last executing test programs: 12m34.123395263s ago: executing program 4 (id=124): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000240)="b44c0854f3", 0x5, 0x40880, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x80000000}, @timestamp, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @window={0x3, 0xc, 0x4}, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 12m34.105064895s ago: executing program 4 (id=125): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8000ca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0xda2c, 0xfffe}, 0x8) 12m34.079767697s ago: executing program 4 (id=126): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) syz_open_dev$hidraw(&(0x7f0000000340), 0x0, 0x2) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(r0, 0xffffffffffffffff, 0x0) 12m33.473148251s ago: executing program 4 (id=130): r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)=""/245, 0xf5}], 0x1, 0x18}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x3ef, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002dbd7040fcdbdf251b00000008009a00"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000400)='.\x00', 0xa4000921) r8 = inotify_init1(0x80800) unshare(0x2a020400) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) getpriority(0x0, r9) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, 0x0, &(0x7f00000001c0)=0x38) r12 = inotify_add_watch(r8, &(0x7f0000000000)='.\x00', 0x10000a0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0xfffff7fd}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e09f54230f243b5ae8c3e4b39741", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r14 = dup(r8) inotify_rm_watch(r14, r12) 12m33.074743376s ago: executing program 4 (id=136): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 12m32.154241498s ago: executing program 4 (id=143): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1000400000de, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0x6, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x1, 0x406, 0x4, 0x7fffffff, 0xe}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8e, 0x0, 0x9, 0x9}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x12) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r11 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r11, 0x89e0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x87, 0xee, &(0x7f0000000080)="fa042ce1b54361e5406ce25c632e205e33126a27faca55d7696dc55c31b80379861e364dc4125b039dabe027ab7c78a7da6c1a240a8c3dd3a684ad3c7fc3ef837e06a2ecb375fb9cfbdb4002f0edaadf94e7effe9b752344f8684559514b018de6bd7c813e2be5ec3fc754c7a1480f0f0831c2ab45be378e472dc518cdbe198500817d086687f7", &(0x7f0000000140)=""/238, 0x4bd4f2f3, 0x0, 0x86, 0xf7, &(0x7f0000000300)="574449d2a0588212b391e17c2d4afd856f359b2794d6bfbd38030f6fc74bb120d3c8043146fc0f7de930321f43f4f73cb9a5e7b4127bcc0fed29f6955d1b34efbef8352e458704415aa30b9e9526a1bd9f66c96bd8ab247c896d2b3a268fa9889da767b12f2a34287f6af2290adfd6fdd3e8a95919438b8f79be060c4abb01822de3e5945d41", &(0x7f00000004c0)="f3f79da9a0eb839669c6106e5d723c43c6d905f95d6133ba2fb96e584e169b7171ba839563c2153384a3bb1abff93601378d9ba9f2afb70e0961fdc0ad130be2e354f9f4be3420e18172a4c5701a3a4b24efe4c41b0341439b9149748a6e35f9d393ae5a5a65a1a82302842fb5780bd4b8d03d86c9c371bccf65aaea1b50dcab206bbb3bb7bb308261d5d62122e27172a9d41ad6fa5eea3b74c571bf95d66e51ecbd307dbfd822e25495d07942c7679ad3ad7164afa106d01a0acc899745e023962dcbe6f18917f841df0a86f9ecfbeff8bebe2ccdd0e2ac8c2fbdc5845e4aa80facf3b3f9f0a8b56f690bb7d56296ca8da12fa5f382b0", 0x1, 0x0, 0x9ce}, 0x50) r12 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x121, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)=0x0) timer_settime(r13, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) 12m32.097388033s ago: executing program 32 (id=143): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1000400000de, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0x6, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x1, 0x406, 0x4, 0x7fffffff, 0xe}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8e, 0x0, 0x9, 0x9}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x12) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r11 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r11, 0x89e0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x87, 0xee, &(0x7f0000000080)="fa042ce1b54361e5406ce25c632e205e33126a27faca55d7696dc55c31b80379861e364dc4125b039dabe027ab7c78a7da6c1a240a8c3dd3a684ad3c7fc3ef837e06a2ecb375fb9cfbdb4002f0edaadf94e7effe9b752344f8684559514b018de6bd7c813e2be5ec3fc754c7a1480f0f0831c2ab45be378e472dc518cdbe198500817d086687f7", &(0x7f0000000140)=""/238, 0x4bd4f2f3, 0x0, 0x86, 0xf7, &(0x7f0000000300)="574449d2a0588212b391e17c2d4afd856f359b2794d6bfbd38030f6fc74bb120d3c8043146fc0f7de930321f43f4f73cb9a5e7b4127bcc0fed29f6955d1b34efbef8352e458704415aa30b9e9526a1bd9f66c96bd8ab247c896d2b3a268fa9889da767b12f2a34287f6af2290adfd6fdd3e8a95919438b8f79be060c4abb01822de3e5945d41", &(0x7f00000004c0)="f3f79da9a0eb839669c6106e5d723c43c6d905f95d6133ba2fb96e584e169b7171ba839563c2153384a3bb1abff93601378d9ba9f2afb70e0961fdc0ad130be2e354f9f4be3420e18172a4c5701a3a4b24efe4c41b0341439b9149748a6e35f9d393ae5a5a65a1a82302842fb5780bd4b8d03d86c9c371bccf65aaea1b50dcab206bbb3bb7bb308261d5d62122e27172a9d41ad6fa5eea3b74c571bf95d66e51ecbd307dbfd822e25495d07942c7679ad3ad7164afa106d01a0acc899745e023962dcbe6f18917f841df0a86f9ecfbeff8bebe2ccdd0e2ac8c2fbdc5845e4aa80facf3b3f9f0a8b56f690bb7d56296ca8da12fa5f382b0", 0x1, 0x0, 0x9ce}, 0x50) r12 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x121, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)=0x0) timer_settime(r13, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) 11m57.566448033s ago: executing program 0 (id=775): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setreuid(0x0, 0xee00) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000200)={0x6, 'bridge_slave_0\x00', {0x9}, 0x9}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7, 0x0, 0x0, 0x400, 0x9, 0x400182}) 11m57.547576845s ago: executing program 0 (id=778): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$packet(0x11, 0x2, 0x300) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x840000000002, 0x3, 0xff) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3672f1440f80172bc28eb4e2f90750908ff640fe9527c79c823d8717a32b1d38064b0e169bafa72cb9c6a31a733864e21c42e0f95645a35e25871798f8cfca73e5b06fd99521646bc3b3a7e04178514a543eb10098ce814a25f6a696689613f2abcf66545a1a699eb3b7242d63b3a8e7f99075d4e178d0", @ANYRES8=r2, @ANYRES32=r4, @ANYRES8=r1, @ANYRESOCT=r3], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0xfe, 0x0, 0x0, 0x0, 0x3, 0x80112, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xd1, 0x9}, 0x0, 0x0, 0x0, 0x4, 0x6, 0x7fffbffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000008010000", @ANYRES16=r6, @ANYBLOB="0000000000000000cbe4dff1f6eb10f226aec9c2", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r5], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x11, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={0x0, 0xc4}}, 0x40) 11m57.418336466s ago: executing program 0 (id=782): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r5, 0x29, 0x3, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000030", @ANYRES32=r7, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0002800500010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x200400c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x60040044}, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_generic(r2, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x9c97e3edff7aea80}, 0x4000000) r12 = socket(0x11, 0x3, 0x0) recvmsg(r12, &(0x7f0000000880)={&(0x7f00000002c0)=@in, 0x80, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/226, 0xe2}], 0x1}, 0x40) shutdown(r2, 0x0) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000340)=0x4) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000004c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1c, r13}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) syz_emit_ethernet(0xa7, 0x0, 0x0) 11m57.131406692s ago: executing program 0 (id=787): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="25790952e1d7e0a587", 0x9}], 0x1}, 0x4004) readv(r0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000002380)=""/4107, 0x0) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x6, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c00000009060108fffffc0000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f0000000100)="e72e1c2abfc5ef0cd1a8c0d7e55cf94409efc56fc52ebce2a15964ed5a10f1606a94d2a7fe869ed0b44423f65b86ee645673052ccb6971b308d212311be3378100782f0f44cf8398986fad8a3aff1c12a542e2161425ca5b910c7fa95c9a775eae938f0dd6264a3a8d003294687af1309e2130b8748370ca1ed9e0da89bb07bed9b7716de33d270cefe919bb4185536df692c77c8bc3d849f8ca3cdfea2d73a978a6f25de4fdfe69d6c72a05dd434816246d625fbd64d96bcc61beffbf603130a9d781", 0xc3}, {&(0x7f0000000200)="f59c7454def189f6399bb87339026dcb3d869c917324887237045d898f3466353efff6c0d3ac78b7266f5bde07032351d14593682ebe20f22a03d8aeddb7bb42e3b7bf4c4c1423284c6a370366dffa64d70e0a236187464108993ce4afd5404d135329db3a7d387186bf9068a44fa0b6d959e691b794815a3ddeb9f8993bdb7083ee2395bbd0", 0x86}, {&(0x7f0000000380)="afd1ceb29c8135bec4f2bb834873c5be44d343df70ad275dc11c66e7d19c7724ae3c3205edd2d4e0f14a8272382683d34e6cfa514a32c8f03972daf46138b1cf663ec04690e15d16c03376543eb081b7d85c33811c543c99686fef27f23f23e761c79735a4a43c285392a9c75c3e19e015744a61273b2d3fb1783e1093a5e1e1481d83a60bd89fcd7da21d008881af117e6cee8621f0424887fbfc35", 0x9c}, {&(0x7f00000014c0)="a0ad03c8e61cc7613f0636849f595a266a9750e2acfb11412820b0ee78d7b8faf634c0a0b13119c555567035e95aa21a16a6cf5b63c2121394383d72254c06595cdc2e81601d0616d10273838112c15784596fa86585f7f46eb108122b224ae4b924aea6d505bd229edda6971d1ad15ad384deeef9716171418f6db39369a46d09c73499b2a59e6909fe1a81", 0x8c}, {&(0x7f0000001580)="8ed88e420ed9047470a494366e79cebf14e82ac172271db4a47bf90b850b10447033cfdf6dd08a5f64f5ae2fe0018f3dcc935c1a3f4995421e972b74ef98838db78296f457a40ccbee76b654c43d2fd62f497f37a503d5ababf75d8b5919994fada0baff8ef0894800abbc66bcd8420dd51d0810346a12e4c98b405137dc20b69a361853f626cb19c5ca15ce618a7c9da23c8f05b2426a5febadf4816fee3738e92a9f0c42e05ab70e62caab4f277251dcb6ce19085ed18d4f9a30c9b097aebf3e5eb966beb5c7524415c7c24630f9c9e8c6e03876ac88d7c93a011936d04b1474", 0xe1}, {&(0x7f0000001780)="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", 0x1bf}], 0x7) 11m56.602201598s ago: executing program 0 (id=791): set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, 0xffffffffffffffff, 0x0) (async) io_submit(0x0, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000000bed000007"], 0x31) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async, rerun: 32) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) (rerun: 32) 11m54.771409491s ago: executing program 0 (id=813): syz_usb_connect(0x3, 0x36, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0xc) r0 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$tty1(0xc, 0x4, 0x1) keyctl$get_keyring_id(0x0, r0, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x3, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 11m54.708587227s ago: executing program 33 (id=813): syz_usb_connect(0x3, 0x36, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0xc) r0 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$tty1(0xc, 0x4, 0x1) keyctl$get_keyring_id(0x0, r0, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x3, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 7m24.185752281s ago: executing program 6 (id=3248): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000e80)={0x134, 0x39, 0x400, 0x70bd2c, 0x25dfdbfe, {0x1f}, [@nested={0x103, 0xd7, 0x0, 0x1, [@nested={0x4, 0x53}, @generic="ec837f85cff8da367f31a460ce9f541b4814969863dd6b1d117464f9d1bdc1a11a11d7eb1faebc3a46d43940896c3f959defe6440d8f3cd039dd4c53212a048a498077605f968fd7b163203edbc0153ef1690c48e664951f22e942ed7476900739a00336f5c7daa8b2e859696f8ec6c5dfcc83ae87527e0df49b139218b1415c0c5795c9b5675b3a6bb2b1febd2ec53f73a16da7efe3fb26c81ab44f118b07344b8ae5625d284d4e013623fd7cfdfce5483738747112f668e1addcb18b9dcc90b179c5d32bff35680a350806224c4dfbee606912a4801cce07d4e88f2aa1b58b09326a4b685529f9f3757188a83d24", @typed={0xc, 0x18, 0x0, 0x0, @u64=0x8}]}, @typed={0x6, 0xcf, 0x0, 0x0, @str='(\x00'}, @typed={0x11, 0x11d, 0x0, 0x0, @binary="3ee5f92aebe6917fd1969f3d16"}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000880}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/rt_cache\x00') lseek(r2, 0xa3d2, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/197, 0xc5}], 0x1, 0x36, 0xf) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 7m24.114480318s ago: executing program 6 (id=3250): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040)) syslog(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0xa}, 0x4, 0x6, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x40) preadv(r1, &(0x7f0000000480)=[{0x0}], 0x1, 0xfffffe01, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x7, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r6}, 0x38) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x11) 7m23.095928438s ago: executing program 6 (id=3256): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a) (async) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8003, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8003, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) (async) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x8000000a}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r4, 0x4, 0xc, 0x5, 0x8, 0x0, @loopback, @empty, 0x20, 0x20, 0x6dbcf353, 0x5}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r4, 0x4, 0xc, 0x5, 0x8, 0x0, @loopback, @empty, 0x20, 0x20, 0x6dbcf353, 0x5}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) (async) fcntl$lock(r5, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x1ff) open(0x0, 0x4827e, 0xdc) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r6, &(0x7f00000002c0)=""/124, 0x7c, 0x7) (async) pread64(r6, &(0x7f00000002c0)=""/124, 0x7c, 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r8, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4, &(0x7f0000000000)=0x10000005, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1, 0x6}, 0x1c) (async) sendto$inet6(r8, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1, 0x6}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @broadcast}, &(0x7f0000000140)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r9, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24048014}, 0x4055) 7m22.901120775s ago: executing program 6 (id=3260): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0xd25f55a255150ea5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x121}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a", 0xb}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d4", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000280)='.\x00', r1, &(0x7f0000000300)='./file0\x00', 0x0) 7m21.891834015s ago: executing program 6 (id=3265): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@mcast1, 0x4, 0x0, 0x4e21, 0x1, 0x0, 0x0, 0x0, 0x2e, 0x0, 0xee00}, {@in=@remote, 0x4d6, 0x32}, @in=@multicast2, {0x2, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x3f, 0x543}, {0x4, 0x7fffffffffffffff, 0xffffffffffffffff, 0x7}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r6}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x890}, 0x2014) accept4(r3, 0x0, 0x0, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000300)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x0, 0x4e22, 0x419f, 0xa, 0x30, 0x40, 0x5c}, {0x4, 0x2, 0xe, 0x7, 0x3, 0x8000000000000001, 0x0, 0x4}, {0x4, 0x6, 0x7, 0x4}, 0x7, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x4d6, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3505, 0x1, 0x0, 0x6, 0x7, 0x4, 0x280000}}, 0xe8) close(r7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x68, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000006910a000000000000400000000000000950000000000bfda4efaa7e20843c2fb0cc2050f4b9c0000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r9, 0x0, &(0x7f0000000140), 0x80000) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 7m21.14997278s ago: executing program 6 (id=3270): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x1ff, @mcast2, 0x8}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 7m21.14967828s ago: executing program 34 (id=3270): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x1ff, @mcast2, 0x8}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 7m16.950324972s ago: executing program 3 (id=3325): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x1}, 0xeb) prlimit64(0x0, 0x0, &(0x7f0000000600)={0x100000000000009, 0x9}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) memfd_create(&(0x7f0000000000)='\xaa\xaa\xaa\xaa\xaa', 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newtaction={0x14, 0x30, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40400c7}, 0x2400c800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r4, &(0x7f0000000080)='\x00\x00', 0x2}]) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r6, &(0x7f0000000100)='=', 0xfffffd4a, 0x4fed3) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) sendfile(r7, r2, 0x0, 0x1000) 7m16.926113625s ago: executing program 3 (id=3327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xeb, 0x3, 0xfffffffb, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc120000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 7m16.700621165s ago: executing program 3 (id=3331): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000a00000a2c0000000e0a01010000000000000000010000020900020073797a32000000000900010073797a300000000014000000110001"], 0x54}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x10, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@nodioread_nolock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@errors_remount}, {@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48c, &(0x7f00000002c0)="$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") 7m16.324153788s ago: executing program 3 (id=3334): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0xd25f55a255150ea5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x121}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a", 0xb}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d4", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000280)='.\x00', r1, &(0x7f0000000300)='./file0\x00', 0x0) 7m16.015323216s ago: executing program 3 (id=3335): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000440)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) fsetxattr$security_capability(r1, &(0x7f0000000080), &(0x7f0000000000)=@v2={0x2000000, [{0x0, 0x802b}, {0x5, 0x10}]}, 0x14, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)="bc3bfba577eb701d660e56f4caad", 0xe}], 0x1}}], 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in=@broadcast, 0x0, 0x4, 0xfffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffc, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffff190}, {0x3, 0x0, 0x80, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@private0, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x4, 0x1, 0x0, 0xf000000}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010010090780000"], 0x0) 7m15.757538858s ago: executing program 3 (id=3341): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x26, 0x2000000}, 0x10) 7m15.706590193s ago: executing program 35 (id=3341): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x26, 0x2000000}, 0x10) 20.418055537s ago: executing program 8 (id=6308): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x6378a155e7de65bf, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c736d6163d46673726f6f070029242c646566636f6e74657880effc7a39baf1a05f752c00"]) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x65cb, 0x4) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)}}], 0x1, 0x4000800) r5 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0xeae7, 0x0, 0x0, 0x68}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r5, 0x2afd, 0x308b, 0xc, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0xc801) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000000280)={{0x81, 0x2}, 'port1\x00', 0xa2, 0x1000, 0x5, 0x3, 0x8, 0xe, 0x9, 0x0, 0x7, 0xff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r9, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b40000000208050000000000000000000000000344000480080004400000000308000740fffff00108000740000000040800054000000007080002400000000708000840ffffff9b080007400000000308000340fffffff70900010073797a3128bc30000000000600024086dd0000050003008400000006000240600700001400048008000940000000030800014000000003240004800800814000000c0508000140907c9f8202b27e4e000000050800014000004000df3a4f26befe3826ef56ce2d1bd5b9cd4aabce667a6e2d5f11b81323c6e590806ae67e06"], 0xb4}}, 0x4000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') fcntl$getownex(r8, 0x10, &(0x7f0000000140)={0x0, 0x0}) r11 = syz_open_procfs(r10, &(0x7f00000005c0)='net/udplite6\x00') write$cgroup_netprio_ifpriomap(r11, 0x0, 0x0) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r12, 0x84, 0xc, &(0x7f0000000040)=0x3ff, 0x4) 19.160506389s ago: executing program 8 (id=6316): open_tree(0xffffffffffffff9c, &(0x7f0000000d80)='\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xbd3d1606e608939d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000ff2100"/20, @ANYRES32, @ANYBLOB="800200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000feffffff00"/28], 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x0, {0x2, 0x40, @private}, 'syz_tun\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0xa000000, 0xe, 0x0, &(0x7f00000000c0)="b994bc444b9893b04bf30981fd1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 18.284880106s ago: executing program 8 (id=6323): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x6, 0x4}, 0x102260, 0xffff, 0xf6, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0x3, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0x800000001ff, 0x2) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x10000008ebc, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000005c0)=""/4096, 0x5d, 0x1000, 0x1, 0x5, 0x10000}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x10, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0x10000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x9d}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x9}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) 18.082077284s ago: executing program 8 (id=6326): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003480)={0x0, 0x0}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, 0x0, 0x8100, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) poll(0x0, 0x0, 0x9) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) 16.549295321s ago: executing program 8 (id=6334): socket$igmp6(0xa, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast2}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, 0x0) readv(r7, &(0x7f0000000080)=[{&(0x7f0000000400)=""/235, 0xeb}], 0x1) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="0500000000000000000000007fbdbc14e20210cb166f7b79973be48736643064742be19767a0430a96dcf0b515ae937d0766f0784068d6bfbf853d90f76bf6cad413542521645a211e634acf1327a0e96a42f4b3d8e2b2418a4276c2e2eddce5607525809deeae6cc46d26e53547056ef5303cb81c0f8f2694ad16044e6348bacb7a9c28bc03db61de13436ff3ce70b573f57222a9952bdf94b943d5c72df15722b5282194e64d0e9c0394e44f37905de418063c8b37cc1c9c95f1163237", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r9 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r9) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socket$key(0xf, 0x3, 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 14.441827068s ago: executing program 8 (id=6349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) lstat(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r3, 0xee01, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1000400000de, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r7, 0x89e0, 0x0) r8 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 10.462139221s ago: executing program 2 (id=6367): socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast2}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, 0x0) readv(r8, &(0x7f0000000080)=[{&(0x7f0000000400)=""/235, 0xeb}], 0x1) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="0500000000000000000000007fbdbc14e20210cb166f7b79973be48736643064742be19767a0430a96dcf0b515ae937d0766f0784068d6bfbf853d90f76bf6cad413542521645a211e634acf1327a0e96a42f4b3d8e2b2418a4276c2e2eddce5607525809deeae6cc46d26e53547056ef5303cb81c0f8f2694ad16044e6348bacb7a9c28bc03db61de13436ff3ce70b573f57222a9952bdf94b943d5c72df15722b5282194e64d0e9c0394e44f37905de418063c8b37cc1c9c95f1163237", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r10 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r10) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socket$key(0xf, 0x3, 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 9.087857383s ago: executing program 1 (id=6371): r0 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x40, 0x4007, @fd_index=0x1, 0x400, 0x154, 0x8, 0x1a, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x1fffff6d, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r0, 0x3532, 0x32c9, 0x45, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x4000844) 8.684237119s ago: executing program 1 (id=6373): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5, 0x2}, 0x2, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="2c6f624a5f726f6c653d80006173682ca8ea26de004d22080834ec21408c1cbd571f6191519244adb50f367988fb2727cc32238fac4fbdc332b1719e340000000004f23246a8d5ec9c21dd657ad6d91f895438297d5da5a51f2163a3aefc9a13608114683a6be3371b75c707284241970a8159ba2bec7414c90ddbdd8218b3ce593b992196b6a3cd4bc2bb6754b654ba0fa3821193cdf866d2630a60f040d612f358308919f24bccb430ad754832a2402e3b7240e7eec9ad32c333f3dca7ab50db1f0415a70ece849f03e8441be2c1c54491c7428bbfdcea758eb7de27821cbc79a45c11b52ff4b704fefa01987a8fa8be2756414f8d10f022600574c68d130d46301ff52bbd08cf61190205"], 0x25, 0x359, &(0x7f0000000bc0)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x11, 0x1, 0x0, 0x40, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xc}, 0x8887, 0x10000, 0x8, 0x1, 0x80d, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$qrtr(0x2a, 0x2, 0x0) io_uring_setup(0xf09, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000008c0), r5) symlink(0x0, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(0x0, &(0x7f0000001200)=""/4096, 0x1000) 6.501025953s ago: executing program 5 (id=6375): unlink(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0), 0x8000, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000600)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x55, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(r4, 0x26, &(0x7f00000000c0)={0x2, 0x1, 0x9, 0x5}) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) exit(0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000000104050000000000000000000000000006000640000f004a0800054000000000050001"], 0x6c}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) io_setup(0xb, &(0x7f00000003c0)=0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) io_submit(r7, 0x2, &(0x7f0000000340)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4, r6, 0x0, 0x0, 0x7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x8, r8, 0x0, 0x0, 0x5, 0x0, 0x2}]) io_submit(r7, 0x3, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f0000000340)="f00bdda1f02d738feaf8d7f7326fb0f19fdd68b4b53de6145dbb5ddd75ac1cfe205e2dcdb3b63f62b63c98085913fcc8560a2c86b32dedd453e7ff323c0d7831ac5fd4a6da7070601371b1a4fde30d66734d3a39539d18275f", 0x59, 0xfffffffffffff801, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, r2, &(0x7f00000003c0)="8550cf252a2170122273d19de417a099ce8b4a444295eb5b19695d269d9a7591e3517fa43d591feadd7d111468c79d66d06587493b03db2a8bd71fe32b438533026b02ecd1c246a3f158c7aed73b049c7e8cc495a197f7f2d1a56eb6138fc41706db1f4fa46273e3153ffe41314258d6a5cc0631e8015cf4bab6fece84f2ec9446c2c2c1f4aa31bb4aa290d336295eff037c9667a67c6a978692600178d4fe2dfe", 0xa1, 0x0, 0x0, 0x2, r3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x9, 0xffffffffffffffff, &(0x7f0000000480)="e8073731104f2427c34432ca58e01bba600f42a20b5eb48aca12f1f473637b53bc77054243b44f590730c63e75b72cffcd1029918febeaf5b61fc9faa5b852a29747", 0x42, 0xffffffffffffffef, 0x0, 0x1, r3}]) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x8000, 0x3a, '-+@$$', 0x3a, '{{$\\', 0x3a, './file0'}, 0x30) 5.698837554s ago: executing program 1 (id=6376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf250100000030", @ANYRES32=0x0, @ANYBLOB="140004002001eaffffffffffffff0000000000010500020001"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x400c800) 5.606551282s ago: executing program 1 (id=6377): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x6378a155e7de65bf, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c736d6163d46673726f6f070029242c646566636f6e74657880effc7a39baf1a05f752c00"]) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x65cb, 0x4) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)}}], 0x1, 0x4000800) r5 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0xeae7, 0x0, 0x0, 0x68}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r5, 0x2afd, 0x308b, 0xc, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0xc801) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000000280)={{0x81, 0x2}, 'port1\x00', 0xa2, 0x1000, 0x5, 0x3, 0x8, 0xe, 0x9, 0x0, 0x7, 0xff}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') fcntl$getownex(r8, 0x10, &(0x7f0000000140)={0x0, 0x0}) r10 = syz_open_procfs(r9, &(0x7f00000005c0)='net/udplite6\x00') write$cgroup_netprio_ifpriomap(r10, 0x0, 0x0) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r11, 0x84, 0xc, &(0x7f0000000040)=0x3ff, 0x4) 4.526668828s ago: executing program 1 (id=6378): unshare(0x60000600) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x40800, &(0x7f0000000200)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@noinit_itable}, {@i_version}, {@debug}, {@resgid}]}, 0x1, 0x74f, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000000000000000000000000000000000000e88c913313b4caad298d5d062fd1305f1a1f0c9c0e1ffa38b656e85f8e88f573554eec517ea388c5fb60a6cf2f5a4d82d44a036fd99276d1a46c5b1ae86cd50b60ba8a98cd57a8c49a6b7465950028faf39b12bf8c3b9006cce88750ea9903a155ef159e2874df01308aa937b32e44f76a157774372a52ce37cb9e9397b29ab41a9f2d73548501b648f65d1be2"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200), 0x1, 0x569, &(0x7f00000002c0)="$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") sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000001200010500"/18], 0xac}}, 0x4000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000000), &(0x7f0000000240)=ANY=[], 0x361, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) 4.517963959s ago: executing program 5 (id=6379): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {r1, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1={0xfc, 0x1, '\x00', 0x2}, 0x9}, @in6={0xa, 0x4e22, 0x2, @local, 0x2}}}, 0x118) (fail_nth: 3) 4.248516463s ago: executing program 2 (id=6382): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b82, 0x0, @perf_bp={0x0, 0x1}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @broadcast}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) 3.950706319s ago: executing program 2 (id=6383): r0 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x40, 0x4007, @fd_index=0x1, 0x400, 0x154, 0x8, 0x1a, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x1fffff6d, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a479df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r0, 0x3532, 0x32c9, 0x45, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x4000844) 3.38625545s ago: executing program 7 (id=6384): r0 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x40, 0x4007, @fd_index=0x1, 0x400, 0x154, 0x8, 0x1a, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x1fffff6d, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r0, 0x3532, 0x32c9, 0x45, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x4000844) 3.298551287s ago: executing program 5 (id=6385): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x6378a155e7de65bf, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c736d6163d46673726f6f070029242c646566636f6e74657880effc7a39baf1a05f752c00"]) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x65cb, 0x4) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)}}], 0x1, 0x4000800) r5 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0xeae7, 0x0, 0x0, 0x68}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r5, 0x2afd, 0x308b, 0xc, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0xc801) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000000280)={{0x81, 0x2}, 'port1\x00', 0xa2, 0x1000, 0x5, 0x3, 0x8, 0xe, 0x9, 0x0, 0x7, 0xff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r9, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b40000000208050000000000000000000000000344000480080004400000000308000740fffff00108000740000000040800054000000007080002400000000708000840ffffff9b080007400000000308000340fffffff70900010073797a3128bc30000000000600024086dd0000050003008400000006000240600700001400048008000940000000030800014000000003240004800800814000000c0508000140907c9f8202b27e4e000000050800014000004000df3a4f26befe3826ef56ce2d1bd5b9cd4aabce667a6e2d5f11b81323c6e590806ae67e06"], 0xb4}}, 0x4000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fcntl$getownex(r8, 0x10, &(0x7f0000000140)) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.913971441s ago: executing program 2 (id=6386): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000080000009500"/32], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0xb, 0x5, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x4014850) ioctl$XFS_IOC_INUMBERS(r5, 0x80405880, &(0x7f0000002100)={{0x24, 0x4, 0x6, 0x5, 0x4}, [{0x7, 0x0, 0xff, 0x30}, {0x76e, 0x3, 0x3, 0x40}, {0x1, 0x6, 0x5, 0x25}]}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0}, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x9, 0x13, &(0x7f00000021c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10f9, 0x0, 0x0, 0x0, 0x2b}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r1}, @map_val={0x18, 0x2, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x7fff, 0xa3, &(0x7f0000002280)=""/163, 0x40f00, 0x15, '\x00', r8, @fallback=0x1c, r0, 0x8, &(0x7f0000000200)={0x7, 0x8}, 0x8, 0x10, &(0x7f0000002340)={0x2, 0x9, 0x1000, 0x1}, 0x10, 0xffffffffffffffff, r4, 0x1, &(0x7f0000002380)=[r7, r1, r0], &(0x7f00000023c0)=[{0x4, 0x1, 0x0, 0xa}], 0x10, 0x7ff}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, r7) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f0000000000)={0xfffffffffffffffc, 0x6, 0x7fff, 0x3, 0x2}) write$P9_RVERSION(r0, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x8000, 0x8, '9P2000.L'}, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.852930796s ago: executing program 7 (id=6387): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf250100000030", @ANYRES32=0x0, @ANYBLOB="140004002001eaffffffffffffff0000000000010500020001"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x400c800) 2.852441937s ago: executing program 7 (id=6388): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 2.834829208s ago: executing program 7 (id=6389): unlink(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0), 0x8000, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000600)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x55, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(r4, 0x26, &(0x7f00000000c0)={0x2, 0x1, 0x9, 0x5}) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) exit(0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000000104050000000000000000000000000006000640000f004a0800054000000000050001"], 0x6c}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) io_setup(0xb, &(0x7f00000003c0)=0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) io_submit(r7, 0x2, &(0x7f0000000340)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4, r6, 0x0, 0x0, 0x7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x8, r8, 0x0, 0x0, 0x5, 0x0, 0x2}]) io_submit(r7, 0x3, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f0000000340)="f00bdda1f02d738feaf8d7f7326fb0f19fdd68b4b53de6145dbb5ddd75ac1cfe205e2dcdb3b63f62b63c98085913fcc8560a2c86b32dedd453e7ff323c0d7831ac5fd4a6da7070601371b1a4fde30d66734d3a39539d18275f", 0x59, 0xfffffffffffff801, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, r2, &(0x7f00000003c0)="8550cf252a2170122273d19de417a099ce8b4a444295eb5b19695d269d9a7591e3517fa43d591feadd7d111468c79d66d06587493b03db2a8bd71fe32b438533026b02ecd1c246a3f158c7aed73b049c7e8cc495a197f7f2d1a56eb6138fc41706db1f4fa46273e3153ffe41314258d6a5cc0631e8015cf4bab6fece84f2ec9446c2c2c1f4aa31bb4aa290d336295eff037c9667a67c6a978692600178d4fe2dfe", 0xa1, 0x0, 0x0, 0x2, r3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x9, 0xffffffffffffffff, &(0x7f0000000480)="e8073731104f2427c34432ca58e01bba600f42a20b5eb48aca12f1f473637b53bc77054243b44f590730c63e75b72cffcd1029918febeaf5b61fc9faa5b852a29747", 0x42, 0xffffffffffffffef, 0x0, 0x1, r3}]) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x8000, 0x3a, '-+@$$', 0x3a, '{{$\\', 0x3a, './file0'}, 0x30) 1.744776855s ago: executing program 5 (id=6390): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x6378a155e7de65bf, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c736d6163d46673726f6f070029242c646566636f6e74657880effc7a39baf1a05f752c00"]) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x65cb, 0x4) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)}}], 0x1, 0x4000800) r5 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0xeae7, 0x0, 0x0, 0x68}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r5, 0x2afd, 0x308b, 0xc, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0xc801) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000000280)={{0x81, 0x2}, 'port1\x00', 0xa2, 0x1000, 0x5, 0x3, 0x8, 0xe, 0x9, 0x0, 0x7, 0xff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r9, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b40000000208050000000000000000000000000344000480080004400000000308000740fffff00108000740000000040800054000000007080002400000000708000840ffffff9b080007400000000308000340fffffff70900010073797a3128bc30000000000600024086dd0000050003008400000006000240600700001400048008000940000000030800014000000003240004800800814000000c0508000140907c9f8202b27e4e000000050800014000004000df3a4f26befe3826ef56ce2d1bd5b9cd4aabce667a6e2d5f11b81323c6e590806ae67e06"], 0xb4}}, 0x4000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/udplite6\x00') write$cgroup_netprio_ifpriomap(r10, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.711153568s ago: executing program 7 (id=6391): perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.474858549s ago: executing program 7 (id=6392): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000080000009500"/32], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0xb, 0x5, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x4014850) ioctl$XFS_IOC_INUMBERS(r5, 0x80405880, &(0x7f0000002100)={{0x24, 0x4, 0x6, 0x5, 0x4}, [{0x7, 0x0, 0xff, 0x30}, {0x76e, 0x3, 0x3, 0x40}, {0x1, 0x6, 0x5, 0x25}]}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x9, 0x13, &(0x7f00000021c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10f9, 0x0, 0x0, 0x0, 0x2b}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r1}, @map_val={0x18, 0x2, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x7fff, 0xa3, &(0x7f0000002280)=""/163, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x1c, r0, 0x8, &(0x7f0000000200)={0x7, 0x8}, 0x8, 0x10, &(0x7f0000002340)={0x2, 0x9, 0x1000, 0x1}, 0x10, 0xffffffffffffffff, r4, 0x1, &(0x7f0000002380)=[r7, r1, r0], &(0x7f00000023c0)=[{0x4, 0x1, 0x0, 0xa}], 0x10, 0x7ff}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, r7) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f0000000000)={0xfffffffffffffffc, 0x6, 0x7fff, 0x3, 0x2}) write$P9_RVERSION(r0, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x8000, 0x8, '9P2000.L'}, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) 944.986726ms ago: executing program 2 (id=6393): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@deltaction={0x24, 0x31, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}]}]}, 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 629.580894ms ago: executing program 2 (id=6394): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x6378a155e7de65bf, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c736d6163d46673726f6f070029242c646566636f6e74657880effc7a39baf1a05f752c00"]) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x65cb, 0x4) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)}}], 0x1, 0x4000800) r5 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0xeae7, 0x0, 0x0, 0x68}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r5, 0x2afd, 0x308b, 0xc, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0xc801) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000000280)={{0x81, 0x2}, 'port1\x00', 0xa2, 0x1000, 0x5, 0x3, 0x8, 0xe, 0x9, 0x0, 0x7, 0xff}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') fcntl$getownex(r8, 0x10, &(0x7f0000000140)={0x0, 0x0}) r10 = syz_open_procfs(r9, &(0x7f00000005c0)='net/udplite6\x00') write$cgroup_netprio_ifpriomap(r10, 0x0, 0x0) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r11, 0x84, 0xc, &(0x7f0000000040)=0x3ff, 0x4) 628.740014ms ago: executing program 5 (id=6395): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x7, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8002, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x10000009, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0xfffffffe, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x8, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c00"], 0x24}], 0x1}, 0x0) 412.826054ms ago: executing program 5 (id=6396): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x6378a155e7de65bf, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c736d6163d46673726f6f070029242c646566636f6e74657880effc7a39baf1a05f752c00"]) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x65cb, 0x4) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)}}], 0x1, 0x4000800) r5 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0xeae7, 0x0, 0x0, 0x68}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r5, 0x2afd, 0x308b, 0xc, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0xc801) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000000280)={{0x81, 0x2}, 'port1\x00', 0xa2, 0x1000, 0x5, 0x3, 0x8, 0xe, 0x9, 0x0, 0x7, 0xff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r9, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b40000000208050000000000000000000000000344000480080004400000000308000740fffff00108000740000000040800054000000007080002400000000708000840ffffff9b080007400000000308000340fffffff70900010073797a3128bc30000000000600024086dd0000050003008400000006000240600700001400048008000940000000030800014000000003240004800800814000000c0508000140907c9f8202b27e4e000000050800014000004000df3a4f26befe3826ef56ce2d1bd5b9cd4aabce667a6e2d5f11b81323c6e590806ae67e06"], 0xb4}}, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fcntl$getownex(r8, 0x10, &(0x7f0000000140)={0x0, 0x0}) r11 = syz_open_procfs(r10, &(0x7f00000005c0)='net/udplite6\x00') write$cgroup_netprio_ifpriomap(r11, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 0s ago: executing program 1 (id=6397): r0 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x40, 0x4007, @fd_index=0x1, 0x400, 0x154, 0x8, 0x1a, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x1fffff6d, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a479df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r0, 0x3532, 0x32c9, 0x45, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x4000844) kernel console output (not intermixed with test programs): 210059][ T70] net_ratelimit: 27 callbacks suppressed [ 729.210077][ T70] bond1: (slave macvlan2): failed to get link speed/duplex [ 729.265898][T24958] Process accounting resumed [ 729.332681][T23578] udevd[23578]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 729.345154][T22854] udevd[22854]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 729.356423][T20128] bond1: (slave macvlan2): failed to get link speed/duplex [ 729.358045][T22852] udevd[22852]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 729.413263][T24975] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6017'. [ 729.426586][T24975] geneve2: entered promiscuous mode [ 729.431872][T24975] geneve2: entered allmulticast mode [ 729.438967][ T70] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.448195][ T70] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.457672][ T70] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.466764][ T70] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.485482][ T70] bond1: (slave macvlan2): failed to get link speed/duplex [ 729.595938][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 729.705487][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 729.816213][ T70] bond1: (slave macvlan2): failed to get link speed/duplex [ 729.939020][T24981] loop2: detected capacity change from 0 to 512 [ 729.945700][ T70] bond1: (slave macvlan2): failed to get link speed/duplex [ 729.953225][T24981] EXT4-fs: Ignoring removed bh option [ 729.967997][T24981] EXT4-fs: inline encryption not supported [ 729.975858][T24981] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 729.997738][T24981] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 730.000161][ T28] audit: type=1400 audit(1771942289.053:1967): avc: denied { accept } for pid=24982 comm="syz.8.6020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 730.013404][T24983] netlink: 84 bytes leftover after parsing attributes in process `syz.8.6020'. [ 730.038413][T24981] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6022: bg 0: block 248: padding at end of block bitmap is not set [ 730.059147][T24981] loop2: lost filesystem error report for type 5 error -117 [ 730.059311][T24981] Quota error (device loop2): write_blk: dquota write failed [ 730.066644][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 730.066665][ C0] EXT4-fs (loop2): last error at time 1771942289: ext4_validate_block_bitmap:441 [ 730.075473][ T4815] bond1: (slave macvlan2): failed to get link speed/duplex [ 730.083716][T24981] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 730.107723][T24981] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.6022: Failed to acquire dquot type 1 [ 730.119585][T24981] loop2: lost filesystem error report for type 5 error -117 [ 730.120292][T24981] EXT4-fs (loop2): 1 truncate cleaned up [ 730.133695][T24981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 730.205050][T24989] netlink: 'syz.8.6023': attribute type 1 has an invalid length. [ 730.213938][T24990] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6022'. [ 730.218793][T24989] bond2: entered promiscuous mode [ 730.230171][T24989] bond2: entered allmulticast mode [ 730.236588][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 730.262096][T24989] bond2: (slave ip6gretap1): making interface the new active one [ 730.273950][T24989] ip6gretap1: entered promiscuous mode [ 730.280317][T24989] ip6gretap1: entered allmulticast mode [ 730.287707][T24989] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 730.307451][T24995] team0: entered promiscuous mode [ 730.312713][T24995] team_slave_0: entered promiscuous mode [ 730.319050][T24995] team_slave_1: entered promiscuous mode [ 730.325354][T24994] team0: left promiscuous mode [ 730.331348][T24994] team_slave_0: left promiscuous mode [ 730.337136][T24994] team_slave_1: left promiscuous mode [ 730.366260][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 730.396600][T24996] xfrm0 speed is unknown, defaulting to 1000 [ 730.497940][T24996] lo speed is unknown, defaulting to 1000 [ 730.820034][T12401] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 731.439851][T25014] loop2: detected capacity change from 0 to 1024 [ 731.479142][T25014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 731.553899][T25014] ext4 filesystem being mounted at /591/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 731.632951][T25014] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 3: comm syz.2.6028: lblock 3 mapped to illegal pblock 3 (length 3) [ 731.672435][T25024] xfrm0 speed is unknown, defaulting to 1000 [ 731.687877][T25014] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 731.743392][T25014] EXT4-fs (loop2): This should not happen!! Data will be lost [ 731.743392][T25014] [ 731.771843][T25024] lo speed is unknown, defaulting to 1000 [ 731.926653][ T4815] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 731.972401][ T4815] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 732.014001][ T4815] EXT4-fs (loop2): This should not happen!! Data will be lost [ 732.014001][ T4815] [ 732.047763][T12401] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 732.370496][T25041] loop2: detected capacity change from 0 to 512 [ 732.426542][T25041] EXT4-fs: Ignoring removed bh option [ 732.459295][T25041] EXT4-fs: inline encryption not supported [ 732.508401][T25041] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 732.556481][T25041] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 732.586362][T25041] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6038: bg 0: block 248: padding at end of block bitmap is not set [ 732.601165][T25041] loop2: lost filesystem error report for type 5 error -117 [ 732.605444][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 732.615535][T25041] Quota error (device loop2): write_blk: dquota write failed [ 732.619180][ C0] EXT4-fs (loop2): last error at time 1771942291: ext4_validate_block_bitmap:441 [ 732.687949][T25041] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 732.721343][T25046] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6039'. [ 732.733497][ T28] audit: type=1326 audit(1771942291.783:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25026 comm="syz.8.6033" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc5388c629 code=0x0 [ 732.757341][T25041] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.6038: Failed to acquire dquot type 1 [ 732.789607][T25041] loop2: lost filesystem error report for type 5 error -117 [ 732.790778][T25041] EXT4-fs (loop2): 1 truncate cleaned up [ 732.832663][T25041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 732.867452][T25052] FAULT_INJECTION: forcing a failure. [ 732.867452][T25052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.906226][T25052] CPU: 0 UID: 0 PID: 25052 Comm: syz.7.6041 Tainted: G W syzkaller #0 PREEMPT(full) [ 732.906271][T25052] Tainted: [W]=WARN [ 732.906278][T25052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 732.906292][T25052] Call Trace: [ 732.906301][T25052] [ 732.906310][T25052] __dump_stack+0x1d/0x30 [ 732.906338][T25052] dump_stack_lvl+0x95/0xd0 [ 732.906362][T25052] dump_stack+0x15/0x1b [ 732.906427][T25052] should_fail_ex+0x263/0x280 [ 732.906525][T25052] should_fail+0xb/0x20 [ 732.906545][T25052] should_fail_usercopy+0x1a/0x20 [ 732.906570][T25052] _copy_from_user+0x1c/0xb0 [ 732.906596][T25052] __se_sys_move_pages+0xdec/0x1420 [ 732.906638][T25052] ? mutex_unlock+0x4e/0x90 [ 732.906673][T25052] ? fput+0x8f/0xc0 [ 732.906718][T25052] ? ksys_write+0x194/0x1a0 [ 732.906783][T25052] __x64_sys_move_pages+0x78/0x90 [ 732.906803][T25052] x64_sys_call+0x1d35/0x3020 [ 732.906825][T25052] do_syscall_64+0x12c/0x370 [ 732.906878][T25052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.906917][T25052] RIP: 0033:0x7fb55627c629 [ 732.906932][T25052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.906964][T25052] RSP: 002b:00007fb554ccf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 732.907062][T25052] RAX: ffffffffffffffda RBX: 00007fb5564f5fa0 RCX: 00007fb55627c629 [ 732.907104][T25052] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 0000000000000000 [ 732.907118][T25052] RBP: 00007fb554ccf090 R08: 00002000000001c0 R09: 0000000000000000 [ 732.907133][T25052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.907202][T25052] R13: 00007fb5564f6038 R14: 00007fb5564f5fa0 R15: 00007ffecc43e4a8 [ 732.907276][T25052] [ 732.911279][T25053] loop1: detected capacity change from 0 to 2048 [ 733.142609][T25058] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6042'. [ 733.224217][T25053] loop1: detected capacity change from 0 to 1024 [ 733.246918][T25061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6043'. [ 733.347817][T25050] xfrm0 speed is unknown, defaulting to 1000 [ 733.405067][T25053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 733.512021][T25070] loop8: detected capacity change from 0 to 1024 [ 733.585372][T25070] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 733.609337][T25059] xfrm0 speed is unknown, defaulting to 1000 [ 733.609375][T25050] lo speed is unknown, defaulting to 1000 [ 733.631351][T25070] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 733.705786][T25070] JBD2: no valid journal superblock found [ 733.711540][T25070] EXT4-fs (loop8): Could not load journal inode [ 733.795034][T25059] lo speed is unknown, defaulting to 1000 [ 733.850389][T24739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.940164][T25082] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25082 comm=syz.8.6049 [ 733.979601][T25086] loop1: detected capacity change from 0 to 2048 [ 734.034737][T25086] loop1: detected capacity change from 0 to 1024 [ 734.060316][T25083] xfrm0 speed is unknown, defaulting to 1000 [ 734.084672][T25086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.215786][T25083] lo speed is unknown, defaulting to 1000 [ 734.287021][ T70] net_ratelimit: 30 callbacks suppressed [ 734.287040][ T70] bond1: (slave macvlan2): failed to get link speed/duplex [ 734.315145][T25088] loop8: detected capacity change from 0 to 128 [ 734.473624][T25092] 9pnet_fd: Insufficient options for proto=fd [ 734.487972][ T70] bond1: (slave macvlan2): failed to get link speed/duplex [ 734.546735][T24739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.616204][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 734.730756][T12401] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 734.741537][ T70] bond1: (slave macvlan2): failed to get link speed/duplex [ 734.856672][ T70] bond1: (slave macvlan2): failed to get link speed/duplex [ 734.922374][T25103] loop1: detected capacity change from 0 to 8192 [ 734.970133][ T70] bond1: (slave macvlan2): failed to get link speed/duplex [ 735.016953][T22854] loop1: p1 < > p2 p4 < p5 > [ 735.036367][T22854] loop1: partition table partially beyond EOD, truncated [ 735.067468][T22854] loop1: p1 start 134217728 is beyond EOD, truncated [ 735.166333][ T70] bond1: (slave macvlan2): failed to get link speed/duplex [ 735.181239][T22854] loop1: p2 size 591360 extends beyond EOD, truncated [ 735.198504][T22854] loop1: p5 size 591360 extends beyond EOD, truncated [ 735.218874][T25103] loop1: p1 < > p2 p4 < p5 > [ 735.316435][T20127] bond1: (slave macvlan2): failed to get link speed/duplex [ 735.327991][T25103] loop1: partition table partially beyond EOD, truncated [ 735.686979][ T40] bond1: (slave macvlan2): failed to get link speed/duplex [ 735.750076][T25103] loop1: p1 start 134217728 is beyond EOD, truncated [ 735.789876][ T28] audit: type=1326 audit(1771942294.813:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25093 comm="syz.5.6052" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f258d17c629 code=0x0 [ 735.846844][ T70] bond1: (slave macvlan2): failed to get link speed/duplex [ 735.889127][T25103] loop1: p2 size 591360 extends beyond EOD, truncated [ 736.046192][T25123] loop7: detected capacity change from 0 to 1024 [ 736.133426][T25103] loop1: p5 size 591360 extends beyond EOD, truncated [ 736.163911][T25123] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 736.245640][T25123] ext4 filesystem being mounted at /541/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 736.409365][T25123] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 3: comm syz.7.6058: lblock 3 mapped to illegal pblock 3 (length 3) [ 736.555676][T25123] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 736.688360][T25123] EXT4-fs (loop7): This should not happen!! Data will be lost [ 736.688360][T25123] [ 736.800480][ T28] audit: type=1326 audit(1771942295.843:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25105 comm="syz.2.6055" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56014fc629 code=0x0 [ 736.954489][T25109] xfrm0 speed is unknown, defaulting to 1000 [ 736.996345][ T4815] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 737.044750][ T4815] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 737.084258][ T4815] EXT4-fs (loop7): This should not happen!! Data will be lost [ 737.084258][ T4815] [ 737.128226][T25109] lo speed is unknown, defaulting to 1000 [ 737.143062][T14749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 737.251794][T25137] loop7: detected capacity change from 0 to 2048 [ 737.315525][T25137] loop7: detected capacity change from 0 to 1024 [ 737.324545][T25136] xfrm0 speed is unknown, defaulting to 1000 [ 737.397977][T25137] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.431666][T25144] loop2: detected capacity change from 0 to 2048 [ 737.589698][T25144] loop2: detected capacity change from 0 to 1024 [ 737.617051][T25144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.654944][T25136] lo speed is unknown, defaulting to 1000 [ 737.682626][T25141] xfrm0 speed is unknown, defaulting to 1000 [ 737.782544][T25141] lo speed is unknown, defaulting to 1000 [ 737.809153][T14749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.047275][T25154] 9pnet_fd: Insufficient options for proto=fd [ 738.122439][T25156] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6067'. [ 738.171461][ T28] audit: type=1400 audit(1771942297.223:1971): avc: denied { watch watch_reads } for pid=25159 comm="syz.7.6069" path="/544/file1" dev="tmpfs" ino=2958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 738.187657][T25162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6068'. [ 738.349933][T25167] loop1: detected capacity change from 0 to 1024 [ 738.388114][T25167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 738.403096][T25167] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 738.403484][T12401] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.434637][T25167] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.6070: lblock 3 mapped to illegal pblock 3 (length 3) [ 738.499841][T25167] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 738.515175][T25175] loop7: detected capacity change from 0 to 1024 [ 738.554328][T25167] EXT4-fs (loop1): This should not happen!! Data will be lost [ 738.554328][T25167] [ 738.583722][T25175] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 738.613909][T25175] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #3: block 1: comm syz.7.6073: lblock 1 mapped to illegal pblock 1 (length 1) [ 738.700225][T25175] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 738.700371][T25175] Quota error (device loop7): write_blk: dquota write failed [ 738.709526][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 738.709547][ C0] EXT4-fs (loop7): initial error at time 1771942297: ext4_map_blocks:818: inode 3: block 1 [ 738.709580][ C0] EXT4-fs (loop7): last error at time 1771942297: ext4_map_blocks:818: inode 3: block 1 [ 738.782247][T25175] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 738.800145][ T70] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 738.815340][T25175] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.6073: Failed to acquire dquot type 0 [ 738.828559][T25175] loop7: lost filesystem error report for type 5 error -117 [ 738.828740][T25175] EXT4-fs error (device loop7): ext4_free_blocks:6724: comm syz.7.6073: Freeing blocks not in datazone - block = 0, count = 4096 [ 738.828886][ T70] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 738.836401][T25175] loop7: lost filesystem error report for type 5 error -117 [ 738.856734][ T70] EXT4-fs (loop1): This should not happen!! Data will be lost [ 738.856734][ T70] [ 738.870839][T25183] loop5: detected capacity change from 0 to 1024 [ 738.878996][T25175] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.6073: Invalid inode bitmap blk 0 in block_group 0 [ 738.902243][ T4820] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 738.921426][T25183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 738.933750][ T4820] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 738.933933][ T4820] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 738.943442][T25175] loop7: lost filesystem error report for type 5 error -117 [ 738.943550][T25175] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 738.943645][T25175] loop7: lost filesystem error report for type 5 error -117 [ 738.943769][T25175] EXT4-fs (loop7): 1 orphan inode deleted [ 738.953005][ T4820] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:11: Failed to release dquot type 0 [ 738.963457][T25183] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 738.969427][ T4820] loop7: lost filesystem error report for type 5 error -117 [ 739.023812][T24739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 739.044843][T25175] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.062271][T25183] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.6075: lblock 3 mapped to illegal pblock 3 (length 3) [ 739.083835][T25183] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 739.103406][T25175] syzkaller0: entered promiscuous mode [ 739.111249][T25175] syzkaller0: entered allmulticast mode [ 739.118235][T25183] EXT4-fs (loop5): This should not happen!! Data will be lost [ 739.118235][T25183] [ 739.170746][T25179] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6075: lblock 3 mapped to illegal pblock 3 (length 1) [ 739.209790][T25179] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6075: lblock 3 mapped to illegal pblock 3 (length 1) [ 739.235313][T25179] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6075: lblock 3 mapped to illegal pblock 3 (length 1) [ 739.271072][T25187] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6075: lblock 3 mapped to illegal pblock 3 (length 1) [ 739.292687][T25187] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6075: lblock 3 mapped to illegal pblock 3 (length 1) [ 739.321806][T25179] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6075: lblock 3 mapped to illegal pblock 3 (length 1) [ 739.347948][T14749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.369043][T25187] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6075: lblock 3 mapped to illegal pblock 3 (length 1) [ 739.385510][ T4815] net_ratelimit: 27 callbacks suppressed [ 739.385524][ T4815] bond1: (slave macvlan2): failed to get link speed/duplex [ 739.412379][T25179] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6075: lblock 3 mapped to illegal pblock 3 (length 1) [ 739.420459][T25192] loop7: detected capacity change from 0 to 128 [ 739.429579][T25187] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6075: lblock 3 mapped to illegal pblock 3 (length 1) [ 739.470901][T25192] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 739.499643][T25192] ext4 filesystem being mounted at /547/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 739.537231][ T70] bond1: (slave macvlan2): failed to get link speed/duplex [ 739.548485][T25195] loop1: detected capacity change from 0 to 512 [ 739.564447][T25192] netlink: 'syz.7.6077': attribute type 14 has an invalid length. [ 739.564921][T25195] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 739.584361][T25195] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.6078: invalid indirect mapped block 4294967295 (level 1) [ 739.607147][T25195] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 739.608160][T25195] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.6078: invalid indirect mapped block 4294967295 (level 1) [ 739.617373][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 739.617391][ C1] EXT4-fs (loop1): initial error at time 1771942298: ext4_free_branches:1023: inode 11 [ 739.617434][ C1] EXT4-fs (loop1): last error at time 1771942298: ext4_free_branches:1023: inode 11 [ 739.667412][ T4815] bond1: (slave macvlan2): failed to get link speed/duplex [ 739.679641][T25195] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 739.680084][T25195] EXT4-fs (loop1): 2 truncates cleaned up [ 739.749686][T25195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.768991][T14749] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 739.817075][ T70] bond1: (slave macvlan2): failed to get link speed/duplex [ 739.932592][ T70] bond1: (slave macvlan2): failed to get link speed/duplex [ 740.068806][ T4820] bond1: (slave macvlan2): failed to get link speed/duplex [ 740.102806][T24739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.123397][T25202] xfrm0 speed is unknown, defaulting to 1000 [ 740.226503][ T4820] bond1: (slave macvlan2): failed to get link speed/duplex [ 740.247130][ T70] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 740.296221][ T70] EXT4-fs (loop5): This should not happen!! Data will be lost [ 740.296221][ T70] [ 740.327760][T25202] lo speed is unknown, defaulting to 1000 [ 740.338037][T22886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 740.439562][T25219] xfrm0 speed is unknown, defaulting to 1000 [ 740.463280][T20127] bond1: (slave macvlan2): failed to get link speed/duplex [ 740.498809][T25221] loop5: detected capacity change from 0 to 2048 [ 740.506992][T25217] 9pnet_fd: Insufficient options for proto=fd [ 740.526038][T25202] chnl_net:caif_netlink_parms(): no params data found [ 740.539876][T25219] lo speed is unknown, defaulting to 1000 [ 740.664524][ T4820] bond1: (slave macvlan2): failed to get link speed/duplex [ 740.709840][T25221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 740.850457][T24840] syz_tun (unregistering): left allmulticast mode [ 740.914156][T20127] bond1: (slave macvlan2): failed to get link speed/duplex [ 741.003553][T25202] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.011878][T25202] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.019345][T25202] bridge_slave_0: entered allmulticast mode [ 741.026846][T25202] bridge_slave_0: entered promiscuous mode [ 741.033970][T25202] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.041167][T25202] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.049246][T25202] bridge_slave_1: entered allmulticast mode [ 741.056387][T25202] bridge_slave_1: entered promiscuous mode [ 741.068376][T22886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.101878][T25202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.127952][T25202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.202257][T25202] team0: Port device team_slave_0 added [ 741.203284][T25237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 741.210143][T25202] team0: Port device team_slave_1 added [ 741.265211][T25237] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 741.392294][T25243] EXT4-fs: Ignoring removed nobh option [ 741.498287][T25243] EXT4-fs (loop1): 1 orphan inode deleted [ 741.511198][T25243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.667127][T25243] can0: slcan on ttyS3. [ 741.743811][T25237] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.6084: lblock 3 mapped to illegal pblock 3 (length 3) [ 741.824113][T25237] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 741.840968][T25237] EXT4-fs (loop5): This should not happen!! Data will be lost [ 741.840968][T25237] [ 741.859767][T25202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.880293][T25202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.933615][T20128] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:17: lblock 8 mapped to illegal pblock 8 (length 8) [ 741.962649][T20128] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 741.975248][T25202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.976845][T25202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.994774][T25202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.032537][T25202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.038257][T20128] EXT4-fs (loop5): This should not happen!! Data will be lost [ 742.038257][T20128] [ 742.056840][T22886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 742.202697][T25202] hsr_slave_0: entered promiscuous mode [ 742.205546][T25234] can0 (unregistered): slcan off ttyS3. [ 742.213403][T25202] hsr_slave_1: entered promiscuous mode [ 742.219958][T25235] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.6085: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 742.222712][T25202] debugfs: 'hsr0' already exists in 'hsr' [ 742.250454][T25202] Cannot create hsr debugfs directory [ 742.274903][ T28] audit: type=1326 audit(1771942301.323:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25247 comm="syz.8.6087" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc5388c629 code=0x7ffe0000 [ 742.297030][T24739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.457075][T25202] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.520422][T25291] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6092'. [ 742.556699][T25202] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.608767][T25299] set_capacity_and_notify: 3 callbacks suppressed [ 742.608784][T25299] loop5: detected capacity change from 0 to 2048 [ 742.670859][T25303] FAULT_INJECTION: forcing a failure. [ 742.670859][T25303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.726151][T25303] CPU: 1 UID: 0 PID: 25303 Comm: syz.1.6095 Tainted: G W syzkaller #0 PREEMPT(full) [ 742.726185][T25303] Tainted: [W]=WARN [ 742.726274][T25303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 742.726285][T25303] Call Trace: [ 742.726292][T25303] [ 742.726300][T25303] __dump_stack+0x1d/0x30 [ 742.726328][T25303] dump_stack_lvl+0x95/0xd0 [ 742.726505][T25303] dump_stack+0x15/0x1b [ 742.726523][T25303] should_fail_ex+0x263/0x280 [ 742.726545][T25303] should_fail+0xb/0x20 [ 742.726573][T25303] should_fail_usercopy+0x1a/0x20 [ 742.726602][T25303] _copy_from_user+0x1c/0xb0 [ 742.726705][T25303] ___sys_sendmsg+0xc1/0x1e0 [ 742.726747][T25303] __x64_sys_sendmsg+0xd4/0x160 [ 742.726773][T25303] x64_sys_call+0x194c/0x3020 [ 742.726821][T25303] do_syscall_64+0x12c/0x370 [ 742.726903][T25303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.726926][T25303] RIP: 0033:0x7fc087f1c629 [ 742.726944][T25303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.727041][T25303] RSP: 002b:00007fc08696f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 742.727062][T25303] RAX: ffffffffffffffda RBX: 00007fc088195fa0 RCX: 00007fc087f1c629 [ 742.727089][T25303] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 742.727101][T25303] RBP: 00007fc08696f090 R08: 0000000000000000 R09: 0000000000000000 [ 742.727113][T25303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.727124][T25303] R13: 00007fc088196038 R14: 00007fc088195fa0 R15: 00007ffd7c577238 [ 742.727143][T25303] [ 742.947555][T25307] loop1: detected capacity change from 0 to 1024 [ 742.967463][T25202] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.014800][T25294] xfrm0 speed is unknown, defaulting to 1000 [ 743.022418][T25307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 743.036512][T25307] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 743.062065][T25202] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.062525][T25307] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.6097: lblock 3 mapped to illegal pblock 3 (length 3) [ 743.094497][T25312] loop7: detected capacity change from 0 to 1024 [ 743.096324][T25307] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 743.133710][T25294] lo speed is unknown, defaulting to 1000 [ 743.140250][T25307] EXT4-fs (loop1): This should not happen!! Data will be lost [ 743.140250][T25307] [ 743.157733][T25312] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 743.172996][T25312] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 743.193153][T20128] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:17: lblock 8 mapped to illegal pblock 8 (length 8) [ 743.194809][T25312] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 3: comm syz.7.6098: lblock 3 mapped to illegal pblock 3 (length 3) [ 743.208496][T20128] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 743.234832][T20128] EXT4-fs (loop1): This should not happen!! Data will be lost [ 743.234832][T20128] [ 743.250339][T24739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 743.264059][T25202] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 743.277469][T25312] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 743.293266][T25312] EXT4-fs (loop7): This should not happen!! Data will be lost [ 743.293266][T25312] [ 743.304946][T25202] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 743.315296][T25202] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 743.325112][T25202] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 743.338440][T25308] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6098: lblock 3 mapped to illegal pblock 3 (length 1) [ 743.375942][T25315] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6098: lblock 3 mapped to illegal pblock 3 (length 1) [ 743.397701][T25315] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6098: lblock 3 mapped to illegal pblock 3 (length 1) [ 743.417887][T25308] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6098: lblock 3 mapped to illegal pblock 3 (length 1) [ 743.481317][T25308] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6098: lblock 3 mapped to illegal pblock 3 (length 1) [ 743.497154][T25315] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6098: lblock 3 mapped to illegal pblock 3 (length 1) [ 743.513406][T25315] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6098: lblock 3 mapped to illegal pblock 3 (length 1) [ 743.541060][T25328] loop1: detected capacity change from 0 to 1024 [ 743.546598][T25202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.560380][T25308] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6098: lblock 3 mapped to illegal pblock 3 (length 1) [ 743.595358][T25308] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6098: lblock 3 mapped to illegal pblock 3 (length 1) [ 743.626691][T25202] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.647763][T25328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 743.688339][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.695450][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.707378][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.714511][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.719088][T25328] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 743.754437][T25202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 743.768990][T25202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 743.853711][T25328] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.6101: lblock 3 mapped to illegal pblock 3 (length 3) [ 743.877345][T25328] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 743.891184][T25328] EXT4-fs (loop1): This should not happen!! Data will be lost [ 743.891184][T25328] [ 743.917541][T25202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.926849][T25345] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.6101: lblock 3 mapped to illegal pblock 3 (length 1) [ 743.973167][T25345] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.6101: lblock 3 mapped to illegal pblock 3 (length 1) [ 743.994818][T25326] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.6101: lblock 3 mapped to illegal pblock 3 (length 1) [ 744.015911][T25345] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.6101: lblock 3 mapped to illegal pblock 3 (length 1) [ 744.032513][T25345] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.6101: lblock 3 mapped to illegal pblock 3 (length 1) [ 744.074386][T25202] veth0_vlan: entered promiscuous mode [ 744.081291][T25326] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.6101: lblock 3 mapped to illegal pblock 3 (length 1) [ 744.100799][T25326] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.6101: lblock 3 mapped to illegal pblock 3 (length 1) [ 744.117600][T25202] veth1_vlan: entered promiscuous mode [ 744.118266][T25345] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.6101: lblock 3 mapped to illegal pblock 3 (length 1) [ 744.142182][T25345] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.6101: lblock 3 mapped to illegal pblock 3 (length 1) [ 744.145362][T25202] veth0_macvtap: entered promiscuous mode [ 744.169052][T25202] veth1_macvtap: entered promiscuous mode [ 744.181888][T25202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.193859][T25202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.224666][T20125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.236435][T20125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.254463][T20125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.273290][T20125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.317099][T25359] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.6106'. [ 744.406261][ T352] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 744.419799][ T352] EXT4-fs (loop7): This should not happen!! Data will be lost [ 744.419799][ T352] [ 744.432402][T14749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 744.442847][T20125] net_ratelimit: 13 callbacks suppressed [ 744.442893][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 744.457597][T25363] xfrm0 speed is unknown, defaulting to 1000 [ 744.544449][T25363] lo speed is unknown, defaulting to 1000 [ 744.565203][ T4815] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 744.581366][ T4815] EXT4-fs (loop1): This should not happen!! Data will be lost [ 744.581366][ T4815] [ 744.598144][T24739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 744.616222][ T352] bond1: (slave macvlan2): failed to get link speed/duplex [ 744.642141][T25370] loop1: detected capacity change from 0 to 512 [ 744.652670][T25372] netlink: 'syz.5.6109': attribute type 4 has an invalid length. [ 744.666586][T25370] EXT4-fs: Ignoring removed bh option [ 744.674597][T25370] EXT4-fs: inline encryption not supported [ 744.685304][T25376] loop7: detected capacity change from 0 to 498 [ 744.695792][T25376] EXT4-fs (loop7): bad geometry: block count 256 exceeds size of device (249 blocks) [ 744.712216][T25370] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 744.740990][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 744.766898][T25370] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 744.787742][T25370] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6108: bg 0: block 248: padding at end of block bitmap is not set [ 744.803126][T25370] loop1: lost filesystem error report for type 5 error -117 [ 744.803351][T25370] Quota error (device loop1): write_blk: dquota write failed [ 744.810665][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 744.810684][ C1] EXT4-fs (loop1): last error at time 1771942303: ext4_validate_block_bitmap:441 [ 744.836164][T25370] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 744.846965][T25370] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.6108: Failed to acquire dquot type 1 [ 744.859003][T25370] loop1: lost filesystem error report for type 5 error -117 [ 744.886532][ T40] bond1: (slave macvlan2): failed to get link speed/duplex [ 744.906490][T25370] EXT4-fs (loop1): 1 truncate cleaned up [ 744.906943][T25385] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6113'. [ 744.912775][T25370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 745.335110][T25392] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6108'. [ 745.446868][T20128] bond1: (slave macvlan2): failed to get link speed/duplex [ 745.496701][T25396] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6116'. [ 745.518461][T25396] openvswitch: netlink: Port -3 exceeds max allowable 65535 [ 745.617822][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 745.662115][T25407] loop5: detected capacity change from 0 to 1024 [ 745.787001][T20127] bond1: (slave macvlan2): failed to get link speed/duplex [ 745.799270][T25407] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 745.860822][T25407] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 745.909647][T25407] JBD2: no valid journal superblock found [ 745.933991][T25407] EXT4-fs (loop5): Could not load journal inode [ 745.939479][T25397] xfrm0 speed is unknown, defaulting to 1000 [ 745.956918][ T40] bond1: (slave macvlan2): failed to get link speed/duplex [ 746.017920][T25414] netlink: 'syz.2.6122': attribute type 4 has an invalid length. [ 746.041227][T25397] lo speed is unknown, defaulting to 1000 [ 746.125530][ T40] bond1: (slave macvlan2): failed to get link speed/duplex [ 746.142648][T24739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 747.104188][T25445] xfrm0 speed is unknown, defaulting to 1000 [ 747.329693][T25458] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6135'. [ 747.347414][T25445] lo speed is unknown, defaulting to 1000 [ 747.361802][T25453] xfrm0 speed is unknown, defaulting to 1000 [ 747.368529][T25458] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6135'. [ 747.472432][T25462] tmpfs: Bad value for 'mpol' [ 747.524483][T25464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6137'. [ 747.539376][T25453] lo speed is unknown, defaulting to 1000 [ 747.591936][T25464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6137'. [ 748.951601][T25472] loop2: detected capacity change from 0 to 1024 [ 749.203824][T25472] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 749.220328][T25472] System zones: 0-1, 3-8 [ 749.233157][T25472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 749.617743][ T50] net_ratelimit: 20 callbacks suppressed [ 749.617761][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 749.883940][T25472] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 749.947990][ T4815] bond1: (slave macvlan2): failed to get link speed/duplex [ 749.973589][T25491] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6147'. [ 750.023116][T25491] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6147'. [ 750.066579][ T4815] bond1: (slave macvlan2): failed to get link speed/duplex [ 750.176299][ T4815] bond1: (slave macvlan2): failed to get link speed/duplex [ 750.259392][T25472] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 750.287057][ T4820] bond1: (slave macvlan2): failed to get link speed/duplex [ 750.416511][ T4820] bond1: (slave macvlan2): failed to get link speed/duplex [ 750.537131][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 750.655921][ T4820] bond1: (slave macvlan2): failed to get link speed/duplex [ 750.677220][ T28] audit: type=1326 audit(1771942309.733:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25490 comm="syz.8.6146" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc5388c629 code=0x0 [ 750.785145][ T4820] bond1: (slave macvlan2): failed to get link speed/duplex [ 750.891931][ T28] audit: type=1326 audit(1771942309.943:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25496 comm="syz.5.6148" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f258d17c629 code=0x0 [ 750.905931][ T70] bond1: (slave macvlan2): failed to get link speed/duplex [ 751.321037][T25516] loop5: detected capacity change from 0 to 1024 [ 751.354263][T25516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 751.384702][T25516] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 751.453109][T25516] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.6152: lblock 3 mapped to illegal pblock 3 (length 3) [ 751.469090][T25516] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 751.481786][T25516] EXT4-fs (loop5): This should not happen!! Data will be lost [ 751.481786][T25516] [ 751.647183][T25519] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 751.727272][T25522] tmpfs: Bad value for 'mpol' [ 751.755278][ T28] audit: type=1326 audit(1771942310.803:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25523 comm="syz.2.6155" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd37e20c629 code=0x0 [ 752.179459][ T4820] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:11: lblock 8 mapped to illegal pblock 8 (length 8) [ 752.194761][ T4820] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 752.208587][ T4820] EXT4-fs (loop5): This should not happen!! Data will be lost [ 752.208587][ T4820] [ 752.219348][T22886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 752.390626][T25534] netlink: 'syz.5.6157': attribute type 16 has an invalid length. [ 752.471582][T25535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65531 sclass=netlink_route_socket pid=25535 comm=syz.5.6157 [ 752.618535][T25537] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6158'. [ 752.632389][T25537] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6158'. [ 752.823746][T25543] tmpfs: Bad value for 'mpol' [ 753.023213][T25542] loop1: detected capacity change from 0 to 8192 [ 753.190266][T22854] loop1: p1 < > p2 p4 < p5 > [ 753.195007][T22854] loop1: partition table partially beyond EOD, truncated [ 753.202399][T22854] loop1: p1 start 134217728 is beyond EOD, truncated [ 753.248892][T22854] loop1: p2 size 591360 extends beyond EOD, truncated [ 753.297908][T22854] loop1: p5 size 591360 extends beyond EOD, truncated [ 753.329705][T25542] loop1: p1 < > p2 p4 < p5 > [ 753.334421][T25542] loop1: partition table partially beyond EOD, truncated [ 753.365551][T25542] loop1: p1 start 134217728 is beyond EOD, truncated [ 753.372640][T25542] loop1: p2 size 591360 extends beyond EOD, truncated [ 753.423746][T25542] loop1: p5 size 591360 extends beyond EOD, truncated [ 753.477191][ T28] audit: type=1326 audit(1771942312.523:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25544 comm="syz.2.6161" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd37e20c629 code=0x0 [ 753.575348][T25558] loop7: detected capacity change from 0 to 512 [ 753.607810][T25558] EXT4-fs: Ignoring removed bh option [ 753.613282][T25558] EXT4-fs: inline encryption not supported [ 753.634684][T25540] xfrm0 speed is unknown, defaulting to 1000 [ 753.673547][T25558] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 753.747758][T25558] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 753.793945][T25558] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6164: bg 0: block 248: padding at end of block bitmap is not set [ 753.814573][T25558] loop7: lost filesystem error report for type 5 error -117 [ 753.815433][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 753.829172][ C0] EXT4-fs (loop7): last error at time 1771942312: ext4_validate_block_bitmap:441 [ 753.839623][T25558] Quota error (device loop7): write_blk: dquota write failed [ 753.847447][T25558] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 753.858241][T25558] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.6164: Failed to acquire dquot type 1 [ 753.869641][T25558] loop7: lost filesystem error report for type 5 error -117 [ 753.870093][T25558] EXT4-fs (loop7): 1 truncate cleaned up [ 753.894376][T25558] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 753.968495][T25540] lo speed is unknown, defaulting to 1000 [ 753.998488][T25579] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6164'. [ 754.088694][T25586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6171'. [ 754.098739][T25586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6171'. [ 754.107977][T25586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6171'. [ 754.188632][T25584] xfrm0 speed is unknown, defaulting to 1000 [ 754.228089][T25584] lo speed is unknown, defaulting to 1000 [ 754.234286][T25594] loop2: detected capacity change from 0 to 512 [ 754.249768][T25594] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.2.6170: corrupted xattr block 95: invalid header [ 754.272128][T25594] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 754.272469][T25594] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.6170: bg 0: block 7: invalid block bitmap [ 754.281786][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 754.281816][ C1] EXT4-fs (loop2): initial error at time 1771942313: ext4_expand_extra_isize_ea:2808: inode 11 [ 754.281846][ C1] EXT4-fs (loop2): last error at time 1771942313: ext4_expand_extra_isize_ea:2808: inode 11 [ 754.365265][T25594] loop2: lost filesystem error report for type 5 error -117 [ 754.370574][T25594] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 754.422537][T25594] loop2: lost filesystem error report for type 5 error -117 [ 754.447589][T25594] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2970: inode #11: comm syz.2.6170: corrupted xattr block 95: invalid header [ 754.476527][T14749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 754.488384][T25594] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 754.488585][T25594] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 754.529719][T25594] EXT4-fs (loop2): 1 orphan inode deleted [ 754.536689][T25594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 754.660881][T25607] netlink: 84 bytes leftover after parsing attributes in process `syz.7.6175'. [ 754.697320][T25607] net_ratelimit: 31 callbacks suppressed [ 754.697337][T25607] openvswitch: netlink: Message has 8 unknown bytes. [ 754.715637][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 754.726896][T25613] loop5: detected capacity change from 0 to 2048 [ 754.844068][T25611] xfrm0 speed is unknown, defaulting to 1000 [ 754.877627][ T4820] bond1: (slave macvlan2): failed to get link speed/duplex [ 754.983422][T25202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.003656][T25621] loop7: detected capacity change from 0 to 512 [ 755.015786][ T4820] bond1: (slave macvlan2): failed to get link speed/duplex [ 755.074704][T25611] lo speed is unknown, defaulting to 1000 [ 755.097868][T25621] EXT4-fs (loop7): 1 truncate cleaned up [ 755.108722][T25621] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 755.127872][ T40] bond1: (slave macvlan2): failed to get link speed/duplex [ 755.143399][T25624] loop2: detected capacity change from 0 to 1024 [ 755.262520][T25621] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.6180: invalid indirect mapped block 234881024 (level 0) [ 755.264567][ T28] audit: type=1400 audit(1771942314.283:1977): avc: denied { rename } for pid=25620 comm="syz.7.6180" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 755.278998][T25624] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 755.364514][T25624] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #3: block 1: comm syz.2.6179: lblock 1 mapped to illegal pblock 1 (length 1) [ 755.481783][T25624] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 755.485440][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 755.500982][ C0] EXT4-fs (loop2): initial error at time 1771942314: ext4_map_blocks:818: inode 3: block 1 [ 755.511013][ C0] EXT4-fs (loop2): last error at time 1771942314: ext4_map_blocks:818: inode 3: block 1 [ 755.631438][ T4820] bond1: (slave macvlan2): failed to get link speed/duplex [ 755.640943][T25624] Quota error (device loop2): write_blk: dquota write failed [ 755.657037][T25624] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 755.668695][T25624] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.6179: Failed to acquire dquot type 0 [ 755.681785][T14749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.732390][T25636] loop5: detected capacity change from 0 to 512 [ 755.743841][T25624] loop2: lost filesystem error report for type 5 error -117 [ 755.744061][T25624] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.6179: Freeing blocks not in datazone - block = 0, count = 4096 [ 755.778566][T25636] EXT4-fs: Ignoring removed oldalloc option [ 755.785720][ T70] bond1: (slave macvlan2): failed to get link speed/duplex [ 755.794858][T25624] loop2: lost filesystem error report for type 5 error -117 [ 755.796240][T25624] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.6179: Invalid inode bitmap blk 0 in block_group 0 [ 755.810996][T25636] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 755.817094][ T4820] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 755.866968][T25636] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 3: comm syz.5.6183: lblock 0 mapped to illegal pblock 3 (length 1) [ 755.881252][T25624] loop2: lost filesystem error report for type 5 error -117 [ 755.881929][ T4820] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 755.889745][T25636] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.6183: error -117 reading directory block [ 755.922541][ T4820] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 755.931820][T25624] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 755.946786][T25644] loop7: detected capacity change from 0 to 512 [ 755.953228][ T4820] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:11: Failed to release dquot type 0 [ 755.969370][ T4815] bond1: (slave macvlan2): failed to get link speed/duplex [ 755.973409][T25624] loop2: lost filesystem error report for type 5 error -117 [ 755.988643][T25624] EXT4-fs (loop2): 1 orphan inode deleted [ 756.013096][ T4820] loop2: lost filesystem error report for type 5 error -117 [ 756.027928][T25624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.067692][T25644] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.093655][ T28] audit: type=1400 audit(1771942315.143:1978): avc: denied { execute } for pid=25635 comm="syz.5.6183" path="pipe:[79306]" dev="pipefs" ino=79306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 756.095597][T25644] ext4 filesystem being mounted at /565/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 756.135637][ T4820] bond1: (slave macvlan2): failed to get link speed/duplex [ 756.161447][T25624] syzkaller0: entered promiscuous mode [ 756.176694][T25624] syzkaller0: entered allmulticast mode [ 756.310929][ T70] bond1: (slave macvlan2): failed to get link speed/duplex [ 756.402744][T25642] loop1: detected capacity change from 0 to 8192 [ 756.423708][T25202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.549464][T25642] loop1: p1 < > p2 p4 < p5 > [ 756.568869][T25642] loop1: partition table partially beyond EOD, truncated [ 756.615354][T25642] loop1: p1 start 134217728 is beyond EOD, truncated [ 756.623448][T25655] loop2: detected capacity change from 0 to 1024 [ 756.672750][T25642] loop1: p2 size 591360 extends beyond EOD, truncated [ 756.699930][T25642] loop1: p5 size 591360 extends beyond EOD, truncated [ 756.714834][T22886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.716408][T25655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 756.740139][T14749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.764130][T25655] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 756.783308][T25655] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 3: comm syz.2.6187: lblock 3 mapped to illegal pblock 3 (length 3) [ 756.903446][T25655] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 756.924586][T25663] loop7: detected capacity change from 0 to 512 [ 756.940579][T25660] loop5: detected capacity change from 0 to 1024 [ 756.946964][T25663] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 756.950113][T25655] EXT4-fs (loop2): This should not happen!! Data will be lost [ 756.950113][T25655] [ 757.005263][T25663] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.021053][T25660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 757.036170][T25664] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: block 3: comm syz.2.6187: lblock 3 mapped to illegal pblock 3 (length 1) [ 757.065766][T25660] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 757.077132][T25663] ext4 filesystem being mounted at /566/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 757.091015][T25653] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: block 3: comm syz.2.6187: lblock 3 mapped to illegal pblock 3 (length 1) [ 757.134726][T25660] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.6188: lblock 3 mapped to illegal pblock 3 (length 3) [ 757.164314][T14749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.166726][T25660] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 757.187791][T25664] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: block 3: comm syz.2.6187: lblock 3 mapped to illegal pblock 3 (length 1) [ 757.211464][T25660] EXT4-fs (loop5): This should not happen!! Data will be lost [ 757.211464][T25660] [ 757.232353][T25674] tmpfs: Bad value for 'mpol' [ 757.237307][T25653] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: block 3: comm syz.2.6187: lblock 3 mapped to illegal pblock 3 (length 1) [ 757.274879][T25677] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6193'. [ 757.285065][T25664] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: block 3: comm syz.2.6187: lblock 3 mapped to illegal pblock 3 (length 1) [ 757.300499][T25672] xfrm0 speed is unknown, defaulting to 1000 [ 757.313242][T25653] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: block 3: comm syz.2.6187: lblock 3 mapped to illegal pblock 3 (length 1) [ 757.341608][T25664] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: block 3: comm syz.2.6187: lblock 3 mapped to illegal pblock 3 (length 1) [ 757.383962][T25653] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: block 3: comm syz.2.6187: lblock 3 mapped to illegal pblock 3 (length 1) [ 757.406075][T25680] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6195'. [ 757.419145][T25664] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: block 3: comm syz.2.6187: lblock 3 mapped to illegal pblock 3 (length 1) [ 757.455249][T25672] lo speed is unknown, defaulting to 1000 [ 757.670934][T25681] xfrm0 speed is unknown, defaulting to 1000 [ 757.709797][ T50] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 757.758953][T25681] lo speed is unknown, defaulting to 1000 [ 757.765177][ T50] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 757.785632][ T50] EXT4-fs (loop5): This should not happen!! Data will be lost [ 757.785632][ T50] [ 757.797307][T22886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 757.967277][T25692] xfrm0 speed is unknown, defaulting to 1000 [ 758.031895][T25692] lo speed is unknown, defaulting to 1000 [ 758.177817][T25684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 758.679393][T24739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.869163][T20125] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 758.919869][T20125] EXT4-fs (loop2): This should not happen!! Data will be lost [ 758.919869][T20125] [ 758.967484][T25702] team0: entered promiscuous mode [ 758.981434][T25702] team_slave_0: entered promiscuous mode [ 758.989625][T25202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 759.019732][T25702] team_slave_1: entered promiscuous mode [ 759.064576][T25699] team0: left promiscuous mode [ 759.069552][T25699] team_slave_0: left promiscuous mode [ 759.094080][T25699] team_slave_1: left promiscuous mode [ 759.567403][T25709] xfrm0 speed is unknown, defaulting to 1000 [ 759.605162][T25709] lo speed is unknown, defaulting to 1000 [ 759.748086][ T40] net_ratelimit: 23 callbacks suppressed [ 759.748112][ T40] bond1: (slave macvlan2): failed to get link speed/duplex [ 760.085177][T25714] set_capacity_and_notify: 2 callbacks suppressed [ 760.085193][T25714] loop2: detected capacity change from 0 to 1024 [ 760.187767][T25714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 760.200663][ T4815] bond1: (slave macvlan2): failed to get link speed/duplex [ 760.251201][T25714] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 760.335230][ T4815] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm kworker/u8:9: lblock 0 mapped to illegal pblock 0 (length 1) [ 760.359724][ T352] bond1: (slave macvlan2): failed to get link speed/duplex [ 760.389744][T25701] loop5: detected capacity change from 0 to 512 [ 760.415070][ T4815] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 760.438741][T25701] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 760.474323][ T4815] EXT4-fs (loop2): This should not happen!! Data will be lost [ 760.474323][ T4815] [ 760.491720][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 760.518426][T25202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 760.600505][T25715] loop7: detected capacity change from 0 to 8192 [ 760.637253][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 760.698342][T22854] loop7: p1 < > p2 p4 < p5 > [ 760.738486][T22854] loop7: partition table partially beyond EOD, truncated [ 760.755571][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 760.775537][T22854] loop7: p1 start 134217728 is beyond EOD, truncated [ 760.807352][T22854] loop7: p2 size 591360 extends beyond EOD, truncated [ 760.847021][T22854] loop7: p5 size 591360 extends beyond EOD, truncated [ 760.886418][ T40] bond1: (slave macvlan2): failed to get link speed/duplex [ 760.911997][T25715] loop7: p1 < > p2 p4 < p5 > [ 761.011268][T25726] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6206'. [ 761.026416][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 761.043999][T25715] loop7: partition table partially beyond EOD, truncated [ 761.105324][T25715] loop7: p1 start 134217728 is beyond EOD, truncated [ 761.156282][ T4815] bond1: (slave macvlan2): failed to get link speed/duplex [ 761.179812][T25730] loop5: detected capacity change from 0 to 764 [ 761.196359][T25715] loop7: p2 size 591360 extends beyond EOD, truncated [ 761.223015][T25715] loop7: p5 size 591360 extends beyond EOD, truncated [ 761.316303][ T4815] bond1: (slave macvlan2): failed to get link speed/duplex [ 761.371267][T25736] loop5: detected capacity change from 0 to 512 [ 761.394167][T25736] EXT4-fs: Ignoring removed bh option [ 761.406879][T25736] EXT4-fs: inline encryption not supported [ 761.436202][ T28] audit: type=1326 audit(1771942320.473:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25721 comm="syz.2.6205" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd37e20c629 code=0x0 [ 761.477567][T25736] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 761.501268][T25739] tmpfs: Bad value for 'mpol' [ 761.521565][T22852] udevd[22852]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 761.521708][T23578] udevd[23578]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 761.533307][T22854] udevd[22854]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 761.599320][T25736] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 761.636456][T25746] netlink: 'syz.7.6213': attribute type 10 has an invalid length. [ 761.645780][T25746] bond4: (slave dummy0): Releasing active interface [ 761.659804][T25746] dummy0: left allmulticast mode [ 761.667639][T25736] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6210: bg 0: block 248: padding at end of block bitmap is not set [ 761.687679][T25746] dummy0: entered promiscuous mode [ 761.700999][T25746] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 761.720962][T25736] loop5: lost filesystem error report for type 5 error -117 [ 761.721204][T25736] Quota error (device loop5): write_blk: dquota write failed [ 761.728617][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 761.728641][ C0] EXT4-fs (loop5): last error at time 1771942320: ext4_validate_block_bitmap:441 [ 761.760669][T25736] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 761.774786][T25736] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.6210: Failed to acquire dquot type 1 [ 761.810316][T25736] loop5: lost filesystem error report for type 5 error -117 [ 761.824733][T25736] EXT4-fs (loop5): 1 truncate cleaned up [ 761.866199][T25736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 761.961391][T25753] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6210'. [ 762.000460][ T28] audit: type=1326 audit(1771942321.053:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25740 comm="syz.1.6212" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc087f1c629 code=0x0 [ 762.111048][T25762] tipc: Failed to remove unknown binding: 66,0,0/0:4250956455/4250956456 [ 762.143931][T25760] xfrm0 speed is unknown, defaulting to 1000 [ 762.194892][T25760] lo speed is unknown, defaulting to 1000 [ 762.271785][T22886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 762.299439][T25771] program syz.5.6220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 762.449970][T25775] xfrm0 speed is unknown, defaulting to 1000 [ 762.488610][T25775] lo speed is unknown, defaulting to 1000 [ 762.895457][T25773] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6221'. [ 763.009260][T25780] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6223'. [ 763.081361][T25780] C: renamed from team_slave_0 (while UP) [ 763.125329][T25785] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 763.221045][T25780] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6223'. [ 764.024189][T25798] loop5: detected capacity change from 0 to 1024 [ 764.042644][T25798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 764.062135][T25798] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 764.077935][T25798] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.6227: lblock 3 mapped to illegal pblock 3 (length 3) [ 764.096497][T25798] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 764.110292][T25798] EXT4-fs (loop5): This should not happen!! Data will be lost [ 764.110292][T25798] [ 764.123578][T25798] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6227: lblock 3 mapped to illegal pblock 3 (length 1) [ 764.139155][T25798] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6227: lblock 3 mapped to illegal pblock 3 (length 1) [ 764.154353][T25798] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6227: lblock 3 mapped to illegal pblock 3 (length 1) [ 764.170038][T25798] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6227: lblock 3 mapped to illegal pblock 3 (length 1) [ 764.186195][T25798] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6227: lblock 3 mapped to illegal pblock 3 (length 1) [ 764.201559][T25796] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6227: lblock 3 mapped to illegal pblock 3 (length 1) [ 764.218912][T25798] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6227: lblock 3 mapped to illegal pblock 3 (length 1) [ 764.233625][T25798] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6227: lblock 3 mapped to illegal pblock 3 (length 1) [ 764.249453][T25798] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6227: lblock 3 mapped to illegal pblock 3 (length 1) [ 764.251992][T25805] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6229'. [ 764.319921][T25810] loop1: detected capacity change from 0 to 512 [ 764.351060][T25809] loop7: detected capacity change from 0 to 512 [ 764.359485][T25810] EXT4-fs: Ignoring removed bh option [ 764.361077][T25809] EXT4-fs: Ignoring removed bh option [ 764.365019][T25810] EXT4-fs: inline encryption not supported [ 764.377913][T25810] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 764.390302][T25809] EXT4-fs (loop7): 1 truncate cleaned up [ 764.397359][T25809] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 764.413073][T25810] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 764.430042][T25810] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6230: bg 0: block 248: padding at end of block bitmap is not set [ 764.444850][T25810] loop1: lost filesystem error report for type 5 error -117 [ 764.445187][T25810] Quota error (device loop1): write_blk: dquota write failed [ 764.445437][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 764.466323][ C0] EXT4-fs (loop1): last error at time 1771942323: ext4_validate_block_bitmap:441 [ 764.471108][T25810] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 764.487622][T25810] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.6230: Failed to acquire dquot type 1 [ 764.500022][T25810] loop1: lost filesystem error report for type 5 error -117 [ 764.500620][T25810] EXT4-fs (loop1): 1 truncate cleaned up [ 764.514033][T25810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 764.588917][T25822] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6230'. [ 764.711842][T25825] xfrm0 speed is unknown, defaulting to 1000 [ 764.754436][T25825] lo speed is unknown, defaulting to 1000 [ 764.854241][ T352] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 764.870180][T20127] net_ratelimit: 25 callbacks suppressed [ 764.870288][T20127] bond1: (slave macvlan2): failed to get link speed/duplex [ 764.887250][ T352] EXT4-fs (loop5): This should not happen!! Data will be lost [ 764.887250][ T352] [ 764.900218][T22886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 765.000418][T25829] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6234'. [ 765.006571][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 765.010328][T25829] openvswitch: netlink: Message has 8 unknown bytes. [ 765.126373][ T352] bond1: (slave macvlan2): failed to get link speed/duplex [ 765.235603][ T352] bond1: (slave macvlan2): failed to get link speed/duplex [ 765.357048][ T352] bond1: (slave macvlan2): failed to get link speed/duplex [ 765.466312][ T4815] bond1: (slave macvlan2): failed to get link speed/duplex [ 765.576895][T20127] bond1: (slave macvlan2): failed to get link speed/duplex [ 765.696897][T20127] bond1: (slave macvlan2): failed to get link speed/duplex [ 765.806344][T20127] bond1: (slave macvlan2): failed to get link speed/duplex [ 765.936021][T24739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 766.061492][T14749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.490968][T25844] loop1: detected capacity change from 0 to 2048 [ 766.601025][T25843] xfrm0 speed is unknown, defaulting to 1000 [ 766.666475][T25843] lo speed is unknown, defaulting to 1000 [ 766.734363][T25840] xfrm0 speed is unknown, defaulting to 1000 [ 767.001871][T25840] lo speed is unknown, defaulting to 1000 [ 767.016273][T25856] netlink: 'syz.2.6243': attribute type 10 has an invalid length. [ 767.177658][T25861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6245'. [ 767.523037][T25867] loop2: detected capacity change from 0 to 512 [ 767.536691][T25867] EXT4-fs: Ignoring removed bh option [ 767.584769][T25867] EXT4-fs: inline encryption not supported [ 767.604118][T25867] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 767.636330][T25867] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 767.682296][T25867] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6247: bg 0: block 248: padding at end of block bitmap is not set [ 767.885529][T25867] loop2: lost filesystem error report for type 5 error -117 [ 767.886515][T25867] Quota error (device loop2): write_blk: dquota write failed [ 767.901300][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 767.901333][ C1] EXT4-fs (loop2): last error at time 1771942326: ext4_validate_block_bitmap:441 [ 767.927788][T25867] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 767.939453][T25867] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.6247: Failed to acquire dquot type 1 [ 767.952420][T25867] loop2: lost filesystem error report for type 5 error -117 [ 767.954308][T25867] EXT4-fs (loop2): 1 truncate cleaned up [ 768.044073][T25867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 768.148952][T25880] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6247'. [ 768.199085][ T28] audit: type=1326 audit(1771942327.253:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25862 comm="syz.1.6246" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc087f1c629 code=0x0 [ 768.300370][T25881] xfrm0 speed is unknown, defaulting to 1000 [ 768.346116][T25881] lo speed is unknown, defaulting to 1000 [ 768.412238][T25202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 768.630377][T25893] macsec1: entered allmulticast mode [ 768.636664][T25893] dummy0: entered allmulticast mode [ 769.037709][T25896] xfrm0 speed is unknown, defaulting to 1000 [ 769.124707][T25905] loop5: detected capacity change from 0 to 2048 [ 769.180963][T25896] lo speed is unknown, defaulting to 1000 [ 769.209765][T25904] xfrm0 speed is unknown, defaulting to 1000 [ 769.268446][T25904] lo speed is unknown, defaulting to 1000 [ 769.280363][T25907] netlink: 'syz.8.6257': attribute type 7 has an invalid length. [ 769.288449][T25907] netlink: 140 bytes leftover after parsing attributes in process `syz.8.6257'. [ 769.511903][T25918] loop7: detected capacity change from 0 to 1024 [ 769.537936][T25919] loop1: detected capacity change from 0 to 512 [ 769.544566][T25919] EXT4-fs: Ignoring removed bh option [ 769.550142][T25919] EXT4-fs: inline encryption not supported [ 769.557776][T25919] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 769.604879][T25919] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 769.624467][T25919] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6261: bg 0: block 248: padding at end of block bitmap is not set [ 769.640278][T25919] loop1: lost filesystem error report for type 5 error -117 [ 769.640544][T25919] Quota error (device loop1): write_blk: dquota write failed [ 769.645337][T25918] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 769.647866][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 769.647885][ C0] EXT4-fs (loop1): last error at time 1771942328: ext4_validate_block_bitmap:441 [ 769.648257][T25919] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 769.648287][T25919] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.6261: Failed to acquire dquot type 1 [ 769.648310][T25919] loop1: lost filesystem error report for type 5 error -117 [ 769.648811][T25919] EXT4-fs (loop1): 1 truncate cleaned up [ 769.649175][T25919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 769.698150][T25917] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6261'. [ 769.709734][T25918] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 769.800834][T25918] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 3: comm syz.7.6260: lblock 3 mapped to illegal pblock 3 (length 3) [ 769.827866][T25938] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6267'. [ 769.840318][T25918] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 769.879168][T25918] EXT4-fs (loop7): This should not happen!! Data will be lost [ 769.879168][T25918] [ 769.914106][T25939] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6260: lblock 3 mapped to illegal pblock 3 (length 1) [ 769.928913][T20125] net_ratelimit: 30 callbacks suppressed [ 769.928928][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 769.948243][T25939] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6260: lblock 3 mapped to illegal pblock 3 (length 1) [ 770.004126][T25913] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6260: lblock 3 mapped to illegal pblock 3 (length 1) [ 770.037687][T25939] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6260: lblock 3 mapped to illegal pblock 3 (length 1) [ 770.048343][T25919] xfrm0 speed is unknown, defaulting to 1000 [ 770.060324][T25913] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6260: lblock 3 mapped to illegal pblock 3 (length 1) [ 770.074639][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 770.120971][T25913] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6260: lblock 3 mapped to illegal pblock 3 (length 1) [ 770.124981][ T28] audit: type=1326 audit(1771942329.173:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25920 comm="syz.2.6262" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd37e20c629 code=0x0 [ 770.157283][T25913] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6260: lblock 3 mapped to illegal pblock 3 (length 1) [ 770.165070][T25919] lo speed is unknown, defaulting to 1000 [ 770.176220][T25913] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6260: lblock 3 mapped to illegal pblock 3 (length 1) [ 770.178931][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 770.194772][T25913] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6260: lblock 3 mapped to illegal pblock 3 (length 1) [ 770.310063][T24739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 770.319968][T20127] bond1: (slave macvlan2): failed to get link speed/duplex [ 770.366366][T25948] xt_hashlimit: size too large, truncated to 1048576 [ 770.436555][T20127] bond1: (slave macvlan2): failed to get link speed/duplex [ 770.546464][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 770.582100][T20125] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 770.595093][T20125] EXT4-fs (loop7): This should not happen!! Data will be lost [ 770.595093][T20125] [ 770.607788][T14749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 770.659158][T25957] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6270'. [ 770.753980][T25961] netlink: 'syz.7.6270': attribute type 4 has an invalid length. [ 770.782193][T25957] loop7: detected capacity change from 0 to 1024 [ 770.793696][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 771.003637][T25957] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 771.054766][T25969] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6276'. [ 771.072492][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 771.112521][T25957] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 771.152976][T25969] openvswitch: netlink: Message has 8 unknown bytes. [ 771.192026][T25957] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.6270: Failed to acquire dquot type 0 [ 771.233560][T25957] loop7: lost filesystem error report for type 5 error -5 [ 771.235441][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 771.236232][T20127] bond1: (slave macvlan2): failed to get link speed/duplex [ 771.242627][ C0] EXT4-fs (loop7): initial error at time 1771942330: ext4_acquire_dquot:7001 [ 771.265354][ C0] EXT4-fs (loop7): last error at time 1771942330: ext4_acquire_dquot:7001 [ 771.271875][T25957] EXT4-fs (loop7): 1 truncate cleaned up [ 771.290289][T25957] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.426409][T14749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.708581][T25989] loop7: detected capacity change from 0 to 512 [ 771.729488][T25989] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.742299][T25989] ext4 filesystem being mounted at /585/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 771.914732][T25988] loop1: detected capacity change from 0 to 2048 [ 772.149732][T25988] loop1: detected capacity change from 0 to 1024 [ 772.200754][T25986] xfrm0 speed is unknown, defaulting to 1000 [ 772.272284][T25988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 772.389818][T25986] lo speed is unknown, defaulting to 1000 [ 772.401516][T14749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.683749][T26016] loop7: detected capacity change from 0 to 256 [ 772.858110][T26016] FAT-fs (loop7): Directory bread(block 64) failed [ 772.864751][T26016] FAT-fs (loop7): Directory bread(block 65) failed [ 772.871366][T26016] FAT-fs (loop7): Directory bread(block 66) failed [ 772.879529][T26016] FAT-fs (loop7): Directory bread(block 67) failed [ 772.886145][T26016] FAT-fs (loop7): Directory bread(block 68) failed [ 772.892685][T26016] FAT-fs (loop7): Directory bread(block 69) failed [ 772.900012][T26016] FAT-fs (loop7): Directory bread(block 70) failed [ 772.907388][T26016] FAT-fs (loop7): Directory bread(block 71) failed [ 772.914095][T26016] FAT-fs (loop7): Directory bread(block 72) failed [ 772.921349][T26016] FAT-fs (loop7): Directory bread(block 73) failed [ 772.952643][T24739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.359342][ T28] audit: type=1400 audit(1771942333.413:1983): avc: denied { nlmsg_write } for pid=26036 comm="syz.5.6294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 774.469831][ T28] audit: type=1326 audit(1771942333.523:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26021 comm="syz.2.6290" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd37e20c629 code=0x0 [ 774.556383][ T28] audit: type=1326 audit(1771942333.603:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26027 comm="syz.8.6291" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc5388c629 code=0x0 [ 774.703936][T26048] loop1: detected capacity change from 0 to 1024 [ 774.729340][T26048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 774.744148][T26050] netlink: 'syz.7.6297': attribute type 27 has an invalid length. [ 774.753940][T26048] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 774.767327][T26050] team0: left promiscuous mode [ 774.772219][T26050] team_slave_0: left promiscuous mode [ 774.786097][T26050] team_slave_1: left promiscuous mode [ 774.791928][T26050] team0: left allmulticast mode [ 774.806548][T26048] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.6295: lblock 3 mapped to illegal pblock 3 (length 3) [ 774.809803][T26050] team_slave_0: left allmulticast mode [ 774.828190][T26050] team_slave_1: left allmulticast mode [ 774.839033][T26050] geneve0: left allmulticast mode [ 774.845342][T26050] hsr1: left promiscuous mode [ 774.847512][T26048] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 774.873907][T26050] bond2: left promiscuous mode [ 774.875710][T26048] EXT4-fs (loop1): This should not happen!! Data will be lost [ 774.875710][T26048] [ 774.899879][T26050] bond3: left promiscuous mode [ 774.905637][T26055] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.6295: lblock 3 mapped to illegal pblock 3 (length 1) [ 774.915751][T26050] bridge0: left promiscuous mode [ 774.949440][T26050] bond4: left allmulticast mode [ 774.954406][T26055] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.6295: lblock 3 mapped to illegal pblock 3 (length 1) [ 774.990033][T26044] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.6295: lblock 3 mapped to illegal pblock 3 (length 1) [ 775.011832][T26054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.034317][T26055] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.6295: lblock 3 mapped to illegal pblock 3 (length 1) [ 775.039095][T26054] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.053302][T26044] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.6295: lblock 3 mapped to illegal pblock 3 (length 1) [ 775.072452][T26054] net_ratelimit: 22 callbacks suppressed [ 775.072465][T26054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 775.104749][T26055] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.6295: lblock 3 mapped to illegal pblock 3 (length 1) [ 775.179032][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 775.180617][T26044] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.6295: lblock 3 mapped to illegal pblock 3 (length 1) [ 775.245662][T26044] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.6295: lblock 3 mapped to illegal pblock 3 (length 1) [ 775.296204][T20127] bond1: (slave macvlan2): failed to get link speed/duplex [ 775.354888][T26069] xfrm0 speed is unknown, defaulting to 1000 [ 775.395673][T26044] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.6295: lblock 3 mapped to illegal pblock 3 (length 1) [ 775.420936][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 775.432291][T26079] loop7: detected capacity change from 0 to 8192 [ 775.493433][T22854] loop7: p1 < > p2 p4 < p5 > [ 775.506231][T22854] loop7: partition table partially beyond EOD, truncated [ 775.513619][T22854] loop7: p1 start 134217728 is beyond EOD, truncated [ 775.534544][T22854] loop7: p2 size 591360 extends beyond EOD, truncated [ 775.550783][T26069] lo speed is unknown, defaulting to 1000 [ 775.558637][T22854] loop7: p5 size 591360 extends beyond EOD, truncated [ 775.565530][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 775.601753][T26079] loop7: p1 < > p2 p4 < p5 > [ 775.621411][T26079] loop7: partition table partially beyond EOD, truncated [ 775.637120][T26079] loop7: p1 start 134217728 is beyond EOD, truncated [ 775.643991][T26079] loop7: p2 size 591360 extends beyond EOD, truncated [ 775.665287][T26079] loop7: p5 size 591360 extends beyond EOD, truncated [ 775.679161][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 775.811876][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 775.945472][T20128] bond1: (slave macvlan2): failed to get link speed/duplex [ 776.052244][T26082] xfrm0 speed is unknown, defaulting to 1000 [ 776.059168][T20128] bond1: (slave macvlan2): failed to get link speed/duplex [ 776.099191][T26082] lo speed is unknown, defaulting to 1000 [ 776.161244][T20125] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 776.183737][T20125] EXT4-fs (loop1): This should not happen!! Data will be lost [ 776.183737][T20125] [ 776.194712][T24739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 776.227120][T20128] bond1: (slave macvlan2): failed to get link speed/duplex [ 776.253984][T26088] loop1: detected capacity change from 0 to 1024 [ 776.273587][T26088] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 776.310462][T26088] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #3: block 1: comm syz.1.6309: lblock 1 mapped to illegal pblock 1 (length 1) [ 776.328107][T26088] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 776.328231][T26088] Quota error (device loop1): write_blk: dquota write failed [ 776.337345][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 776.337366][ C1] EXT4-fs (loop1): initial error at time 1771942335: ext4_map_blocks:818: inode 3: block 1 [ 776.337421][ C1] EXT4-fs (loop1): last error at time 1771942335: ext4_map_blocks:818: inode 3: block 1 [ 776.455504][T26088] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 776.483659][T26088] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.6309: Failed to acquire dquot type 0 [ 776.516933][T26088] loop1: lost filesystem error report for type 5 error -117 [ 776.522104][T26088] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.6309: Freeing blocks not in datazone - block = 0, count = 4096 [ 776.595070][T26088] loop1: lost filesystem error report for type 5 error -117 [ 776.632340][T26088] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.6309: Invalid inode bitmap blk 0 in block_group 0 [ 776.683904][T26088] loop1: lost filesystem error report for type 5 error -117 [ 776.684030][T26088] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 776.704688][ T40] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 776.740770][ T40] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 776.740943][ T40] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 776.786216][T26088] loop1: lost filesystem error report for type 5 error -117 [ 776.786388][T26088] EXT4-fs (loop1): 1 orphan inode deleted [ 776.815458][ T40] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 0 [ 776.836719][T26088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.851548][T26097] loop7: detected capacity change from 0 to 2048 [ 776.870856][ T40] loop1: lost filesystem error report for type 5 error -117 [ 776.909257][T26096] xfrm0 speed is unknown, defaulting to 1000 [ 776.991883][T26088] syzkaller0: entered promiscuous mode [ 777.005561][T26088] syzkaller0: entered allmulticast mode [ 777.032451][T26097] loop7: detected capacity change from 0 to 1024 [ 777.130953][T26096] lo speed is unknown, defaulting to 1000 [ 777.165834][T26097] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 777.186941][T26104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6314'. [ 777.209032][T24739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.230318][T26104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6314'. [ 777.340395][T14749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.422716][T26114] loop2: detected capacity change from 0 to 2048 [ 777.422968][T26113] loop7: detected capacity change from 0 to 256 [ 777.463340][T26113] msdos: Unknown parameter 'dotsodots' [ 777.498578][T26113] loop7: detected capacity change from 0 to 2048 [ 777.545891][T22854] loop7: p3 < > p4 < > [ 777.550237][T22854] loop7: partition table partially beyond EOD, truncated [ 777.560384][T22854] loop7: p3 start 4284289 is beyond EOD, truncated [ 777.569101][T26113] loop7: p3 < > p4 < > [ 777.573394][T26113] loop7: partition table partially beyond EOD, truncated [ 777.583990][T26113] loop7: p3 start 4284289 is beyond EOD, truncated [ 777.605220][T26119] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.650993][T26122] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6321'. [ 777.674194][T26110] xfrm0 speed is unknown, defaulting to 1000 [ 777.683243][T26120] batadv_slave_1: entered promiscuous mode [ 777.684672][T22854] udevd[22854]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 777.731026][T26110] lo speed is unknown, defaulting to 1000 [ 777.780673][T22854] udevd[22854]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 778.104038][T26119] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.324587][T26136] netlink: 84 bytes leftover after parsing attributes in process `syz.7.6324'. [ 778.344858][T26134] netlink: 'syz.8.6323': attribute type 4 has an invalid length. [ 778.352835][T26118] batadv_slave_1: left promiscuous mode [ 778.384324][T26119] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.607052][T26119] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.735384][ T352] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.782456][ T352] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.904167][ T40] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.964937][ T352] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.098483][T26154] loop1: detected capacity change from 0 to 2048 [ 779.193054][T26150] xfrm0 speed is unknown, defaulting to 1000 [ 779.303797][T26150] lo speed is unknown, defaulting to 1000 [ 779.399597][T26154] loop1: detected capacity change from 0 to 1024 [ 779.422212][T26154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.509610][T24739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.533136][T26166] loop2: detected capacity change from 0 to 512 [ 779.603682][T26166] EXT4-fs: Ignoring removed bh option [ 779.648439][T26166] EXT4-fs: inline encryption not supported [ 779.659690][T26166] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 779.687543][T26166] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 779.716803][T26166] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6331: bg 0: block 248: padding at end of block bitmap is not set [ 779.743974][T26166] loop2: lost filesystem error report for type 5 error -117 [ 779.744146][T26166] Quota error (device loop2): write_blk: dquota write failed [ 779.751765][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 779.751789][ C0] EXT4-fs (loop2): last error at time 1771942338: ext4_validate_block_bitmap:441 [ 779.861866][T26166] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 779.877539][T26166] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.6331: Failed to acquire dquot type 1 [ 779.931479][T26176] loop5: detected capacity change from 0 to 1024 [ 779.952757][T26166] loop2: lost filesystem error report for type 5 error -117 [ 780.009250][T26176] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 780.037145][T26176] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 780.037618][T26166] EXT4-fs (loop2): 1 truncate cleaned up [ 780.047526][T26176] JBD2: no valid journal superblock found [ 780.057122][T26166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 780.059290][T26176] EXT4-fs (loop5): Could not load journal inode [ 780.129583][T26164] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6331'. [ 780.146379][T20128] net_ratelimit: 22 callbacks suppressed [ 780.146398][T20128] bond1: (slave macvlan2): failed to get link speed/duplex [ 780.273531][ T352] bond1: (slave macvlan2): failed to get link speed/duplex [ 780.397078][ T40] bond1: (slave macvlan2): failed to get link speed/duplex [ 780.407574][T26166] xfrm0 speed is unknown, defaulting to 1000 [ 780.481280][T26189] loop5: detected capacity change from 0 to 2048 [ 780.516268][ T4815] bond1: (slave macvlan2): failed to get link speed/duplex [ 780.567830][T26166] lo speed is unknown, defaulting to 1000 [ 780.667963][ T40] bond1: (slave macvlan2): failed to get link speed/duplex [ 780.679683][T26188] xfrm0 speed is unknown, defaulting to 1000 [ 780.726540][T25202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 780.801370][ T352] bond1: (slave macvlan2): failed to get link speed/duplex [ 780.810500][T26196] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 780.876328][T26188] lo speed is unknown, defaulting to 1000 [ 780.955247][T26198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6340'. [ 781.006476][T26199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6340'. [ 781.096210][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 781.212286][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 781.296461][ T28] audit: type=1326 audit(1771942340.343:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26190 comm="syz.1.6338" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc087f1c629 code=0x0 [ 781.336155][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 781.445492][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 781.884281][T26220] xfrm0 speed is unknown, defaulting to 1000 [ 781.923005][T26220] lo speed is unknown, defaulting to 1000 [ 782.028926][T26220] chnl_net:caif_netlink_parms(): no params data found [ 782.112060][T26236] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.6349'. [ 782.160098][T26220] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.176398][T26220] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.184592][T26220] bridge_slave_0: entered allmulticast mode [ 782.191723][T26220] bridge_slave_0: entered promiscuous mode [ 782.209743][T26220] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.217984][T26220] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.225651][T26220] bridge_slave_1: entered allmulticast mode [ 782.232524][T26220] bridge_slave_1: entered promiscuous mode [ 782.245079][ T352] veth1: left allmulticast mode [ 782.250134][ T352] veth1: left promiscuous mode [ 782.255077][ T352] bridge1: port 2(veth1) entered disabled state [ 782.268291][ T352] ip6gretap2: left allmulticast mode [ 782.273682][ T352] ip6gretap2: left promiscuous mode [ 782.285640][ T352] bridge1: port 1(ip6gretap2) entered disabled state [ 782.716350][ T352] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 782.748043][ T352] gretap0 (unregistering): left promiscuous mode [ 782.830718][ T3583] IPVS: starting estimator thread 0... [ 782.840662][T20125] Bluetooth: hci0: Frame reassembly failed (-84) [ 782.946905][T26251] IPVS: using max 2256 ests per chain, 112800 per kthread [ 782.999437][ T352] bond3 (unregistering): (slave bridge0): Releasing backup interface [ 783.099644][ T352] bond0 (unregistering): left promiscuous mode [ 783.111073][ T352] bond_slave_0: left promiscuous mode [ 783.118173][ T352] bond_slave_1: left promiscuous mode [ 783.124274][ T352] dummy0: left promiscuous mode [ 783.137552][ T352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.148935][ T352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.161633][ T352] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 783.172687][ T352] bond0 (unregistering): Released all slaves [ 783.183857][ T352] bond1 (unregistering): Released all slaves [ 783.193825][ T352] bond2 (unregistering): Released all slaves [ 783.203967][ T352] bond3 (unregistering): Released all slaves [ 783.213794][ T352] bond4 (unregistering): Released all slaves [ 783.247424][T26220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.262303][ T352] tipc: Disabling bearer [ 783.273015][T26220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.283282][ T352] tipc: Left network mode [ 783.336879][T26220] team0: Port device team_slave_0 added [ 783.344019][T26220] team0: Port device team_slave_1 added [ 783.405876][T26220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.417733][T26257] netlink: 'syz.1.6352': attribute type 13 has an invalid length. [ 783.431983][T26220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.464911][T26220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.478724][T26220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.485854][T26220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.570187][T26220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.677690][T26257] gretap0: refused to change device tx_queue_len [ 783.819890][T26220] hsr_slave_0: entered promiscuous mode [ 783.839144][T26220] hsr_slave_1: entered promiscuous mode [ 783.855478][T26220] debugfs: 'hsr0' already exists in 'hsr' [ 783.862144][T26220] Cannot create hsr debugfs directory [ 783.899503][ T352] hsr_slave_0: left promiscuous mode [ 783.906643][ T352] hsr_slave_1: left promiscuous mode [ 783.912628][ T352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.920858][ T352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.072838][ T352] team0 (unregistering): Port device team_slave_1 removed [ 784.091619][ T352] team0 (unregistering): Port device team_slave_0 removed [ 784.606591][ T352] IPVS: stop unused estimator thread 0... [ 784.750726][T26304] team0: entered promiscuous mode [ 784.758127][T26304] team_slave_0: entered promiscuous mode [ 784.763856][T26304] team_slave_1: entered promiscuous mode [ 784.777025][T26302] team0: left promiscuous mode [ 784.786202][T26302] team_slave_0: left promiscuous mode [ 784.802489][T26302] team_slave_1: left promiscuous mode [ 784.877171][ T3626] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 785.000624][T26220] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 785.050441][T26220] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 785.073261][T26220] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 785.111367][T26220] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 785.212721][T26220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.234161][T26220] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.261662][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.268878][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.298443][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.305589][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.366587][T26220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 785.393645][ T28] audit: type=1326 audit(1771942344.443:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26296 comm="syz.1.6359" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc087f1c629 code=0x0 [ 785.435488][ T40] net_ratelimit: 14 callbacks suppressed [ 785.435504][ T40] bond1: (slave macvlan2): failed to get link speed/duplex [ 785.574140][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 785.624408][T26220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.696392][ T4815] bond1: (slave macvlan2): failed to get link speed/duplex [ 785.836356][ T352] bond1: (slave macvlan2): failed to get link speed/duplex [ 785.939650][T26220] veth0_vlan: entered promiscuous mode [ 785.953456][T26220] veth1_vlan: entered promiscuous mode [ 785.980603][T26220] veth0_macvtap: entered promiscuous mode [ 786.009862][ T4815] bond1: (slave macvlan2): failed to get link speed/duplex [ 786.023623][T26220] veth1_macvtap: entered promiscuous mode [ 786.052566][T26220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 786.092536][T26220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 786.113961][ T50] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.122820][ T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.157315][ T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.167769][ T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.301794][T26376] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.415724][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 786.892851][T26376] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.972217][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 786.998821][T26236] xfrm0 speed is unknown, defaulting to 1000 [ 787.068677][T26376] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.130365][ T40] bond1: (slave macvlan2): failed to get link speed/duplex [ 787.184565][T26376] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.256576][ T40] bond1: (slave macvlan2): failed to get link speed/duplex [ 787.316140][T20125] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.324380][T20125] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.350226][T20125] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.374036][T26386] team0: entered promiscuous mode [ 787.379911][T26386] team_slave_0: entered promiscuous mode [ 787.412921][T26386] team_slave_1: entered promiscuous mode [ 787.443445][T26385] team0: left promiscuous mode [ 787.466850][T26385] team_slave_0: left promiscuous mode [ 787.472393][T26385] team_slave_1: left promiscuous mode [ 787.490280][T20125] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.565501][ T352] bond1: (slave macvlan2): failed to get link speed/duplex [ 788.973633][T26400] set_capacity_and_notify: 1 callbacks suppressed [ 788.973722][T26400] loop1: detected capacity change from 0 to 256 [ 790.385032][T26400] FAT-fs (loop1): Directory bread(block 64) failed [ 790.392337][T26400] FAT-fs (loop1): Directory bread(block 65) failed [ 790.398908][T26400] FAT-fs (loop1): Directory bread(block 66) failed [ 790.406214][T26400] FAT-fs (loop1): Directory bread(block 67) failed [ 790.412942][T26400] FAT-fs (loop1): Directory bread(block 68) failed [ 790.419609][T26400] FAT-fs (loop1): Directory bread(block 69) failed [ 790.426945][T26400] FAT-fs (loop1): Directory bread(block 70) failed [ 790.433463][T26400] FAT-fs (loop1): Directory bread(block 71) failed [ 790.440087][T26400] FAT-fs (loop1): Directory bread(block 72) failed [ 790.447352][T26400] FAT-fs (loop1): Directory bread(block 73) failed [ 790.460382][T26406] loop5: detected capacity change from 0 to 1024 [ 790.477752][ T50] net_ratelimit: 6 callbacks suppressed [ 790.477770][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 790.595009][T26406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 790.621761][T26406] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 790.723912][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 790.759760][T26406] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.6375: lblock 3 mapped to illegal pblock 3 (length 3) [ 790.794544][T26406] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 790.839381][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 790.861577][T26406] EXT4-fs (loop5): This should not happen!! Data will be lost [ 790.861577][T26406] [ 790.933757][T26410] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6375: lblock 3 mapped to illegal pblock 3 (length 1) [ 790.959546][T26410] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6375: lblock 3 mapped to illegal pblock 3 (length 1) [ 790.965471][ T352] bond1: (slave macvlan2): failed to get link speed/duplex [ 791.001351][T26410] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6375: lblock 3 mapped to illegal pblock 3 (length 1) [ 791.060188][T26410] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6375: lblock 3 mapped to illegal pblock 3 (length 1) [ 791.135920][ T352] bond1: (slave macvlan2): failed to get link speed/duplex [ 791.143931][T26410] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6375: lblock 3 mapped to illegal pblock 3 (length 1) [ 791.220686][T26410] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6375: lblock 3 mapped to illegal pblock 3 (length 1) [ 791.247144][T26404] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6375: lblock 3 mapped to illegal pblock 3 (length 1) [ 791.262034][ T352] bond1: (slave macvlan2): failed to get link speed/duplex [ 791.301245][T26404] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6375: lblock 3 mapped to illegal pblock 3 (length 1) [ 791.381003][T26404] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.6375: lblock 3 mapped to illegal pblock 3 (length 1) [ 791.397578][ T4815] bond1: (slave macvlan2): failed to get link speed/duplex [ 791.505750][ T4815] bond1: (slave macvlan2): failed to get link speed/duplex [ 791.621774][ T4815] bond1: (slave macvlan2): failed to get link speed/duplex [ 791.746116][ T4815] bond1: (slave macvlan2): failed to get link speed/duplex [ 791.984059][ T352] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 792.045711][T26421] loop1: detected capacity change from 0 to 2048 [ 792.058449][ T352] EXT4-fs (loop5): This should not happen!! Data will be lost [ 792.058449][ T352] [ 792.111513][T22886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 792.147846][T26421] loop1: detected capacity change from 0 to 1024 [ 792.239007][T26427] team0: entered promiscuous mode [ 792.244291][T26427] team_slave_0: entered promiscuous mode [ 792.250869][T26427] team_slave_1: entered promiscuous mode [ 792.281112][T26426] team0: left promiscuous mode [ 792.287146][T26426] team_slave_0: left promiscuous mode [ 792.292695][T26426] team_slave_1: left promiscuous mode [ 792.304341][T26430] FAULT_INJECTION: forcing a failure. [ 792.304341][T26430] name failslab, interval 1, probability 0, space 0, times 0 [ 792.321690][T26430] CPU: 1 UID: 0 PID: 26430 Comm: syz.5.6379 Tainted: G W syzkaller #0 PREEMPT(full) [ 792.321721][T26430] Tainted: [W]=WARN [ 792.321733][T26430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 792.321745][T26430] Call Trace: [ 792.321752][T26430] [ 792.321760][T26430] __dump_stack+0x1d/0x30 [ 792.321783][T26430] dump_stack_lvl+0x95/0xd0 [ 792.321803][T26430] dump_stack+0x15/0x1b [ 792.321898][T26430] should_fail_ex+0x263/0x280 [ 792.321918][T26430] ? ucma_write_cm_event+0x252/0x4b0 [ 792.321939][T26430] should_failslab+0x8c/0xb0 [ 792.321958][T26430] __kmalloc_cache_noprof+0x5f/0x410 [ 792.322029][T26430] ucma_write_cm_event+0x252/0x4b0 [ 792.322058][T26430] ? __pfx_ucma_write_cm_event+0x10/0x10 [ 792.322077][T26430] ucma_write+0x1c9/0x260 [ 792.322103][T26430] ? __pfx_ucma_write+0x10/0x10 [ 792.322136][T26430] vfs_write+0x269/0x9f0 [ 792.322162][T26430] ? __rcu_read_unlock+0x4e/0x70 [ 792.322182][T26430] ? __fget_files+0x184/0x1c0 [ 792.322250][T26430] ksys_write+0xdc/0x1a0 [ 792.322329][T26430] __x64_sys_write+0x40/0x50 [ 792.322356][T26430] x64_sys_call+0x27e1/0x3020 [ 792.322379][T26430] do_syscall_64+0x12c/0x370 [ 792.322408][T26430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.322475][T26430] RIP: 0033:0x7f258d17c629 [ 792.322490][T26430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.322507][T26430] RSP: 002b:00007f258bbd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 792.322589][T26430] RAX: ffffffffffffffda RBX: 00007f258d3f5fa0 RCX: 00007f258d17c629 [ 792.322624][T26430] RDX: 0000000000000118 RSI: 00002000000001c0 RDI: 0000000000000003 [ 792.322637][T26430] RBP: 00007f258bbd7090 R08: 0000000000000000 R09: 0000000000000000 [ 792.322650][T26430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.322663][T26430] R13: 00007f258d3f6038 R14: 00007f258d3f5fa0 R15: 00007ffd226050e8 [ 792.322724][T26430] [ 793.231517][T26421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 793.742516][T26456] loop2: detected capacity change from 0 to 8192 [ 793.790037][T26457] loop7: detected capacity change from 0 to 1024 [ 793.828149][T26457] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 793.850659][T26457] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 793.868698][T22854] loop2: p1 < > p2 p4 < p5 > [ 793.873407][T22854] loop2: partition table partially beyond EOD, truncated [ 793.878852][T26457] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 3: comm syz.7.6389: lblock 3 mapped to illegal pblock 3 (length 3) [ 793.881647][T22854] loop2: p1 start 134217728 is beyond EOD, [ 793.908843][T26457] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 793.947068][T22854] truncated [ 793.950197][T22854] loop2: p2 size 591360 extends beyond EOD, truncated [ 793.969728][T26236] lo speed is unknown, defaulting to 1000 [ 793.982249][T26420] xfrm0 speed is unknown, defaulting to 1000 [ 794.006745][T26457] EXT4-fs (loop7): This should not happen!! Data will be lost [ 794.006745][T26457] [ 794.017062][T26462] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6389: lblock 3 mapped to illegal pblock 3 (length 1) [ 794.032900][T22854] loop2: p5 size 591360 extends beyond EOD, truncated [ 794.073621][T26462] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6389: lblock 3 mapped to illegal pblock 3 (length 1) [ 794.105220][T26456] loop2: p1 < > p2 p4 < p5 > [ 794.110041][T26456] loop2: partition table partially beyond EOD, truncated [ 794.126604][T26456] loop2: p1 start 134217728 is beyond EOD, truncated [ 794.134699][T26462] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6389: lblock 3 mapped to illegal pblock 3 (length 1) [ 794.143990][T26456] loop2: p2 size 591360 extends beyond EOD, [ 794.150534][T26454] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6389: lblock 3 mapped to illegal pblock 3 (length 1) [ 794.175285][T26462] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6389: lblock 3 mapped to illegal pblock 3 (length 1) [ 794.186156][T26456] truncated [ 794.203668][T26454] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6389: lblock 3 mapped to illegal pblock 3 (length 1) [ 794.203781][T26456] loop2: p5 size 591360 extends beyond EOD, [ 794.225720][T26462] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6389: lblock 3 mapped to illegal pblock 3 (length 1) [ 794.232348][T26456] truncated [ 794.288799][ T28] audit: type=1326 audit(1771942353.323:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26440 comm="syz.5.6385" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f258d17c629 code=0x0 [ 794.333970][T26454] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6389: lblock 3 mapped to illegal pblock 3 (length 1) [ 794.357269][T26454] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.6389: lblock 3 mapped to illegal pblock 3 (length 1) [ 794.593713][T26420] lo speed is unknown, defaulting to 1000 [ 794.776728][T20125] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 794.787932][T26460] xfrm0 speed is unknown, defaulting to 1000 [ 794.827184][T20125] EXT4-fs (loop7): This should not happen!! Data will be lost [ 794.827184][T20125] [ 794.841912][T26220] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 794.980697][T26460] lo speed is unknown, defaulting to 1000 [ 795.099602][ T28] audit: type=1326 audit(1771942354.153:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26465 comm="syz.5.6390" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f258d17c629 code=0x0 [ 795.231170][T26473] loop7: detected capacity change from 0 to 8192 [ 795.307122][T26473] loop7: p1 < > p2 p4 < p5 > [ 795.311898][T26473] loop7: partition table partially beyond EOD, truncated [ 795.375388][T26473] loop7: p1 start 134217728 is beyond EOD, truncated [ 795.413867][T26473] loop7: p2 size 591360 extends beyond EOD, truncated [ 795.433324][T26473] loop7: p5 size 591360 extends beyond EOD, truncated [ 795.717104][ T50] net_ratelimit: 16 callbacks suppressed [ 795.717119][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 795.998767][T26481] netlink: 'syz.5.6395': attribute type 1 has an invalid length. [ 796.029324][ T4815] bond1: (slave macvlan2): failed to get link speed/duplex [ 796.146345][ T40] bond1: (slave macvlan2): failed to get link speed/duplex [ 796.286271][ T40] bond1: (slave macvlan2): failed to get link speed/duplex [ 796.377509][T26473] xfrm0 speed is unknown, defaulting to 1000 [ 796.416887][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 796.488024][T24739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.526404][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 796.544954][T26473] lo speed is unknown, defaulting to 1000 [ 796.553690][ T2999] ================================================================== [ 796.561975][ T2999] BUG: KCSAN: data-race in dont_mount / path_lookupat [ 796.568749][ T2999] [ 796.571167][ T2999] read-write to 0xffff8881083ba480 of 4 bytes by task 22854 on cpu 0: [ 796.579330][ T2999] dont_mount+0x2a/0x40 [ 796.583492][ T2999] vfs_unlink+0x206/0x490 [ 796.587835][ T2999] filename_unlinkat+0x1e2/0x410 [ 796.590580][ T28] audit: type=1326 audit(1771942355.643:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26485 comm="syz.5.6396" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f258d17c629 code=0x0 [ 796.592774][ T2999] __se_sys_unlink+0x2b/0xe0 [ 796.592797][ T2999] __x64_sys_unlink+0x1f/0x30 [ 796.624848][ T2999] x64_sys_call+0x2eb6/0x3020 [ 796.629536][ T2999] do_syscall_64+0x12c/0x370 [ 796.634150][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.640040][ T2999] [ 796.642359][ T2999] read to 0xffff8881083ba480 of 4 bytes by task 2999 on cpu 1: [ 796.649892][ T2999] path_lookupat+0x1d8/0x500 [ 796.654496][ T2999] filename_lookup+0x190/0x390 [ 796.659263][ T2999] do_readlinkat+0x74/0x2f0 [ 796.663776][ T2999] __x64_sys_readlink+0x47/0x60 [ 796.668647][ T2999] x64_sys_call+0x2b51/0x3020 [ 796.673337][ T2999] do_syscall_64+0x12c/0x370 [ 796.677937][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.683840][ T2999] [ 796.686159][ T2999] value changed: 0x00300080 -> 0x00004080 [ 796.691883][ T2999] [ 796.694196][ T2999] Reported by Kernel Concurrency Sanitizer on: [ 796.700441][ T2999] CPU: 1 UID: 0 PID: 2999 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 796.710958][ T2999] Tainted: [W]=WARN [ 796.714786][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 796.724853][ T2999] ================================================================== [ 796.743363][ T40] bond1: (slave macvlan2): failed to get link speed/duplex [ 796.879101][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 797.012735][ T4815] bond1: (slave macvlan2): failed to get link speed/duplex [ 797.126008][ T352] bond1: (slave macvlan2): failed to get link speed/duplex [ 800.805957][ T50] net_ratelimit: 32 callbacks suppressed [ 800.805976][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 800.925968][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 801.035543][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 801.146698][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 801.255584][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 801.366052][T20128] bond1: (slave macvlan2): failed to get link speed/duplex [ 801.486302][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 801.595984][ T352] bond1: (slave macvlan2): failed to get link speed/duplex [ 801.706295][T20128] bond1: (slave macvlan2): failed to get link speed/duplex [ 801.816011][T20128] bond1: (slave macvlan2): failed to get link speed/duplex [ 805.866289][T20125] net_ratelimit: 35 callbacks suppressed [ 805.866315][T20125] bond1: (slave macvlan2): failed to get link speed/duplex [ 805.986663][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 806.095980][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 806.206481][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 806.326304][ T352] bond1: (slave macvlan2): failed to get link speed/duplex [ 806.435851][ T352] bond1: (slave macvlan2): failed to get link speed/duplex