T9157] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 1345.815623][ T9157] ? selinux_capable+0x31/0x40 [ 1345.815650][ T9157] ? security_capable+0x7b/0x90 [ 1345.815679][ T9157] ? ns_capable+0x7c/0xb0 [ 1345.815699][ T9157] genl_rcv_msg+0x432/0x470 [ 1345.815729][ T9157] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1345.815761][ T9157] netlink_rcv_skb+0x123/0x220 [ 1345.815816][ T9157] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1345.815851][ T9157] genl_rcv+0x28/0x40 [ 1345.815899][ T9157] netlink_unicast+0x5c0/0x690 [ 1345.815989][ T9157] netlink_sendmsg+0x5c8/0x6f0 [ 1345.816016][ T9157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1345.816059][ T9157] ____sys_sendmsg+0x5af/0x600 [ 1345.816086][ T9157] ___sys_sendmsg+0x195/0x1e0 [ 1345.816124][ T9157] __x64_sys_sendmsg+0xd4/0x160 [ 1345.816191][ T9157] x64_sys_call+0x194c/0x3020 [ 1345.816219][ T9157] do_syscall_64+0x12c/0x370 [ 1345.816249][ T9157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.816267][ T9157] RIP: 0033:0x7fec6147c629 [ 1345.816295][ T9157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1345.816333][ T9157] RSP: 002b:00007fec5fecf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1345.816428][ T9157] RAX: ffffffffffffffda RBX: 00007fec616f5fa0 RCX: 00007fec6147c629 [ 1345.816474][ T9157] RDX: 0000000010004000 RSI: 0000200000001900 RDI: 0000000000000003 [ 1345.816486][ T9157] RBP: 00007fec5fecf090 R08: 0000000000000000 R09: 0000000000000000 [ 1345.816496][ T9157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1345.816507][ T9157] R13: 00007fec616f6038 R14: 00007fec616f5fa0 R15: 00007ffee09e9188 [ 1345.816524][ T9157] [ 1345.826319][T22678] total_cache 8192 [ 1345.842644][T22847] kworker/u8:42: attempt to access beyond end of device [ 1345.842644][T22847] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 1345.849906][T22678] total_rss 4096 [ 1345.863745][T22847] kworker/u8:42: attempt to access beyond end of device [ 1345.863745][T22847] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 1345.868863][ T9161] netlink: 'syz.6.10708': attribute type 27 has an invalid length. [ 1345.883258][T22847] kworker/u8:42: attempt to access beyond end of device [ 1345.883258][T22847] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 1345.923757][T22678] total_shmem 0 [ 1345.939287][T22847] kworker/u8:42: attempt to access beyond end of device [ 1345.939287][T22847] loop1: rw=1, sector=257, nr_sectors = 8 limit=128 [ 1345.965912][ T9165] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10709'. [ 1345.969736][T22847] kworker/u8:42: attempt to access beyond end of device [ 1345.969736][T22847] loop1: rw=1, sector=273, nr_sectors = 8 limit=128 [ 1345.985093][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10710'. [ 1346.125077][T22678] total_mapped_file 0 [ 1346.151364][T22847] kworker/u8:42: attempt to access beyond end of device [ 1346.151364][T22847] loop1: rw=1, sector=289, nr_sectors = 8 limit=128 [ 1346.175197][T22678] total_dirty 0 [ 1346.178751][T22678] total_writeback 0 [ 1346.182559][T22678] total_workingset_refault_anon 63652 [ 1346.188202][T22678] total_workingset_refault_file 12995 [ 1346.193728][T22678] total_swap 856064 [ 1346.197687][T22678] total_swapcached 27389952 [ 1346.205946][ T9175] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10712'. [ 1346.211716][T22678] total_pgpgin 1967623 [ 1346.243885][T22678] total_pgpgout 1967572 [ 1346.248110][T22678] total_pgfault 2066746 [ 1346.252547][T22678] total_pgmajfault 8970 [ 1346.256751][T22678] total_inactive_anon 4096 [ 1346.266002][T22678] total_active_anon 0 [ 1346.270123][T22678] total_inactive_file 0 [ 1346.274809][T22678] total_active_file 32768 [ 1346.279138][T22678] total_unevictable 0 [ 1346.283893][ T9182] netlink: 'syz.1.10713': attribute type 4 has an invalid length. [ 1346.285586][ T9159] loop5: detected capacity change from 0 to 512 [ 1346.293555][ T9182] netlink: 'syz.1.10713': attribute type 4 has an invalid length. [ 1346.306323][T22678] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.10690,pid=9113,uid=0 [ 1346.332705][T22678] Memory cgroup out of memory: Killed process 9113 (syz.4.10690) total-vm:100576kB, anon-rss:1228kB, file-rss:26640kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 1346.491947][ T9159] usb usb8: usbfs: process 9159 (syz.5.10707) did not claim interface 0 before use [ 1346.846321][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10716'. [ 1346.920614][ T9191] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10716'. [ 1346.975967][T22843] Bluetooth: hci0: Frame reassembly failed (-84) [ 1346.993729][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10716'. [ 1346.998362][ T9136] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #4: comm syz.4.10690: corrupted inode contents [ 1347.015139][ T9136] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #4: comm syz.4.10690: mark_inode_dirty error [ 1347.027564][ T9136] Quota error (device loop4): write_blk: dquota write failed [ 1347.030098][ T9191] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10716'. [ 1347.035181][ T9136] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1347.047052][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10718'. [ 1347.053977][ T9136] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.10690: Failed to acquire dquot type 1 [ 1347.165465][ T9200] netlink: 'syz.4.10720': attribute type 27 has an invalid length. [ 1347.185607][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10722'. [ 1347.306658][ T9215] netlink: 'syz.1.10725': attribute type 4 has an invalid length. [ 1347.315246][ T9215] netlink: 'syz.1.10725': attribute type 4 has an invalid length. [ 1348.032143][ T9211] delete_channel: no stack [ 1348.170756][ T9234] lo speed is unknown, defaulting to 1000 [ 1348.428452][ T9252] netlink: 'syz.1.10738': attribute type 3 has an invalid length. [ 1348.835531][ T9272] netlink: 'syz.9.10747': attribute type 3 has an invalid length. [ 1348.852239][ T9273] €Â0: renamed from batadv_slave_1 [ 1348.853213][ T9272] netlink: 'syz.9.10747': attribute type 1 has an invalid length. [ 1348.901011][ T9272] À: port 1(vlan1) entered blocking state [ 1348.907141][ T9272] À: port 1(vlan1) entered disabled state [ 1348.913250][ T9272] vlan1: entered allmulticast mode [ 1348.918511][T29176] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1348.925538][ T9272] veth0_vlan: entered allmulticast mode [ 1348.932342][ T9272] vlan1: entered promiscuous mode [ 1349.018308][ T9281] veth1_to_bond: entered allmulticast mode [ 1349.420726][ T28] audit: type=1400 audit(1771619602.883:16962): avc: denied { name_connect } for pid=9310 comm="syz.1.10764" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1349.489238][ T28] audit: type=1400 audit(1771619602.883:16963): avc: denied { read } for pid=9310 comm="syz.1.10764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1349.540057][ T9331] netlink: 'syz.4.10768': attribute type 4 has an invalid length. [ 1349.550495][ T9331] .`: renamed from bond0 [ 1349.570429][ T9336] netlink: 'syz.6.10769': attribute type 3 has an invalid length. [ 1349.620671][ T9338] syzkaller0: entered promiscuous mode [ 1349.626347][ T9338] syzkaller0: entered allmulticast mode [ 1349.697883][ T9343] delete_channel: no stack [ 1349.933191][ T9359] netlink: 'syz.5.10778': attribute type 27 has an invalid length. [ 1349.945530][ T9359] bond0: (slave bond_slave_0): Releasing backup interface [ 1349.991224][ T9361] Ÿë: port 1(veth0_to_team) entered blocking state [ 1349.998256][ T9361] Ÿë: port 1(veth0_to_team) entered disabled state [ 1350.007971][ T9361] veth0_to_team: entered allmulticast mode [ 1350.016684][ T9361] veth0_to_team: entered promiscuous mode [ 1350.693521][ T9398] netlink: 'syz.6.10798': attribute type 1 has an invalid length. [ 1350.701464][ T9398] __nla_validate_parse: 8 callbacks suppressed [ 1350.701477][ T9398] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.10798'. [ 1350.787556][ T9404] delete_channel: no stack [ 1350.792319][ T9404] delete_channel: no stack [ 1350.860868][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10804'. [ 1350.901229][ T9415] 8021q: adding VLAN 0 to HW filter on device team0 [ 1350.909528][ T9415] bond0: (slave team0): Enslaving as an active interface with an up link [ 1350.920857][ T9415] lo: entered allmulticast mode [ 1350.926519][ T9415] lo: entered promiscuous mode [ 1350.932199][ T9415] lo: left allmulticast mode [ 1351.572274][ T9438] team0: Device ip6_vti0 is of different type [ 1351.901037][ T28] audit: type=1400 audit(1771619605.171:16964): avc: denied { setopt } for pid=9442 comm="syz.9.10812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1352.012140][ T9455] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.10817'. [ 1352.041556][ T9459] syzkaller0: entered promiscuous mode [ 1352.047288][ T9459] syzkaller0: entered allmulticast mode [ 1352.070140][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10820'. [ 1352.091641][ T9467] netlink: 132 bytes leftover after parsing attributes in process `syz.6.10819'. [ 1352.117591][ T9468] Ÿë: port 1(veth0_to_team) entered blocking state [ 1352.124573][ T9468] Ÿë: port 1(veth0_to_team) entered disabled state [ 1352.131365][ T9468] veth0_to_team: entered allmulticast mode [ 1352.138371][ T9468] veth0_to_team: entered promiscuous mode [ 1352.369436][ T9492] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.10833'. [ 1352.392724][ T9496] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10835'. [ 1352.458466][ T9506] netlink: 168 bytes leftover after parsing attributes in process `syz.9.10839'. [ 1352.549975][ T9515] netlink: 144 bytes leftover after parsing attributes in process `syz.9.10844'. [ 1352.902044][ T9531] validate_nla: 11 callbacks suppressed [ 1352.902060][ T9531] netlink: 'syz.9.10849': attribute type 3 has an invalid length. [ 1352.916894][ T9531] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.10849'. [ 1353.264117][ T9564] netlink: 'syz.9.10863': attribute type 3 has an invalid length. [ 1353.341840][ T9577] netlink: 'syz.9.10869': attribute type 10 has an invalid length. [ 1353.460902][ T9590] netlink: 'syz.9.10875': attribute type 10 has an invalid length. [ 1353.470999][ T9590] team0: Device ip6_vti0 is of different type [ 1353.508318][ T9592] syzkaller0: entered promiscuous mode [ 1353.514133][ T9592] syzkaller0: entered allmulticast mode [ 1353.646728][ T9611] sctp: [Deprecated]: syz.6.10885 (pid 9611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1353.646728][ T9611] Use struct sctp_sack_info instead [ 1354.316829][ T28] audit: type=1400 audit(1771619607.404:16965): avc: denied { read } for pid=9704 comm="syz.9.10917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1354.345250][ T9711] netlink: 'syz.6.10919': attribute type 29 has an invalid length. [ 1354.385082][ T9711] netlink: 'syz.6.10919': attribute type 29 has an invalid length. [ 1354.394176][ T9711] netlink: 'syz.6.10919': attribute type 29 has an invalid length. [ 1354.488756][ T9727] syzkaller0: entered promiscuous mode [ 1354.499098][ T9727] syzkaller0: entered allmulticast mode [ 1354.938617][ T6259] EXT4-fs unmount: 8 callbacks suppressed [ 1354.938632][ T6259] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1355.025153][ T9790] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1355.105567][ T9800] Ÿë: port 2(gretap0) entered blocking state [ 1355.112580][ T9800] Ÿë: port 2(gretap0) entered disabled state [ 1355.129277][ T9800] gretap0: entered allmulticast mode [ 1355.146827][ T9800] gretap0: entered promiscuous mode [ 1355.183508][ T9784] lo speed is unknown, defaulting to 1000 [ 1355.270552][ T9784] chnl_net:caif_netlink_parms(): no params data found [ 1355.315406][ T9815] netlink: 'syz.5.10963': attribute type 41 has an invalid length. [ 1355.348111][ T9784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.355324][ T9784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.362827][ T9784] bridge_slave_0: entered allmulticast mode [ 1355.369360][ T9784] bridge_slave_0: entered promiscuous mode [ 1355.376851][ T9784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.383987][ T9784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.391610][ T9784] bridge_slave_1: entered allmulticast mode [ 1355.398357][ T9784] bridge_slave_1: entered promiscuous mode [ 1355.418287][ T9784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1355.428895][ T9784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1355.463536][ T9784] team0: Port device team_slave_0 added [ 1355.473000][ T9784] team0: Port device team_slave_1 added [ 1355.523545][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1355.538052][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1355.565187][ T9784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1355.594366][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1355.601390][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1355.627688][ T9784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1355.642739][T22852] bridge_slave_1: left allmulticast mode [ 1355.693110][T22852] bridge_slave_1: left promiscuous mode [ 1355.708544][T22852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.725188][T22852] bridge_slave_0: left allmulticast mode [ 1355.731204][T22852] bridge_slave_0: left promiscuous mode [ 1355.737427][T22852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.747810][T22852] vlan1: left allmulticast mode [ 1355.752671][T22852] veth0_vlan: left allmulticast mode [ 1355.758500][T22852] vlan1: left promiscuous mode [ 1355.763427][T22852] À: port 1(vlan1) entered disabled state [ 1355.777314][T22852] batman_adv: batadv0: Interface deactivated: gretap1 [ 1355.816627][T22852] batman_adv: batadv0: Removing interface: gretap1 [ 1355.881865][ T9855] netlink: 'syz.5.10977': attribute type 41 has an invalid length. [ 1355.991746][ T9866] netlink: 'syz.6.10982': attribute type 10 has an invalid length. [ 1356.028805][ T9872] delete_channel: no stack [ 1356.033255][ T9872] delete_channel: no stack [ 1356.145660][T22852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1356.155912][T22852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1356.169010][T22852] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1356.180519][T22852] bond0 (unregistering): Released all slaves [ 1356.188476][T22852] bond1 (unregistering): Released all slaves [ 1356.196507][T22852] bond2 (unregistering): Released all slaves [ 1356.205201][T22852] bond3 (unregistering): Released all slaves [ 1356.213980][T22852] bond4 (unregistering): Released all slaves [ 1356.255121][ T9845] syzkaller0: entered promiscuous mode [ 1356.260984][ T9845] syzkaller0: entered allmulticast mode [ 1356.273700][ T9866] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1356.297196][T22852] tipc: Left network mode [ 1356.311702][ T9784] hsr_slave_0: entered promiscuous mode [ 1356.332965][ T9784] hsr_slave_1: entered promiscuous mode [ 1356.338929][ T9784] debugfs: 'hsr0' already exists in 'hsr' [ 1356.345038][ T9784] Cannot create hsr debugfs directory [ 1356.402234][T22852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.409926][T22852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1356.488547][T22852] team0 (unregistering): Port device team_slave_1 removed [ 1356.507476][T22852] team0 (unregistering): Port device team_slave_0 removed [ 1356.841987][ T9933] Ÿë: port 2(gretap0) entered blocking state [ 1356.848826][ T9933] Ÿë: port 2(gretap0) entered disabled state [ 1356.864697][ T9947] __nla_validate_parse: 5 callbacks suppressed [ 1356.864710][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11012'. [ 1356.866924][ T9933] gretap0: entered allmulticast mode [ 1356.900140][ T9933] gretap0: entered promiscuous mode [ 1357.005627][ T9954] syzkaller0: entered promiscuous mode [ 1357.021920][ T9954] syzkaller0: entered allmulticast mode [ 1357.128723][ T9972] syzkaller0: entered promiscuous mode [ 1357.140471][ T9972] syzkaller0: entered allmulticast mode [ 1357.178793][T22852] IPVS: stop unused estimator thread 0... [ 1357.350166][ T9784] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1357.372776][ T9784] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1357.388699][ T9784] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1357.436951][ T9784] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1357.519936][T10027] delete_channel: no stack [ 1357.606588][ T9784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1357.625314][ T9784] 8021q: adding VLAN 0 to HW filter on device team0 [ 1357.634518][T22852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.641643][T22852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1357.654897][T22824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.661976][T22824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1357.680895][T10040] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11042'. [ 1357.719881][T10040] veth1_macvtap: left promiscuous mode [ 1357.725521][T10040] veth1_macvtap: entered promiscuous mode [ 1357.740805][T10040] veth1_macvtap: entered allmulticast mode [ 1357.748720][T10040] bridge0: port 3(veth1_macvtap) entered blocking state [ 1357.762273][T10040] bridge0: port 3(veth1_macvtap) entered disabled state [ 1357.773250][T10040] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 1357.927067][ T9784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1358.133501][ T9784] veth0_vlan: entered promiscuous mode [ 1358.141320][ T9784] veth1_vlan: entered promiscuous mode [ 1358.157181][ T9784] veth0_macvtap: entered promiscuous mode [ 1358.172876][ T9784] veth1_macvtap: entered promiscuous mode [ 1358.192672][ T9784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1358.215056][ T9784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1358.237310][T22842] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.259134][T22824] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.291684][T22824] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.310701][T22824] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.943491][T10235] tun0: tun_chr_ioctl cmd 1074025675 [ 1358.951775][T10235] tun0: persist enabled [ 1358.974222][T10235] tun0: tun_chr_ioctl cmd 1074025675 [ 1358.979574][T10235] tun0: persist disabled [ 1359.090871][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11119'. [ 1359.387878][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11146'. [ 1359.680108][T10344] syzkaller0: entered promiscuous mode [ 1359.695550][T10344] syzkaller0: entered allmulticast mode [ 1359.890365][T10376] syzkaller0: entered promiscuous mode [ 1359.896200][T10376] syzkaller0: entered allmulticast mode [ 1361.755111][T10529] validate_nla: 1 callbacks suppressed [ 1361.755127][T10529] netlink: 'syz.4.11251': attribute type 2 has an invalid length. [ 1361.790627][T10529] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11251'. [ 1362.316269][T10622] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11292'. [ 1362.327875][T10622] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11292'. [ 1362.339027][T10622] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11292'. [ 1362.476364][T10640] syzkaller0: entered promiscuous mode [ 1362.483030][T10640] syzkaller0: entered allmulticast mode [ 1362.572503][T10663] sctp: [Deprecated]: syz.5.11310 (pid 10663) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1362.572503][T10663] Use struct sctp_sack_info instead [ 1362.829243][T10694] syzkaller0: entered promiscuous mode [ 1362.834966][T10694] syzkaller0: entered allmulticast mode [ 1362.864007][T10690] Ÿë: port 1(gretap0) entered blocking state [ 1362.871447][T10690] Ÿë: port 1(gretap0) entered disabled state [ 1362.880968][T10690] gretap0: entered allmulticast mode [ 1362.888170][T10690] gretap0: entered promiscuous mode [ 1362.995428][T10719] netlink: 'syz.5.11334': attribute type 8 has an invalid length. [ 1363.014594][T10719] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11334'. [ 1363.069734][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11338'. [ 1363.142777][T10742] Ÿë: port 1(gretap0) entered blocking state [ 1363.154304][T10742] Ÿë: port 1(gretap0) entered disabled state [ 1363.163503][T10742] gretap0: entered allmulticast mode [ 1363.178824][T10742] gretap0: entered promiscuous mode [ 1363.214310][T10746] syzkaller0: entered promiscuous mode [ 1363.219977][T10746] syzkaller0: entered allmulticast mode [ 1363.328861][T10758] delete_channel: no stack [ 1363.640963][T10819] netlink: 'syz.6.11380': attribute type 21 has an invalid length. [ 1363.807282][T10841] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11391'. [ 1363.829321][T10841] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11391'. [ 1363.852259][T10841] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11391'. [ 1363.926712][T10853] syzkaller0: entered promiscuous mode [ 1363.928071][T10854] delete_channel: no stack [ 1363.932303][T10853] syzkaller0: entered allmulticast mode [ 1364.053596][T10874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1364.144454][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11415'. [ 1364.158504][T10892] netlink: 763 bytes leftover after parsing attributes in process `syz.4.11416'. [ 1364.543222][ T28] audit: type=1400 audit(1771619616.834:16966): avc: denied { write } for pid=10965 comm="syz.5.11451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1364.591179][T10966] team0: Port device team_slave_0 removed [ 1364.600211][T10966] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1364.680515][T10983] netlink: 'syz.1.11453': attribute type 10 has an invalid length. [ 1364.835334][T11001] netlink: 'syz.4.11466': attribute type 27 has an invalid length. [ 1364.857214][T11001] C: renamed from team_slave_0 [ 1364.927949][ T28] audit: type=1400 audit(1771619617.194:16967): avc: denied { read } for pid=11012 comm="syz.6.11472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1365.258882][T11065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11065 comm=syz.5.11495 [ 1365.272655][T11060] delete_channel: no stack [ 1365.351163][T11079] netlink: 'syz.5.11503': attribute type 1 has an invalid length. [ 1365.361965][T11079] netlink: 'syz.5.11503': attribute type 25 has an invalid length. [ 1365.536631][T11104] syzkaller0: entered promiscuous mode [ 1365.542499][T11104] syzkaller0: entered allmulticast mode [ 1365.636819][T11115] batadv_slave_1: entered promiscuous mode [ 1365.665420][T11115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1365.887793][T11148] syzkaller0: entered promiscuous mode [ 1365.895165][T11148] syzkaller0: entered allmulticast mode [ 1369.508129][T11237] veth0_vlan: entered allmulticast mode [ 1369.515665][T11237] veth0_vlan: left promiscuous mode [ 1369.521738][T11237] veth0_vlan: entered promiscuous mode [ 1369.527308][ T28] audit: type=1400 audit(1771619621.420:16968): avc: denied { write } for pid=11236 comm="syz.1.11574" name="cgroup.subtree_control" dev="cgroup2" ino=580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1370.081208][T11275] __nla_validate_parse: 8 callbacks suppressed [ 1370.081226][T11275] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11591'. [ 1370.118983][T11275] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11591'. [ 1370.157604][T11281] delete_channel: no stack [ 1370.174803][T11287] veth0_vlan: entered allmulticast mode [ 1370.182538][T11287] veth0_vlan: left promiscuous mode [ 1370.209174][T11287] veth0_vlan: entered promiscuous mode [ 1370.209626][T11289] netlink: 'syz.5.11598': attribute type 39 has an invalid length. [ 1371.171135][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11656'. [ 1371.351078][T11438] syzkaller0: entered promiscuous mode [ 1371.356570][T11438] syzkaller0: entered allmulticast mode [ 1371.731123][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11690'. [ 1371.897894][T11520] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11701'. [ 1372.039707][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11712'. [ 1372.409778][T11605] Ÿë: port 1(gretap0) entered blocking state [ 1372.422585][T11605] Ÿë: port 1(gretap0) entered disabled state [ 1372.428902][T11605] gretap0: entered allmulticast mode [ 1372.435553][T11605] gretap0: entered promiscuous mode [ 1372.468286][T11617] netlink: 10 bytes leftover after parsing attributes in process `syz.5.11745'. [ 1372.488422][T11617] netlink: 'syz.5.11745': attribute type 11 has an invalid length. [ 1372.976427][T11705] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.11783'. [ 1372.996515][T11705] netlink: zone id is out of range [ 1373.001671][T11705] netlink: zone id is out of range [ 1373.007018][T11705] netlink: zone id is out of range [ 1373.056747][T11705] netlink: set zone limit has 8 unknown bytes [ 1373.365354][T11759] netlink: 'syz.6.11806': attribute type 10 has an invalid length. [ 1373.666265][T11815] netlink: 188 bytes leftover after parsing attributes in process `syz.1.11831'. [ 1373.676998][T11814] delete_channel: no stack [ 1373.797066][T11843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1374.229496][T11887] delete_channel: no stack [ 1374.500155][T11942] sctp: [Deprecated]: syz.1.11882 (pid 11942) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1374.500155][T11942] Use struct sctp_sack_info instead [ 1374.769036][T11960] delete_channel: no stack [ 1378.299797][T12005] netlink: 'syz.4.11911': attribute type 10 has an invalid length. [ 1378.365281][T12005] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1378.600628][T12051] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11932'. [ 1378.642980][T12051] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11932'. [ 1378.665341][T12051] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11932'. [ 1380.863280][T12281] syzkaller0: entered promiscuous mode [ 1380.875940][T12281] syzkaller0: entered allmulticast mode [ 1381.020136][T12302] netlink: 'syz.9.12043': attribute type 1 has an invalid length. [ 1381.042616][T12302] netlink: 112865 bytes leftover after parsing attributes in process `syz.9.12043'. [ 1381.173162][T12324] syzkaller0: entered promiscuous mode [ 1381.181020][T12324] syzkaller0: entered allmulticast mode [ 1381.265848][T12343] sctp: [Deprecated]: syz.4.12062 (pid 12343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1381.265848][T12343] Use struct sctp_sack_info instead [ 1381.286889][T12343] netlink: 22 bytes leftover after parsing attributes in process `syz.4.12062'. [ 1381.567558][T12389] syzkaller0: entered promiscuous mode [ 1381.574827][T12389] syzkaller0: entered allmulticast mode [ 1381.601100][T12392] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.12086'. [ 1381.616490][T12392] netlink: zone id is out of range [ 1381.621621][T12392] netlink: zone id is out of range [ 1381.627969][T12392] netlink: zone id is out of range [ 1381.641403][T12392] netlink: set zone limit has 8 unknown bytes [ 1381.871007][T12428] syzkaller0: entered promiscuous mode [ 1381.902738][T12428] syzkaller0: entered allmulticast mode [ 1382.229620][T12498] syzkaller0: entered promiscuous mode [ 1382.235172][T12498] syzkaller0: entered allmulticast mode [ 1383.127822][T12522] netlink: 'syz.9.12147': attribute type 10 has an invalid length. [ 1383.218337][T12522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1383.235843][T12522] team0: Port device bond0 added [ 1383.263466][T12523] netlink: 60 bytes leftover after parsing attributes in process `syz.9.12147'. [ 1383.287817][T12520] delete_channel: no stack [ 1383.343678][T12537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12537 comm=syz.1.12154 [ 1384.030868][T12540] lo speed is unknown, defaulting to 1000 [ 1384.094033][T12540] chnl_net:caif_netlink_parms(): no params data found [ 1384.135097][T12540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.142336][T12540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.150002][T12540] bridge_slave_0: entered allmulticast mode [ 1384.156816][T12540] bridge_slave_0: entered promiscuous mode [ 1384.163929][T12540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.171195][T12540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.178471][T12540] bridge_slave_1: entered allmulticast mode [ 1384.185366][T12540] bridge_slave_1: entered promiscuous mode [ 1384.238833][T12540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1384.259519][T12540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1384.392052][T12582] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12166'. [ 1384.407587][T12582] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12166'. [ 1384.431621][T12540] team0: Port device team_slave_0 added [ 1384.467680][T12585] syzkaller0: entered promiscuous mode [ 1384.473243][T12585] syzkaller0: entered allmulticast mode [ 1384.480762][T12540] team0: Port device team_slave_1 added [ 1384.499157][T12582] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12166'. [ 1384.526149][T12540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1384.533294][T12540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1384.559855][T12540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1384.573221][T12540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1384.580512][T12540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1384.632168][T12540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1384.689751][T12602] netlink: 'syz.1.12175': attribute type 27 has an invalid length. [ 1384.711333][T12602] veth0_vlan: left allmulticast mode [ 1384.742850][T12602] veth1_macvtap: left promiscuous mode [ 1384.742886][T12602] veth1_macvtap: left allmulticast mode [ 1384.747895][T12540] hsr_slave_0: entered promiscuous mode [ 1384.748498][T12540] hsr_slave_1: entered promiscuous mode [ 1384.748731][T12540] debugfs: 'hsr0' already exists in 'hsr' [ 1384.748742][T12540] Cannot create hsr debugfs directory [ 1384.953523][T12623] netlink: 'syz.5.12184': attribute type 4 has an invalid length. [ 1384.999641][T22684] gretap0: left allmulticast mode [ 1385.005224][T12623] netlink: 'syz.5.12184': attribute type 4 has an invalid length. [ 1385.016991][T22684] gretap0: left promiscuous mode [ 1385.033998][T22684] Ÿë: port 1(gretap0) entered disabled state [ 1385.159754][T22684] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1385.391695][T22684] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1385.426946][T22684] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1385.465317][T22684] .` (unregistering): Released all slaves [ 1385.487608][T22684] bond1 (unregistering): Released all slaves [ 1385.512145][T22684] team0: Port device bond2 removed [ 1385.523959][T22684] bond2 (unregistering): Released all slaves [ 1385.603359][T22684] tipc: Left network mode [ 1388.060753][T22684] hsr_slave_0: left promiscuous mode [ 1388.072573][T22684] hsr_slave_1: left promiscuous mode [ 1388.078157][T22684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1388.098429][T22684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1388.107079][T22684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1388.117485][T22684] veth0_vlan: left promiscuous mode [ 1388.189472][T22684] team0 (unregistering): Port device team_slave_1 removed [ 1388.199507][T22684] team0 (unregistering): Port device C removed [ 1388.473976][T12540] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1388.517143][T12540] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1388.529062][T12540] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1388.576134][T12540] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1388.631861][T22684] IPVS: stop unused estimator thread 0... [ 1388.807815][T12540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1388.841920][T12716] loop9: detected capacity change from 0 to 512 [ 1388.850283][T12540] 8021q: adding VLAN 0 to HW filter on device team0 [ 1388.878906][T22842] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.881062][T12716] EXT4-fs: Ignoring removed mblk_io_submit option [ 1388.886076][T22842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1388.909203][T22842] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.916258][T22842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1388.952929][T12716] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 1388.979315][T12716] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.12212: attempt to clear invalid blocks 2 len 1 [ 1389.000621][T12716] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1389.003817][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1389.019381][ C1] EXT4-fs (loop9): initial error at time 1771619639: ext4_clear_blocks:876: inode 13 [ 1389.028897][ C1] EXT4-fs (loop9): last error at time 1771619639: ext4_clear_blocks:876: inode 13 [ 1389.038958][T12716] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1389.057597][T12716] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.12212: invalid indirect mapped block 1819239214 (level 0) [ 1389.072810][T12716] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1389.075614][T12716] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.12212: invalid indirect mapped block 1819239214 (level 1) [ 1389.105774][T12716] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1389.108504][T12716] EXT4-fs (loop9): 1 truncate cleaned up [ 1389.133837][T12716] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1389.171655][T12716] EXT4-fs (loop9): Quota file not on filesystem root. Journaled quota will not work [ 1389.172870][T12540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1389.237661][ T9784] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1389.459869][T12819] syzkaller0: entered promiscuous mode [ 1389.465376][T12819] syzkaller0: entered allmulticast mode [ 1389.693390][T12540] veth0_vlan: entered promiscuous mode [ 1389.745073][T12540] veth1_vlan: entered promiscuous mode [ 1389.840311][T12540] veth0_macvtap: entered promiscuous mode [ 1389.873543][T12540] veth1_macvtap: entered promiscuous mode [ 1389.883972][T12540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1389.895477][T12540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1389.999732][T22684] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.017810][T22684] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.034468][T22684] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.043687][T22684] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.174868][T12847] loop1: detected capacity change from 0 to 128 [ 1390.300145][T22843] Bluetooth: hci0: Frame reassembly failed (-84) [ 1390.357550][T12847] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1390.370650][T12847] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1390.583467][T12868] netlink: 'syz.9.12250': attribute type 4 has an invalid length. [ 1390.639148][T12871] netlink: 'syz.9.12250': attribute type 4 has an invalid length. [ 1390.773977][T22678] bond0 (unregistering): Released all slaves [ 1390.793169][T22678] bond1 (unregistering): Released all slaves [ 1390.863856][T12850] syzkaller0: entered promiscuous mode [ 1390.887260][T12850] syzkaller0: entered allmulticast mode [ 1391.007497][T12872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.014728][T12872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.152964][T12872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1391.209588][T12872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1391.332445][T22678] tipc: Left network mode [ 1391.354820][T22847] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.375927][T22847] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.423075][T22847] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.451749][T22847] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.489325][T22678] hsr_slave_0: left promiscuous mode [ 1391.514214][T22678] hsr_slave_1: left promiscuous mode [ 1392.428823][ T3388] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1392.634974][ T5665] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1393.059290][T12959] loop5: detected capacity change from 0 to 128 [ 1393.066564][T22824] Bluetooth: hci0: Frame reassembly failed (-84) [ 1393.078943][T27180] IPVS: starting estimator thread 0... [ 1393.090143][T12959] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1393.103166][T12959] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1393.209008][T12961] IPVS: using max 4416 ests per chain, 220800 per kthread [ 1393.684920][T12964] syzkaller0: entered promiscuous mode [ 1393.690513][T12964] syzkaller0: entered allmulticast mode [ 1393.764335][T22678] IPVS: stop unused estimator thread 0... [ 1393.990690][T13010] syzkaller0: entered promiscuous mode [ 1394.007117][T13010] syzkaller0: entered allmulticast mode [ 1394.029083][T13018] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12310'. [ 1394.189228][T13041] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12325'. [ 1394.289104][T13060] syzkaller0: entered promiscuous mode [ 1394.298180][T13060] syzkaller0: entered allmulticast mode [ 1394.369396][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12335'. [ 1394.385861][T13064] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12335'. [ 1394.398877][T22678] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1394.408785][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12335'. [ 1394.421639][T22678] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1394.434028][T13064] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12335'. [ 1394.463221][T22678] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1394.474189][T22678] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1394.483091][T13080] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12342'. [ 1394.697699][T13104] syzkaller0: entered promiscuous mode [ 1394.703258][T13104] syzkaller0: entered allmulticast mode [ 1394.715519][T13107] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12356'. [ 1394.779032][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12358'. [ 1394.845668][T13113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12358'. [ 1395.234827][T13134] netlink: 'syz.1.12367': attribute type 4 has an invalid length. [ 1395.244193][T13134] netlink: 'syz.1.12367': attribute type 4 has an invalid length. [ 1395.289863][T29176] Bluetooth: hci0: command 0x1003 tx timeout [ 1395.333121][ T3388] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1395.421208][ T8611] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1395.487273][T13145] bond0: entered promiscuous mode [ 1395.492407][T13145] bond_slave_0: entered promiscuous mode [ 1395.498179][T13145] bond_slave_1: entered promiscuous mode [ 1395.504136][T13145] bond0: left promiscuous mode [ 1395.508936][T13145] bond_slave_0: left promiscuous mode [ 1395.514580][T13145] bond_slave_1: left promiscuous mode [ 1395.844074][T13148] syzkaller0: entered promiscuous mode [ 1395.858522][T13148] syzkaller0: entered allmulticast mode [ 1396.345916][T13178] loop1: detected capacity change from 0 to 128 [ 1396.353526][T22852] Bluetooth: hci0: Frame reassembly failed (-84) [ 1396.360430][T22852] Bluetooth: hci0: Frame reassembly failed (-84) [ 1396.619557][T13142] syz.6.12370 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1396.653050][T13197] syzkaller0: entered promiscuous mode [ 1396.665234][T13197] syzkaller0: entered allmulticast mode [ 1396.690272][T13142] CPU: 1 UID: 0 PID: 13142 Comm: syz.6.12370 Tainted: G W syzkaller #0 PREEMPT(full) [ 1396.690302][T13142] Tainted: [W]=WARN [ 1396.690309][T13142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1396.690352][T13142] Call Trace: [ 1396.690358][T13142] [ 1396.690367][T13142] __dump_stack+0x1d/0x30 [ 1396.690390][T13142] dump_stack_lvl+0x95/0xd0 [ 1396.690410][T13142] dump_stack+0x15/0x1b [ 1396.690427][T13142] dump_header+0x80/0x240 [ 1396.690446][T13142] oom_kill_process+0x295/0x350 [ 1396.690500][T13142] out_of_memory+0x97d/0xb80 [ 1396.690521][T13142] try_charge_memcg+0x62e/0xa10 [ 1396.690595][T13142] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 1396.690627][T13142] __swap_cache_prepare_and_add+0x386/0x530 [ 1396.690662][T13142] swap_cache_alloc_folio+0xa2/0x120 [ 1396.690760][T13142] swap_cluster_readahead+0x26e/0x3d0 [ 1396.690791][T13142] swapin_readahead+0xde/0x840 [ 1396.690812][T13142] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 1396.690884][T13142] ? rcu_preempt_deferred_qs_irqrestore+0x3dd/0x5c0 [ 1396.690907][T13142] ? __rcu_read_unlock+0x4e/0x70 [ 1396.690926][T13142] ? swap_cache_get_folio+0x26f/0x280 [ 1396.690982][T13142] do_swap_page+0x309/0x2210 [ 1396.691006][T13142] ? mas_state_walk+0x177/0x650 [ 1396.691033][T13142] ? __rcu_read_lock+0x36/0x50 [ 1396.691051][T13142] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1396.691092][T13142] handle_mm_fault+0xb40/0x3020 [ 1396.691125][T13142] ? vma_start_read+0x1c7/0x2c0 [ 1396.691154][T13142] do_user_addr_fault+0x62f/0x1050 [ 1396.691227][T13142] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 1396.691290][T13142] ? trace_page_fault_user+0x1f/0xe0 [ 1396.691354][T13142] exc_page_fault+0x62/0xa0 [ 1396.691419][T13142] asm_exc_page_fault+0x26/0x30 [ 1396.691441][T13142] RIP: 0033:0x7f40de79a021 [ 1396.691456][T13142] Code: ff e8 33 84 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 69 3d 7e b6 ed 00 e8 03 00 00 48 8d 1d 7f bf 3a 00 4a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f [ 1396.691475][T13142] RSP: 002b:00007fff1270ec60 EFLAGS: 00010206 [ 1396.691558][T13142] RAX: 000000000014881e RBX: 00007f40deb45fa0 RCX: 00000000001485e8 [ 1396.691570][T13142] RDX: 0000000000000236 RSI: 00007fff1270ec40 RDI: 00000000000003e8 [ 1396.691584][T13142] RBP: 00007f40deb47da0 R08: 0000000021c0fca7 R09: 7fffffffffffffff [ 1396.691597][T13142] R10: 3fffffffffffffff R11: 0000000000000246 R12: 000000000014881e [ 1396.691613][T13142] R13: 00007f40deb4609c R14: 00000000001486f2 R15: 00007f40deb46090 [ 1396.691635][T13142] [ 1396.695712][T13142] memory: usage 307200kB, limit 307200kB, failcnt 6957 [ 1396.710334][T13178] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1396.718977][T13142] memory+swap: usage 300852kB, limit 9007199254740988kB, failcnt 0 [ 1396.796465][T13178] ext4 filesystem being mounted at /541/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1396.803877][T13142] kmem: usage 161032kB, limit 9007199254740988kB, failcnt 0 [ 1396.982189][T13142] Memory cgroup stats for /syz6: [ 1396.982463][T13142] cache 4096 [ 1396.990974][T13142] rss 0 [ 1396.994089][T13142] shmem 0 [ 1396.997021][T13142] mapped_file 0 [ 1397.000495][T13142] dirty 0 [ 1397.003531][T13142] writeback 4096 [ 1397.010986][T13142] workingset_refault_anon 59351 [ 1397.016119][T13142] workingset_refault_file 10901 [ 1397.021011][T13142] swap 458752 [ 1397.024618][T13142] swapcached 61575168 [ 1397.028705][T13142] pgpgin 1793541 [ 1397.032313][T13142] pgpgout 1793535 [ 1397.055892][T13199] syzkaller0: entered promiscuous mode [ 1397.061708][T13199] syzkaller0: entered allmulticast mode [ 1397.078689][T13142] pgfault 1880062 [ 1397.082612][T13142] pgmajfault 8733 [ 1397.086318][T13142] inactive_anon 8192 [ 1397.090553][T13142] active_anon 0 [ 1397.094015][T13142] inactive_file 16384 [ 1397.098781][T13142] active_file 0 [ 1397.107459][T13142] unevictable 0 [ 1397.113824][T13142] hierarchical_memory_limit 314572800 [ 1397.119208][T13142] hierarchical_memsw_limit 9223372036854771712 [ 1397.126426][T13142] total_cache 4096 [ 1397.130485][T13142] total_rss 0 [ 1397.134003][T13142] total_shmem 0 [ 1397.137489][T22843] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1397.143012][T13142] total_mapped_file 0 [ 1397.146727][T22843] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1397.150264][T13142] total_dirty 0 [ 1397.159365][T22843] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1397.171049][T13142] total_writeback 4096 [ 1397.171058][T13142] total_workingset_refault_anon 59351 [ 1397.171066][T13142] total_workingset_refault_file 10901 [ 1397.171073][T13142] total_swap 458752 [ 1397.171080][T13142] total_swapcached 61575168 [ 1397.171087][T13142] total_pgpgin 1793544 [ 1397.171094][T13142] total_pgpgout 1793538 [ 1397.171101][T13142] total_pgfault 1880083 [ 1397.171109][T13142] total_pgmajfault 8733 [ 1397.171117][T13142] total_inactive_anon 8192 [ 1397.171199][T13142] total_active_anon 0 [ 1397.177442][T22843] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1397.186319][T13142] total_inactive_file 16384 [ 1397.232471][T13142] total_active_file 0 [ 1397.236434][T13142] total_unevictable 0 [ 1397.245685][T13142] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.12370,pid=13142,uid=0 [ 1397.260537][T13142] Memory cgroup out of memory: Killed process 13142 (syz.6.12370) total-vm:94292kB, anon-rss:1228kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 1397.437033][T13223] syzkaller0: entered promiscuous mode [ 1397.442687][T13223] syzkaller0: entered allmulticast mode [ 1397.464336][T22852] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1397.473211][T22852] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1397.482294][ T2987] ================================================================== [ 1397.490300][T22852] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1397.490359][ T2987] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 1397.505906][ T2987] [ 1397.508209][ T2987] write to 0xffffffff86c8fda8 of 8 bytes by task 13228 on cpu 1: [ 1397.515899][ T2987] data_alloc+0x310/0x390 [ 1397.520213][ T2987] prb_reserve+0x8d7/0xae0 [ 1397.524615][ T2987] vprintk_store+0x54a/0x910 [ 1397.529181][ T2987] vprintk_emit+0x1a4/0x600 [ 1397.533660][ T2987] vprintk_default+0x26/0x30 [ 1397.538240][ T2987] vprintk+0x1d/0x30 [ 1397.542124][ T2987] _printk+0x79/0xa0 [ 1397.546006][ T2987] caif_disconnect_client+0x13d/0x150 [ 1397.551355][ T2987] caif_release+0xec/0x250 [ 1397.555751][ T2987] sock_close+0x6b/0x150 [ 1397.559976][ T2987] __fput+0x29b/0x650 [ 1397.563935][ T2987] ____fput+0x1c/0x30 [ 1397.567895][ T2987] task_work_run+0x130/0x1a0 [ 1397.572464][ T2987] exit_to_user_mode_loop+0x1f4/0x6f0 [ 1397.577811][ T2987] do_syscall_64+0x249/0x370 [ 1397.582382][ T2987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.588262][ T2987] [ 1397.590569][ T2987] read to 0xffffffff86c8fda8 of 16 bytes by task 2987 on cpu 0: [ 1397.598175][ T2987] _prb_read_valid+0x1bc/0x950 [ 1397.602926][ T2987] prb_read_valid+0x3c/0x60 [ 1397.607409][ T2987] syslog_print+0x258/0x560 [ 1397.611885][ T2987] do_syslog+0x52b/0x7f0 [ 1397.616101][ T2987] __x64_sys_syslog+0x41/0x50 [ 1397.620752][ T2987] x64_sys_call+0x2b9e/0x3020 [ 1397.625408][ T2987] do_syscall_64+0x12c/0x370 [ 1397.629978][ T2987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.635846][ T2987] [ 1397.638152][ T2987] Reported by Kernel Concurrency Sanitizer on: [ 1397.644279][ T2987] CPU: 0 UID: 0 PID: 2987 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(full) [ 1397.654682][ T2987] Tainted: [W]=WARN [ 1397.658471][ T2987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1397.668504][ T2987] ================================================================== [ 1397.690512][T22852] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1398.497695][ T3388] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1398.564373][ T5665] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.