last executing test programs: 3m58.915089104s ago: executing program 1 (id=224): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0xefff, 0x4000000}, 0x0) 3m58.895125215s ago: executing program 1 (id=226): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000400)={&(0x7f0000000040)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)='H', 0x1}], 0x1, &(0x7f0000000200)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18, 0x8000000}, 0x840) sendto$inet(r1, &(0x7f0000000040)="255f5a03204f8e0b", 0xdd86, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000006a}, 0x10) 3m58.852901478s ago: executing program 1 (id=227): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbc8080055bbf882450c0028000000000006907864010102ac1414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008045}, 0x20000c90) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x100) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2, 0x0, 0xfffffffe}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000019380)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e2b, @remote}, 0x2000001}}, 0x2e) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r8, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) sendto$inet(r8, &(0x7f0000000680)="67ac2960db", 0x5, 0x841, 0x0, 0x0) syz_emit_ethernet(0xe, 0x0, 0x0) sendmmsg(r8, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='{', 0x1}], 0x1}}], 0x1, 0x4004054) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="ad21000000000000140003006e657464657673696d30000000000000080004000e04000034001680300001802c000c80"], 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x800) 3m58.751626394s ago: executing program 1 (id=229): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3800000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r1, 0x8, 0x4000, 0x4000) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="000129bd7000fddbdf25140000000e0001006e657464657673696d0000000f0002006e657424657673696d00000008000b000e00000006001100020000000800150002000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000a0004000600d805ff7f0000080015000800"/138], 0x90}, 0x1, 0x0, 0x0, 0x4004}, 0x24000040) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r3, 0x0, 0x0, 0x1000000000) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000300)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="24000000ea3ffe335d5922be28194e82723bb524b2cd1463bb13a247cb24a1e36ceb47c8fc0c59358ab00e851b31f5eb313172ca25e52de9688983037227d34bd9c0dcbed3e07f2ae47bbd27acca0aae9c0435f356651a08ae3f756c783a981a26bb8cdfda5a2c746d799b466021107a09da3ee4416e847b9bd0523c08820cabb779ff1a6ea09b8a9cf9c572bbbb4a845b3a32e087dc76a5ad8f2b7b51ff378f4c794ff0c7c3fa1875b6e00cd3a91821cb02035f2ca3a7e1daa0e774aa19082888c0e8b3f01099b623bcf94f8ffbfea4616173c01a402fe9525a71d657ffb0739f1ffb1dba2967e75a490c0c0a41cd", @ANYRES16=0x0, @ANYBLOB="000127bd7000fbdb9f250300000005000600690000000800020004000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0xc1) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0, 0x2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000008400000000000000620000000000000066182a97c873f692dea1a29342271e01c3760f1d52f5028f78b5b115efd39425fe8bc886a7b07b875276294b9b3e9767ef115180b571612ad2c99002306f129672ab9d13cdf3d89704a1ab822170be393265e0f7850463af864e2967ea4911235300bbeee85661662e8f77170777a06bb718510236e5f50880dac41fbed0b8c3eb9dcc197242501d75bc7a55"], 0x18}, 0x41) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="000000004c90020049fdf7ff030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000003f000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000400"/192]) sendmsg$inet(0xffffffffffffffff, 0x0, 0x63943ff8d48389e6) socket(0x27, 0x4, 0x3ff) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1a0) chmod(&(0x7f0000000040)='./bus\x00', 0x1ad5d7de6a77a4fd) r6 = socket(0x1, 0x2, 0x20) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, r7) write$P9_RGETATTR(r4, &(0x7f0000000340)={0xa0, 0x19, 0x1, {0x820, {0x9, 0x0, 0x7}, 0xa5, r7, 0x0, 0x4, 0xe, 0x60fc, 0x5, 0x7fffffff, 0x0, 0xffff, 0x107, 0x4, 0xf, 0x6, 0x4, 0x6, 0xe, 0x1ff}}, 0xa0) brk(0x2df) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x80100) r9 = fcntl$dupfd(r8, 0x0, r8) signalfd4(r0, &(0x7f0000000580)={[0xfffffffffffffffa]}, 0x8, 0x0) ioctl$USBDEVFS_REAPURB(r9, 0x4004550c, 0x0) 3m58.328381838s ago: executing program 1 (id=234): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd27, 0x25dfdc03, {0x2, 0x20, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1d, @local}, @RTA_SPORT={0x6, 0x1c, 0x4e22}]}, 0x2c}}, 0x4040000) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000024c0)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x38, 0x1, [@m_sample={0x34, 0xc, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "9030"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) 3m57.22835208s ago: executing program 1 (id=245): r0 = socket$inet6(0xa, 0x80002, 0x88) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000009c0)={{0x1, 0x1, 0x18}, './file0\x00'}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000440)=0x2, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000003000000000104004e200023b0"], 0x0) 3m57.22824797s ago: executing program 32 (id=245): r0 = socket$inet6(0xa, 0x80002, 0x88) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000009c0)={{0x1, 0x1, 0x18}, './file0\x00'}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000440)=0x2, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000003000000000104004e200023b0"], 0x0) 3m41.064191778s ago: executing program 2 (id=534): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080)}, 0x100a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x400001, 0xffffffffffffffff, 0x0) 3m41.000797571s ago: executing program 2 (id=535): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000000)={0x0, 0x800, 0x0, 0x10, 0xfffffffe}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0)) syz_io_uring_setup(0x7b8b, &(0x7f0000000840)={0x0, 0xb8da, 0x800, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="12042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_io_uring_setup(0x234d, &(0x7f0000000340)={0x0, 0xd839, 0x100, 0x8, 0x1b, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000200)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x23, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000300)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) capget(&(0x7f0000000000), 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r7 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x55eac547, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r9, 0x5, &(0x7f00000001c0)={0x1, 0x1, 0xe, 0xf7ffffffffff8000}) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="997425bd7000fbdbdf2515000000140001800d0001007564703a73797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 3m40.906071127s ago: executing program 2 (id=536): fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f000000a300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000009040)={0x0, 0x40, 0x4, 0x4c, 0x9, 0xb6e}, 0x14) r0 = socket$key(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000005c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000080ff00010b0000000000000a02000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000f8ff00000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3m40.801722123s ago: executing program 2 (id=537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000929010900000000000010c00028005c80100980000003c0003800c00028005000100890000002c00018014000300fe80000000000000000000000000002a14000400ff0100000000000000000000000000013c0002800c00028005000100860000002c00018014000300ff02000000000000000000000000000114000400"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r1, &(0x7f0000000040)=""/4109, 0x100d) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x200440c1) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) sendfile(r2, r3, &(0x7f0000000080)=0x385d, 0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f00000011c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat$rtc(0xffffffffffffff9c, 0x0, 0x182800, 0x0) poll(0x0, 0x0, 0x6) 3m40.760282645s ago: executing program 2 (id=538): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), 0x4) r2 = syz_open_pts(r0, 0x900) r3 = dup3(r2, r0, 0x80000) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0xfe, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x4, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r5) read(r3, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r3, &(0x7f0000002d40)=""/4104, 0x1008) 3m40.464385462s ago: executing program 2 (id=542): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@mblk_io_submit}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x5}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x204, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000329bd7008fbdbdf250500000008000500010000000800050003000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000882}, 0x8000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000580)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fddbdf25210000001c002d8008000200030000000500040010000000050001000700000008000300", @ANYRES32=r9, @ANYBLOB="bf89d1147c17b7cb7988d2259430701d1812e9514618e0908bd3c4cf55e8fe8e3a78479200c72a86351765e1269d624cf2bee65708c46f252d6b36db4c81b424963c846d49139ac5e68aaacdb9f4a75c49d32c8b001abf4119f275b684f84d127e89ea7cc845bfcf8122694ee45579ba27ddc7f9d737a677f1d404376eaed1432ee2597b5ffa79854a67936e55d53a57a5903ede92547be18a9a1c22cc49351d2474613799c8e4c645885b2179d7c0117debe07f07fd131546293cd1"], 0x38}, 0x1, 0x0, 0x0, 0x40885}, 0x4040090) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x44, r1, 0x800, 0xfffffffc, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0xfe}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x44}, 0x4, 0x700000000000000, 0x0, 0x20084090}, 0x4000) 3m40.407181855s ago: executing program 33 (id=542): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@mblk_io_submit}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x5}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x204, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000329bd7008fbdbdf250500000008000500010000000800050003000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000882}, 0x8000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000580)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fddbdf25210000001c002d8008000200030000000500040010000000050001000700000008000300", @ANYRES32=r9, @ANYBLOB="bf89d1147c17b7cb7988d2259430701d1812e9514618e0908bd3c4cf55e8fe8e3a78479200c72a86351765e1269d624cf2bee65708c46f252d6b36db4c81b424963c846d49139ac5e68aaacdb9f4a75c49d32c8b001abf4119f275b684f84d127e89ea7cc845bfcf8122694ee45579ba27ddc7f9d737a677f1d404376eaed1432ee2597b5ffa79854a67936e55d53a57a5903ede92547be18a9a1c22cc49351d2474613799c8e4c645885b2179d7c0117debe07f07fd131546293cd1"], 0x38}, 0x1, 0x0, 0x0, 0x40885}, 0x4040090) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x44, r1, 0x800, 0xfffffffc, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0xfe}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x44}, 0x4, 0x700000000000000, 0x0, 0x20084090}, 0x4000) 38.835339795s ago: executing program 4 (id=3216): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x6b12, 0x1, 0xffff, 0x78e, 0x83, "203c5e0000ff765e000080fffffffffffffff2", 0x8, 0x5}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) r1 = syz_open_procfs(0x0, &(0x7f0000001240)='net/igmp6\x00') preadv(r1, &(0x7f0000001180), 0x0, 0x163, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$poke(0x4212, r2, &(0x7f0000000140), 0x200000000001) (async) ptrace$peekuser(0x3, r2, 0x6) (async) perf_event_open(0x0, r2, 0xe, r1, 0x2) r3 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000001440)={'syz', 0x1}, &(0x7f0000001480)={0x0, 0x0, @b}, 0x48, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000001500)='dns_resolver\x00', &(0x7f0000001540)) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6c0000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="973c010e002120000008000500", @ANYRES32=r6, @ANYBLOB="4400128009000100766c616e00000000340002800600010001000000280004800c000100f7ffffff090000000c00010006000000060000000c0001000600000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x8000002) (async) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000000380)={{0x1, 0x100, 0xd92, 0xd, 0x1, 0xf7}, 0x34b, [0x3f1, 0x6e, 0x4, 0x100, 0x44, 0x7, 0x58, 0x5, 0x1, 0xfb, 0x3, 0xfffffffe, 0x5, 0x7, 0x5, 0x1, 0xf, 0x7, 0x4, 0xf02f, 0xb07, 0x3, 0x6ad, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x6, 0xd65, 0x2, 0x2, 0x5, 0xfd, 0x6, 0x2, 0x1, 0xf260, 0x9, 0x9, 0x3, 0x3, 0xfffffffb, 0x8, 0xfffffff3, 0x5492, 0x6, 0x19b, 0x413c, 0x7f, 0x5, 0xfffffff7, 0x4, 0x7fff, 0x9eba440, 0x5, 0x0, 0xfffffffb, 0x8, 0x1ff, 0xa, 0xe, 0x40, 0x9, 0x4f8, 0x6, 0x0, 0x7, 0x9, 0x1, 0xfffffffc, 0x20000000, 0x10000, 0x10001, 0x0, 0x4, 0x8, 0x9, 0xb, 0x5, 0xc3, 0x4, 0x3, 0xc, 0xc189, 0x1, 0x9, 0x0, 0x4ea8, 0x9, 0x200, 0x4, 0x4, 0x1, 0x5, 0x4, 0x9, 0x7, 0x9, 0x4, 0x7fff, 0x1, 0x81, 0x7f, 0x3, 0x28, 0x2, 0x80, 0x476e, 0x3, 0x2, 0x6, 0x5, 0x6, 0x1ff, 0xfffffffd, 0x8, 0x7, 0x1000000, 0x400, 0x2, 0xb, 0xf5a6, 0x3, 0x3, 0x1, 0x80, 0x800, 0x9, 0x10, 0x9, 0xe6f, 0x4, 0x45344a54, 0x4, 0x7fffffff, 0x7a938b16, 0x6, 0x9, 0x1, 0x6, 0x3ff, 0xfffffffa, 0x4, 0x5, 0x6, 0x7, 0x81, 0x0, 0x8, 0x5671, 0x7, 0x1, 0x5, 0x800, 0xfc9, 0x7, 0x101, 0x0, 0x4ce732aa, 0x1, 0x1c0, 0x0, 0x0, 0x1, 0xf36, 0x6, 0x6a48f57b, 0xfd43, 0x7f, 0x10000, 0x1, 0x1, 0x9d20, 0x3, 0x7f, 0x1, 0xd, 0x0, 0x7, 0x101, 0xc, 0x9d22, 0x8, 0x2, 0x4800, 0x81, 0x5, 0x9, 0x9, 0x9, 0x1, 0x6, 0x1000, 0x2, 0x2, 0x4, 0x4, 0x6, 0x3, 0x5, 0xa, 0x5, 0x5bb1, 0x0, 0x3, 0xc4, 0x7f, 0x0, 0x0, 0x4, 0x7, 0x10, 0x4, 0x0, 0x8, 0x1, 0xffffffff, 0x5, 0xfffffc00, 0x2, 0x8, 0x6, 0xe8f, 0xd5, 0x200, 0x7, 0x9, 0x4, 0x1, 0x9b61, 0x1, 0x2, 0x6, 0x1, 0x1ff2, 0x8, 0x8, 0x5, 0x3, 0x10001, 0x3, 0x400, 0x80, 0x3, 0xfff, 0x6, 0xfffffff8, 0x5, 0x6, 0xfffffff7, 0xf, 0xffff, 0xf, 0x4, 0x401, 0x1000, 0x1, 0x1000, 0x10001, 0x1f, 0x2, 0xa3d, 0x1, 0x1000, 0x6, 0x0, 0x101, 0xfffffffe, 0x7fffffff, 0x8, 0x6, 0x3, 0x3, 0x1, 0xfa0, 0x2, 0x3, 0x0, 0xd5, 0xbaa, 0x780a, 0x2, 0x4, 0x6, 0x60, 0x0, 0x5, 0x3, 0x6, 0x1, 0x5, 0xfffffff9, 0x1, 0x80000001, 0x74, 0x7f, 0x0, 0x9, 0x10, 0x1ff, 0x1, 0x3, 0xd, 0x9d2d, 0x8, 0x1, 0x0, 0x7, 0x0, 0x8, 0x5, 0x4, 0x5, 0x7, 0x101, 0x2, 0x3, 0x1, 0x6, 0x9, 0x18ab, 0x2000, 0x800, 0x10000, 0x5, 0x10, 0x5, 0x400, 0x9, 0x5, 0x17, 0x0, 0xfffffffa, 0x7, 0x4, 0x5, 0x961, 0x2, 0x100, 0x6, 0x8, 0x4, 0x5, 0x6eb0, 0x8, 0x0, 0x80000001, 0xa, 0x5, 0x9, 0x8, 0x8, 0xe, 0x2, 0x14bba880, 0x1, 0xf, 0x9, 0x80000000, 0xffffffff, 0x7, 0x3, 0x8, 0x5, 0x7ff, 0x4, 0x6, 0x2ff, 0x0, 0x3, 0x4, 0x9, 0x6, 0x3, 0xac87, 0x5a, 0x400, 0xb, 0x6, 0x3, 0x6, 0x2, 0x1000, 0xff, 0x7, 0x2, 0x12d, 0xc, 0x4, 0x7, 0x9, 0x401, 0x9, 0x4, 0x8, 0x6, 0x3, 0x8, 0x5, 0x8, 0x3, 0x7cf, 0x2, 0xd, 0x3, 0x7, 0x401, 0xfffff800, 0x5, 0x9, 0x5, 0x8, 0x6, 0x9, 0x5, 0xfffffffe, 0x7fffffff, 0x7641, 0xc, 0x8, 0xb0d3, 0x7, 0x2, 0x7, 0x5, 0x6, 0x8bd, 0x42, 0x80, 0xe0a0, 0xb9, 0x80, 0xc, 0x6, 0x6c8, 0x9, 0x0, 0x0, 0x6, 0x1a, 0xffff7fc6, 0xff, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x80, 0xfffffffb, 0x1, 0x6, 0x0, 0x9, 0x1, 0x3ff, 0x200, 0x3, 0x40, 0x6e4, 0x7, 0x3f79, 0x0, 0x1, 0x3, 0xfffffff1, 0x7fff, 0x1, 0x1, 0x2, 0xf5, 0xfa4, 0x4f, 0x7, 0xa, 0xe, 0xfe, 0xf, 0x4, 0x0, 0x6, 0x0, 0xff, 0x4, 0xffff0000, 0x4863, 0x7, 0x4, 0x1, 0xff, 0x1, 0x1, 0x0, 0x70, 0x85, 0x0, 0x3, 0x3, 0x5, 0x8, 0xe, 0x4, 0x9, 0x4, 0x0, 0x4, 0xf, 0x3, 0x4, 0x2, 0x9, 0x200, 0x5, 0xafb8, 0x8, 0x6, 0x0, 0x0, 0x0, 0x80000000, 0x2, 0x7ff, 0x800, 0x1, 0x7, 0x7, 0x9, 0x4, 0xfa, 0xfff, 0x6, 0x5, 0x1, 0xffffffff, 0x9, 0x3, 0x6, 0xff, 0xffffff75, 0x1, 0x18e0, 0x10, 0x3, 0x4, 0xd, 0xfffffe00, 0x2, 0xfba45fa5, 0x4, 0x401, 0x6, 0x5, 0x2, 0x7ff, 0x6, 0x80, 0x9, 0x1, 0x80000000, 0x9424, 0x7, 0x7a, 0x22c, 0xfffffff7, 0x9, 0xd, 0xc1, 0x2, 0x3, 0xc, 0x8, 0x8, 0x7fff, 0x80, 0x5, 0x5, 0x800, 0x7, 0x4, 0x0, 0x236, 0x4, 0x81, 0x6, 0x2, 0xc7, 0xcbc8, 0x7, 0x7, 0x6, 0x400, 0x9, 0x10000, 0x2, 0xfffff001, 0x1000, 0x2, 0x1, 0x101, 0xffffffff, 0x9, 0x7, 0x7, 0x81, 0x5, 0xfff, 0x8, 0x7fffffff, 0xfffffff5, 0xfffffff7, 0x7ff, 0x2, 0x8b, 0xfffffff8, 0x6, 0x6, 0x401, 0x2, 0x8ce, 0x5, 0x6, 0x1, 0x6, 0x7c, 0x401, 0x9, 0x3, 0x7fffffff, 0xd, 0x1, 0x8, 0xffffffff, 0x1, 0x40, 0x8, 0x1000, 0x6, 0xf85, 0x0, 0x4, 0xad5, 0xd13, 0x80000000, 0x528, 0x2, 0x0, 0x2, 0x7, 0x7, 0x400, 0x7ff, 0xfffffff8, 0x81, 0x7ff, 0x4, 0x8, 0x1, 0x5, 0xfffffe00, 0x1ff, 0x9, 0xb, 0x7, 0x7, 0x8, 0x0, 0x6, 0x72, 0x3, 0x2, 0x200, 0xac, 0x401, 0x1ff, 0xbe09, 0x4, 0x3, 0x100, 0x2266, 0x9, 0x9, 0x9, 0x100, 0x318, 0x8, 0x6, 0x3, 0x6, 0x3, 0xfff, 0x0, 0x2, 0x18a2, 0xfff, 0x8, 0x1ff, 0x9, 0x5, 0xfffffffa, 0x2, 0x3000000, 0x8, 0xf, 0x6f5, 0x5, 0x5, 0x9, 0x8, 0xffff0001, 0x1ff, 0x1, 0x53, 0x2, 0x8, 0x0, 0x3, 0xfffffff9, 0xd, 0x1, 0x8, 0xac6c, 0x5c784d1e, 0x2, 0x6, 0x0, 0x79, 0x1000, 0x55c8, 0x6, 0x9, 0x401, 0x5, 0x2, 0x4, 0xc, 0x1, 0x0, 0x6, 0xfffffff9, 0x9, 0x84db, 0x9, 0x8, 0x4, 0x7a, 0x4, 0xe00000, 0x1, 0xffffffff, 0x200, 0x6aa8, 0x7, 0x5, 0x8, 0x5, 0x46, 0x10, 0x5, 0x3640, 0xf97, 0xccb, 0x4, 0x2, 0xfffffff9, 0x2, 0x1, 0x80000001, 0x8, 0x80, 0x3, 0x93, 0x2, 0x48f, 0x8000000, 0x400, 0x4d3, 0x10, 0x2, 0xfff, 0x6, 0x7, 0x7, 0x7ff, 0x6, 0xb, 0xf607, 0x2f94, 0x3, 0x59744c08, 0x23e, 0x5, 0x4, 0x8f7, 0x7, 0x8001, 0x4, 0xfffffffd, 0x2, 0x3, 0x4, 0x2, 0x101, 0x6, 0x80000001, 0x7, 0x281, 0x5, 0x10000, 0x7, 0x8, 0xff, 0x5, 0x7, 0x0, 0x8, 0x2c8, 0x5, 0x401, 0x400, 0x6, 0x5, 0x7, 0xe9, 0x10000, 0x5, 0x11, 0x100, 0x10001, 0x101, 0x5, 0x5, 0x81, 0x8, 0x9, 0x2c99, 0x6, 0x64fd, 0xfffffc7f, 0x9, 0x1a67a0, 0x7c0, 0xfff, 0x5, 0x0, 0x8, 0x8, 0x9762, 0x2, 0x2, 0x6, 0x9, 0x7f, 0x8, 0xffffff95, 0x4, 0x6, 0x3, 0x9be, 0x5, 0xdc6, 0xb0, 0x1, 0x7, 0x10001, 0xc, 0x9, 0x4, 0xfffffffa, 0x7, 0x4, 0xa9, 0x2, 0x7fffffff, 0xfffffff8, 0x9, 0x4, 0x7, 0x40, 0xe, 0x1, 0x9, 0x9, 0xfffffffd, 0x3, 0x400, 0x2, 0x3, 0x5b57, 0x5e78, 0x304d, 0x2, 0x3, 0x3, 0x6, 0x5, 0x0, 0x8, 0x800, 0x7ff, 0x6, 0x6, 0x7f, 0xc8c, 0x2, 0x4, 0x8, 0x8, 0x2, 0x6072, 0x6, 0x8, 0xc07, 0x6, 0x741d, 0x3, 0x5, 0xc, 0x80000001, 0x7, 0x6, 0x1, 0x8000, 0x5, 0x9, 0x401, 0x3, 0x2, 0x8000, 0x1, 0x9b, 0xfffffff8, 0x4, 0x8, 0xf4, 0x2, 0x7, 0x2, 0x80000000, 0x1, 0x10, 0x0, 0xe25, 0x4, 0xe366, 0x0, 0x4, 0xa, 0x6, 0x6, 0x0, 0xc, 0x2ce4, 0xb, 0x8, 0xffffffff, 0x800, 0x9, 0xffffffff, 0x2, 0xf, 0x6, 0x775, 0x1, 0xa3, 0x4, 0xbcd, 0x0, 0xc, 0x0, 0xfeb, 0xfff, 0xfffffffa, 0xc, 0xfffffff8, 0xfffffffc, 0x4, 0xffffffff, 0x8, 0x200, 0x7, 0x9, 0x4, 0xd, 0xc, 0x401, 0x5, 0x200, 0x80000001, 0xb49a, 0x7, 0x6, 0x40, 0x61e, 0xffff7963, 0x8, 0x7ff, 0x40, 0x0, 0x81, 0x101, 0x4, 0x10, 0xd, 0x5, 0x7fffffff, 0xfffffffa, 0x10000, 0x80000000, 0x6, 0x10, 0x8, 0x7, 0x1, 0x30, 0xe38, 0xe, 0xffff0000, 0xc, 0x77, 0x4, 0x10001, 0x7]}) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001580)) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00400000000000001f00000000000000d12c8c36f6874cf4e7a177d86341074c91eb85bc950f019ad14e9a59a4d85f3d545f44fb33d9bf854385", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000000b02080000000000000000030010000000000000fdc23600040800034000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000006000000000000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000009500000000000000cd0a0100000000002500000001000480180000000200048000000000f4ffffffae90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x61}, 0x94) 38.834491525s ago: executing program 4 (id=3217): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@orlov}, {@noauto_da_alloc}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) fallocate(r1, 0x8, 0x0, 0x10000) fallocate(r0, 0x10, 0x7, 0x10001) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10004, 0x0, 0x5, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = gettid() tkill(r3, 0x12) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x236a692e909ee4ff}, 0x24040814) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000008000000dd0100000000000063010400000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000800)='net\x00') lseek(r5, 0x8000, 0x0) getdents64(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006bc833a5426b68dca33303c0236e004a2205bcf7221203f8894932ccfe4647bccc5eaf90671582", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r6}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%-010d \x00'}, 0x20) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) tkill(r3, 0x14) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) socket$can_raw(0x1d, 0x3, 0x1) 38.489756315s ago: executing program 4 (id=3220): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1, 0x5412, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc12082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc0208"], 0xfdef) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfdef) 38.401312029s ago: executing program 4 (id=3223): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x30d0006, &(0x7f0000000080)={[{@usrjquota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x200000, &(0x7f0000000080)={[{@fat=@errors_continue}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x32}}, {@fat=@flush}]}, 0x1, 0x29e, &(0x7f0000000680)="$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") setresuid(0xee01, 0x0, 0x0) setreuid(0xee01, 0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r2, 0x0) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb) syz_clone3(&(0x7f00000003c0)={0x101040000, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000400), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a60c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc86", 0xc1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r1, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x3}}, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r5 = open(&(0x7f0000000140)='./file1\x00', 0x141240, 0x40) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8000c61) fallocate(r5, 0x8, 0x0, 0x10000) write$binfmt_misc(r4, &(0x7f0000001600)="cdc7", 0x2) 37.994953103s ago: executing program 4 (id=3228): unshare(0x6020400) io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xcb44, 0x2, 0x2, 0x26d}) eventfd2(0xff, 0x80800) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = memfd_create(&(0x7f00000001c0)='\xd9\x16h\xde\xf3|m\xe9^\xf5\"@\x05\xa0\x8f\xaa\x86nwZ\x11**F\xdf\xac\xc6(\x8e>\xbe0\xf1f\xb1\x87\x86!\x9c\xe1\xd2X\x18\xaaO', 0x7) lseek(r2, 0x10001, 0x1) socket$rxrpc(0x21, 0x2, 0xa) socket$xdp(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0xd9a, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000200)='9', 0x1, 0x20008080, 0x0, 0x0) recvfrom(r4, &(0x7f0000000000)=""/44, 0x2c, 0x0, 0x0, 0x0) 37.701094959s ago: executing program 4 (id=3230): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}}, 0xf0}}, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @loopback={0xff00000000000000}, 0x4}}, {{0xa, 0x4e00, 0xa3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000cc0)=ANY=[@ANYBLOB="03000000000000000a004e2300000049ff0000000000000000000000000000010800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x590) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) perf_event_open(&(0x7f0000001d00)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0x6344, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0xfffffffffffff800, 0x8}, 0x120, 0x0, 0x33f8, 0x1, 0x8, 0xd, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r3, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x86, "3c588c126a16f07e4a45fa7641395dddbd80de78aa10556905b23a51a23fcfafce0f5a6374e6f887f5916238e9f1b4ec8e1e63b1d7604fe9cd4d55a3f92184194ef7d4b04df79b9e2edfcc14bc33ff3166b35c6dfe410bb132c302839f6cb31af007c0a91536ba52cd0cf17a6465a3aa9cf93300ae4eb58def1b63741c80401e2a880df26024"}, &(0x7f00000000c0)=0x8e) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r4, 0x1}, &(0x7f0000000300)=0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fd56ffff000000000400000085000000360000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff7fffb702000008000000b703000002000000850000001700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r6, @ANYRES16=r1, @ANYBLOB="7eefba5b513d51bca86e91de2f7edf12309b3b1b52a721b1962cf358e64d35e47bda232b09bf642ffd8ccca99dc623d8d5cd1ba9b9452fae0647aa2ce4b27800682425dd82b818b92c965f36833b0bb1148763b9a9bdb2e1ec9fe7d951aed353457fbced2aa005dbc204e4a7bf2ad7415976d2f7", @ANYRESOCT=r5, @ANYRESDEC=r6, @ANYRESDEC=r6, @ANYRESHEX=r5, @ANYRESOCT=r2, @ANYRES64=0x0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x3f165070c53cb00b, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000080)='securityfs\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)={0x140, 0x14, 0x200, 0x70bd25, 0x25dfdbfd, {0x25}, [@INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "b844a0cf9acbcf8bb5f25c7d13895ede70990725e322a12209a856c579d5eebb29c1d292d939f0a0430733b6e78b0241e2c51a6c2a27da776a9ffac993193e79d3b1095a7b39d5948bba6d47daeff7dd64e88b684023f29102a07d6a3ba7a383da0859b5a6b05a6f7fbafe0d54c84a35ee2be312d8ff85bb387556697a09a624e886e8cd5a2dbc5c"}, @INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "fd742131386c3a90a3cc12e859b48dd87d294c43e35c8e8568c4c9ee0567caf38102c0cbcd07b2e0b16ecdfd04288f1112a560129de7eddf3bf44c3daaa8fcfd5b66f541582597c91ce8e6b7c28f42522cb925230862c9aed157d1913eb45389ebc33c503b5c625efa739e46499661ab80bc5043bc722eb16f336f9fae0385a2586371ce98465bd325403aac315e64a853642f1411292b11dc3234cf"}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 37.700647159s ago: executing program 34 (id=3230): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}}, 0xf0}}, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @loopback={0xff00000000000000}, 0x4}}, {{0xa, 0x4e00, 0xa3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000cc0)=ANY=[@ANYBLOB="03000000000000000a004e2300000049ff0000000000000000000000000000010800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x590) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) perf_event_open(&(0x7f0000001d00)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0x6344, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0xfffffffffffff800, 0x8}, 0x120, 0x0, 0x33f8, 0x1, 0x8, 0xd, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r3, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x86, "3c588c126a16f07e4a45fa7641395dddbd80de78aa10556905b23a51a23fcfafce0f5a6374e6f887f5916238e9f1b4ec8e1e63b1d7604fe9cd4d55a3f92184194ef7d4b04df79b9e2edfcc14bc33ff3166b35c6dfe410bb132c302839f6cb31af007c0a91536ba52cd0cf17a6465a3aa9cf93300ae4eb58def1b63741c80401e2a880df26024"}, &(0x7f00000000c0)=0x8e) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r4, 0x1}, &(0x7f0000000300)=0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fd56ffff000000000400000085000000360000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff7fffb702000008000000b703000002000000850000001700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r6, @ANYRES16=r1, @ANYBLOB="7eefba5b513d51bca86e91de2f7edf12309b3b1b52a721b1962cf358e64d35e47bda232b09bf642ffd8ccca99dc623d8d5cd1ba9b9452fae0647aa2ce4b27800682425dd82b818b92c965f36833b0bb1148763b9a9bdb2e1ec9fe7d951aed353457fbced2aa005dbc204e4a7bf2ad7415976d2f7", @ANYRESOCT=r5, @ANYRESDEC=r6, @ANYRESDEC=r6, @ANYRESHEX=r5, @ANYRESOCT=r2, @ANYRES64=0x0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x3f165070c53cb00b, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000080)='securityfs\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)={0x140, 0x14, 0x200, 0x70bd25, 0x25dfdbfd, {0x25}, [@INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "b844a0cf9acbcf8bb5f25c7d13895ede70990725e322a12209a856c579d5eebb29c1d292d939f0a0430733b6e78b0241e2c51a6c2a27da776a9ffac993193e79d3b1095a7b39d5948bba6d47daeff7dd64e88b684023f29102a07d6a3ba7a383da0859b5a6b05a6f7fbafe0d54c84a35ee2be312d8ff85bb387556697a09a624e886e8cd5a2dbc5c"}, @INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "fd742131386c3a90a3cc12e859b48dd87d294c43e35c8e8568c4c9ee0567caf38102c0cbcd07b2e0b16ecdfd04288f1112a560129de7eddf3bf44c3daaa8fcfd5b66f541582597c91ce8e6b7c28f42522cb925230862c9aed157d1913eb45389ebc33c503b5c625efa739e46499661ab80bc5043bc722eb16f336f9fae0385a2586371ce98465bd325403aac315e64a853642f1411292b11dc3234cf"}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 20.78388664s ago: executing program 5 (id=3534): syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x20ec25, 0x400, 0x0, 0x3d6}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) eventfd2(0xd8df, 0x1) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000380), &(0x7f0000000580)=r3}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0) 20.731032333s ago: executing program 5 (id=3536): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x6220, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) r2 = eventfd(0xc2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) flock(r6, 0x2) dup3(r6, r5, 0x0) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r8 = syz_open_pts(r7, 0x900) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) r9 = dup3(r8, r7, 0x80000) read(r9, &(0x7f00000000c0)=""/226, 0xe2) 19.960005807s ago: executing program 5 (id=3567): syz_emit_ethernet(0x2a, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3800000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x2904c, 0x3fffffffffffd49, 0x10003, '\x00', [{0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x3f000000, 0x4}]}) 19.687874342s ago: executing program 5 (id=3582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_skbmod={0x30, 0x21, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0xf2ff0000, 0x20000010}, 0x20000000) 19.404328458s ago: executing program 5 (id=3590): setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x12) r0 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e25, 0x3, 'lblcr\x00', 0x35, 0xa7e, 0x6c}, 0x2c) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 19.354453541s ago: executing program 5 (id=3593): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x4041}, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000100)) (async) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000100)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000102f50000000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000030c000280040001"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000080)) r5 = pidfd_getfd(r3, r3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40106614, &(0x7f00000001c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x0) mount$9p_unix(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)) (async) mount$9p_unix(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0xd020, 0x1) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) ioctl$HIDIOCGDEVINFO(r5, 0x801c4803, &(0x7f0000000240)=""/126) 7.133856335s ago: executing program 7 (id=3875): sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4004080) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000008, 0x8013, 0xffffffffffffffff, 0xf6690000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000640)) r1 = timerfd_create(0x2, 0x80000) clock_gettime(0x0, &(0x7f0000000140)) timerfd_settime(r1, 0x3, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f00000000c0)) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) 7.083189048s ago: executing program 7 (id=3877): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0), 0xff, 0x255, &(0x7f00000017c0)="$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") ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x5437, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, r0, 0x0, 0x500000000000000}) 6.939872056s ago: executing program 7 (id=3881): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f", 0xc6}, {&(0x7f0000000840)="68c49733e7fc239c5205551d83bfe8526589b01bd6ca9ae6d1c223cb1e934108ac2e01240a5013afdb5d756e6caa21d4d66b6992c261fe0614d4ec93f9d4d90ee52ff911a3dc1cce40d0faa54514696b34d5cac3d099f2b8096e0833cecd015470115068b7ffeef8efc88e4568c8e44aeeeec31a76c9756f906dd33e3c389b1bd7086bf3d6ea484817d65b3032798cd07ab3a4ac456e6e6aa4539cbfabbeceb62884e98729aacfb76a395a98a599ad1b113efa6905cff8e52e90286bf9b9ddadb2dc6178e809b6150b874c28d08371db05b763", 0xd3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dba", 0x4}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.059909436s ago: executing program 7 (id=3899): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200100001800010027bd7000fcdbdf2564010101000000000000000000000000000000000000000000000000000000004e2200034e240081020080005c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc010000000000000000000000000001000004d4ff000000fe8000000000000000000000000000bb02000000000000000c000000000000000700000000000000fffeffffffffffff0100000000000000000000000000000003000000000000000400000000000000080000000000000004000000000000000800000000000000030000000000000002000000000000016dffffff25bd7000073500000a000005040000000000000005000000000000001c0004edfdff4e214e200000640101020000000000000000000000000c0015"], 0x120}, 0x1, 0x0, 0x0, 0x20040000}, 0x40014) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@nodioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000980)="f871", 0x2}], 0x1, 0xa, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x143041, 0x102) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="fd", 0x1}], 0x1, 0xe7b, 0x6, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e23, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff6}}}, 0x38) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a3, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x1c, &(0x7f0000000880)=[@in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={r10, 0x9, 0x2, 0x2, 0xa971, 0xd26}, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = semget(0x0, 0x1, 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000008000b0000ebffffff00000a001d010600024060020000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4001) semctl$SETALL(r11, 0x0, 0x11, &(0x7f0000000000)=[0xd5bd, 0x1ff]) 5.828530899s ago: executing program 7 (id=3904): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3184, &(0x7f0000000080)={0x0, 0x5e18, 0x400, 0x1, 0x111}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000004740)=""/4096, 0x1000}], 0x0, 0x1000004f}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_OP={0x8}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/798], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff96}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r3, 0x4) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a80016000400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 5.386474104s ago: executing program 7 (id=3912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.327905468s ago: executing program 35 (id=3912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.306011515s ago: executing program 36 (id=3593): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x4041}, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000100)) (async) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000100)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000102f50000000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000030c000280040001"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000080)) r5 = pidfd_getfd(r3, r3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40106614, &(0x7f00000001c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x0) mount$9p_unix(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)) (async) mount$9p_unix(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0xd020, 0x1) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) ioctl$HIDIOCGDEVINFO(r5, 0x801c4803, &(0x7f0000000240)=""/126) 1.488408165s ago: executing program 0 (id=3962): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0xb000000, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.206568711s ago: executing program 0 (id=3965): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) epoll_create1(0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$packet(0x11, 0x2, 0x300) socket(0x28, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002dc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x5}, 0x50) socket(0x28, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000000000ffef000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.142644565s ago: executing program 3 (id=3966): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0xde0b0000) 1.05023774s ago: executing program 3 (id=3967): r0 = socket$inet6(0xa, 0x80002, 0x88) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc12082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc0208"], 0xfdef) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[], 0xfdef) 860.318391ms ago: executing program 0 (id=3970): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x3, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe, 0x9}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x18, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x24048051) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xffff}, {0x5, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) writev(r0, &(0x7f0000000780)=[{&(0x7f0000001440)="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", 0x1ab}], 0x1) r1 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x12000, 0x80, 0x20}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x700, 0x20, 0xf3, 0x100, {{0xa, 0x4, 0x2, 0x4, 0x28, 0x65, 0x0, 0x5, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @rr={0x7, 0x7, 0x30, [@multicast2]}, @lsrr={0x83, 0x7, 0xc8, [@multicast2]}]}}}}}) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@bridge_dellink={0x30, 0x11, 0x2, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x147, 0x10400}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000680)={[{@hide}, {@dmode={'dmode', 0x3d, 0x9}}, {@session={'session', 0x3d, 0x23}}, {@utf8}, {@map_acorn}, {@check_strict}, {@mode={'mode', 0x3d, 0xc9}}, {@cruft}, {@map_off}, {@check_strict}, {@overriderock}, {@block={'block', 0x3d, 0x200}}, {@cruft}, {@nocompress}, {@cruft}, {@session={'session', 0x3d, 0x2e}}, {@gid}, {@sbsector={'sbsector', 0x3d, 0x3}}]}, 0x1, 0xa2f, &(0x7f00000018c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close_range(r0, r0, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 744.260027ms ago: executing program 0 (id=3971): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), 0x0, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec97000f982c00fe8000000000000000000000000000aaff020000000000000000000fc000000189"], 0xfce) 636.552254ms ago: executing program 6 (id=3974): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) (async) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0xec0}, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @sack_perm], 0x20000000000000a1) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000900000008000600", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES64=r4], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0xfc}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x90}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4008000) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0xfc}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x90}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4008000) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 623.901835ms ago: executing program 0 (id=3975): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x3}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000001f40)=""/4089, 0x28, 0xff9, 0x9, 0x614fc9df}, 0x28) r1 = syz_io_uring_setup(0x760d, &(0x7f0000000300)={0x0, 0xaee2, 0x1000, 0x3, 0x39e}, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) 526.08338ms ago: executing program 6 (id=3976): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f", 0xc6}, {&(0x7f0000000840)="68c49733e7fc239c5205551d83bfe8526589b01bd6ca9ae6d1c223cb1e934108ac2e01240a5013afdb5d756e6caa21d4d66b6992c261fe0614d4ec93f9d4d90ee52ff911a3dc1cce40d0faa54514696b34d5cac3d099f2b8096e0833cecd015470115068b7ffeef8efc88e4568c8e44aeeeec31a76c9756f906dd33e3c389b1bd7086bf3d6ea484817d65b3032798cd07ab3a4ac456e6e6aa4539cbfabbeceb62884e98729aacfb76a395a98a599ad1b113efa6905cff8e52e90286bf9b9ddadb2dc6178e809b6150b874c28d08371db05b763", 0xd3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dba", 0x4}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/freeze_filesystems', 0x101, 0x11) write$tcp_mem(r1, &(0x7f00000000c0)={0xfffffffffffff1a6, 0x20, 0x0, 0x20, 0xfffffffffffffffd}, 0x48) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) r3 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r4, 0x2, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r3, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r3}]) r5 = socket(0xa, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x20, 0x0, @rand_addr=' \x01\x00', 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) sendmsg$inet_sctp(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x5, 0x401, 0x5, 0x3, 0x9, 0xa, 0x8, 0x2, r7}}], 0x30, 0x8000}, 0x4000004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={r7, 0x30, &(0x7f0000000280)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000440)=0x10) r8 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x2c}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r8, r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000080000a01040000000000000000010080000900010073797a30000000002c000000030a07150000000000000000010000000900010073797a300000000009ff7f00000000000000000068000000060a010400000000000000000100000008000b4000000000400004803c00010065787468647200002c000280080001400000000c08000340000000000800044000000022050002000000000008000640000000020900010073797a3000000000140000001100010000000000000000000700000a"], 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x800) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) 464.063693ms ago: executing program 6 (id=3977): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sync() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x400}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000009440)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000140)='f', 0x1}], 0x1, &(0x7f0000000100), 0x0, 0x40}}], 0x1, 0x4) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$isdn(0x22, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd26, 0x8000007, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x1, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x8, 0x7fffffff, 0xfffb, 0x5, 0x3, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x557, 0x7, 0xf956}, {{0x3, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) socketpair(0x25, 0x1, 0x7, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000200), &(0x7f0000000300)=r1}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r7, &(0x7f0000000180)=""/46, 0x2e) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0), 0x408000, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000100000072c92014812c75184c00000000000000"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000030000000000000006000000180100002020782500f2a300002020207b1af8ff00120000bfa100000000000007010000f8ffffffb702000008000000b7038c0d2cd7000003000000850000000600000018110000", @ANYRES64=r8, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000085100000fdffffff95000000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x500b, 0x1000, &(0x7f0000001300)=""/4096, 0x40f00, 0x3, '\x00', r6, 0x1c, r7, 0x8, &(0x7f0000000480)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x10, 0xd7cf, 0x40}, 0x10, 0x2d3f, r1, 0x1, &(0x7f0000000680)=[r8, 0x1, 0xffffffffffffffff, r9, r5], &(0x7f0000000780)=[{0x5, 0x1, 0x5, 0x7}], 0x10, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0d00000002000000040000000000000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000800000000000000000000000000000000000000006b0d5caa116432907de94fd578e79427517775745bc93bfaa1cb88e98c44941557c165e68db738a4f778eca005889a48602a132d38c120143bf6bb71d98eddffd2d63ae05dac14d60be92034998d7041e4e73d6f7a27ebba24bbdc6f7fb633fc516a18280f054dac3ea4b015a76e04e550cb4ec127d2857b9d440ecc04000000f764782bcacf46b2b044049e5188febe47068aace2065f18b6aa555857830c9c2d7bbd9a83ae72aa36ce8607e219f784196f633addeee50451a9b967c7ad261269b0"], 0x50) r10 = syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) ioctl$EVIOCSMASK(r10, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r13, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010700000000000000000b0000000e0001006e657464f1657673696d0000000f0002006e657474657673696d3000"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000006a00d9e400000000000000ffa600001d0000000008000e00000004"], 0x28}, 0x1, 0x0, 0x0, 0x4009050}, 0x4) 365.000679ms ago: executing program 8 (id=3914): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x5, 0x13, @mcast1, @private2, 0x80, 0x40, 0xffffffff, 0xdc63}}) 261.023325ms ago: executing program 8 (id=3978): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x24, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @generic={0xd, 0xc, 0x8, 0x8, 0x80}, @tail_call, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @alu={0x4, 0x0, 0x1, 0xb, 0x7, 0xffffffffffffffe0, 0xfffffffffffffff0}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000340)='GPL\x00', 0x9, 0xe6, &(0x7f00000005c0)=""/230, 0x41100, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xc, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000700)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x3, 0x3, 0x1, 0x7}, {0x3, 0x2, 0x7, 0xc}, {0x5, 0x1, 0xc, 0x6}, {0x2, 0x1, 0x3, 0x6}, {0x2, 0x3, 0x2, 0x1}, {0x1, 0x1, 0x4, 0x5}, {0x2, 0x4, 0x10, 0x7}, {0x1, 0x1, 0x3, 0xc}, {0x4, 0x1, 0xb, 0x5}], 0x10, 0x2}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) openat$vcs(0xffffffffffffff9c, &(0x7f0000000bc0), 0x8201, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0908000000000055090100c60000009500000000000000b7020000001200007b2af0ff00000000d609080008200000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000001502010076000000bf9800000000000056080000020000008500001d07000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 260.721265ms ago: executing program 0 (id=3979): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000000ffffffff00000000000000000000000000000004000000000a006080", @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000002640)={0x3, 0xa5b1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000ffffffffffffff8000fc00000000000000000000000000000000000000000000000a003000", @ANYBLOB], 0xb8}}, 0x4000) 241.032646ms ago: executing program 9 (id=3926): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010005000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ffffff0500030080ff000018000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 213.606128ms ago: executing program 6 (id=3980): socket(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100001a, 0x12, r0, 0x8000000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0x0, 0x0}, 0x10) 168.53594ms ago: executing program 9 (id=3981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206010100000000000000000000000514000780050015000900000008000640000001250500010006000000050005000a00000005000400020000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x12) r1 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 168.288801ms ago: executing program 8 (id=3982): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff95"], &(0x7f0000000080)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x40f00}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r1, 0x201, 0x3ffffd, 0x800000, {{}, {0x0, 0x400b}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x69, 0x0, 0xfe}, {0x6}]}) pipe2$9p(&(0x7f0000000000), 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 165.84002ms ago: executing program 3 (id=3983): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000008", @ANYRES32=0x1, @ANYBLOB="00000036000000000000ce000000000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000001"], 0x48) 162.269721ms ago: executing program 9 (id=3984): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000300)={@random="35330a9c025e", @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x6, 0x5c, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0x1, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "ce45e131fd03581edea8c0817e240bf7ba66c19c98f01b2e", "2a7ca503d28965bbaaac866581cac1ecad52da35e17ec94fc68a4b6ef5816fcb"}}}}}}, 0x0) r1 = socket(0xa, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x917f, 0x4}}, './file0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_getnetconf={0x3c, 0x52, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x200}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x83}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x80}, @NETCONFA_FORWARDING={0x8, 0x2, 0xd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x2400805c) setgid(0xee00) keyctl$session_to_parent(0x12) r5 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x4, 0x8, 0x1, 0x20, 0x0, 0x101, 0x42040, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3ff, 0x2, @perf_config_ext={0x595d, 0x5}, 0x4140, 0x1, 0x3, 0x3, 0x200, 0x8, 0x3412, 0x0, 0xffff}, 0x0, 0xb, r4, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0xc0) r6 = syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket(0x1d, 0x2, 0x6) ppoll(&(0x7f0000000140)=[{r7, 0x180}], 0x1, 0x0, 0x0, 0x0) fstat(r6, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'hsr0\x00', 0x2}, 0x18) 159.485351ms ago: executing program 8 (id=3985): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket(0x10, 0x3, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async, rerun: 64) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) (async, rerun: 32) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) (async) r5 = fcntl$dupfd(r1, 0x0, r1) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x24004080) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000780)={0x190, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbb4b}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x800}, 0x4000011) (async) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 113.939563ms ago: executing program 6 (id=3986): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc12082c00db5b686158"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc0208"], 0xfdef) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0xfdef) 113.675304ms ago: executing program 3 (id=3987): perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x2600, 0x0, 0x0, 0x4, 0x400001, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 113.352103ms ago: executing program 8 (id=3988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000085400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077673200000000000000000000000000140001"], 0xa8}}, 0x0) 98.354814ms ago: executing program 9 (id=3989): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x8}, @TCA_PIE_BYTEMODE={0x8}]}}]}, 0x40}}, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x620, &(0x7f0000000a00)="$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") 36.356698ms ago: executing program 8 (id=3990): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a300000f4180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 36.040948ms ago: executing program 3 (id=3991): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000001488000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) 2.61823ms ago: executing program 3 (id=3992): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x9}, 0x50) 0s ago: executing program 6 (id=3993): r0 = socket$inet6(0xa, 0x80002, 0x88) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc12082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc0208"], 0xfdef) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfdef) kernel console output (not intermixed with test programs): 00000. [ 252.933737][T13044] team0: Port device team_slave_0 added [ 252.973254][T13044] team0: Port device team_slave_1 added [ 253.023620][T13044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.030661][T13044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.056737][T13044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.085581][T13177] loop4: detected capacity change from 0 to 1024 [ 253.094622][T13044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.101670][T13044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.127827][T13044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.166503][T13182] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3224'. [ 253.175797][T13177] loop4: detected capacity change from 0 to 512 [ 253.221619][T13189] loop5: detected capacity change from 0 to 512 [ 253.231689][T13189] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 253.261253][T13044] hsr_slave_0: entered promiscuous mode [ 253.267756][T13044] hsr_slave_1: entered promiscuous mode [ 253.280182][T13189] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.3226: Allocating blocks 41-42 which overlap fs metadata [ 253.294281][T13044] debugfs: 'hsr0' already exists in 'hsr' [ 253.300137][T13044] Cannot create hsr debugfs directory [ 253.306102][T13189] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.3226: Allocating blocks 41-42 which overlap fs metadata [ 253.350599][T13189] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.3226: Failed to acquire dquot type 1 [ 253.378193][T13189] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 253.408639][T13189] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.3226: corrupted inode contents [ 253.434343][T13189] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.3226: mark_inode_dirty error [ 253.448040][T13189] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.3226: corrupted inode contents [ 253.464839][T11361] FAT-fs (loop4): error, invalid access to FAT (entry 0x000000c8) [ 253.473569][T13189] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.3226: mark_inode_dirty error [ 253.498673][T13189] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.3226: corrupted inode contents [ 253.519659][T13189] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 253.543438][T13189] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.3226: corrupted inode contents [ 253.558203][T13189] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.3226: mark_inode_dirty error [ 253.570287][T13189] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 253.580307][T13189] EXT4-fs (loop5): 1 truncate cleaned up [ 253.586494][T13189] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.615131][ T4265] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.690058][T13044] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 253.724638][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.738510][T13044] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 253.760618][T13044] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 253.771021][T13044] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 253.800498][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.837432][T13225] loop6: detected capacity change from 0 to 512 [ 253.876914][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.887563][T13235] loop5: detected capacity change from 0 to 1024 [ 253.932676][T13235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 253.933707][T13044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.946480][T13225] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3233: couldn't read orphan inode 26 (err -116) [ 253.964505][T13044] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.990363][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.004515][T13235] ext4 filesystem being mounted at /600/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.023978][T13225] EXT4-fs (loop6): Remounting filesystem read-only [ 254.032239][T13225] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.045944][ T2291] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.053090][ T2291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.063840][T13235] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.3234: lblock 0 mapped to illegal pblock 0 (length 1) [ 254.079988][T13235] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 254.092413][T13235] EXT4-fs (loop5): This should not happen!! Data will be lost [ 254.092413][T13235] [ 254.107562][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.114724][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.123409][T13225] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.142227][T13256] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.3234: lblock 0 mapped to illegal pblock 0 (length 1) [ 254.177661][T13256] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.3234: lblock 3 mapped to illegal pblock 3 (length 1) [ 254.209348][T13256] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 254.221157][T13235] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.3234: lblock 0 mapped to illegal pblock 0 (length 1) [ 254.222063][T13256] EXT4-fs (loop5): This should not happen!! Data will be lost [ 254.222063][T13256] [ 254.258176][ T52] bridge_slave_1: left allmulticast mode [ 254.263875][ T52] bridge_slave_1: left promiscuous mode [ 254.269692][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.279156][T13235] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.3234: lblock 0 mapped to illegal pblock 0 (length 1) [ 254.293335][ T52] bridge_slave_0: left allmulticast mode [ 254.299101][ T52] bridge_slave_0: left promiscuous mode [ 254.304849][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.314348][T13235] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.3234: lblock 0 mapped to illegal pblock 0 (length 1) [ 254.335348][T13235] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.3234: lblock 0 mapped to illegal pblock 0 (length 1) [ 254.349080][T13235] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.3234: lblock 3 mapped to illegal pblock 3 (length 1) [ 254.364022][T13235] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.3234: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 254.451116][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.461706][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.471961][ T52] bond0 (unregistering): Released all slaves [ 254.494831][T13234] lo speed is unknown, defaulting to 1000 [ 254.529732][ T4265] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 254.560356][T13044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.615633][T13291] tipc: Enabled bearer , priority 10 [ 254.648617][ T3519] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 254.654781][T13145] Bluetooth: hci0: command 0x1003 tx timeout [ 254.726122][T13044] veth0_vlan: entered promiscuous mode [ 254.758360][ T52] hsr_slave_0: left promiscuous mode [ 254.765371][T13306] xt_TCPMSS: Only works on TCP SYN packets [ 254.771668][ T52] hsr_slave_1: left promiscuous mode [ 254.780461][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.788003][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.805563][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.813205][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.838367][ T52] veth1_macvtap: left promiscuous mode [ 254.844001][ T52] veth0_macvtap: left promiscuous mode [ 254.849851][ T52] veth1_vlan: left promiscuous mode [ 254.855211][ T52] veth0_vlan: left promiscuous mode [ 254.936325][ T52] team0 (unregistering): Port device team_slave_1 removed [ 254.946551][ T52] team0 (unregistering): Port device team_slave_0 removed [ 254.968048][ T3396] usb 8-1: device descriptor read/8, error -110 [ 254.995399][T13044] veth1_vlan: entered promiscuous mode [ 255.038921][T13044] veth0_macvtap: entered promiscuous mode [ 255.054888][T13234] chnl_net:caif_netlink_parms(): no params data found [ 255.074521][T13044] veth1_macvtap: entered promiscuous mode [ 255.078461][ T3396] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 255.107920][ T3396] usb 8-1: enqueue for inactive port 0 [ 255.120405][ T3396] usb 8-1: enqueue for inactive port 0 [ 255.126555][ T3396] usb 8-1: enqueue for inactive port 0 [ 255.166290][T13234] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.173527][T13234] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.181091][T13234] bridge_slave_0: entered allmulticast mode [ 255.187931][T13234] bridge_slave_0: entered promiscuous mode [ 255.196635][T13044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.204676][T13234] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.212421][T13234] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.222112][T13234] bridge_slave_1: entered allmulticast mode [ 255.233010][T13234] bridge_slave_1: entered promiscuous mode [ 255.247018][T13044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.273038][T13234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.299167][T13342] x_tables: duplicate underflow at hook 1 [ 255.313697][ T2291] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.326626][T13234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.354400][ T2291] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.370265][ T2291] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.385476][T13234] team0: Port device team_slave_0 added [ 255.391743][ T2291] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.409398][T13234] team0: Port device team_slave_1 added [ 255.422055][ T10] kernel write not supported for file [eventfd] (pid: 10 comm: kworker/0:1) [ 255.445880][T13234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.452968][T13234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.478981][T13234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.492801][T13234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.499838][T13234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.526113][T13234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.651767][T13234] hsr_slave_0: entered promiscuous mode [ 255.665221][T13234] hsr_slave_1: entered promiscuous mode [ 255.679151][T13234] debugfs: 'hsr0' already exists in 'hsr' [ 255.685103][T13234] Cannot create hsr debugfs directory [ 255.789594][T13384] loop5: detected capacity change from 0 to 128 [ 255.847234][T13234] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 255.856408][T13234] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 255.866176][T13234] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 255.875999][T13234] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 255.913255][T13234] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.920403][T13234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.927779][T13234] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.934974][T13234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.997025][T13400] netlink: 'syz.5.3251': attribute type 1 has an invalid length. [ 256.037010][ T7536] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.046186][ T7536] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.083276][T13234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.097322][T13234] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.115994][ T7536] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.123225][ T7536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.148193][ T3396] usb usb8-port1: attempt power cycle [ 256.161343][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.168471][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.201518][T13421] sctp: [Deprecated]: syz.0.3256 (pid 13421) Use of int in maxseg socket option. [ 256.201518][T13421] Use struct sctp_assoc_value instead [ 256.218014][ T23] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 256.238373][T13234] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 256.248882][T13234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.318010][T13421] __nla_validate_parse: 3 callbacks suppressed [ 256.318030][T13421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3256'. [ 256.360462][T13429] loop5: detected capacity change from 0 to 512 [ 256.422143][T13429] ext4: Bad value for 'auto_da_alloc' [ 256.643320][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 256.643382][ T29] audit: type=1400 audit(2000000184.215:4059): avc: denied { read } for pid=13436 comm="syz.3.3258" path="socket:[46187]" dev="sockfs" ino=46187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 256.699583][T13439] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3259'. [ 256.844283][T13234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.872589][T13440] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3258'. [ 256.889903][T13440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.999900][T13456] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 257.046159][T13466] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.3264'. [ 257.062710][T13466] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 257.077485][T13466] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3264'. [ 257.169185][ T1035] kernel write not supported for file [eventfd] (pid: 1035 comm: kworker/1:2) [ 257.182746][T13234] veth0_vlan: entered promiscuous mode [ 257.209950][T13234] veth1_vlan: entered promiscuous mode [ 257.246097][T13234] veth0_macvtap: entered promiscuous mode [ 257.256149][T13491] loop5: detected capacity change from 0 to 512 [ 257.270079][T13234] veth1_macvtap: entered promiscuous mode [ 257.290332][T13491] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 257.304111][T13234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.313686][T13234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.342804][ T37] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.372837][ T37] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.399167][ T2291] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.419907][ T2291] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.615712][T13516] loop7: detected capacity change from 0 to 1024 [ 257.650645][T13516] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 257.681503][T13516] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.721398][T13516] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm syz.7.3276: lblock 0 mapped to illegal pblock 0 (length 1) [ 257.761650][T13516] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 257.774017][T13516] EXT4-fs (loop7): This should not happen!! Data will be lost [ 257.774017][T13516] [ 257.785797][T13516] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3276: lblock 0 mapped to illegal pblock 0 (length 1) [ 257.808147][T13516] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.3276: lblock 3 mapped to illegal pblock 3 (length 1) [ 257.842644][ T5230] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.851556][T13525] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3276: lblock 0 mapped to illegal pblock 0 (length 1) [ 257.885945][T13525] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3276: lblock 0 mapped to illegal pblock 0 (length 1) [ 257.895822][T13516] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 257.911777][T13516] EXT4-fs (loop7): This should not happen!! Data will be lost [ 257.911777][T13516] [ 257.927066][T13525] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3276: lblock 0 mapped to illegal pblock 0 (length 1) [ 257.946899][T13525] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3276: lblock 0 mapped to illegal pblock 0 (length 1) [ 257.966918][T13525] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.3276: lblock 3 mapped to illegal pblock 3 (length 1) [ 257.993417][T13525] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.3276: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 258.036804][T13516] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3276: lblock 0 mapped to illegal pblock 0 (length 1) [ 258.056261][T13540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3280'. [ 258.065351][T13540] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3280'. [ 258.074483][T13540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3280'. [ 258.094448][T13520] lo speed is unknown, defaulting to 1000 [ 258.115988][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3276'. [ 258.125021][T13542] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3276'. [ 258.155323][ T1035] IPVS: starting estimator thread 0... [ 258.184060][T13234] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 258.247797][T13546] IPVS: using max 2208 ests per chain, 110400 per kthread [ 258.306160][T13520] chnl_net:caif_netlink_parms(): no params data found [ 258.330038][ T31] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.350053][ T3409] kernel write not supported for file [eventfd] (pid: 3409 comm: kworker/0:4) [ 258.410384][ T31] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.453086][ T31] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.498886][T13520] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.506057][T13520] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.518966][T13520] bridge_slave_0: entered allmulticast mode [ 258.525838][T13520] bridge_slave_0: entered promiscuous mode [ 258.539372][ T31] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.551951][T13520] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.559167][T13520] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.566835][T13520] bridge_slave_1: entered allmulticast mode [ 258.595819][T13520] bridge_slave_1: entered promiscuous mode [ 258.659271][T13520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.687431][ T31] bridge_slave_1: left allmulticast mode [ 258.693182][ T31] bridge_slave_1: left promiscuous mode [ 258.699110][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.708568][ T31] bridge_slave_0: left allmulticast mode [ 258.714299][ T31] bridge_slave_0: left promiscuous mode [ 258.720154][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.737816][ T3396] usb usb8-port1: unable to enumerate USB device [ 258.748427][ T31] tipc: Resetting bearer [ 258.828425][ T31] tipc: Disabling bearer [ 258.910072][T13596] loop7: detected capacity change from 0 to 16384 [ 258.938758][T13596] loop7: detected capacity change from 16384 to 16380 [ 258.961364][ T31] bond1 (unregistering): Released all slaves [ 258.981268][ T31] bond2 (unregistering): Released all slaves [ 258.995756][ T31] bond0 (unregistering): Released all slaves [ 259.006120][ T31] bond3 (unregistering): Released all slaves [ 259.016211][T13520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.064575][ T31] tipc: Disabling bearer [ 259.071663][ T31] tipc: Left network mode [ 259.095494][T13520] team0: Port device team_slave_0 added [ 259.125366][T13520] team0: Port device team_slave_1 added [ 259.162634][ T7536] Bluetooth: hci0: Frame reassembly failed (-84) [ 259.189733][ T31] hsr_slave_0: left promiscuous mode [ 259.199066][ T31] hsr_slave_1: left promiscuous mode [ 259.209226][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.216661][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.235715][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.243279][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.267896][ T31] veth1_macvtap: left promiscuous mode [ 259.277644][ T31] veth0_macvtap: left promiscuous mode [ 259.288035][ T31] veth1_vlan: left promiscuous mode [ 259.296605][ T31] veth0_vlan: left promiscuous mode [ 259.434163][T13520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.441229][T13520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.467206][T13520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.479963][T13520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.486990][T13520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.513088][T13520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.565727][T13520] hsr_slave_0: entered promiscuous mode [ 259.572130][T13520] hsr_slave_1: entered promiscuous mode [ 259.624492][T13636] loop6: detected capacity change from 0 to 164 [ 259.649099][T13520] debugfs: 'hsr0' already exists in 'hsr' [ 259.654913][T13520] Cannot create hsr debugfs directory [ 259.778614][ T31] IPVS: stop unused estimator thread 0... [ 260.089663][ T29] audit: type=1400 audit(2000000000.900:4060): avc: denied { read } for pid=13676 comm="syz.7.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 260.148186][T13520] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 260.157271][T13520] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 260.191943][T13520] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 260.204096][T13520] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 260.382163][T13520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.419196][T13520] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.439589][ T7536] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.446729][ T7536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.472106][ T7536] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.479308][ T7536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.585260][T13520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.775648][T13760] loop6: detected capacity change from 0 to 512 [ 260.798633][T13760] EXT4-fs: Ignoring removed mblk_io_submit option [ 260.805579][T13520] veth0_vlan: entered promiscuous mode [ 260.831476][T13760] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 260.839611][T13760] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002] [ 260.849973][T13520] veth1_vlan: entered promiscuous mode [ 260.882229][T13770] tipc: MTU too low for tipc bearer [ 260.892959][T13520] veth0_macvtap: entered promiscuous mode [ 260.914003][T13520] veth1_macvtap: entered promiscuous mode [ 260.930174][T13760] System zones: 0-1, 15-15, 18-18, 34-34 [ 260.936028][T13760] EXT4-fs (loop6): orphan cleanup on readonly fs [ 260.950001][T13779] loop7: detected capacity change from 0 to 128 [ 260.958377][T13520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.975483][T13520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.995689][T13779] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 261.009193][T13779] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 261.009921][T13760] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.3324: bg 0: block 15: invalid block bitmap [ 261.026403][T13779] EXT4-fs (loop7): shut down requested (0) [ 261.042321][T13760] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 261.042736][ T7536] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.057022][T13760] EXT4-fs (loop6): 1 truncate cleaned up [ 261.060959][ T7536] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.076273][T13760] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 261.086631][ T7536] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.105073][ T7536] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.120325][T13234] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 261.166753][T13788] loop7: detected capacity change from 0 to 256 [ 261.176204][T13788] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 261.176243][ T5230] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.200523][T13788] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 261.208281][ T3519] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 261.240455][ T23] IPVS: starting estimator thread 0... [ 261.263856][T13791] loop5: detected capacity change from 0 to 8192 [ 261.337522][T13793] IPVS: using max 2160 ests per chain, 108000 per kthread [ 261.369184][ T29] audit: type=1400 audit(2000000002.190:4061): avc: denied { accept } for pid=13797 comm="syz.6.3331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 261.425800][T13811] netlink: 'syz.5.3333': attribute type 1 has an invalid length. [ 261.434657][T13810] __nla_validate_parse: 8 callbacks suppressed [ 261.434676][T13810] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3335'. [ 261.462351][ T29] audit: type=1400 audit(2000000002.250:4062): avc: denied { mounton } for pid=13809 comm="syz.5.3333" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 261.475970][T13813] loop5: detected capacity change from 0 to 1024 [ 261.515604][T13813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 261.533594][T13813] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.547192][T13813] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.3336: lblock 0 mapped to illegal pblock 0 (length 1) [ 261.561025][T13813] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 261.573641][T13813] EXT4-fs (loop5): This should not happen!! Data will be lost [ 261.573641][T13813] [ 261.585502][T13813] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.3336: lblock 0 mapped to illegal pblock 0 (length 1) [ 261.599254][T13813] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.3336: lblock 3 mapped to illegal pblock 3 (length 1) [ 261.615314][T13813] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 261.627730][T13813] EXT4-fs (loop5): This should not happen!! Data will be lost [ 261.627730][T13813] [ 261.641780][T13820] can: request_module (can-proto-0) failed. [ 261.649897][T13813] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.3336: lblock 0 mapped to illegal pblock 0 (length 1) [ 261.663691][T13813] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.3336: lblock 0 mapped to illegal pblock 0 (length 1) [ 261.680917][T13813] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.3336: lblock 0 mapped to illegal pblock 0 (length 1) [ 261.708264][T13826] netlink: 'syz.3.3340': attribute type 10 has an invalid length. [ 261.717537][ T29] audit: type=1326 audit(2000000002.520:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.6.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf447aeb9 code=0x7ffc0000 [ 261.741340][ T29] audit: type=1326 audit(2000000002.520:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.6.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf447aeb9 code=0x7ffc0000 [ 261.754534][T13826] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 261.765062][ T29] audit: type=1326 audit(2000000002.520:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.6.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf447aeb9 code=0x7ffc0000 [ 261.797192][ T29] audit: type=1326 audit(2000000002.520:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.6.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7efcf447aeb9 code=0x7ffc0000 [ 261.829496][ T29] audit: type=1326 audit(2000000002.610:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.6.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf447aeb9 code=0x7ffc0000 [ 261.853298][ T29] audit: type=1326 audit(2000000002.610:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.6.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf447aeb9 code=0x7ffc0000 [ 261.876995][ T29] audit: type=1326 audit(2000000002.610:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.6.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7efcf447aeb9 code=0x7ffc0000 [ 261.878277][T13813] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.3336: lblock 0 mapped to illegal pblock 0 (length 1) [ 261.900827][ T29] audit: type=1326 audit(2000000002.610:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.6.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf447aeb9 code=0x7ffc0000 [ 261.937608][ T29] audit: type=1326 audit(2000000002.610:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.6.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf447aeb9 code=0x7ffc0000 [ 261.961242][ T29] audit: type=1326 audit(2000000002.610:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.6.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf447aeb9 code=0x7ffc0000 [ 261.986809][T13813] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.3336: lblock 3 mapped to illegal pblock 3 (length 1) [ 262.001681][T13813] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.3336: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 262.024116][T13827] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.3336: lblock 0 mapped to illegal pblock 0 (length 1) [ 262.049078][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3336'. [ 262.058101][T13813] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3336'. [ 262.084770][T13829] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3341'. [ 262.098186][T13831] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 262.118956][T13833] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13833 comm=syz.6.3343 [ 262.118969][T13834] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13834 comm=syz.6.3343 [ 262.148904][T13520] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 262.221043][T13838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3346'. [ 262.261697][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3349'. [ 262.315625][T13850] loop7: detected capacity change from 0 to 164 [ 262.338993][T13850] netlink: 'syz.7.3351': attribute type 29 has an invalid length. [ 262.350952][T13850] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 262.451646][T13865] netlink: 'syz.6.3357': attribute type 1 has an invalid length. [ 262.459541][T13865] netlink: 'syz.6.3357': attribute type 4 has an invalid length. [ 262.467294][T13865] netlink: 15586 bytes leftover after parsing attributes in process `syz.6.3357'. [ 262.532178][T13873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.550007][T13873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.568973][T13875] bond3 (unregistering): Released all slaves [ 262.575206][T13878] loop5: detected capacity change from 0 to 1024 [ 262.601004][T13878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 262.630294][T13878] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.645395][T13878] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.3361: lblock 0 mapped to illegal pblock 0 (length 1) [ 262.666736][T13878] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 262.679191][T13878] EXT4-fs (loop5): This should not happen!! Data will be lost [ 262.679191][T13878] [ 262.690595][T13878] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.3361: lblock 0 mapped to illegal pblock 0 (length 1) [ 262.704362][T13878] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.3361: lblock 3 mapped to illegal pblock 3 (length 1) [ 262.720034][T13878] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 262.732647][T13878] EXT4-fs (loop5): This should not happen!! Data will be lost [ 262.732647][T13878] [ 262.744563][T13887] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.3361: lblock 0 mapped to illegal pblock 0 (length 1) [ 262.766372][T13887] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.3361: lblock 0 mapped to illegal pblock 0 (length 1) [ 262.780330][T13887] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.3361: lblock 0 mapped to illegal pblock 0 (length 1) [ 262.794287][T13887] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.3361: lblock 0 mapped to illegal pblock 0 (length 1) [ 262.809691][T13887] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.3361: lblock 3 mapped to illegal pblock 3 (length 1) [ 262.824814][T13887] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.3361: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 262.850289][T13878] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3361'. [ 262.929914][T13520] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 262.957283][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3366'. [ 263.004188][T13893] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3365'. [ 263.054431][T13901] syzkaller1: entered promiscuous mode [ 263.060053][T13901] syzkaller1: entered allmulticast mode [ 263.189736][T13912] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 263.222078][T13912] EXT4-fs (loop6): mount failed [ 263.301011][ T37] tipc: Subscription rejected, illegal request [ 263.319558][T13923] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.359951][T13929] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 263.360109][T13923] ext4 filesystem being mounted at /syzcgroup/cpu/syz7/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 263.385813][T13929] team0 (unregistering): Port device team_slave_0 removed [ 263.405140][T13923] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.416698][T13929] team0 (unregistering): Failed to send options change via netlink (err -105) [ 263.433664][T13929] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 263.445083][T13929] team0 (unregistering): Port device team_slave_1 removed [ 263.522317][ T2965] IPVS: starting estimator thread 0... [ 263.543219][T13946] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3388: invalid indirect mapped block 4294967295 (level 1) [ 263.563964][T13946] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3388: invalid indirect mapped block 4294967295 (level 1) [ 263.590084][T13950] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 263.598560][T13946] EXT4-fs (loop6): 2 truncates cleaned up [ 263.604901][T13946] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.629965][T13944] IPVS: using max 2208 ests per chain, 110400 per kthread [ 263.740598][ T5230] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.920295][T13983] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 263.934798][T13983] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.963825][T13983] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.3402: lblock 0 mapped to illegal pblock 0 (length 1) [ 263.989516][T13983] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 264.002148][T13983] EXT4-fs (loop6): This should not happen!! Data will be lost [ 264.002148][T13983] [ 264.012974][T13983] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.3402: lblock 0 mapped to illegal pblock 0 (length 1) [ 264.035650][T13983] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 3: comm syz.6.3402: lblock 3 mapped to illegal pblock 3 (length 1) [ 264.057285][T13983] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 264.069831][T13983] EXT4-fs (loop6): This should not happen!! Data will be lost [ 264.069831][T13983] [ 264.087743][T13983] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.3402: lblock 0 mapped to illegal pblock 0 (length 1) [ 264.105971][T13983] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.3402: lblock 0 mapped to illegal pblock 0 (length 1) [ 264.148560][T13983] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.3402: lblock 0 mapped to illegal pblock 0 (length 1) [ 264.163584][T13983] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.3402: lblock 0 mapped to illegal pblock 0 (length 1) [ 264.181423][T13983] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.3402: lblock 3 mapped to illegal pblock 3 (length 1) [ 264.197618][T13983] EXT4-fs error (device loop6): ext4_ext_remove_space:2955: inode #15: comm syz.6.3402: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 264.236716][T14009] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.3402: lblock 0 mapped to illegal pblock 0 (length 1) [ 264.389622][T14026] set_capacity_and_notify: 5 callbacks suppressed [ 264.389715][T14026] loop7: detected capacity change from 0 to 1024 [ 264.445997][T14026] EXT4-fs: Ignoring removed orlov option [ 264.451883][T14026] EXT4-fs: inline encryption not supported [ 264.457972][T14030] tipc: Started in network mode [ 264.462889][T14030] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 264.470167][T14030] tipc: Enabled bearer , priority 10 [ 264.478335][T14030] ip6t_srh: unknown srh invflags 4000 [ 264.625801][ T3409] kernel write not supported for file [eventfd] (pid: 3409 comm: kworker/0:4) [ 264.851462][T14049] xt_time: unknown flags 0xc [ 264.913923][T14051] IPv6: NLM_F_REPLACE set, but no existing node found! [ 264.926125][ T23] kernel write not supported for file [eventfd] (pid: 23 comm: kworker/1:0) [ 265.073040][T14059] loop5: detected capacity change from 0 to 256 [ 265.081133][T14061] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 265.090884][T14059] FAT-fs (loop5): bogus number of FAT sectors [ 265.097145][T14059] FAT-fs (loop5): Can't find a valid FAT filesystem [ 265.135776][T14059] x_tables: duplicate underflow at hook 4 [ 265.152609][T14059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.162413][T14059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.224822][T14068] netlink: zone id is out of range [ 265.230287][T14068] netlink: zone id is out of range [ 265.235655][T14068] netlink: zone id is out of range [ 265.241004][T14068] netlink: zone id is out of range [ 265.251710][T14068] netlink: zone id is out of range [ 265.267094][T14068] netlink: zone id is out of range [ 265.292808][T14068] netlink: zone id is out of range [ 265.307109][T14068] netlink: zone id is out of range [ 265.321316][T14068] netlink: zone id is out of range [ 265.441692][T14079] syzkaller0: entered promiscuous mode [ 265.447431][T14079] syzkaller0: entered allmulticast mode [ 265.565655][T14098] netlink: 'syz.6.3443': attribute type 27 has an invalid length. [ 265.578588][T14098] veth2: left promiscuous mode [ 265.583411][T14098] veth2: left allmulticast mode [ 265.588844][T14098] geneve2: left promiscuous mode [ 265.594256][T14098] gtp0: left promiscuous mode [ 265.599111][T14098] gtp0: left allmulticast mode [ 265.604614][ T3424] kernel write not supported for file [eventfd] (pid: 3424 comm: kworker/1:5) [ 265.606787][T14098] gtp1: left promiscuous mode [ 265.618382][T14098] gtp1: left allmulticast mode [ 265.629008][T14098] gtp2: left promiscuous mode [ 265.633736][T14098] gtp2: left allmulticast mode [ 265.658627][T14098] gtp3: left promiscuous mode [ 265.663379][T14098] gtp3: left allmulticast mode [ 265.694362][T14098] gtp4: left promiscuous mode [ 265.699176][T14098] gtp4: left allmulticast mode [ 265.733932][T14098] gtp5: left promiscuous mode [ 265.738898][T14098] gtp5: left allmulticast mode [ 265.746145][T14098] gtp6: left promiscuous mode [ 265.751087][T14098] gtp6: left allmulticast mode [ 265.772173][T14098] gtp7: left promiscuous mode [ 265.776986][T14098] gtp7: left allmulticast mode [ 265.783248][ T3396] tipc: Node number set to 10136234 [ 265.834704][T14100] syz_tun: left promiscuous mode [ 265.867345][T14100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.878933][ T3466] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.898897][T14106] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 265.920056][ T3396] lo speed is unknown, defaulting to 1000 [ 265.926492][ T3396] syz1: Port: 1 Link ACTIVE [ 265.931520][ T3466] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.962396][ T3409] lo speed is unknown, defaulting to 1000 [ 265.987876][ T3466] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.005505][ T3466] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.102915][T14132] loop5: detected capacity change from 0 to 1764 [ 266.161464][T14138] tipc: Started in network mode [ 266.166469][T14138] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 266.174160][T14138] tipc: Enabled bearer , priority 10 [ 266.496428][T14184] __nla_validate_parse: 8 callbacks suppressed [ 266.496483][T14184] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3473'. [ 266.625142][T14198] loop5: detected capacity change from 0 to 1764 [ 266.720508][T14204] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3483'. [ 266.736648][T14206] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3484'. [ 266.812595][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3484'. [ 266.878187][T14206] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3484'. [ 267.213868][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 267.213883][ T29] audit: type=1326 audit(2000000008.030:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.7.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d27f6aeb9 code=0x7ffc0000 [ 267.244041][ T29] audit: type=1326 audit(2000000008.030:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.7.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3d27f6aeb9 code=0x7ffc0000 [ 267.267657][ T29] audit: type=1326 audit(2000000008.030:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.7.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d27f6aeb9 code=0x7ffc0000 [ 267.353134][T14226] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.3492'. [ 267.455455][T14230] loop6: detected capacity change from 0 to 1764 [ 267.565254][ T29] audit: type=1326 audit(2000000008.120:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.7.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f3d27f6aeb9 code=0x7ffc0000 [ 267.588698][ T29] audit: type=1326 audit(2000000008.120:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.7.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d27f6aeb9 code=0x7ffc0000 [ 267.612253][ T29] audit: type=1326 audit(2000000008.120:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.7.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d27f6aeb9 code=0x7ffc0000 [ 267.635684][ T29] audit: type=1326 audit(2000000008.120:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.7.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d27f6aeb9 code=0x7ffc0000 [ 267.659457][ T29] audit: type=1326 audit(2000000008.120:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.7.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d27f6aeb9 code=0x7ffc0000 [ 267.683032][ T29] audit: type=1326 audit(2000000008.120:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.7.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d27f6aeb9 code=0x7ffc0000 [ 267.706722][ T29] audit: type=1326 audit(2000000008.120:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.7.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d27f6aeb9 code=0x7ffc0000 [ 267.744058][ T23] tipc: Node number set to 10136234 [ 268.726259][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3501'. [ 268.741767][T14251] loop7: detected capacity change from 0 to 1024 [ 268.868283][T14251] EXT4-fs mount: 3 callbacks suppressed [ 268.868305][T14251] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 268.959355][T14251] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.978905][T14275] loop5: detected capacity change from 0 to 1764 [ 268.990963][T14251] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm syz.7.3502: lblock 0 mapped to illegal pblock 0 (length 1) [ 269.065699][T14276] net_ratelimit: 16 callbacks suppressed [ 269.065729][T14276] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 269.103387][T14251] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 269.115806][T14251] EXT4-fs (loop7): This should not happen!! Data will be lost [ 269.115806][T14251] [ 269.157193][T14289] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3502: lblock 0 mapped to illegal pblock 0 (length 1) [ 269.177653][T14289] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.3502: lblock 3 mapped to illegal pblock 3 (length 1) [ 269.199219][T14293] loop6: detected capacity change from 0 to 512 [ 269.338575][T14289] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 269.350944][T14289] EXT4-fs (loop7): This should not happen!! Data will be lost [ 269.350944][T14289] [ 269.368303][T14293] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.381173][T14293] ext4 filesystem being mounted at /573/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.394884][T14289] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3502: lblock 0 mapped to illegal pblock 0 (length 1) [ 269.410023][T14289] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.3502: Freeing blocks not in datazone - block = 3, count = 1 [ 269.429576][T14300] loop5: detected capacity change from 0 to 512 [ 269.445628][T14300] EXT4-fs: inline encryption not supported [ 269.459926][T14251] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3502: lblock 0 mapped to illegal pblock 0 (length 1) [ 269.479630][T14251] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3502: lblock 0 mapped to illegal pblock 0 (length 1) [ 269.501841][T14300] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 269.511434][T14306] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3511'. [ 269.515075][T14289] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3502'. [ 269.530942][T14251] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3502: lblock 0 mapped to illegal pblock 0 (length 1) [ 269.554558][T14300] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3510: invalid indirect mapped block 2683928664 (level 1) [ 269.633618][T14316] netlink: 'syz.0.3513': attribute type 4 has an invalid length. [ 269.709617][T14300] EXT4-fs (loop5): 1 truncate cleaned up [ 269.732525][T14300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.737446][T14251] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3502: lblock 0 mapped to illegal pblock 0 (length 1) [ 269.781193][T13234] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 269.880691][T14333] loop7: detected capacity change from 0 to 128 [ 269.885144][T14300] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3510: Invalid block bitmap block 3 in block_group 0 [ 269.923671][ T5230] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.971275][T14300] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3510: Invalid block bitmap block 3 in block_group 0 [ 270.020202][T14333] syz.7.3515: attempt to access beyond end of device [ 270.020202][T14333] loop7: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 270.047372][T14300] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3510: Invalid block bitmap block 3 in block_group 0 [ 270.094560][T14333] syz.7.3515: attempt to access beyond end of device [ 270.094560][T14333] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 270.121171][T13520] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.160324][T14354] tipc: Started in network mode [ 270.165279][T14354] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 270.172604][T14354] tipc: Enabled bearer , priority 10 [ 270.197648][T14358] netlink: 'syz.3.3522': attribute type 12 has an invalid length. [ 270.247539][T14365] netlink: 'syz.3.3524': attribute type 10 has an invalid length. [ 270.356454][T14377] loop7: detected capacity change from 0 to 1024 [ 270.470782][T14377] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 270.502299][T14377] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.531376][T14377] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm syz.7.3525: lblock 0 mapped to illegal pblock 0 (length 1) [ 270.579051][T14377] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 270.591429][T14377] EXT4-fs (loop7): This should not happen!! Data will be lost [ 270.591429][T14377] [ 270.602302][T14377] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3525: lblock 0 mapped to illegal pblock 0 (length 1) [ 270.616267][T14377] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.3525: lblock 3 mapped to illegal pblock 3 (length 1) [ 270.646402][T14377] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 270.647283][T14392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3531'. [ 270.658986][T14377] EXT4-fs (loop7): This should not happen!! Data will be lost [ 270.658986][T14377] [ 270.684582][T14396] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3525: lblock 0 mapped to illegal pblock 0 (length 1) [ 270.699442][T14396] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3525: lblock 0 mapped to illegal pblock 0 (length 1) [ 270.742372][T14396] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3525: lblock 0 mapped to illegal pblock 0 (length 1) [ 270.759652][T14396] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3525: lblock 0 mapped to illegal pblock 0 (length 1) [ 270.773256][T14396] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.3525: lblock 3 mapped to illegal pblock 3 (length 1) [ 270.787950][T14396] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.3525: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 270.808370][T14401] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3525: lblock 0 mapped to illegal pblock 0 (length 1) [ 270.880027][ T3424] kernel write not supported for file [eventfd] (pid: 3424 comm: kworker/1:5) [ 270.896165][T13234] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 270.957699][T14422] loop6: detected capacity change from 0 to 256 [ 270.976832][T14422] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 270.991132][T14422] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 271.005090][T14424] netlink: 'syz.0.3545': attribute type 3 has an invalid length. [ 271.235335][T14448] Cannot find add_set index 0 as target [ 271.286928][ T3409] tipc: Node number set to 10136234 [ 271.445776][T14475] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 271.465742][T14468] sctp: [Deprecated]: syz.3.3562 (pid 14468) Use of int in max_burst socket option deprecated. [ 271.465742][T14468] Use struct sctp_assoc_value instead [ 271.589991][T14485] loop5: detected capacity change from 0 to 512 [ 271.642430][T14485] EXT4-fs (loop5): 1 orphan inode deleted [ 271.654850][T14485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.676847][T14485] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.682171][ T3466] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 1 [ 271.745814][T14511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=14511 comm=syz.3.3580 [ 271.785614][T13520] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.798748][T14519] loop6: detected capacity change from 0 to 1024 [ 271.829362][T14519] EXT4-fs: Ignoring removed orlov option [ 271.835203][T14519] EXT4-fs: inline encryption not supported [ 271.862218][T14521] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 271.862989][T14519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.896920][T14521] team0 (unregistering): Port device team_slave_0 removed [ 271.914843][T14521] team0 (unregistering): Failed to send options change via netlink (err -105) [ 271.925872][ T5230] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.945453][T14521] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 271.956696][T14521] team0 (unregistering): Port device team_slave_1 removed [ 271.981706][T14532] netlink: 'syz.3.3587': attribute type 27 has an invalid length. [ 271.991271][T14540] loop6: detected capacity change from 0 to 2048 [ 272.028049][T14532] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.035401][T14532] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.053800][T14540] loop6: p1 < > [ 272.085495][T14547] xt_time: unknown flags 0xc [ 272.089793][ T23] IPVS: starting estimator thread 0... [ 272.134424][T14552] netlink: 'syz.5.3593': attribute type 1 has an invalid length. [ 272.140313][ T8569] udevd[8569]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 272.155180][T14532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.172272][T14532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.196553][T14549] IPVS: using max 1824 ests per chain, 91200 per kthread [ 272.252931][T14536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.258874][T14553] 9pnet_fd: p9_fd_create_unix (14553): problem connecting socket: éq‰Y’3aK: -512 [ 272.264460][T14536] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.287536][T14536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.306483][T14556] syzkaller1: entered promiscuous mode [ 272.312046][T14556] syzkaller1: entered allmulticast mode [ 272.320051][ T2291] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.334030][ T2291] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.344386][ T2291] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.353489][ T2291] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.381598][T14567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=14567 comm=syz.6.3597 [ 272.419000][T14571] loop7: detected capacity change from 0 to 164 [ 272.492279][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 272.492357][ T29] audit: type=1400 audit(2000000013.311:4367): avc: denied { mac_admin } for pid=14570 comm="syz.7.3599" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 272.531508][T14576] SELinux: Context system_u:object_r:cron_spool_t:s0 is not valid (left unmapped). [ 272.541977][ T29] audit: type=1400 audit(2000000013.361:4368): avc: denied { relabelto } for pid=14570 comm="syz.7.3599" name="zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:cron_spool_t:s0" [ 272.569125][ T29] audit: type=1400 audit(2000000013.361:4369): avc: denied { associate } for pid=14570 comm="syz.7.3599" name="zero" dev="devtmpfs" ino=5 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:cron_spool_t:s0" [ 272.604786][T14578] xt_recent: Unsupported userspace flags (000000b1) [ 272.697435][T14589] __nla_validate_parse: 7 callbacks suppressed [ 272.697473][T14589] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3606'. [ 272.769732][T14594] netlink: 'syz.0.3608': attribute type 1 has an invalid length. [ 272.778196][T14595] netlink: 'syz.0.3608': attribute type 1 has an invalid length. [ 272.835633][T14601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3610'. [ 272.844720][T14601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3610'. [ 272.853978][T14601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3610'. [ 273.008507][ T29] audit: type=1326 audit(2000000013.831:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14616 comm="syz.0.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68de35aeb9 code=0x7ffc0000 [ 273.020857][T14617] tipc: New replicast peer: 255.255.255.255 [ 273.032940][ T29] audit: type=1326 audit(2000000013.831:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14616 comm="syz.0.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68de35aeb9 code=0x7ffc0000 [ 273.038883][T14617] tipc: Enabled bearer , priority 10 [ 273.062582][ T29] audit: type=1326 audit(2000000013.831:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14616 comm="syz.0.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68de35aeb9 code=0x7ffc0000 [ 273.076000][T14617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3617'. [ 273.092401][ T29] audit: type=1326 audit(2000000013.831:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14616 comm="syz.0.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68de35aeb9 code=0x7ffc0000 [ 273.101249][T14617] tipc: Disabling bearer [ 273.124635][ T29] audit: type=1326 audit(2000000013.831:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14616 comm="syz.0.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f68de35aeb9 code=0x7ffc0000 [ 273.153631][ T29] audit: type=1326 audit(2000000013.831:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14616 comm="syz.0.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68de35aeb9 code=0x7ffc0000 [ 273.177258][ T29] audit: type=1326 audit(2000000013.831:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14616 comm="syz.0.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68de35aeb9 code=0x7ffc0000 [ 273.211809][T14619] netlink: 'syz.0.3618': attribute type 10 has an invalid length. [ 273.495413][T14623] lo speed is unknown, defaulting to 1000 [ 273.632481][T14631] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3623'. [ 273.674626][T14631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.753651][T14631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.781916][T14631] bond0 (unregistering): Released all slaves [ 273.873098][T14646] cgroup: Need name or subsystem set [ 273.879907][T14646] netlink: 'syz.3.3630': attribute type 1 has an invalid length. [ 273.921719][T14650] lo speed is unknown, defaulting to 1000 [ 273.960446][T14655] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3634'. [ 274.057387][T14660] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3636'. [ 274.092734][ T23] IPVS: starting estimator thread 0... [ 274.186362][T14663] IPVS: using max 2208 ests per chain, 110400 per kthread [ 274.488729][ T3466] IPVS: stop unused estimator thread 0... [ 274.510277][T14683] loop7: detected capacity change from 0 to 1024 [ 274.566218][T14683] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 274.605030][T14683] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.629442][T14683] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm syz.7.3645: lblock 0 mapped to illegal pblock 0 (length 1) [ 274.663359][T14683] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 274.675905][T14683] EXT4-fs (loop7): This should not happen!! Data will be lost [ 274.675905][T14683] [ 274.726103][T14683] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3645: lblock 0 mapped to illegal pblock 0 (length 1) [ 274.741720][T14683] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.3645: lblock 3 mapped to illegal pblock 3 (length 1) [ 274.751613][ T5230] bond0: (slave syz_tun): Releasing backup interface [ 274.762805][T14683] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 274.775244][T14683] EXT4-fs (loop7): This should not happen!! Data will be lost [ 274.775244][T14683] [ 274.776486][T14683] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3645: lblock 0 mapped to illegal pblock 0 (length 1) [ 274.802522][T14679] lo speed is unknown, defaulting to 1000 [ 274.831136][T14683] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3645: lblock 0 mapped to illegal pblock 0 (length 1) [ 274.844877][T14683] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3645: lblock 0 mapped to illegal pblock 0 (length 1) [ 274.859123][T14683] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3645: lblock 0 mapped to illegal pblock 0 (length 1) [ 274.874295][T14683] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.3645: lblock 3 mapped to illegal pblock 3 (length 1) [ 274.889354][T14683] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.3645: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 274.896454][T14704] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3645'. [ 274.963509][T14679] chnl_net:caif_netlink_parms(): no params data found [ 274.995097][T13234] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 275.015250][T14679] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.022687][T14679] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.031085][T14679] bridge_slave_0: entered allmulticast mode [ 275.037887][T14679] bridge_slave_0: entered promiscuous mode [ 275.046383][T14679] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.053483][T14679] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.061052][T14679] bridge_slave_1: entered allmulticast mode [ 275.069374][T14679] bridge_slave_1: entered promiscuous mode [ 275.089349][T14679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.100357][T14679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.114445][T14724] FAULT_INJECTION: forcing a failure. [ 275.114445][T14724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.127686][T14724] CPU: 0 UID: 0 PID: 14724 Comm: syz.7.3656 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 275.127722][T14724] Tainted: [W]=WARN [ 275.127729][T14724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 275.127743][T14724] Call Trace: [ 275.127751][T14724] [ 275.127761][T14724] __dump_stack+0x1d/0x30 [ 275.127791][T14724] dump_stack_lvl+0x95/0xd0 [ 275.127885][T14724] dump_stack+0x15/0x1b [ 275.127912][T14724] should_fail_ex+0x263/0x280 [ 275.127959][T14724] should_fail+0xb/0x20 [ 275.127994][T14724] should_fail_usercopy+0x1a/0x20 [ 275.128036][T14724] _copy_from_iter+0xcf/0xea0 [ 275.128071][T14724] ? alloc_pages_mpol+0x217/0x260 [ 275.128228][T14724] copy_page_from_iter+0x178/0x2a0 [ 275.128257][T14724] tun_get_user+0xbbd/0x27c0 [ 275.128298][T14724] ? ref_tracker_alloc+0x1f2/0x2f0 [ 275.128349][T14724] tun_chr_write_iter+0x15e/0x210 [ 275.128455][T14724] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 275.128493][T14724] vfs_write+0x5a6/0x9f0 [ 275.128529][T14724] ksys_write+0xdc/0x1a0 [ 275.128617][T14724] __x64_sys_write+0x40/0x50 [ 275.128639][T14724] x64_sys_call+0x2847/0x3000 [ 275.128666][T14724] do_syscall_64+0xc0/0x2a0 [ 275.128710][T14724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.128809][T14724] RIP: 0033:0x7f3d27f2b78e [ 275.128826][T14724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 275.128847][T14724] RSP: 002b:00007f3d269c6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 275.128908][T14724] RAX: ffffffffffffffda RBX: 00007f3d269c76c0 RCX: 00007f3d27f2b78e [ 275.128923][T14724] RDX: 0000000000000022 RSI: 0000200000000100 RDI: 00000000000000c8 [ 275.128936][T14724] RBP: 00007f3d269c7090 R08: 0000000000000000 R09: 0000000000000000 [ 275.128950][T14724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.128963][T14724] R13: 00007f3d281e6038 R14: 00007f3d281e5fa0 R15: 00007fff6b866f08 [ 275.128988][T14724] [ 275.131689][T14679] team0: Port device team_slave_0 added [ 275.360994][T14679] team0: Port device team_slave_1 added [ 275.385464][T14679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.392567][T14679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.418533][T14679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.437029][T14728] bond0 (unregistering): Released all slaves [ 275.446603][T14679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.453639][T14679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.479830][T14679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.532428][T14679] hsr_slave_0: entered promiscuous mode [ 275.539304][T14679] hsr_slave_1: entered promiscuous mode [ 275.545501][T14679] debugfs: 'hsr0' already exists in 'hsr' [ 275.551280][T14679] Cannot create hsr debugfs directory [ 275.569762][T14738] syzkaller1: entered promiscuous mode [ 275.575367][T14738] syzkaller1: entered allmulticast mode [ 275.746630][ T3395] kernel write not supported for file [eventfd] (pid: 3395 comm: kworker/1:3) [ 275.876554][ T2291] bridge_slave_1: left allmulticast mode [ 275.882322][ T2291] bridge_slave_1: left promiscuous mode [ 275.888152][ T2291] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.954837][ T3409] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 276.228147][ T2291] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 276.237957][ T2291] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 276.256464][ T2291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.271985][ T2291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.281838][ T2291] bond0 (unregistering): Released all slaves [ 276.289991][ T2291] bond1 (unregistering): Released all slaves [ 276.299850][ T2291] bond2 (unregistering): Released all slaves [ 276.303341][T14761] netlink: 'syz.3.3670': attribute type 1 has an invalid length. [ 276.322611][T14761] bond1: entered promiscuous mode [ 276.327906][T14761] bond1: entered allmulticast mode [ 276.333270][T14761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.345416][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3670'. [ 276.356033][T14761] bond1 (unregistering): Released all slaves [ 276.367000][ T2291] tipc: Disabling bearer [ 276.372971][ T2291] tipc: Left network mode [ 276.408357][ T2291] hsr_slave_0: left promiscuous mode [ 276.415254][ T2291] hsr_slave_1: left promiscuous mode [ 276.420937][ T2291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.432012][ T2291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.570503][ T3466] smc: removing ib device syz1 [ 276.576088][ T3395] lo speed is unknown, defaulting to 1000 [ 276.582149][ T3395] syz1: Port: 1 Link DOWN [ 276.716984][T14789] can: request_module (can-proto-0) failed. [ 276.761109][T14789] hsr_slave_1 (unregistering): left promiscuous mode [ 276.793313][T14679] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 276.802693][T14679] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 276.813789][T14679] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 276.824042][T14679] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 276.879885][ T2291] IPVS: stop unused estimator thread 0... [ 276.888813][T14679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.909329][T14679] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.931826][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.938977][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.956247][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.963408][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.004769][T14824] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 277.084818][T14679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.116473][ T2965] kernel write not supported for file [eventfd] (pid: 2965 comm: kworker/0:2) [ 277.305658][T14679] veth0_vlan: entered promiscuous mode [ 277.323409][T14679] veth1_vlan: entered promiscuous mode [ 277.343943][T14679] veth0_macvtap: entered promiscuous mode [ 277.359490][T14679] veth1_macvtap: entered promiscuous mode [ 277.381293][T14679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.401896][T14679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.418375][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.448683][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.483714][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.501551][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.523476][T14869] batadv_slave_1: entered promiscuous mode [ 277.572234][T14876] loop6: detected capacity change from 0 to 512 [ 277.592948][T14876] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 277.602107][T14876] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 277.616892][T14876] EXT4-fs (loop6): orphan cleanup on readonly fs [ 277.623656][T14876] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3691: bad orphan inode 15 [ 277.635911][T14876] ext4_test_bit(bit=14, block=18) = 1 [ 277.641470][T14876] is_bad_inode(inode)=0 [ 277.645767][T14876] NEXT_ORPHAN(inode)=1023 [ 277.650173][T14876] max_ino=32 [ 277.653467][T14876] i_nlink=0 [ 277.657070][T14876] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #15: comm syz.6.3691: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 277.674320][T14876] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 277.685682][T14876] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 277.699952][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 277.699971][ T29] audit: type=1400 audit(2000000018.524:4423): avc: denied { read } for pid=14875 comm="syz.6.3691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 277.805510][ T29] audit: type=1326 audit(2000000018.634:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14887 comm="syz.3.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82466aeb9 code=0x7ffc0000 [ 277.838629][ T29] audit: type=1326 audit(2000000018.634:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14887 comm="syz.3.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82466aeb9 code=0x7ffc0000 [ 277.862224][ T29] audit: type=1326 audit(2000000018.634:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14887 comm="syz.3.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82466aeb9 code=0x7ffc0000 [ 277.885804][ T29] audit: type=1326 audit(2000000018.634:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14887 comm="syz.3.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82466aeb9 code=0x7ffc0000 [ 277.904554][T14679] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.909426][ T29] audit: type=1326 audit(2000000018.634:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14887 comm="syz.3.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82466aeb9 code=0x7ffc0000 [ 277.941872][ T29] audit: type=1326 audit(2000000018.634:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14887 comm="syz.3.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe82462b78e code=0x7ffc0000 [ 277.965532][ T29] audit: type=1326 audit(2000000018.634:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14887 comm="syz.3.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82466aeb9 code=0x7ffc0000 [ 277.965574][ T29] audit: type=1326 audit(2000000018.634:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14887 comm="syz.3.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82466aeb9 code=0x7ffc0000 [ 277.965615][ T29] audit: type=1326 audit(2000000018.634:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14887 comm="syz.3.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82466aeb9 code=0x7ffc0000 [ 278.175593][T14912] loop7: detected capacity change from 0 to 1024 [ 278.195519][T14912] EXT4-fs: inline encryption not supported [ 278.201424][T14912] EXT4-fs: Ignoring removed bh option [ 278.213857][T14912] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 278.229237][T14912] EXT4-fs (loop7): orphan cleanup on readonly fs [ 278.236101][T14912] EXT4-fs error (device loop7): ext4_quota_enable:7177: comm syz.7.3705: inode #2304: comm syz.7.3705: iget: illegal inode # [ 278.250045][T14912] EXT4-fs (loop7): Remounting filesystem read-only [ 278.256620][T14912] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 278.271695][T14912] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 278.278930][T14912] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 278.304852][T13234] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.427043][T14932] netlink: 'syz.7.3709': attribute type 2 has an invalid length. [ 278.434925][T14932] netlink: 'syz.7.3709': attribute type 1 has an invalid length. [ 278.603967][T14940] bond1 (unregistering): Released all slaves [ 278.800577][T14950] __nla_validate_parse: 6 callbacks suppressed [ 278.800595][T14950] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3717'. [ 278.989875][T14958] syzkaller1: entered promiscuous mode [ 278.995617][T14958] syzkaller1: entered allmulticast mode [ 279.026116][T14966] netlink: 'syz.0.3724': attribute type 1 has an invalid length. [ 279.048621][T14966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.055564][T14969] loop7: detected capacity change from 0 to 512 [ 279.081973][T14966] bond1: (slave veth3): Enslaving as an active interface with a down link [ 279.094370][T14969] EXT4-fs (loop7): 1 orphan inode deleted [ 279.099185][T14966] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 279.101219][T14969] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.110631][T14966] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 279.138098][ T31] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1 [ 279.138225][T14969] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.196029][T13234] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.273035][T14982] netlink: 'syz.0.3728': attribute type 10 has an invalid length. [ 279.323625][T14988] loop7: detected capacity change from 0 to 1024 [ 279.345352][T14988] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.362283][T14988] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 279.378627][T14988] EXT4-fs (loop7): Remounting filesystem read-only [ 279.392059][T14988] EXT4-fs (loop7): error restoring inline_data for inode -- potential data loss! (inode 18, error -30) [ 279.427011][T13234] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.462005][T15001] loop7: detected capacity change from 0 to 512 [ 279.470042][T15001] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 279.479915][T15001] EXT4-fs (loop7): 1 truncate cleaned up [ 279.486317][T15001] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.618626][T13234] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.884211][T15037] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 280.259443][ T3409] kernel write not supported for file [eventfd] (pid: 3409 comm: kworker/0:4) [ 280.317375][T15070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3764'. [ 280.326878][T15070] bridge_slave_1: left allmulticast mode [ 280.332871][T15070] bridge_slave_1: left promiscuous mode [ 280.338961][T15070] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.348036][T15070] bridge_slave_0: left allmulticast mode [ 280.353826][T15070] bridge_slave_0: left promiscuous mode [ 280.359550][T15070] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.778222][T15086] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3770'. [ 280.787742][T15086] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3770'. [ 280.841244][T15094] loop6: detected capacity change from 0 to 256 [ 280.848538][T15094] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 280.868441][T15094] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 280.981736][T15105] loop7: detected capacity change from 0 to 512 [ 281.008132][T15105] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3779: invalid indirect mapped block 256 (level 2) [ 281.027305][T15105] EXT4-fs (loop7): 2 truncates cleaned up [ 281.033701][T15105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.053579][T15105] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.3779: bg 0: block 5: invalid block bitmap [ 281.067266][T15105] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 281.079535][T15105] EXT4-fs (loop7): This should not happen!! Data will be lost [ 281.079535][T15105] [ 281.089272][T15105] EXT4-fs (loop7): Total free blocks count 0 [ 281.095389][T15105] EXT4-fs (loop7): Free/Dirty block details [ 281.101310][T15105] EXT4-fs (loop7): free_blocks=0 [ 281.106339][T15105] EXT4-fs (loop7): dirty_blocks=1 [ 281.111444][T15105] EXT4-fs (loop7): Block reservation details [ 281.117516][T15105] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 281.163246][T13234] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.294043][T15143] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3791'. [ 281.357547][T15148] loop7: detected capacity change from 0 to 128 [ 281.443106][T15158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3798'. [ 281.452211][T15158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3798'. [ 281.461796][T15158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3798'. [ 281.542971][T15159] dummy0: entered promiscuous mode [ 281.550341][T15159] vlan2: entered promiscuous mode [ 281.682698][T15178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3805'. [ 281.698044][T15178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3805'. [ 281.726226][ T37] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.742666][ T37] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.756979][ T37] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.770117][ T37] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.827181][T15195] loop7: detected capacity change from 0 to 512 [ 281.856490][T15197] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 281.873647][T15195] EXT4-fs (loop7): 1 orphan inode deleted [ 281.880029][T15195] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.893440][ T7536] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 1 [ 281.905695][T15195] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.943186][T15201] netlink: 'syz.3.3814': attribute type 10 has an invalid length. [ 282.000517][T13234] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.149961][T15210] sctp: [Deprecated]: syz.6.3818 (pid 15210) Use of int in max_burst socket option. [ 282.149961][T15210] Use struct sctp_assoc_value instead [ 282.161882][T15212] loop7: detected capacity change from 0 to 1024 [ 282.196325][T15212] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 282.230095][T15212] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.272615][T15212] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm syz.7.3819: lblock 0 mapped to illegal pblock 0 (length 1) [ 282.289992][T15212] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 282.302529][T15212] EXT4-fs (loop7): This should not happen!! Data will be lost [ 282.302529][T15212] [ 282.313780][T15212] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3819: lblock 0 mapped to illegal pblock 0 (length 1) [ 282.327803][T15212] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.3819: lblock 3 mapped to illegal pblock 3 (length 1) [ 282.360695][T15212] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 282.373080][T15212] EXT4-fs (loop7): This should not happen!! Data will be lost [ 282.373080][T15212] [ 282.383213][T15222] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3819: lblock 0 mapped to illegal pblock 0 (length 1) [ 282.411319][T15222] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3819: lblock 0 mapped to illegal pblock 0 (length 1) [ 282.440936][T15222] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3819: lblock 0 mapped to illegal pblock 0 (length 1) [ 282.464848][T15222] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3819: lblock 0 mapped to illegal pblock 0 (length 1) [ 282.480613][T15222] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.3819: lblock 3 mapped to illegal pblock 3 (length 1) [ 282.500790][T15222] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.3819: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 282.521212][T15212] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3819: lblock 0 mapped to illegal pblock 0 (length 1) [ 282.603665][T13234] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 282.656339][T15234] FAULT_INJECTION: forcing a failure. [ 282.656339][T15234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.669520][T15234] CPU: 0 UID: 0 PID: 15234 Comm: syz.6.3828 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 282.669565][T15234] Tainted: [W]=WARN [ 282.669575][T15234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 282.669639][T15234] Call Trace: [ 282.669647][T15234] [ 282.669658][T15234] __dump_stack+0x1d/0x30 [ 282.669695][T15234] dump_stack_lvl+0x95/0xd0 [ 282.669802][T15234] dump_stack+0x15/0x1b [ 282.669828][T15234] should_fail_ex+0x263/0x280 [ 282.669869][T15234] should_fail+0xb/0x20 [ 282.669946][T15234] should_fail_usercopy+0x1a/0x20 [ 282.670048][T15234] _copy_to_user+0x20/0xa0 [ 282.670077][T15234] simple_read_from_buffer+0xb5/0x130 [ 282.670134][T15234] proc_fail_nth_read+0x10e/0x150 [ 282.670175][T15234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.670212][T15234] vfs_read+0x1ab/0x7f0 [ 282.670238][T15234] ? __rcu_read_unlock+0x4e/0x70 [ 282.670334][T15234] ? __fget_files+0x184/0x1c0 [ 282.670366][T15234] ? mutex_lock+0x57/0x90 [ 282.670449][T15234] ksys_read+0xdc/0x1a0 [ 282.670508][T15234] __x64_sys_read+0x40/0x50 [ 282.670535][T15234] x64_sys_call+0x2889/0x3000 [ 282.670603][T15234] do_syscall_64+0xc0/0x2a0 [ 282.670638][T15234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.670668][T15234] RIP: 0033:0x7fa5e092b78e [ 282.670699][T15234] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 282.670724][T15234] RSP: 002b:00007fa5df3c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 282.670760][T15234] RAX: ffffffffffffffda RBX: 00007fa5df3c76c0 RCX: 00007fa5e092b78e [ 282.670781][T15234] RDX: 000000000000000f RSI: 00007fa5df3c70a0 RDI: 0000000000000006 [ 282.670838][T15234] RBP: 00007fa5df3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 282.670857][T15234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.670874][T15234] R13: 00007fa5e0be6038 R14: 00007fa5e0be5fa0 R15: 00007fff7d0f0ef8 [ 282.670903][T15234] [ 283.009333][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 283.009350][ T29] audit: type=1400 audit(2000000023.827:4720): avc: denied { setattr } for pid=15254 comm="syz.7.3837" name="[io_uring]" dev="anon_inodefs" ino=53777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 283.074904][T15259] loop6: detected capacity change from 0 to 512 [ 283.084911][T15259] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.3839: inode has both inline data and extents flags [ 283.098649][T15259] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3839: couldn't read orphan inode 15 (err -117) [ 283.117140][T15259] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.131121][T15259] EXT4-fs error (device loop6): ext4_add_entry:2415: inode #2: comm syz.6.3839: Directory hole found for htree leaf block 0 [ 283.158563][T14679] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.180596][ T29] audit: type=1400 audit(2000000023.997:4721): avc: denied { shutdown } for pid=15264 comm="syz.6.3841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 283.231636][T15263] gtp0: entered promiscuous mode [ 283.236676][T15263] gtp0: entered allmulticast mode [ 283.473030][T15289] loop6: detected capacity change from 0 to 512 [ 283.487494][T15289] EXT4-fs (loop6): orphan cleanup on readonly fs [ 283.512720][ T29] audit: type=1326 audit(2000000024.337:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15287 comm="syz.3.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82466aeb9 code=0x7ffc0000 [ 283.536335][ T29] audit: type=1326 audit(2000000024.337:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15287 comm="syz.3.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82466aeb9 code=0x7ffc0000 [ 283.545066][T15289] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 283.560808][ T29] audit: type=1326 audit(2000000024.367:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15287 comm="syz.3.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82466aeb9 code=0x7ffc0000 [ 283.591670][ T29] audit: type=1326 audit(2000000024.367:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15287 comm="syz.3.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82466aeb9 code=0x7ffc0000 [ 283.615518][ T29] audit: type=1326 audit(2000000024.367:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15287 comm="syz.3.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fe82466aeb9 code=0x7ffc0000 [ 283.621571][T15289] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3851: invalid indirect mapped block 8 (level 2) [ 283.639206][ T29] audit: type=1326 audit(2000000024.367:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15287 comm="syz.3.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82466aeb9 code=0x7ffc0000 [ 283.676096][ T29] audit: type=1326 audit(2000000024.367:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15287 comm="syz.3.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82466aeb9 code=0x7ffc0000 [ 283.704933][ T29] audit: type=1326 audit(2000000024.407:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15287 comm="syz.3.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82466aeb9 code=0x7ffc0000 [ 283.729988][T15289] EXT4-fs (loop6): Remounting filesystem read-only [ 283.736694][T15289] EXT4-fs (loop6): 1 truncate cleaned up [ 283.743097][T15289] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 283.845312][T15305] __nla_validate_parse: 9 callbacks suppressed [ 283.845345][T15305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3857'. [ 283.860671][T15305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3857'. [ 283.874363][T15305] gtp0: entered promiscuous mode [ 283.879366][T15305] gtp0: entered allmulticast mode [ 283.899013][T15318] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3860'. [ 283.960995][T14679] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.987795][T15324] syzkaller1: entered promiscuous mode [ 283.993388][T15324] syzkaller1: entered allmulticast mode [ 284.103438][T15334] loop7: detected capacity change from 0 to 512 [ 284.124970][T15334] EXT4-fs (loop7): 1 orphan inode deleted [ 284.131219][T15334] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.145622][ T7536] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 1 [ 284.149912][T15334] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.215942][T13234] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.280510][T15357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3874'. [ 284.289696][T15357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3874'. [ 284.383588][T15366] loop7: detected capacity change from 0 to 128 [ 284.416497][T15366] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 284.433799][T15366] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 284.476928][T15366] EXT4-fs (loop7): shut down requested (0) [ 284.505459][T13234] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 284.584986][T15388] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3885'. [ 284.635069][T15394] FAULT_INJECTION: forcing a failure. [ 284.635069][T15394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.648233][T15394] CPU: 1 UID: 0 PID: 15394 Comm: syz.3.3888 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 284.648274][T15394] Tainted: [W]=WARN [ 284.648284][T15394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 284.648302][T15394] Call Trace: [ 284.648325][T15394] [ 284.648336][T15394] __dump_stack+0x1d/0x30 [ 284.648416][T15394] dump_stack_lvl+0x95/0xd0 [ 284.648440][T15394] dump_stack+0x15/0x1b [ 284.648467][T15394] should_fail_ex+0x263/0x280 [ 284.648520][T15394] should_fail+0xb/0x20 [ 284.648602][T15394] should_fail_usercopy+0x1a/0x20 [ 284.648645][T15394] _copy_from_user+0x1c/0xb0 [ 284.648688][T15394] ___sys_sendmsg+0xc1/0x1e0 [ 284.648729][T15394] __x64_sys_sendmsg+0xd4/0x160 [ 284.648763][T15394] x64_sys_call+0x17ba/0x3000 [ 284.648797][T15394] do_syscall_64+0xc0/0x2a0 [ 284.648888][T15394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.648911][T15394] RIP: 0033:0x7fe82466aeb9 [ 284.648971][T15394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.648996][T15394] RSP: 002b:00007fe8230c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.649052][T15394] RAX: ffffffffffffffda RBX: 00007fe8248e5fa0 RCX: 00007fe82466aeb9 [ 284.649066][T15394] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 284.649080][T15394] RBP: 00007fe8230c7090 R08: 0000000000000000 R09: 0000000000000000 [ 284.649148][T15394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.649166][T15394] R13: 00007fe8248e6038 R14: 00007fe8248e5fa0 R15: 00007ffdf8825d58 [ 284.649192][T15394] [ 284.837372][T15398] tipc: Enabling of bearer rejected, already enabled [ 284.916688][T15400] dummy0: entered promiscuous mode [ 284.923799][T15400] vlan2: entered promiscuous mode [ 284.965051][T15404] loop6: detected capacity change from 0 to 4096 [ 284.978896][T15404] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.007946][T14679] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.076437][T15417] IPVS: set_ctl: invalid protocol: 128 100.1.1.0:20000 [ 285.083437][T13609] IPVS: starting estimator thread 0... [ 285.093602][T15417] team0: Device gtp0 is of different type [ 285.122897][T15422] FAULT_INJECTION: forcing a failure. [ 285.122897][T15422] name failslab, interval 1, probability 0, space 0, times 0 [ 285.135660][T15422] CPU: 1 UID: 0 PID: 15422 Comm: syz.3.3897 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 285.135707][T15422] Tainted: [W]=WARN [ 285.135713][T15422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 285.135725][T15422] Call Trace: [ 285.135732][T15422] [ 285.135740][T15422] __dump_stack+0x1d/0x30 [ 285.135885][T15422] dump_stack_lvl+0x95/0xd0 [ 285.135905][T15422] dump_stack+0x15/0x1b [ 285.135923][T15422] should_fail_ex+0x263/0x280 [ 285.135952][T15422] should_failslab+0x8c/0xb0 [ 285.136000][T15422] __kvmalloc_node_noprof+0x148/0x680 [ 285.136025][T15422] ? file_tty_write+0x1a3/0x690 [ 285.136127][T15422] ? mutex_trylock+0x81/0xc0 [ 285.136150][T15422] file_tty_write+0x1a3/0x690 [ 285.136175][T15422] tty_write+0x25/0x30 [ 285.136264][T15422] do_iter_readv_writev+0x4fd/0x5a0 [ 285.136289][T15422] vfs_writev+0x2e1/0x900 [ 285.136327][T15422] do_writev+0xe9/0x210 [ 285.136419][T15422] __x64_sys_writev+0x45/0x50 [ 285.136520][T15422] x64_sys_call+0x1ba5/0x3000 [ 285.136543][T15422] do_syscall_64+0xc0/0x2a0 [ 285.136665][T15422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.136696][T15422] RIP: 0033:0x7fe82466aeb9 [ 285.136717][T15422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.136760][T15422] RSP: 002b:00007fe8230c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 285.136779][T15422] RAX: ffffffffffffffda RBX: 00007fe8248e5fa0 RCX: 00007fe82466aeb9 [ 285.136792][T15422] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000003 [ 285.136863][T15422] RBP: 00007fe8230c7090 R08: 0000000000000000 R09: 0000000000000000 [ 285.136875][T15422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.136887][T15422] R13: 00007fe8248e6038 R14: 00007fe8248e5fa0 R15: 00007ffdf8825d58 [ 285.136908][T15422] [ 285.333126][T15417] team0: Device gtp0 is of different type [ 285.359116][T15420] IPVS: using max 2160 ests per chain, 108000 per kthread [ 285.393276][T15417] team0: Device gtp0 is of different type [ 285.430381][T15426] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 285.442790][T15426] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.456564][T15426] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm syz.7.3899: lblock 0 mapped to illegal pblock 0 (length 1) [ 285.474462][T15417] team0: Device gtp0 is of different type [ 285.513313][T15426] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 285.525682][T15426] EXT4-fs (loop7): This should not happen!! Data will be lost [ 285.525682][T15426] [ 285.546631][T15426] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3899: lblock 0 mapped to illegal pblock 0 (length 1) [ 285.558953][T15417] team0: Device gtp0 is of different type [ 285.565896][T15426] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3899: lblock 0 mapped to illegal pblock 0 (length 1) [ 285.580071][T15426] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.3899: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 285.617766][T15426] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3899'. [ 285.637038][T13234] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /136/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 285.662854][T15417] team0: Device gtp0 is of different type [ 285.663322][T13234] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /136/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 285.697682][T13234] EXT4-fs error (device loop7): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 285.728426][T13234] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /136/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 285.731583][T15438] IPv6: sit1: Disabled Multicast RS [ 285.752031][T13234] EXT4-fs error (device loop7): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 285.785528][T15417] team0: Device gtp0 is of different type [ 285.791705][T13234] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /136/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 285.882849][T15417] team0: Device gtp0 is of different type [ 285.923914][T13988] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 285.951262][T15446] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26081 sclass=netlink_xfrm_socket pid=15446 comm=syz.0.3907 [ 286.120993][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.173452][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.213646][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.243313][T15474] set_capacity_and_notify: 1 callbacks suppressed [ 286.243330][T15474] loop6: detected capacity change from 0 to 512 [ 286.269344][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.280061][T15474] EXT4-fs: Ignoring removed nobh option [ 286.286783][T15474] EXT4-fs: Invalid want_extra_isize 95 [ 286.425749][ T12] bridge_slave_1: left allmulticast mode [ 286.431589][ T12] bridge_slave_1: left promiscuous mode [ 286.437387][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.458185][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3921'. [ 286.477708][ T12] bridge_slave_0: left allmulticast mode [ 286.483606][ T12] bridge_slave_0: left promiscuous mode [ 286.489331][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.535185][T15489] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3921'. [ 286.982088][ T12] hsr_slave_0: left promiscuous mode [ 286.987922][ T12] hsr_slave_1: left promiscuous mode [ 287.008675][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.016110][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.034152][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.041726][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.079785][ T12] veth1_macvtap: left promiscuous mode [ 287.085374][ T12] veth0_macvtap: left promiscuous mode [ 287.098245][ T12] veth1_vlan: left promiscuous mode [ 287.103545][ T12] veth0_vlan: left promiscuous mode [ 287.479410][T15463] chnl_net:caif_netlink_parms(): no params data found [ 287.616872][T15463] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.624067][T15463] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.641802][T15463] bridge_slave_0: entered allmulticast mode [ 287.652738][T15463] bridge_slave_0: entered promiscuous mode [ 287.662848][T15463] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.669993][T15463] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.720211][T15463] bridge_slave_1: entered allmulticast mode [ 287.737314][T15463] bridge_slave_1: entered promiscuous mode [ 287.782674][T15463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.814425][T15463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.857653][ T12] IPVS: stop unused estimator thread 0... [ 287.876277][T15463] team0: Port device team_slave_0 added [ 287.898901][T15463] team0: Port device team_slave_1 added [ 287.931369][T15463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.938534][T15463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.964623][T15463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.010241][T15556] loop6: detected capacity change from 0 to 8192 [ 288.023445][T15463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.030536][T15463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.056868][T15463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.120226][T15463] hsr_slave_0: entered promiscuous mode [ 288.134687][T15463] hsr_slave_1: entered promiscuous mode [ 288.155211][T15509] chnl_net:caif_netlink_parms(): no params data found [ 288.200579][T15579] xt_cluster: node mask cannot exceed total number of nodes [ 288.228263][T15579] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 288.270366][T15583] syzkaller1: entered promiscuous mode [ 288.275971][T15583] syzkaller1: entered allmulticast mode [ 288.282072][T15592] netlink: 'syz.6.3945': attribute type 3 has an invalid length. [ 288.290043][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3945'. [ 288.355601][T15509] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.362975][T15509] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.370693][T15509] bridge_slave_0: entered allmulticast mode [ 288.387877][T15509] bridge_slave_0: entered promiscuous mode [ 288.413893][T15509] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.421179][T15509] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.428668][T15509] bridge_slave_1: entered allmulticast mode [ 288.435321][T15509] bridge_slave_1: entered promiscuous mode [ 288.453894][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 288.453925][ T29] audit: type=1400 audit(2000000029.280:4853): avc: denied { append } for pid=15602 comm="syz.3.3948" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.472649][T15509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.507922][T15611] loop6: detected capacity change from 0 to 128 [ 288.548943][T15611] syz.6.3950: attempt to access beyond end of device [ 288.548943][T15611] loop6: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 288.552918][T15509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.602826][T15463] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 288.618730][T15463] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 288.656134][T15509] team0: Port device team_slave_0 added [ 288.662104][T15463] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 288.690032][T15463] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 288.709231][T15621] gtp1: entered promiscuous mode [ 288.714421][T15621] gtp1: entered allmulticast mode [ 288.722681][T15509] team0: Port device team_slave_1 added [ 288.757954][T15509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.765058][T15509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.791463][T15509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.821162][T15509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.828268][T15509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.854846][T15509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.902675][T15649] loop6: detected capacity change from 0 to 1024 [ 288.915371][T15509] hsr_slave_0: entered promiscuous mode [ 288.924639][T15509] hsr_slave_1: entered promiscuous mode [ 288.930768][T15509] debugfs: 'hsr0' already exists in 'hsr' [ 288.936550][T15509] Cannot create hsr debugfs directory [ 288.954886][T15463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.972539][T15649] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 288.987199][T15649] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.017631][T15649] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.3958: lblock 0 mapped to illegal pblock 0 (length 1) [ 289.036570][T15463] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.044385][T15649] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 289.056840][T15649] EXT4-fs (loop6): This should not happen!! Data will be lost [ 289.056840][T15649] [ 289.071146][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.078602][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.089217][T15649] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.3958: lblock 0 mapped to illegal pblock 0 (length 1) [ 289.120944][T15660] FAULT_INJECTION: forcing a failure. [ 289.120944][T15660] name failslab, interval 1, probability 0, space 0, times 0 [ 289.133791][T15660] CPU: 1 UID: 0 PID: 15660 Comm: syz.3.3960 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 289.133846][T15660] Tainted: [W]=WARN [ 289.133853][T15660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.133867][T15660] Call Trace: [ 289.133873][T15660] [ 289.133881][T15660] __dump_stack+0x1d/0x30 [ 289.133976][T15660] dump_stack_lvl+0x95/0xd0 [ 289.134006][T15660] dump_stack+0x15/0x1b [ 289.134030][T15660] should_fail_ex+0x263/0x280 [ 289.134141][T15660] should_failslab+0x8c/0xb0 [ 289.134167][T15660] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 289.134209][T15660] ? __alloc_skb+0x2f0/0x4b0 [ 289.134289][T15660] __alloc_skb+0x2f0/0x4b0 [ 289.134320][T15660] ? __alloc_skb+0x219/0x4b0 [ 289.134388][T15660] netlink_alloc_large_skb+0xbf/0xf0 [ 289.134433][T15660] netlink_sendmsg+0x40c/0x6f0 [ 289.134457][T15660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.134477][T15660] ____sys_sendmsg+0x5af/0x600 [ 289.134533][T15660] ___sys_sendmsg+0x195/0x1e0 [ 289.134577][T15660] __x64_sys_sendmsg+0xd4/0x160 [ 289.134603][T15660] x64_sys_call+0x17ba/0x3000 [ 289.134632][T15660] do_syscall_64+0xc0/0x2a0 [ 289.134700][T15660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.134728][T15660] RIP: 0033:0x7fe82466aeb9 [ 289.134787][T15660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.134884][T15660] RSP: 002b:00007fe8230c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.134906][T15660] RAX: ffffffffffffffda RBX: 00007fe8248e5fa0 RCX: 00007fe82466aeb9 [ 289.134924][T15660] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 289.134942][T15660] RBP: 00007fe8230c7090 R08: 0000000000000000 R09: 0000000000000000 [ 289.135032][T15660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.135046][T15660] R13: 00007fe8248e6038 R14: 00007fe8248e5fa0 R15: 00007ffdf8825d58 [ 289.135075][T15660] [ 289.228917][T15649] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 3: comm syz.6.3958: lblock 3 mapped to illegal pblock 3 (length 1) [ 289.271060][T15658] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.3958: lblock 0 mapped to illegal pblock 0 (length 1) [ 289.307610][T15649] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 289.324689][T15658] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.3958: lblock 0 mapped to illegal pblock 0 (length 1) [ 289.329326][T15649] EXT4-fs (loop6): This should not happen!! Data will be lost [ 289.329326][T15649] [ 289.366055][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.402005][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.425133][T15658] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.3958: lblock 0 mapped to illegal pblock 0 (length 1) [ 289.437817][T15463] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 289.448956][T15463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.457202][T15658] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.3958: lblock 0 mapped to illegal pblock 0 (length 1) [ 289.507682][T15649] __nla_validate_parse: 2 callbacks suppressed [ 289.507700][T15649] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3958'. [ 289.542976][T15658] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.3958: lblock 3 mapped to illegal pblock 3 (length 1) [ 289.571376][T15658] EXT4-fs error (device loop6): ext4_ext_remove_space:2955: inode #15: comm syz.6.3958: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 289.598241][T15509] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 289.651797][T15509] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 289.662377][T15509] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 289.679789][T15509] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 289.932030][T14679] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 290.181913][T15509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.201635][T15463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.221146][T15509] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.230419][T15691] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3964'. [ 290.239538][T15691] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3964'. [ 290.297342][T15509] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.307976][T15509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.320552][T15691] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3964'. [ 290.333308][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.340445][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.350348][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.357513][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.445354][T15711] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3968'. [ 290.513222][T15694] dummy0: entered promiscuous mode [ 290.519440][T15694] vlan2: entered promiscuous mode [ 290.625421][T15509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.797281][T15463] veth0_vlan: entered promiscuous mode [ 290.807917][T15463] veth1_vlan: entered promiscuous mode [ 290.841701][T15463] veth0_macvtap: entered promiscuous mode [ 290.864796][T15463] veth1_macvtap: entered promiscuous mode [ 290.911797][T15463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.932296][T15463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.949953][T15509] veth0_vlan: entered promiscuous mode [ 290.967170][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.979319][T15509] veth1_vlan: entered promiscuous mode [ 290.990815][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.016647][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.025433][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.039872][T15509] veth0_macvtap: entered promiscuous mode [ 291.054864][T15509] veth1_macvtap: entered promiscuous mode [ 291.066649][T15509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.075656][T15509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.111378][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.138147][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.172916][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.196075][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.232158][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3926'. [ 291.401600][T15799] loop9: detected capacity change from 0 to 1024 [ 291.408998][T15799] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 291.421381][T15799] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 291.431479][T15799] EXT4-fs (loop9): orphan cleanup on readonly fs [ 291.451917][T15799] Quota error (device loop9): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 291.480937][T15799] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 291.492764][T15799] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.3989: Failed to acquire dquot type 0 [ 291.504689][T15799] Quota error (device loop9): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 291.515589][ C1] ================================================================== [ 291.523709][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 291.530949][ C1] [ 291.533286][ C1] read-write to 0xffff888100073ab8 of 8 bytes by interrupt on cpu 0: [ 291.541372][ C1] wq_worker_tick+0x60/0x230 [ 291.545994][ C1] sched_tick+0xd7/0x210 [ 291.550349][ C1] update_process_times+0x15e/0x190 [ 291.555574][ C1] tick_nohz_handler+0x275/0x3d0 [ 291.560531][ C1] __hrtimer_run_queues+0x20f/0x590 [ 291.565761][ C1] hrtimer_interrupt+0x269/0x810 [ 291.570816][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 291.576749][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 291.582412][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.588420][ C1] crng_make_state+0xc1/0x200 [ 291.593160][ C1] _get_random_bytes+0x85/0x1b0 [ 291.598040][ C1] get_random_bytes+0x1d/0x30 [ 291.602759][ C1] nsim_dev_trap_report_work+0x482/0x630 [ 291.608413][ C1] process_scheduled_works+0x4cd/0x9d0 [ 291.613909][ C1] worker_thread+0x6bc/0x8b0 [ 291.618517][ C1] kthread+0x488/0x510 [ 291.622619][ C1] ret_from_fork+0x148/0x280 [ 291.627235][ C1] ret_from_fork_asm+0x1a/0x30 [ 291.632052][ C1] [ 291.634388][ C1] read-write to 0xffff888100073ab8 of 8 bytes by interrupt on cpu 1: [ 291.642465][ C1] wq_worker_tick+0x60/0x230 [ 291.647080][ C1] sched_tick+0xd7/0x210 [ 291.651351][ C1] update_process_times+0x15e/0x190 [ 291.656587][ C1] tick_nohz_handler+0x275/0x3d0 [ 291.661543][ C1] __hrtimer_run_queues+0x20f/0x590 [ 291.666790][ C1] hrtimer_interrupt+0x269/0x810 [ 291.671758][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 291.677687][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 291.683347][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.689357][ C1] __tsan_read1+0x4/0x180 [ 291.693732][ C1] in_aton+0x222/0x2c0 [ 291.697832][ C1] nsim_dev_trap_report_work+0x30e/0x630 [ 291.703491][ C1] process_scheduled_works+0x4cd/0x9d0 [ 291.708976][ C1] worker_thread+0x6bc/0x8b0 [ 291.713588][ C1] kthread+0x488/0x510 [ 291.717715][ C1] ret_from_fork+0x148/0x280 [ 291.722351][ C1] ret_from_fork_asm+0x1a/0x30 [ 291.727140][ C1] [ 291.729476][ C1] value changed: 0x00000000007b98a0 -> 0x00000000007bbfb0 [ 291.736636][ C1] [ 291.738985][ C1] Reported by Kernel Concurrency Sanitizer on: [ 291.745156][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 291.756465][ C1] Tainted: [W]=WARN [ 291.760288][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.770362][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 291.777153][ C1] ================================================================== [ 291.795572][T15799] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 291.816245][T15799] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.3989: Failed to acquire dquot type 0 [ 291.837213][T15799] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.3989: Freeing blocks not in datazone - block = 0, count = 4096 [ 291.852304][T15799] Quota error (device loop9): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 291.862470][T15799] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 291.872712][T15799] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.3989: Failed to acquire dquot type 0 [ 291.884387][T15799] EXT4-fs (loop9): 1 orphan inode deleted [ 291.890725][T15799] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 291.921995][T15509] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.