last executing test programs: 11m25.666783774s ago: executing program 32 (id=682): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newchain={0x34, 0x1e, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x9}, {0x10, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4044000) r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = dup(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000080)=0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r4 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x82) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2000000000000100000109000100736b7a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) fchdir(r5) r7 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) open(0x0, 0x80080, 0x122) open(0x0, 0x45ff83, 0x139) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x40, 0x44) acct(&(0x7f00000000c0)='./file0\x00') acct(0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) getgroups(0x8, &(0x7f0000001080)) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000005c0)={0x8, {{0xa, 0x1000, 0xfffffffc, @mcast1, 0x6}}, {{0xa, 0x0, 0x2b438f66, @loopback}}}, 0x108) 10m33.601524335s ago: executing program 33 (id=1177): r0 = socket$igmp6(0xa, 0x3, 0x2) socket$inet(0x2, 0x80001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6092c01f00442f002001000000000000000000000000000100000000000000000000ffff005700002421880b"], 0x0) 9m3.380881872s ago: executing program 34 (id=2057): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2e, 0xd, 0x3, 0x0, 0x10, 0x6}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}]}, 0x7, 0x7b5, &(0x7f0000000540)="$eJzs3c9rHNcdAPDvrH7ZslurUKjdi3VqDcYr21XtFgqV6aEUajC059pitRaqVlqjXRlL6GBTCoEQkpgcEpJLzvnh3HINyTl/Qy4hBBsnkU0ccggbZn9IK+3qp7Ur2/p8YKT3Zt7se9+dnTdvdx67ARxYw+mfTMSJiHgtiThWX59ERF811RsxViv3ZHkply5JVCr/+japlnm8vJSLpn1SR+qZ4xHx6f8jTmda6y0tLE6PFwr5uXp+pDxzY6S0sHhmamZ8Mj+Zn71wbnT0/MU/Xrywd7F+//ni0Qev//33H479+L/f3HvlsyTG4mh9W3Mce2U4huvPSV/6FK7xt72ubJ8l+90AdiU9NXtqZ3mciGPRU00BAC+y9PpfAQAOmMT1HwAOmMbnAI+Xl3KNZX8/keiuh5cikqQWf+P+Zm1Lb/2e3aHqfdDBx0n01u+Ixh7e7xqOiHc+/s/76RIdug8J0M7tOxFxbWi4tf9PWuYs7NTZbZQZXpfX/0H3fHIpIv7UbvyXWRn/xMr4Z9VAm3N3N4Yj+pvzred/5n7bHf+6B5XXx39/qc1tSwNtGv+tTFob6qnnfpFmTkbEVCGf9m2/jIhT0TdwfaqQP7dJHace/fRoo23N47/v7v73vbT+9P9qicz93oG1+0yMl8efJuZmD+9E/LZ3dW7fk5b+/3Z1rLv++Kfrrmz2wCdXk//480tvb1QsjT+Nt7G0xt9ZlXcjfhft429INp2fOJIe/rO1v+3r+OjLNwc3qr/5+KdLWn/jvUA3pMd/cPP4h5Lm+Zqlva1/6/jbv/77k39X043O49Z4uTx3LqI/+Wfr+vOr+zbyjfJp/LVI18e/2v+1e/2n7wSvbTPG3gfffLD7+Fd0ZIplGv/Ejo7/zhP3nkz37D7+9PiPVlOn6mu20/8V8v2xnQY+zXMHAAAAAAAAAAAAAAAAAAAAAAAAANuViYijkWSyK+lMJput/Yb3r2MwUyiWyqevF+dnJ6L6W9lD0ZdpfNVl4zsWG99/OlTbnqT58+vyf4iIX0XEGwOHq/lsrliY2OfYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDhyAa//5/6emCTHZPebjURAOiEQ1uWeJRfk61UKpUOtgcA6Lytr/+t3nq1Aw0BALpmk+v/4W62AwDont28/wcAnm+u/wBw8Lj+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GFXLl9Ol8oPy0u5ND9xc2F+unjzzES+NJ2dmc9lc8W5G9nJYnGykM/mijNbPV6hWLwxGrPzt0bK+VJ5pLSweHWmOD9bvjo1Mz6Zv5rv60pUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAzpYXF6fFCIT/3QiRejoi1ayrPRsOePpHEM9GMfUl8deaL45uVubvFy3jsmYjiOUvsd88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Hz4OQAA//9yoCbU") 8m38.959772417s ago: executing program 35 (id=2276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1c00}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) 8m24.865175335s ago: executing program 36 (id=2382): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0xb, 0x70bd2b, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008890}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x38, 0x3, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x542b}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xd82}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000841}, 0x40) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r3, &(0x7f0000000080)='\x00\x00', 0x2}]) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x4, 0x0, 0x0, 0x21ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa80}, 0x0, 0x0, 0xffffffffffffffff, 0xd) gettimeofday(&(0x7f0000000180), &(0x7f0000000240)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0x1, &(0x7f0000000000), &(0x7f00000000c0)=""/33}, 0x20) read(r6, 0x0, 0x0) 8m14.605236831s ago: executing program 37 (id=2484): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4000, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x0, &(0x7f0000000040)}) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075b, 0x4}}]}, 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r4 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15\x11\xf0\xd3\xa0\x99\xef\xe4\xb3\xc5\xc3AK\x7f\xe2\xa6]\x9a\xadyr\xaf <\xd5\xe1\xfa,N\x8a\x03\xe7s\xef\x96\xfc\x8c\xe4\xd2', 0x6e93ebbbcc0884f2, 0x1c6, &(0x7f0000000040)={0x4d3f98f6, 0x2, 0x4, 0x1}) mq_timedreceive(r4, &(0x7f0000000280)=""/211, 0xd3, 0x800000000000, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x3ed7, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000400)) mq_timedsend(0xffffffffffffffff, &(0x7f00000003c0)="1dd64da9daf4a73678109aa6625bcf62e5b5a2cd89291955a5d15a1933", 0x1d, 0x8, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r5, &(0x7f0000000240)=""/4096, 0x1000) 6m36.639880369s ago: executing program 38 (id=3182): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (fail_nth: 8) 5m2.261947757s ago: executing program 9 (id=4070): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x3c, 0x4, 0x1, 0x1, 0x0, 0xffffffff, 0x94912, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x8a0, 0x1, 0x200, 0x5, 0x81, 0x1, 0x2, 0x0, 0xcd, 0x0, 0x1}, 0x0, 0x20000, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x74, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8000}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xf7}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x11}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x39000, 0x0) r5 = memfd_create(&(0x7f0000000dc0)='.B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\xfb*\xe7\xc1q\xf9?\xefo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n{\xb2\x99tNcp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9769\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-\x94\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\x82\xb8wN\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcat\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xba\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\xbc\xbci\xac5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dOU6\xdcXF~(\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa\xdc\x84n\xf8/\x19\x85NT%\x94!3k]\xd5\xbe\'U\xf17\x93L\xd0\xb3\x99\x9f<\xee\xd6o\xa1\xf8\xd4D\xf1f7\x03_\xf7\x10\x9e]\'\xf2\xa5\xd3\x8e\xb3`\'2\xa8\x90&\x84\v\x00\x00\x00\x00', 0x2) r6 = dup(r5) splice(r3, 0x0, r6, 0x0, 0x7ff, 0xe) write$binfmt_elf64(r2, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 5m0.03217073s ago: executing program 9 (id=4075): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000800030003"], 0x68}, 0x1, 0x0, 0x2000000}, 0x64000004) 4m59.407994744s ago: executing program 9 (id=4076): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0xa, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7, 0x100}, 0x40, 0x0, 0x7, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x4, 0x1297, &(0x7f0000000600)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xc00) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r3, r3, 0x0, 0xe3aa6ea) 4m58.95377583s ago: executing program 9 (id=4084): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000008800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 4m57.848133585s ago: executing program 9 (id=4086): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0xb4) r1 = accept4(r0, &(0x7f0000001880), &(0x7f0000001900)=0x80, 0x80800) setsockopt$sock_int(r1, 0x1, 0x2c, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20) syz_mount_image$vfat(&(0x7f0000001940), &(0x7f0000000040)='./file0\x00', 0x1004552, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESDEC=r2, @ANYRESHEX=r1, @ANYRES16=r0], 0xfb, 0x1223, &(0x7f0000001980)="$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") r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xa}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001800)={@fallback=r6, 0xb, 0x1, 0xfffeffff, &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001840)={r7, r10, 0x25, 0x10, @val=@netkit={@void, @value=r7, @void, @void, r11}}, 0x1c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xec, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r13 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r12, &(0x7f0000000480), &(0x7f0000000280)=@udp=r13, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r12, &(0x7f00000007c0)="57691c5ce5cce8", &(0x7f00000000c0)=@udp=r13, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r12, &(0x7f0000000380), 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r14 = creat(&(0x7f00000003c0)='./bus\x00', 0x50) fallocate(r14, 0x0, 0xbf5, 0x2000402) 4m55.395280516s ago: executing program 9 (id=4091): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000010000304000000000000000000000200", @ANYRES32=r2, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa000000080003"], 0x68}}, 0x64000004) 4m50.650502709s ago: executing program 39 (id=4038): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x53) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000500)={[{@noinit_itable}, {@noblock_validity}, {@dioread_lock}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x1, 0x4bf, &(0x7f0000000c00)="$eJzs3E1oHGUfAPD/TD763aR9+76v/dCuVjFYTZq0ag8eVBR6EQQ9VPAS01hq01aaCLYUG0XqUTx5VI+C4MmLJwUR9aR41bsIRXpp9SArszuT7Ca7280m29ju7we7+zzzsc/8Z54n88w8mQ2gZ5WytyRia0T8EhFD1Wz9AqXqx41rl6b+vHZpKoly+YU/kspy169dmioW3ZF/bsm/cySNSN9NYm+DcmcvXDw9OTMzfT7Pj82deX1s9sLFR06dmTw5fXL67MTRo0cOjz/+2MSjaxJnFtf1PW+d27f72EsfPDdVjle+/yzb/q35/No4qoZXXWYpSlHOLU4drLw/sOpv/3fZVpNO+tdxQ1iRvojIDtdApf0PRV8sHryhePadhcw367SBQNdk56Ydy6b25Z/pwvkLuBMl2jj0qOKMn13/Fq9b2f9Yb1efyt6nK/HfyF/VOf2RZteyw9Ur9r4m6/+vzXLKS/KD+efWiDg+/9dH2Ssa3ocAAFhbX2X9n4cb9f/Sur7N9nwMZTgiDkbEzoj4T0Tsioj/5v2g/0fEXSssv7Qkv7z/89OmjgJrU9b/eyIf26rv/6X5EslCblsl/oHk1VMz04fyfTISAxuy/HiLMr5+5uf3m80r1fT/sldWftEXzLfj9/4N9eucmJybXEXIda6+HbGnv1H8ycJIQLYHdkfEng6+P9tnpx76dF+W3r5l+fybxN/62K/BOFP5k4gHq8d/PpbEX0iqJTUbnxzbGDPTh8aKWrHcDz9eeb42P1CTrot/Y3sxbew02Aay47+5Yf3P4y+aQTFeO7vyMq78+l7Ta5rlxz+J4/O1S+T1v6YmZPV/MHmxki6uo96cnJs7Px4xmE+omz6xuG6RL5bP4h850Lj974z4++N8vb0RkVXiuyPinojYn2/7vRFxX0QcaBH/d0/f/1rrPdSq/XdXFv+JVsc/YjipHa/vINF3+tsvm5Xf3t+/I5XUSD6lnb9/eeHF6ajpBna63wAAAOB2klbGoJN0tEjX3JzaFZvTmXOzcwdL8cbZE9Wx6uEYSIs7XUM190PH83vDRX5iSf5w5fmAcrlc3lTJj06dm9m2noEDlWd16tp/pOnoaHXeb83+6QW4c6xoHK326cDPv1j7jQFuKc9rQu/S/qF3af/Qu7R/6F2N2v/liBvrsCnALeb8D71L+4fepf1D79L+oSctfyS++KGFTp70X0zsPLaq1bueKA915ZvnV75WX5cijdof7WiaSFr9OELLRKStlxlso/QmiZc/rFbB7lWA9KbLPNnF0vPE/jyxISLaXety53u1g/oDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw+/snAAD//7BL2A4=") 4m40.333071675s ago: executing program 40 (id=4091): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000010000304000000000000000000000200", @ANYRES32=r2, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa000000080003"], 0x68}}, 0x64000004) 4m21.191503177s ago: executing program 5 (id=4323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c000440000000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000811}, 0x40) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a000006"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 4m21.097370843s ago: executing program 5 (id=4324): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000010000304000000000000000000000003", @ANYRES32=r2, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa000000080003"], 0x68}}, 0x64000004) 4m20.93451985s ago: executing program 5 (id=4325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x308843, 0x190) fcntl$setlease(r1, 0x400, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x2c, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=0x0, @ANYBLOB="eaff9800f707000070000000"], 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xffffffff]}, 0x8) r7 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) rt_sigreturn() sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000400)={0x20, 0x1402, 0x1, 0x70bd26, 0x25cfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4850) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r4, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xffffffffffffffc7, 0x99, {0x5, 0x37}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) fcntl$getflags(r1, 0x401) 4m20.745226342s ago: executing program 5 (id=4329): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x158) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffff7ff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80820}, 0xc0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x4e20, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x80, 0x1450c2) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000006c0)={0x2, 0x0, 0x4, 0x8, 0x0, 0x7c, 0x0}) 4m20.527932518s ago: executing program 5 (id=4331): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0xa, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7, 0x100}, 0x40, 0x0, 0x7, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0xd90}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x4, 0x1297, &(0x7f0000000600)="$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") mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffff7fc, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3825d045, 0x81}, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xc00) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 4m20.350118218s ago: executing program 5 (id=4332): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e7, &(0x7f00000005c0)="$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") 4m20.194879314s ago: executing program 41 (id=4332): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e7, &(0x7f00000005c0)="$eJzs3UtoXNcZAOD/jh5WZVlS3dIW1wXR0talWLI0g22MWywomBpj2rqr1l2IavSIR7axFBJpERKch7PIKiQQYkK8yROClskmmCwMCYFAAlmExIssApGRHZwXyUbhzkOWpZFsR7Yulr8PDvfcoztz/ju/zvG9Zy5WAHetrojYFxENEbEjIjqq7blqiQcrJT1uKD89kpYk5uYOX04iiYgD+emR2nsl1e3G6hu0RMT75yNaH17a7/jk1NGBUql4srrfMzF2omd8cmr76NjAcHG4eGxnX753d35XoXDrzrXwwv4nRg4cPPJi+9aO755/6lQS+6Kt+rOF53GrdEVX5TNcpDGJ+Mut7ixjLVkHwE0beXfzA1nHAACsvfT6dHNE/LZ8/d8RDdFYbr9n5siVjrgytNzrOr957vO1jBMAAAD48eaiI/amWwAAAGDdykVEWyS57uqzAG2Ry3V3V57h/Xm05krHxyf+PHT83mODUX5WtjOackOjpWLtWeHOaErS/d5y/ep+36L9fET8NCJOd/ykvN/9/+OlwawXPwAAAGCda4u48N9Tb/xy4zL3/6mPO7KOEgAAAFiN9P5/04XW8n/V9ZX7fAAAAFiX0vv/K49eejvc/wMAAMC6Vbv/n/87XCoqKirzlaxnKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhqbi6JOQAAAGBdy3r9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAO8uB/PRIraxVnzP716onljPbHxGdlfwPVUvlJ43RUt62RFNEtH6ZROOC1yUR0bDKvvfsieiK4uPn2psLaYnq7+Eq35Y7xPSnWUdAliojnrvVln9mHQFZeu901hGQpQ9ms46ALP3rcNYRkKVDO7OOgCw9eznrCDjXHxE76q3/5eJX5W1lFWjx+k9DeYVodd45E9EV3Z8tbFu6/pObWWU3rGC2P2JvRAwtWf/L1Q7pbKjubSovFTYlQ6Ol4o6IaI+IbdG0Id3vXaGPzjMvX6zXfuhUmv/v/1Y4/5u+tHxx9k+9af/p9upRuZnGDde+bnBgYmC1503F7EMRWxrr5T+ZX/9Nlln/3XCDfbz+x8derdf+j8Y0/+P9ab5rZWn+uZ3mzkb8oe74T+aPSWs9E2MnesYnp7aPjg0MF4eLx3b25Xt353cVCj3l6aCnNinU8feWvly99keeSfP/1tO18Z+WtP90e3vOlsXS8d+6cv7L8//45NTRgVKpeHL85vv4/daPNtZrf2Ukzf8vvl45//Xn/+bk3+UAm6tt9w9MTJzsjWhODi5t99s0r/Z51D6vNP/bflf/3//a9V9l/s8tmf9/Vt3mKl8hLuu1+/73Zr32Tz5M8/9k87n25oLxn400/4PXGf/JNeP/5istf/31f+r1/dK3af4vXqp9/5uWtP/ad8EV6fgvlIPZVm1x/Xd9N5qgrOMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICFfggAAP//qrnPuw==") 3m30.268446925s ago: executing program 6 (id=4717): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYRES64=r0], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_io_uring_setup(0x63eb, &(0x7f0000000680)={0x0, 0x1200, 0x8000, 0x2, 0x316}, &(0x7f0000000180), &(0x7f0000000740)=0x0, &(0x7f0000000780)) r8 = syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x1000, 0x1000}, &(0x7f0000000140), &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_setup(0x5a49, &(0x7f0000000200)={0x0, 0x2000, 0x0, 0x0, 0x357}, &(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_submit(r12, r9, r10, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x30, 0x0, r4, 0x0, &(0x7f00000004c0)="4cca5d47c5c60e3bcfc7b940171c3f027a998e5bb47856b830ab", 0x1a, 0x40000000, 0x1, {0x0, r11}}) syz_io_uring_submit(0x0, r7, r10, &(0x7f00000007c0)=@IORING_OP_CLOSE={0x13, 0x37, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r13 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r13, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3m27.808501337s ago: executing program 6 (id=4726): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0x74373, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b5700fd00860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 3m27.344384135s ago: executing program 6 (id=4730): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x388, 0x2e8, 0x2e8, 0x388, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0x1d0, 0x0, {0x0, 0x8000000}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:fuse_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 3m27.305241541s ago: executing program 6 (id=4734): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0xa, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7, 0x100}, 0x40, 0x0, 0x7, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x4, 0x1297, &(0x7f0000000600)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x19d01, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xc00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) 3m26.685605555s ago: executing program 6 (id=4738): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async, rerun: 32) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000001580)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 32) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x81, 0x101}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = eventfd2(0x74a6, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="00ffffffffffffff", 0x8}], 0x1) r3 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x0, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) (async, rerun: 32) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) (async, rerun: 32) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 3m26.011841508s ago: executing program 6 (id=4744): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000200000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) 3m25.976064163s ago: executing program 42 (id=4744): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000200000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) 2m17.235951042s ago: executing program 0 (id=5286): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x800008006, 0xfffffffffffff800}, 0x0, 0x10001, 0xde, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000500000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) 2m17.19411613s ago: executing program 0 (id=5287): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010101}]}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x4, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40841}, 0xa87787778599cb0e) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r0, 0x3}, &(0x7f0000000200)=0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000"], 0x80}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={r5, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010101}]}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x4, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40841}, 0xa87787778599cb0e) (async) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r0, 0x3}, &(0x7f0000000200)=0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000"], 0x80}}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={r5, 0x4}, 0x8) (async) 2m17.052832713s ago: executing program 0 (id=5291): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRES16=r0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrusage(0xffffffffffffffff, &(0x7f00000000c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', '', [{0x20, '&'}], 0xa, "27d7e867680d34c3c2f043cd88b62f9c849851652edaffe0e0216ef36af635774f5cd45543e59b15fd89b30fdfdafb74267b2e513ac3fa67fe8ba48937cc4031c299e193606fc16d206462df7a36ba6162ab8ab5461fa99f92f9f79b8cf49d8ba8bd48a6be87d091762c737a636c5703a4e8fa8e3f"}, 0x7b) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000001180)=ANY=[], 0x1, 0xa08, &(0x7f0000008280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m16.640926192s ago: executing program 0 (id=5299): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5f6, &(0x7f0000001200)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd3f0, 0x2000, 0x7, 0xadeb}) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080), 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x0, 0xfe64, 0x0, &(0x7f0000000040)="b6691c75e657d5aa36b7b20cc058", 0x0, 0x2f, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000440)="5bef35a04261194e36b537a031b9381b36fd75205a0691b060648f7fc20321307a68b37245054ec8c03ceceaf64b140d40476ceedc0df56ca5e950be7f2358e385e43570d6c490f936aae3aab237e9f7c92a11fbcf1daa2a0494c8ba8ca0852610a5098b9e9d063ae491ee88018f33a502e76fe20f6cd864fd839fbf1dba046f798e34b0d892f593dcd06a4189265b20588002219f4a901c27da3ff0f75f8a499efd1188bbbb340a40430a0dd713853ea7373e4b35780bb886ac76546fa9d95d", 0x4}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x1, 0xd, 0x1, 0x9}, {0xfffc, 0x82, 0x5, 0x5}]}) (async) r2 = syz_io_uring_setup(0x2912, &(0x7f00000003c0)={0x0, 0x5c99, 0x2000, 0x3, 0xde}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f00000005c0)) io_uring_enter(r2, 0x4568, 0x71d1, 0x2d, &(0x7f0000000600)={[0x2]}, 0x8) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x2, 0x0) (async) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000480)='z', 0x1, 0x0, 0x1000}], 0x0) socket(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) (async) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000"], 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@delchain={0x44, 0x65, 0x979291dc55ea3865, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0x1, 0x4}, {0xfff1, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0xc, 0x9}}, @TCA_RATE={0x6, 0x5, {0x10, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500250000000000080004"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffb, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) (rerun: 64) 2m16.524285242s ago: executing program 0 (id=5300): socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x840000000002, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x11, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040924010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x40) 2m16.132652477s ago: executing program 0 (id=5302): r0 = socket$kcm(0x21, 0x2, 0xa) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, &(0x7f0000000180)=0x3ff, 0xc, 0x0) (async) mbind(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x1, 0x8, 0x3) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x8591, 0xa88, 0x4, 0x5, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) (async) unshare(0x2040400) openat$cgroup_ro(r1, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000400)={@local, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40003, 0x40, 0x5, 0x700, 0x0, 0x447f0066}) (async) r5 = socket$netlink(0x10, 0x3, 0x8000000004) setreuid(0x0, 0xee00) (async) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x21, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x209fc, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x0, 0x20007, 0xb, 0x0, 0x2, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) (async) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80840) syz_usb_disconnect(r6) (async) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) (async) ioctl$EVIOCRMFF(r6, 0x40085503, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x91, 0x0, 0x580}]}, 0x10) (async) sendto$inet6(r2, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) (async) pwrite64(r1, 0x0, 0x0, 0xfecc) socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x4) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x3}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xa}, {0x90, 0x109, 0x4, "2a4f2dab6c34bb55091fdfb8d831b2480f58a8888f43c60b88ab591fc0d57f123ada9da65b85c1ba1ba83f7bad3554506771f04a3e2b53b18fd39c76d1291cc09b21011dc7c647116624727e89cbab98d2190896c32dd4fed994106fd931a38337980b67b3f5d3c487b96bcb3859e8b16dcbd6775101f21f251333cdfcce25"}], 0xb8}, 0xfc40) 2m16.106111272s ago: executing program 43 (id=5302): r0 = socket$kcm(0x21, 0x2, 0xa) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, &(0x7f0000000180)=0x3ff, 0xc, 0x0) (async) mbind(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x1, 0x8, 0x3) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x8591, 0xa88, 0x4, 0x5, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) (async) unshare(0x2040400) openat$cgroup_ro(r1, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000400)={@local, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40003, 0x40, 0x5, 0x700, 0x0, 0x447f0066}) (async) r5 = socket$netlink(0x10, 0x3, 0x8000000004) setreuid(0x0, 0xee00) (async) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x21, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x209fc, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x0, 0x20007, 0xb, 0x0, 0x2, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) (async) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80840) syz_usb_disconnect(r6) (async) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) (async) ioctl$EVIOCRMFF(r6, 0x40085503, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x91, 0x0, 0x580}]}, 0x10) (async) sendto$inet6(r2, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) (async) pwrite64(r1, 0x0, 0x0, 0xfecc) socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x4) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x3}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xa}, {0x90, 0x109, 0x4, "2a4f2dab6c34bb55091fdfb8d831b2480f58a8888f43c60b88ab591fc0d57f123ada9da65b85c1ba1ba83f7bad3554506771f04a3e2b53b18fd39c76d1291cc09b21011dc7c647116624727e89cbab98d2190896c32dd4fed994106fd931a38337980b67b3f5d3c487b96bcb3859e8b16dcbd6775101f21f251333cdfcce25"}], 0xb8}, 0xfc40) 1m44.597565562s ago: executing program 1 (id=5554): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f00000004c0)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@block_validity}, {@resuid}, {@usrquota}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x81, 0x501, &(0x7f0000000e80)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETS2(r0, 0x402c542b, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f000001f940)) 1m43.071477958s ago: executing program 1 (id=5558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c000440000000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000811}, 0x40) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x200000000000000) 1m42.068665265s ago: executing program 1 (id=5560): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0xfffd}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000ff0200000000000000000000000000012001000000000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000180000000000000020000000000000009000000000000000000000000000000000001000000000084000500ac1414aa000000000000000000000000000004d532000000000000007f0000010000000000000000000000000000000002010000000000000000000000000000640101020000000000000000ff000000fffffffc3c"], 0x13c}}, 0x4080010) syz_emit_ethernet(0x46, &(0x7f0000002600)=ANY=[@ANYBLOB="0180c20000000180c200000286dd6000000000103a01fe800000000000002000000000000000ff020000000000000000000000000001"], 0x0) 1m41.996222518s ago: executing program 1 (id=5561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r1, 0x4bfa, &(0x7f0000002f80)=""/54) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400000010000100000000003f3800000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000001080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x13, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x20000680) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1008c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x4}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) getsockopt(r2, 0x8, 0x4, &(0x7f0000000040)=""/26, &(0x7f0000000140)=0x1a) setns(0xffffffffffffffff, 0x10000000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x2, 0x80000}, 0x20) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x5, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000300)={0x2000001, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0x4b}) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) 1m41.739747591s ago: executing program 1 (id=5566): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000780)={[{@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@nodiscard}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@noload}, {@block_validity}]}, 0xfa, 0x481, &(0x7f0000003380)="$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") (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000780)={[{@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@nodiscard}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@noload}, {@block_validity}]}, 0xfa, 0x481, &(0x7f0000003380)="$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") mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) 1m39.318292756s ago: executing program 1 (id=5588): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0xa, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7, 0x100}, 0x40, 0x0, 0x7, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x3877, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r1, &(0x7f0000000400)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fb7f02e8f8c52ab22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed6020500000000000029", 0x5e, 0x4000844, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)="94", 0x1) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e8", 0x7a, 0xc2ff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) syz_open_dev$hidraw(&(0x7f0000000200), 0xaf, 0xc040) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0xd90}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x4, 0x1297, &(0x7f0000000600)="$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") mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffff7fc, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x19d01, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3825d045, 0x81}, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xc00) openat(0xffffffffffffff9c, 0x0, 0x4c142, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 1m39.224981901s ago: executing program 44 (id=5588): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0xa, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7, 0x100}, 0x40, 0x0, 0x7, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x3877, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r1, &(0x7f0000000400)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fb7f02e8f8c52ab22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed6020500000000000029", 0x5e, 0x4000844, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)="94", 0x1) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e8", 0x7a, 0xc2ff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) syz_open_dev$hidraw(&(0x7f0000000200), 0xaf, 0xc040) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0xd90}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x4, 0x1297, &(0x7f0000000600)="$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") mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffff7fc, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x19d01, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3825d045, 0x81}, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xc00) openat(0xffffffffffffff9c, 0x0, 0x4c142, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 3.415014088s ago: executing program 4 (id=6358): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000004000028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 3.352862769s ago: executing program 7 (id=6360): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r4, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x8, 0x0, 0x0, 0x81, 0xc151c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, @perf_config_ext={0x2000bab, 0x7f}, 0x628, 0x0, 0x20000008, 0x0, 0xffffffffffffffff, 0xfff, 0x1, 0x0, 0x9, 0x0, 0x8000000000000001}, 0x0, 0x5, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x96, 0x60000000, 0x204b5e29e9290606, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x20}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0xe0, 0x43, 0xa0, 0x0, 0x98, 0x278, 0x178, 0x178, 0x278, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x198, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv4=@empty, [], @ipv4=@local, [], @ipv4=@multicast2}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {}, 0x79}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) ptrace$getregset(0x4204, r2, 0x1, &(0x7f00000001c0)={&(0x7f0000000040)=""/31, 0x1f}) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2a1ac0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8a210, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x1e912, 0x0, 0x3, 0x3, 0x8000000000fff, 0xa041, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x10, 0xffffffffffffffff, 0x5c45e0054e4aa14) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000300)=""/155, 0x9b) write$tun(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="fe04e1c98670320d98b2e96b2e611b8962dd69fdf65fc73d0c48faf8665144884827b4a30400000060ba633c00f4bc1b040a8525b11657cecba425dad6dade70129feb9b326c15b812f22736eb03e3ecc285f5eb3a80b092c9273474481627db423eebd73706aa60eebfb87d5bc3f7a968f127b44ed16948853ee3798bb1bb65806fa95b8e19d9f7fefdf1ec26a7"], 0x85) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x0) ioctl$BLKSECDISCARD(r7, 0x127d, 0x0) ptrace$setregs(0xf, 0xffffffffffffffff, 0x7, &(0x7f00000000c0)="84fdfe762c6c63491626996566b306e180494d3b42c8fae82086c4274706f7f99d41c270041bd620b92bdeda9949f19b90bbbfa58494e6d533d0e8cc2964448166826b6bc47d048ae33f93aab475ce5d0b6d76487a2be44ee1ccded74ed76d9d5611573623d198e90cfd56ae525401173a0fa98ad7d6265ba8770cddc1c4e3336dafe63c58d42a7d1bb2fb48c17d156201e2135e68b6d201c0a1eecec7a4c6691f8162c8e67f0f25a8c61a0b2acd88e334fd4266f154a51c536004c6207178648f89744cd96853d682c757a6b7c33a9754512570ce458318") ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230007) close(0x3) 3.135033615s ago: executing program 4 (id=6365): socket$inet(0x2, 0x1, 0x0) (async) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) r1 = syz_io_uring_setup(0x2152, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0xfffffffd, 0x8000153}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x4) (async) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa0}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@rthdr={{0x18, 0x29, 0x43, {0x2b, 0x0, 0x2, 0x7}}}], 0x18}, 0x40c0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x24040f3d, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(r0, 0x1) splice(r3, 0x0, r4, 0x0, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) connect$unix(r5, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000004c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x80, &(0x7f00000027c0)=[{&(0x7f00000014c0)=""/4086, 0xff6}, {&(0x7f00000024c0)=""/129, 0x81}, {&(0x7f0000002580)=""/87, 0x57}, {&(0x7f0000002600)=""/193, 0xc1}, {&(0x7f0000002700)=""/1, 0x1}, {&(0x7f0000002740)=""/90, 0x5a}], 0x6, &(0x7f0000002a00)=""/4096, 0x1000}, 0x3ff}, {{&(0x7f0000003a00)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003a80)=""/119, 0x77}], 0x1, &(0x7f0000003b40)=""/147, 0x93}, 0x8}, {{&(0x7f0000003c00)=@sco={0x1f, @none}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003c80)=""/71, 0x47}, {&(0x7f0000003d00)=""/123, 0x7b}], 0x2, &(0x7f0000003dc0)=""/4096, 0x1000}, 0x200}, {{&(0x7f0000004dc0)=@un=@abs, 0x80, &(0x7f0000006300)=[{&(0x7f0000006f00)=""/4105, 0x1009}, {&(0x7f0000005e40)=""/213, 0xd5}, {&(0x7f0000005f40)=""/26, 0x1a}, {&(0x7f0000005f80)=""/255, 0xff}, {&(0x7f0000006080)=""/172, 0xac}, {&(0x7f0000006140)=""/185, 0xb9}, {&(0x7f0000006200)=""/234, 0xea}], 0x7, &(0x7f0000006380)=""/55, 0x37}, 0x6}, {{0x0, 0x0, &(0x7f00000067c0)=[{&(0x7f00000063c0)=""/112, 0x70}, {&(0x7f0000006440)=""/120, 0x78}, {&(0x7f00000064c0)=""/186, 0xba}, {&(0x7f0000006580)=""/140, 0x8c}, {&(0x7f0000006640)=""/41, 0x29}, {&(0x7f0000006680)=""/255, 0xff}, {&(0x7f00000000c0)=""/54, 0x36}], 0x7, &(0x7f0000006840)=""/58, 0x3a}, 0x1}, {{&(0x7f0000006880)=@can, 0x80, &(0x7f0000006940)=[{&(0x7f0000006900)=""/17, 0x11}], 0x1, &(0x7f0000006980)=""/25, 0x19}, 0x1}, {{&(0x7f00000069c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000006a40)=""/15, 0xf}, {&(0x7f0000006a80)=""/67, 0x43}, {&(0x7f0000000180)=""/20, 0x14}, {&(0x7f0000006b40)=""/142, 0x8e}, {&(0x7f0000006c00)=""/41, 0x29}, {&(0x7f0000006c40)=""/181, 0xb5}], 0x6, &(0x7f0000006d80)=""/109, 0x6d}, 0x9}, {{0x0, 0x0, &(0x7f0000006ec0)=[{&(0x7f0000006e00)=""/147, 0x93}], 0x1}, 0x7}], 0x8, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400051f370000100002000000000000fcffffff000000d284c336b292725d034b6f823cef11d61b7397720125f251864272e486b5cb2c7b63b027688fe888defb90441a3cb201a9c2f41a9ba554104647f35730f7330db363bd036d27efcc224474678e2bb02dc2705827596d1190803786234d31bdae1ad521387e159c49b325381f5cdb85cde1b0d7be11645344f678c4"], 0x14}}, 0x20008080) (async) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400051f370000100002000000000000fcffffff000000d284c336b292725d034b6f823cef11d61b7397720125f251864272e486b5cb2c7b63b027688fe888defb90441a3cb201a9c2f41a9ba554104647f35730f7330db363bd036d27efcc224474678e2bb02dc2705827596d1190803786234d31bdae1ad521387e159c49b325381f5cdb85cde1b0d7be11645344f678c4"], 0x14}}, 0x20008080) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r8, 0x4b4a, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x34, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x8001}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x34, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x8001}]}, 0x10) 2.703270787s ago: executing program 4 (id=6369): socket$inet6(0xa, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) mincore(&(0x7f000013d000/0x3000)=nil, 0x3000, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0xf, 0x6000, @fd_index=0x1, 0x3, 0x1, 0x8001, 0x13, 0x1}) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r4], 0x22c}}, 0x0) 2.669573403s ago: executing program 7 (id=6370): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) 2.430493393s ago: executing program 7 (id=6371): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100020030000001800000000000000000000000000000095000000000000003faa00000000000095"], &(0x7f0000000000)='GPL\x00', 0x6}, 0x94) 2.430149303s ago: executing program 7 (id=6372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x7}, 0x100000, 0x21, 0x7, 0x8, 0x22, 0x20008, 0x8b, 0x0, 0x0, 0x0, 0x2800000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_settime(0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000300001801400040000000100000000000000000000000000060005004e220000060001000a0000000800060001"], 0x44}}, 0x0) 2.357836925s ago: executing program 4 (id=6374): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x200000004, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0xffffffffffffffb3}, 0x880c, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0x7, 0xffffffffffffffff, 0x1) r3 = dup(r1) write(r3, &(0x7f0000000840)="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", 0x1000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/mem_sleep', 0x42000, 0x20) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES32=r6, @ANYRES64, @ANYRESDEC=r5, @ANYRESOCT, @ANYRES8=r4, @ANYRES32=0x0, @ANYRES16=r7, @ANYRES64=r2, @ANYRES32=r4], 0x24}}, 0x4000000) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'geneve0\x00', @multicast}) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000280)={0x0, 0xc8}, 0x8) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000180)=0x1800000000000000, 0x12) 2.172017826s ago: executing program 4 (id=6377): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f00000004c0)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@block_validity}, {@resuid}, {@usrquota}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") clock_gettime(0xfffffffffffffffd, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x519002) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x11f191210ac3045d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@errors_remount}, {@noblock_validity}]}, 0x1, 0x4f9, &(0x7f0000001480)="$eJzs3b9vW1sdAPCvnV9OGl7yHm8ABO+V10JBVZ3EbaOqA5QJIVQJ0RGkNiRuFMWOo9gpTeiQzqxIVGKCkT+AuRM7C4KNpQxI/IhADRKD0b2+Sd3UbqI2saP485Gu7jn3uP5+T9N7jn1S+wQwsC5GxE5EjEbEg4iYyq7nsiPutI7kcS93nyzu7T5ZzEWzee+fubQ9uRZtfyZxIXvOQkT88LsRP8m9Gbe+tb26UKmUN7L6TKO6PlPf2r62Ul1YLi+X10ql+bn52VvXb5ZOrK+fVkez0lde/GHnmz9L0prMrrT34yS1uj5yECcxHBHfP41gfTCU9We034nwTvIR8VFEfJbe/1MxlP40AYDzrNmciuZUex0AOO/y6RpYLl/M1gImI58vFltreB/HRL5SqzeuPqxtri211sqmYyT/cKVSns3WCqdjJJfU59Lyq3rpUP16RHwYEb8YG0/rxcVaZamfL3wAYIBdODT//2esNf8DAOdcod8JAAA9Z/4HgMFj/geAwWP+B4DB05r/x/udBgDQQ97/A8DgMf8DwED5wd27ydHcy77/eunR1uZq7dG1pXJ9tVjdXCwu1jbWi8u12nL6nT3Vo56vUqutz92IzcfT31qvN2bqW9v3q7XNtcb99Hu975dH0kft9KBnAEA3H376/M+5ZEa+PZ4e0baXw0hfMwNOW77fCQB9M9TvBIC+sdsXDK73eI9veQDOiQ5b9L6mcOgDQunN32w2m6ebFnCKrnzR+j8Mqrb1f/8LGAaM9X8YXNb/YXA1m7nj7vkfx30gAHC2WeMHuvz+/6Ps/NvslwM/Xjr8iGenmRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcbfv7/xazvcAnI58vFmM0u5x7uFIpz0bEBxHxp7GRsaQ+18d8AYCTkP9bLtv/68rU5cnXmj65cFBMXhD89Ff3fvl4odHY+GPEaO5fY/vXG8+y66XeZw8AHG1/nk7PbW/kX+4+Wdw/epnP378TEYVW/L3d0dg7iD8cw+m5ECMRMfHvXFZvybWtXbyPnacR8YVO/c9F8mJoOlo7nx6On8T+XE/j51+Ln0/bWufk7+LzJ5ALDJrnyfhzp9P9l4+L6bnz/V9IR6j3l41/yVMt7qVj4Kv4++PfUJfx7+JxY9z4/fdapfE3255GfGk4Yj/2Xtv4sx8/1yX+5WPG/8uXP/msW1vz1xFXonP89lgzjer6TH1r+9pKdWG5vFxeK5Xm5+Znb12/WZpJ16hnus8G/7h99YNubUn/J7rELxzR/68ds/+/+d+DH331LfG/calT/Hx8/Jb4yZz49WPGX5j4XaFbWxJ/qUv/j/r5Xz1m/Bd/3X5j23AAoH/qW9urC5VKeUNB4ewXkn+yZyCNjoVv9yrWaHRu+vml1j19qKnZfKdY3UaMk1h1A86Cg5s+Iv7b72QAAAAAAAAAAAAAAICOevGJpX73EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPPr/wEAAP//8XDPDA==") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x400, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x53e7e5a6a3739329}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80015}, 0x20004010) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x8000, 0x7, 0x4, 0xd, {{0x1e, 0x4, 0x3, 0x6, 0x78, 0x64, 0x0, 0x5, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x23}, {[@cipso={0x86, 0x34, 0x3, [{0x5, 0xd, "27545509a8b3368821ae57"}, {0x1, 0x10, "1eb23c13d860e6ce991f1357d910"}, {0x7, 0x11, "2dd4c44b4fe2011172c567e9a35f93"}]}, @cipso={0x86, 0x26, 0x3, [{0x1, 0x8, "83b844a0cd45"}, {0x0, 0x6, "7ec3b634"}, {0x7, 0x12, "8c80b8790f4c6bd962628d0bdbd4de35"}]}, @lsrr={0x83, 0x7, 0x8e, [@multicast1]}]}}}}}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x6, 0x6, @remote}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x720, 0x10, 0x4, 0x6, {{0xf, 0x4, 0x3, 0x3, 0x3c, 0x68, 0x0, 0x9, 0x29, 0x0, @broadcast, @loopback, {[@generic={0x83, 0x12, "dec249ff7434604e5d66c1812f5403f5"}, @timestamp_addr={0x44, 0x14, 0xbe, 0x1, 0x6, [{@multicast2, 0x80000000}, {@empty}]}]}}}}}) getsockname$packet(r1, &(0x7f0000000380), &(0x7f00000003c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000740)={'syztnl1\x00', &(0x7f0000000600)={'tunl0\x00', 0x0, 0x8007, 0x700, 0x80, 0x5341, {{0x45, 0x4, 0x0, 0x36, 0x114, 0x66, 0x0, 0x7, 0x29, 0x0, @multicast2, @empty, {[@rr={0x7, 0xf, 0x41, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @cipso={0x86, 0x6c, 0x3, [{0x1, 0x6, "6b3d4316"}, {0x0, 0xb, "bd4c554687a5db8add"}, {0x6, 0x8, "43aa1447f668"}, {0x6, 0x9, "f0f95a376b0b64"}, {0x5, 0xa, "5f0cdc034f91e6d5"}, {0x6, 0x7, "cc7c584691"}, {0x2, 0xe, "6fee7c14f4f0f8124b5ec7f4"}, {0x7, 0xb, "69879b5e4b04acabe0"}, {0x7, 0x8, "5b22fbbe6706"}, {0x4, 0x12, "5ef9fce69a82b37c77aeeca5e257c3de"}]}, @lsrr={0x83, 0x7, 0x42, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0xdb, 0x3, 0x6, [{@remote, 0x5}, {@multicast2, 0x4}, {@rand_addr=0x64010101, 0x8}, {@broadcast, 0x3562}]}, @timestamp_addr={0x44, 0x54, 0x6e, 0x1, 0x0, [{@remote}, {@remote, 0x8}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x6}, {@remote, 0x1}, {@private=0xa010102, 0x555}, {@empty, 0x5}, {@multicast1, 0x5}, {@multicast1, 0xf7}, {@multicast1, 0xfffffffd}]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000880)={'tunl0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x20, 0x80, 0x4b1, 0x6, {{0x33, 0x4, 0x0, 0x27, 0xcc, 0x66, 0x0, 0x10, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x36}, {[@timestamp={0x44, 0x28, 0x11, 0x0, 0x7, [0xfffffffc, 0x10000, 0x618, 0x19, 0x2, 0xff, 0x9, 0x200, 0xfffffffc]}, @timestamp_addr={0x44, 0x2c, 0xfc, 0x1, 0x7, [{@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}, {@loopback, 0x4}, {@local, 0x9}, {@broadcast, 0x3ff}]}, @timestamp_prespec={0x44, 0x1c, 0x8a, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@loopback, 0xfffffffc}]}, @timestamp={0x44, 0x10, 0x50, 0x0, 0x8, [0x2, 0x3, 0x9]}, @noop, @timestamp_prespec={0x44, 0x34, 0x8, 0x3, 0x7, [{@local, 0x13}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0xa}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8b60}, {@dev={0xac, 0x14, 0x14, 0x36}}, {@multicast2}]}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40, 0xa3) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000005c0)) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) 1.873432026s ago: executing program 3 (id=6378): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x388, 0x2e8, 0x2e8, 0x388, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:fuse_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x300}, {0x28}}}}, 0x4b8) 1.595659692s ago: executing program 3 (id=6380): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r2, @ANYBLOB="0000000000040000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa000000080003"], 0x68}}, 0x64000004) 1.461202925s ago: executing program 3 (id=6381): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500030000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) 1.405237005s ago: executing program 8 (id=6382): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x800008006, 0xfffffffffffff800}, 0x0, 0x10001, 0xde, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e00000010000000000f0ff0000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) 1.272222297s ago: executing program 3 (id=6383): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async, rerun: 64) setreuid(0x0, 0xee00) (async, rerun: 64) syz_clone3(&(0x7f0000003000)={0x4000000, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[0xffffffffffffffff], 0x1}, 0x58) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x11) mq_unlink(&(0x7f0000000080)='..\x00') r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090200000000fedbdf2501000000050002000a00000014000700ff0000000000000000000000000000010500040001"], 0x38}}, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) (async) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000000c0)='./file1\x00', 0x808, &(0x7f0000000800)=ANY=[], 0x1, 0x242, &(0x7f0000000300)="$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") (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4cd42, 0x6e) write(r2, &(0x7f0000000c00)="f88d", 0x2) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) (async, rerun: 32) munmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000) (async, rerun: 32) mincore(&(0x7f00004fd000/0x3000)=nil, 0x3000, 0x0) (async) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100), &(0x7f0000000180)={'L+', 0x7ff}, 0x16, 0x2) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf44b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x8000000000000000}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xe, 0xffffffffffffffff, 0xa) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) geteuid() (async) epoll_create(0x80000001) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000004c0008800c00024000deffff55c3dd9e0c00014000000000000000000c00024000000000000000000c00024000000000000000090c00014000000000000000060c000140000000000000026314000480080002403cb140bb080001400000000314000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) close(r6) 1.241476872s ago: executing program 8 (id=6385): r0 = socket(0x10, 0x3, 0x0) unshare(0x22020400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000001c0)=""/134, &(0x7f0000000280)=0x86) syz_open_dev$usbmon(&(0x7f0000000040), 0x22a7, 0x20001) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@abort}]}, 0x5, 0x4fa, &(0x7f00000005c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000180)=ANY=[]) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xc966, 0x0, 0xdd}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000100)=0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = memfd_create(&(0x7f0000000100)='\x00'/12, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r5, 0x0) ftruncate(r5, 0x1000000) socketpair$unix(0x1, 0xd885a6366e15dc45, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r3, &(0x7f0000002a00)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302b00db76745b686158bbcfe8875afdef000100"/52, @ANYRES16=r6, @ANYBLOB="3c84"], 0x66) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000005000000000800040001000000", 0x24) 1.144431248s ago: executing program 3 (id=6387): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@barrier}, {@nodioread_nolock}, {@abort}, {@quota}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x1, 0x5a4, &(0x7f00000003c0)="$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") 1.120066642s ago: executing program 8 (id=6388): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000012000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 992.682994ms ago: executing program 4 (id=6389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x355, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_emit_ethernet(0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaabb813316163a00"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000240)=r0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x3, 0xff) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'syz_tun\x00', {}, 0x230}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x1, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='acl=']) socket$kcm(0x10, 0x2, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='_pu!=0||!') socket(0x10, 0x3, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x1f29, 0xc000, 0x8, 0xc1}) 804.129795ms ago: executing program 8 (id=6390): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x8, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = epoll_create1(0x80000) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xb0000005}) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x2, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b4020000130a0500000000000000000000000007f200080081b2a09b5405c327e27f1ab7ce9352eb1ecf265a9bb85f6e4f1951ee89a05ceec29643ddd08ce016cb638d60ce254cef78f2d614016c283a6a979e48a17998a21229a05742a4ef4e0662ea5d3a227034d086c7666a3d2c589a63ac403c153478fc5485c4d614b9139f8e289fa0f55879dee84f9ee043d1528a1e0d83e9eec678863aa2dc5185645b21cc9bc687f09a14c207f246c3f10223e1613d26bbf6f6fa8583b7abdeb66ac4b3187e0930aeb5d1e16da7b067ef0d3f4386dc2d1dff34471dec844c88a5706f24febd3e8069e05070aaeb21b5b988dc31f05fccef671b6c926869293ab78ac44ae4edeb34e90000980008003e732d86c6f36cdd37ce21f3dde68a6684640dd3bcefd951acfa1de5d9014cf437735389b93908d90df62c0a12d22ad81063412181690f1dfa81a09335f2491210c2b38ba0b549111b54ac3b92de37e35c6db04b4ab83c184afabc93a6085382fa36caddc68f7ec06683ae4cecf1b33262add91a2798376a3f81b40f65bb7d1a2c2baeed24705b5596566d547f39abfa518ad40b0c0006400000000000000002e00008002ef53ab2a549509ba22d693c53d2f685f2c204898a1b433eb9d59de6812324d4515dd64292076b79185439fb7060ec2c5bf971f933b897889eb9bc66ad88200f4616b4d12ebfaae10da21e549fcb41d944abb3eaaa988fe5291d85213981318d4868778f7cc2f3bf8d08e8388b4dcec52fc50efb7499ae45be5bc6ffec33e23fd3ab25b92a60b0100ad2f70af8c5b434b7ad38b65da9ff85d8b227eb5c2189b7d610c35fd8ab674e0777d052b6738c9081bb2a916013f7a6c240c3ec1a9c0c59fedc1e7c6e34415c5946221849f87d5e121252a27e73478d6b92d0fd0900020073797a30000000001c0008000afa43f7127b843e81a286ce5f2a943b17238bf46caa1347cf8604a0ff12339b263b01de0fdf195372e93d75aac3c5c9aad7b52be1a64cbdeaa6c3197de4d61b2272f834d595e80d0314dd32494fa7ffe12a76d920056dd30fc5ffb5ddf1fdcf3ba6386d62436d9c94e23839b78b613bfd39"], 0x2b4}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000002050016000200000004001200050017"], 0x60}}, 0x0) r6 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000070d28bd700002dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000002460000180012800b0001006970362ad31acb1f6e6c0000080002800400130083038f00000500000cbda09935b848a103018d7aa55719a9df69c74fdd1e6e469d5d2a264d96a90a755e06f9fa065670813c0ecd99acd28200566b083e5cb4509e1f9dcfd4f17f5d7c331c5967c2793d9c559c5ad54fc1713d61789785d3d63f25e72b92043b94fbcacfba2432814d5c921b9800d74d77f72a1fe21d86a8a02b38367c721cdb4b669a8dfa46060000000000000020ecbeaa409204ae3dbfb28dbf0dca343a93cfc0397b645c5e8cddbf1240cc60682abca8"], 0x40}}, 0x4000080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000340)={'gretap0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0x2, 0x2, {{0xc, 0x4, 0x3, 0x4, 0x30, 0x67, 0x0, 0xff, 0x4, 0x0, @multicast2, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0xd2, 0x3, 0x1, [{@broadcast, 0xa8d}, {@multicast2, 0x8}]}, @generic={0x94, 0x8, "84d7fca96a80"}]}}}}}) linkat(r6, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @private2, 0x7}, 0x1c) 803.745665ms ago: executing program 2 (id=6391): ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xfc68, 0x3, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d00)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf25190000002000018008000300070000001400020067726574617030000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x4040094) 802.767815ms ago: executing program 2 (id=6392): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e00000010000000000fffffff0000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) 769.700461ms ago: executing program 8 (id=6393): r0 = epoll_create(0x8) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x101200, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) fstat(r3, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) quotactl_fd$Q_SETINFO(r2, 0x0, r4, &(0x7f0000000000)={0x2, 0x2}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x10000010}) 751.907014ms ago: executing program 2 (id=6394): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000080000000000000000a00850000006100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) 690.877434ms ago: executing program 8 (id=6395): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0xfffffffe, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}}, 0x4084040) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}}, 0x810) msgget$private(0x0, 0x2c) close(r1) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r6 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x11b, 0x2, &(0x7f0000000900)=r5, 0x4) 668.477238ms ago: executing program 2 (id=6396): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x9, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100107fff00100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 651.008901ms ago: executing program 7 (id=6397): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f0000000a80)="4191062c1421f8d286fea25179d3bff67ffb95a24f597e0388f330e7dfb81fde917ae89f97d5fde0855ce2942ff541f21652a7409dad35f8886d587bb6e6dc67532c99235c3f4d65696cdb98986ca5f808b1b92c1a37bcf9109eb576c388dca33df6129f9efd43ccbd58a93f146ce183a410b8959fe192652e32068e0d8e24d8eab4ecbd5ebaa165771a07c890804037074a1ebad3bcdd46b8f34ecb2f4a6e1bbc6ac3d80ea44fbfedf338583f63ba4607f430acc0a98b4fcbb501006052cb83625cbf60ebf28e9095458c1e9971417b2912bbe30037dd5c1ac06f612816e97ac304404619b0c75222e9339f6ba14eac3c1486ac997f919248498f073eb173a9b70dd4e2df0b14c490155bf06e801547ed96f1264b5c220cf3f65681d44cd20b1b2b2067fa91e1c30217b0e5f65358b8b08301da7c4349eeec41fd9a50c651d12551ceb6a6fd4989751a4bbb244b9d3d260ebeb8aad132df7ef16f676632b532eb04529f9cde05e338a327f0ab114f7241b4fb5fc9ea1813dfd2c9fba8858541166adf9cfaa6a4b7d77272d0698f742bdea73a6424f0b586cf40cf6dc0ad5a4f886231e736e2d15ae7b54e799376ddcfb2b9a8c25d1bdf50eaf8565c2b3927b5887a961fcf7ffd6847ddb974e774e3a4cd7a7766ca85000000000000000000000080bf69b2a3cc51bc5ef5731b75b9b5e86f62364eda15937353ac8f5c016c82ad179390cad5fe8673ce804afffbf2ba6c0d204ab33119", 0x217}, {&(0x7f0000000cc0)="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", 0x2cb}, {&(0x7f0000000540)="6a5b3986af4597e55298f14c7f201f060fe29efbdf16a0ace97ea54e624ac84ccc7fc7f393c4ece5273773faa8c63f157edf2a0d41a7c6340c630b50b30c42d156fa375b30d31bf60311fd29e60958434b6f595565bc1d534aae4c0693aebccc5caa31bf5b1c194f52c9f67c71a5edf623de000071d68ab2fd000000000000000000000000003239e56a1b026ba99149a712f4817121372f3569277b00", 0x9d}], 0x3, 0x9) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0xfffb, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0xff97) 649.599261ms ago: executing program 3 (id=6398): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000000)="b66daf8d724356f36692affa99e7658e85efdebe812858f8ef4c4e9c6a264fe2c7f3855ef6b7c94dbe94563b20c59af0cbccb66f1432757e", 0x38) r1 = signalfd(r0, &(0x7f0000000040)={[0x1000]}, 0x8) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x174, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040000) futex(&(0x7f0000000340)=0x1, 0x9, 0x2, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)=0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x7) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000400)) writev(r4, &(0x7f0000001440)=[{&(0x7f0000000440)="5c5f6c4caaf3ced4efc682b5f441d264b140bad094a4f447983597e574f85755a8913a9eb352f0ee51582de88fd0c023869e4f34a9a222c8fc47091bc6254a33d3c363dc6845b731b203f507167aec3e924be8b4164aef1150b09186f0ebbaaea1e7e96afa5d6f8a31b74e4fc0dfaea336dbcaa033c1aef29cbf2a3a0796f506b8da953533df8ccbc288d7e4c0bc1e5e1b8701d74fefcfa616dc0858d0e4a7190c453f66a08899f5ba8e402a3d5b0d3ffeeaaf63abaf7cadd827270f78223b833b3f5a26759f248aa2145b92b94809505badd81dc63827960013bc09d4006e5356f21d5c9369c8eaa305cbdbda095e6d04fc7b3ba1984369f99c6929134c66848429867496aa54ec6b13ef0b0df564d9ed826b0966742b4d43370e3a8e9f51d9cf251306010e137c5e9f2363f18cb8b42d1793929d733db9e5267e9a1d9ea090b7898fa490208db910a99039bf597a18f5a2eacbeaa12e5f2992a22b52a87df78a3dc70fc6904e4c0252a1e8879700e630a1be897b904da2e2e5452ef3e73db5071650728a4450476d4441f991d4d70970fb5b755edfa3b2024976f9d70f021caa6477fce4994cfad8a6152ac6c0f137c7557901e560ed9ad5f51baa59ccbbafdd1fba6484a8f51fcd9b5b4128a358b846f58c57adcab3ac51e4abb41cca9898391576317a82e9748e55f2c6841a31a9871beacdcd0ba0aeb35b87a451381adb841fe7cf4b8624d9055ccdadec1c83fd4dffebff67b44dadb0fdc8ca9b6a1c84f1499f96ea576d29724b7eee1af12b3b48a75684c0514f5740ad747936ed0a33f132974abff5287be4bb6635204514ace4a17de2d1a466358f1531b1aaae98d67861ee95beb9761d25ab48976c240c2e38450d5bb3bbd8e681993815e0deeda9776b4071db6b7f9efa10ced5ffb40ac354574bfa15ad0c4c8e7760081fdc08abccd4d7c4ba161156b5f7508d73c44e946792198e46d4ab9daa692c0615806e921eb0bf735e54eb1f522445db8a0770f18aa8c0ed26339a91def8d662d71daa1193dc2ac0373a95763528c96b713b29b3203aecc5204a28ff5196adc2ab2b333defc6828a5567015b3df485c5ff5e7819c53382927fc833fc012c6c45d0289fbe3da825609f8b3eefc10c8f8112a5bb7732c96765cf11ee6d3d2e5453ee8845822d6503e9ee883cf25d0c894f82945a0f306d6d39e3035e22174ee47a8187c998d56a15148d2590d2497f213fa60f888659e36a5509ea07b95534e6d736befedb534b4c0e6ac6373685a5fc29a299921ac00bfddde4192564c579aaeb739f44c24de3fcdb1aa2671cf61fb01f6199f5fd4db7a0c265e8753be95822a335f0bbd9d22fa1df1e9420adef4b51b49e16669f34dc393b04acf6ce04985238c3c7bd7807db1a4a32767a08d620f26836af271b0dee51899fdaec98bfac22a17b7357d3189736d05f6d4400a566c173829c63fa9368c767eb4302d650589fde91bb0e55388098073b74e701985d6d94e929e0e6b3c900d32a52388fd46cc0ac4cab3ef48da8fbe1e8b8867cc32ff5d96d1f32cc9e1733d1f48f37ef4de5b0da889d70de2e173cb9bf07dd647ee5fcd19605841797c06a7cc8dad241cf1149bcaac2947ad0f97a55ac76137905d42200c862f94783a9d00c60b91e77e4fa1e3217accd844d5855bdd20d940a202caecb30874c2864cac6cd7f81d8f73128d05acefa706e5e3c4d5f7bdb069be731ef8fc8421ff31ee08a549bf67aa246276132938bbfde0a754e15a7834bf1ded26d52ecce8b11cf52d52ff83fc3097f372911443e5af3f0e5b30ba0b131a29010399665ca08bf6531257ca50a0bef69d26dd6f4f12f82ab52dc26bbd66255fa96342ae501ac99fdf86ebe3bd506c6f96ebf45b1943a74c2de89370dc0c86db89dd731e7755e5e2e796e1c2c10b7d71370f2a004a15d219220a28939f5ea74e4d2aab03900b63512b1aabc81f204df90ea2bccf936c3c1c0bd200a0807ca934d5e935c61653ac643375f49669be451a8592711890de426ad8792be959cac7b836d4aa0c771bcfdf1ba9138c1312fac5805a63052fa1f229379de54f2105322765268766a5680ca52c991564a83955ccfcd09264dc61e723f6aeff41bd22dff47435104cb26a680e90852332ecce8106a89bee0f23090d8f5cc2ef0d2605bb9282f578aab3a3ba8ab90a718f415ec1afab3b36f8721a3dbee06114411c6b7fa3bbb870bed5b90635fe58ee1d3b2a467ee4dcef7f2a37ab4741843a034b5dedde7ebd7f6f4d9b0476214682912f959871adb3e53a53f4977f5644acd8970115d3ed4e4743d689cf08a5a888dcc3ccc3bcd83b13b6b4756efb5aab9e53069f39c3cfe7e14f6da1c778bc1904b5d41969eff0e0be0079f5ac76e3f194702ed17a7819e329531bcda823ee059874ecd8cfa603448d23d3750eb142e7350409e96ae9154d73d35d711b7e2fdf6a72fc4512233c00f1239fed050c3cc1e3ecd5dfc9a30f2ced188470da11c10774fae394912f9657568b198aaf3d83ec62540c3d7093d1954ee673e59f4a3bc99ae71ab578de2f98a25841ca89ae4f8f023f4fab1d34cea437bb1a615c2bb785bac3b8b68fd229ced1a96ad399bd8aefa35641ea483395ba0bbc67db449074a483cdff8bf5d1410fd1b344ecda02c162008da449ce9975371a31dadfeaea81be1f0d795607b30ababd9666ceb4742678143642e92c7d101ae973d18e054e82368f4bb3730ed0bfb4330a9304edf5615f99e0c26af4f3cd740f35666fd8841dd5b4558bac52b18733f37378ede6ca3e16a927d394170cd0ae581d3f46d629cbfebf443447d2798bc21d173f999d2740308ffaef9589f81c71c707874c51487221685d9b2afa5f4580458df6d6eba28afce0cec5ab4cd7f43063dda6d959cad6a778757706f2f0fe349a7e98761ec6e81108cbec5cdcde04a70f57b05e6fa63754f3aa6895680a155109042cf19542daa6d777e688baf4074a1b8403c2d22a32be129024d2f0f0cf83c92ec5656a915363b1a9c3bb1e78d6b9aa85670f67831d42f141dc75e969c4bc3f8c5c188ecb5ba60f2b68f8f9b36b7b69934f6d04a2cd14854f609958014a0f9a03ab7cd556c2cc39da9991417d8e2f1380a5978b1f3be3f0b9865aec92a7a2ae5329fddf3ed8caae5b66a170300fde87ca0d37e68c72b6e36cf49750ff47e4651c829e3220d55a41b5e37e1ba2617d117ab8f702593054f6540459857ad8da72410d23c3453a06a1972f15a304327ee3515baf0ac9b81361dd979541502c71644752b58aacb21bbb826ee1e0084e7207f7ffa3e44e965293f5010e7018eef5da9f44c55aac781b41d98a3238773702799d84f713564a4f91bb1c87b8515b6dc5251ea300661695121ecd9576c2861e7a4d1454bf965afe4acc6f4c894e118901fc5ff0bdb7121f8230ecf9baa81dfc6749eda83446511669b7e1e8cb23823d14c466d92a9f82706ac729b8ccfdbb45cbf1eee01d49fb468a39569f72827d5fe2686d7f9a5c813c61950344f461d9b1e4793314d860fcf7c827a16e547aeabd64ee98b1ac1cf486fd36561104711a315836aa97dcb46754960538e24edb569487a48fa6ec73a8ca45c8bef94d42eed80fd8b0e5b7d11afe5c3d3371c73a3825e26c4f326938d0514b4561bea211fe849e938e38df469b616fefca415b7bda5b8947819cdb348f164d739a9af69c8aa60d51db960ddcdde078dcf474818e078c90707460a9ae433b1e6766696fac91bf4b7bfe787de70d8f1a8925b0967507209d02b3231ba7b763ba37294c1a8de510d0c24abfa6e50c05c9fad65503d0091700944b72eb0eed389e5030acecd26d9dc1189739035d4d95009faa2aa99c8184748167498170bdacf05de47508494c27e55977d4f2a7af727e4e1aecbeb91e094e3091c1d03406fc132110ab21bfe64450a45b9d64792189c65ddfbe125e70a43503b37feeaf70a13f3f967a5fcd0a7a252d3c1ac628579983cc139b9bf4f59d2b29c6901480abb949c2deb3a1c708bfefff9435ceebffc3ce4fecc2bdfa0653912131b059b4a0ed27435de5e3bcf8ebd6423e93e60b99757a41dd2005cf670cf71a859edb47d38f8797e2a778c3fcfaedec1f7f2a61b1b518b5fcb7b99c2df5f6ae2179152ff2b901796b05c8d4e71f188cb6a761b1fa4b68cb35a954f983bfa01597a56c2f004def442d1edc3ad272b4959b6ed9355e8ef3aad7e8fe484032b2efcba7af19f25fb3de3520fd3faafbc188e626dfec6ef8795f9a7db329c25e24354a258c14c731a36b37c594ccb585533bd8c608315a60a40519ebcea3fcfb18b78d762cf6e99c50f0169cbbdd944ca613f3c0c9e9e60ada85cf090cdd2cfce2929cd6774754c93e871107fd65b6ea066e3eaf01017873d0fb21332e9c846dae88b14042c362ecfa1450e133c82b6e9a4bb91e74c10936e25035acc14a51709055e92b079ec5df3e294b2a72f4a766d5b7f03d7fe6363fbcbb19b9d1b0e9df572d1e88b80ac30d0a7a749ed9b810cc9984d700cfb08152a8dbbac681a33060569a1981dbe0d837cef3562c35efaf91118bbba5723a0f792ad3c8be9cd3c762e328f6350d2c707ce65a04479590079baeb158398eac990ce8d99ecb95f45037fe74bbf1ce8750292fa29bb50ba83a93106ef4e10a982a812c89c03ba5ade3c619aeaec3d4e569e8c0e4a206be3c41be13bff080c36a9bfa2bfb2ab0393d5208ce1d5d85417796d668cf0ad74258f512565a679f8e16b9d3175973cfc10b6ef51aa8201ee3080d9ba4e19642f314e0d511fa1615b9744d394ac9d2734fb47c50624dbba7bdf562387688da8569dbb4769dcc70bf436f2859ab51c4d71f6881d2909c5814ce2baf8ff29b6ecb70da70d9deeb62ed64a7ce814ce74d2288d00ba1eddb4530b560ada89606c1ae737a9f16a2952e0f8d656652899c235bfbaceca6aba72a86ed55c987010d7b417289dea55f02a820a6ced18922e311cdd3c395fe39c03a6d597165aa8653ef57a07d0378c4a51c1db3c8c2b8e4654bf0be8f67eab8b81461000ae609d559989c767810985ba50d880933645d83a8cda04f0e6f04addf679faac5ca5fc8611c17ffd4292391a4343d61b0701036033cbdf114a72957908ff3a445486d3e4f2f089c8690b230f36e28503d78a1a0becd64f6e010098caf60331ca3109e3951668e50e3f11274561e8591a4004cce3581e76296c897093aa2e7f6a82866d0bc69b23cd6429830df4b5926369f707b23ce9d5805481f52803bb5a0c794c8a5add870eab43ea5ed96e9b9f1cea79ff8dba392e8d4eb2f7c9bc0359e5344a47bc4b69650a313c26e9bd4aa7d239576422ab75cf26c6925d26d8b502b69cbec039781eb75e4803f8310d0fa2deac41e76412a610ae0dd6a02ee36f80e9bf091bc3a8181e06e107976645d86ab1f8400ed9e1825703deb03c141ea1aa479a05ab797e06330469a1db5f608e64c43d2b329572cb21c501c27a84da602b4b1d9afb2d1c838562bb7c7984c819a8bded664e70e8ac4a6704caa60dfc7431dba16398652c58ba148ae23b98d3033ada89d4c996411afbbb2fccf2fd1db600d288a690bd91cd43067a92ef170da20feb07b3fb0448c2acdabdb6d3050ee2e5123d234620166b1a238da6a1968a5f529fe00df92782118255704a0f3a94ea7bf64071e18d3511d6e9d4b88fbed4b0394c6aceff640abd5fed275a46eb6a092c61ca39811b0e6383773363811354ae007f9fb18c340ca1acb81966e0ac851866ac", 0x1000}], 0x1) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x13, r1, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r1, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, r6, &(0x7f0000002780)=@IORING_OP_RECVMSG={0xa, 0x25, 0x19, r1, 0x0, &(0x7f0000002740)={&(0x7f0000001480)=@l2tp, 0x80, &(0x7f0000001700)=[{&(0x7f0000001500)=""/90, 0x5a}, {&(0x7f0000001580)=""/193, 0xc1}, {&(0x7f0000001680)=""/77, 0x4d}], 0x3, &(0x7f0000001740)=""/4096, 0x1000}, 0x0, 0x10161, 0x1, {0x0, r7}}) r8 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000027c0), 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000002800)={0x0, 0x0, 0x9, 0x0, '\x00', [{0x401, 0xd, 0x4, 0x6, 0x3, 0x1000}, {0x4, 0x10001, 0x0, 0x6, 0x80, 0x8}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r9 = syz_io_uring_complete(0x0, r5) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000002b00)={r9}, 0x1) syz_usb_connect(0x4, 0xcff, &(0x7f0000002b40)={{0x12, 0x1, 0x201, 0x93, 0x1d, 0x2a, 0x20, 0xe8d, 0x7106, 0xaad7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xced, 0x4, 0xf7, 0x2, 0xc0, 0x6, "", [{{0x9, 0x4, 0x39, 0x6, 0xd, 0x2, 0x2, 0x1, 0x81, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0xa}}], [{{0x9, 0x5, 0x6, 0x1, 0x40, 0x7, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0xfffa}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xfffc}]}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0x2, 0x0, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x4}]}}, {{0x9, 0x5, 0x8, 0x8, 0xdb282b716e16907e, 0x80, 0x5, 0x5, [@generic={0xd3, 0xe, "c20645f96d63965be4fb55166c30b32c4821faafaba54b9a5e6fe39f89801851219fca9960ded553d4095faf271c187f5ce254734da805d3f2500904635455cd095e5ac79df5553a59c791cbcc819def45646f67f13af9ff994582dc0081fbd67ae812f2961446a2261e1336cca52823cfa1aa8a776fe09a0180bf3957e6f1b0d35423a6ba796b83a80e9333783524b799821fa64ab38ab40012eb60ad2a16235f87a84531ae0daa186583d43e86819102bf5afd8bd5527e38be91d0114c6d1739b34db2a642ca70b77591d5a1f82b9418"}]}}, {{0x9, 0x5, 0x81, 0x0, 0x40, 0x9, 0x1, 0x5, [@generic={0x18, 0xc, "f0a6a8a609a03135416b87ec860421e7fadc35696246"}, @generic={0xc0, 0x1, "0d5dce7e44b6ce7c618e2e5fe296e4a9694c108e9998a84c339f522998a57a85cdbae7742421c1d19b8388338dfbbf85ea51b5c5653d22f7cec5d69387691a8506e56d50b685cdee81972fcfab4f7f43364da5d732fb50f780cbade26cb8aeb61df73b425559332165ffcefa1892e549080b87b179000e2dce5ebe95393cad4fc4251296e5a18a57b7091b640228ef5ff7db8670c189945f6cdf5246a33a30c9547ff32b2d5ccc37a4362941e1e6cd64d18d95612a80871c5ab56b32a696"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0xab, 0x81, 0x2, [@generic={0xa8, 0x8, "8f32ea7749fa83cae2a04bfe47df585d7c6dfd8a113dabaa5b54e2446fa7e47de34cf73dc70aaba2cf13161087ed86b534683c78724fad7f1ea9fbf8c74fff56d359ff09d815440c6881cac7274a0a7f06bd26b1efb8e7ba43e08099fd5b11ff9c92da6e4e57acd88bb94f9f454c25095ad64d31bf4ce82aab6198a99a4edd06eda000842f023739c20c10e594319790b2fbb230cb4f9807d749b96ffdc1aa799a54afab5f40"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0xab, 0xf, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0xd226}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x5d, 0xf4, 0x2, [@generic={0xdc, 0x21, "62a1f61e27441a9d82fab1b66db742398ba004c4c019412617e24cee9e562e5d83235dc86f2bd39e5da86411b537826ad2a424419147ca4e56a5b7e701798b27b24d239a974c7ff5a4df4a7eddf06150d7ab9d7bd6cc1595598d80c2bb6dcff1142037f3681d77a46dbf65c77b7632c57346623c5e0a456e1efb98171e1d8a02f486bc657b90a2e3ccd415aea93834e68552214052adc7a8b2be90c7f759b85259624d7e3a64594a578dc29b6f3562ffcd706819863ee6aaab94bd7ace0772adaa764a409bbd81100c6a2edeaf5985f0a1520ae1cc88a3f1e509"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x53, 0x401}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x1, 0x5, 0xf2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0x7}]}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x8, 0xd, 0x7, [@generic={0x5b, 0x0, "b33667f9489d5cf4603ea45669c8b740f40d9a5b7e4b0b4adf0a9515c5d14fe078f9d97f0a9bc62d6e811dc104a6c82100c2a1a936235aafa9c03d9f0369b5e73d3112a89e0ba43f375cc335d7cb3d210275cf0e75f8378ab9"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x2}]}}, {{0x9, 0x5, 0x5, 0xc, 0x0, 0x7, 0x3, 0xc7}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x9, 0x5f, 0x2}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x6, 0x7, 0x8}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x5, 0x3, 0x1}}]}}, {{0x9, 0x4, 0x8, 0xd, 0x5, 0xff, 0xff, 0xff, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0xa}}], [{{0x9, 0x5, 0x5, 0xc, 0x100, 0x2, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x2}]}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0xfe, 0x2, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x7}]}}, {{0x9, 0x5, 0xb, 0x10, 0x0, 0x81, 0xf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x5000}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x4, 0x1, 0x5}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0x7, 0x72, 0x4, [@generic={0xc3, 0x23, "40480549790601ab9eb994361d69e9e8d348932460d8a5223e5579ac3db0998b448ece6389fbddf9670dbb27efb13db377329f09540217e66d7f786e8a129de0b51a5517a34914936c502964f2aacfa03a6ad73154573f0f81a32ccc3983d933858bd76ea1f860895a2f1fbc57292fece3769f6c7656e6dee9d0de7d2fc0410ef5ba523c1e46dc9c7b0ef3b614aa246b42f4ee61b17e1e949532b260233997b5f09ba773f70a212819cb6c20f9470e77453b1101e18beca2f975520e97e506997c"}]}}]}}, {{0x9, 0x4, 0xca, 0x4, 0xf, 0x97, 0xb7, 0x64, 0x7, [], [{{0x9, 0x5, 0x80, 0x0, 0x20, 0x0, 0x2, 0xac, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x739e}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x2, 0x4, 0x5, [@generic={0xa7, 0x1, "57d6200c219763846592e48a7afd8c4d7e5e9fdfbd5f1b56bfeba7610f5a7f0549142bf7d528cdfb36297ad1766bbd286c2f8bea6ba57183e707b0113ecf13e856af712ae6d44389a861583974dfbe3c86bfd64385d08d036ae84c0a08bebdd930e2a1503962b6165d900954471a5da28be03afba90782bab3c6b25a6390790943b31ab6e13e3eb3eaf2fe4de48973d35bb4a3ba347ca20c0de8219a28f1afd03c2db3e639"}, @generic={0x101, 0xd, "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"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x8, 0xff, 0x5}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x9, 0x1, 0x3}}, {{0x9, 0x5, 0x8, 0x8, 0x20, 0x3, 0x9, 0x81, [@generic={0x7e, 0x7, "a2abaa043b449d15f76a852d8837429ad8474dc7d0ad89f8b61be555062578f1a3f171ae8348521078174d2ce0c3d7ab71d4a7e2b55df0770618437845f9cfcd08cb8e6c718dd80e10eb231838ddab74767d7372105b908fcd0fbc51f6f46a65105c13c3ac8893765be9616a34dfbf59b989e0b8871f963a4bbb4a36"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x4, 0x8, 0x7}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x27, 0x0, 0x2}}, {{0x9, 0x5, 0x6, 0x3, 0x20, 0x5, 0x2, 0xc, [@generic={0x56, 0x24, "99312398d15516c2fe48b1bad02880ded1037b826f8b9822585afd404419a8c2effe10d825c0929881d32a446ed36ee2cf29d022da40e1aa27608aa80f413876c067c5cd7ab8b289bc6f43e57ab6bccff7e13370"}, @generic={0x5f, 0x11, "56cd2090b5b78d484c1d060824a3c54ca8f35fbb143631dc61ff926e67bf72f1fb07c7c7594b3a485f74fa449015b24644c52543843e82affabfa794444ce61079039eec20d173dd4a4ef6d58c8b5fe963b315dd366c907963e728951f"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x3, 0xa, 0x4}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x4, 0xff, 0x5, [@generic={0xc9, 0x21, "48718656d8a391f38e359268c7365ac98a5f0f937ea031b91f146ed9bd8081798d21de12f4482e167587d54ffdd3c19822acef9e89284df9de7da1e542052b6c57d4fa345c1394efb116bea55a2abb3a452750e277fadc3051c4fcec93b6f892fdd21c9045d41cfb283f97fb011d3b24dc8f6cba5403799c775cd6f282368deb8c72bd0e47d517ed04aa3d72a3030f06f3724df4e2827ce338bc480c61c33c3ffbe00a998a64faa09eb01943c8953820f21aeb1801954b89bb229eb841e84f6169cc58557c655f"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x5, 0x25, 0x6, [@generic={0x42, 0x3, "b19d6bf32fcdb9540fc46a16611d135c2d3f660173a725fba0725665dd92c3ab2afbafb4cf213a264835112b4d5630aa72e411c2f6d849e3836415351f2af198"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x8001}]}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0x5, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x10, 0xb8b2}, @generic={0x55, 0x21, "a41f0cc844a7934b98f2f9416154cc9f7e6bca2d29392f10deaa1cc7a460596f42e6de6ab058ceaed19dfd4c12503e6932b4baaffd3495c179b84f473df2fccbd8ebcdfb77caff3798e41415eb054182cfa3a6"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x30, 0x4, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x6}, @generic={0x50, 0xd, "fddc3334d431dc4f898cc4a3aa04a2059af7a1c0077610421c9c6d032088e2c907761fa14a61a44c7b88701cde0af90fb3115ed6c0c1d7703181f9af1ea11e56ee2d636565331ba3396ab2a83ea8"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0x2, 0x2, 0x1, [@generic={0xe4, 0x1, "1109a5798556ba0fc5e6523e2237caec46b5ed7fc61fc71441f0ed99683bdfba2f689a96c6bada8400bb3d0794172607b7d0f520af4833fc3453a39ffa7359626e8d542cc8b98657778f4caaaf97df4ef992ad0c6e48d93ac5185b1ec0e9f69f0997339a01503ac895ae3c23a61fe558c566b6ca770b791cb57e3327649e45ca08174dbd7983893716da6b20134e3d312a74974412e097cfbf293b4b5e1bb7c4926d41a4c86cf523f73ba28d59ee34bfc5a45339890f68e0dc9b7118d26267f595810908673e10108991129a09150f514b49a422eef0b91f132cd0e825d2cb0ab53d"}, @generic={0xcd, 0x1, "69376cfc4e6daabcb89a7580a6df1cfb79b9a9afebf5e3bfdc72dd11b5334ab08c44c8885bbba63c57fbaa30c89f2188dc2a8805bb2f017bd418705f303ae51a047637c7ab8ea09cc72142d2fda3b6229208654a5957fb83897a6a02d369c8e9132432004fd09e21dd501d4d205c15381052bb7bc82662bcd84b5af469eb166a3868e604908aeaa28a2ddc62a4066813190750d0581469a410d2911c6cd38bf864129114f61479dab54b098bd4c8a0498f25cf1083d3f3a32ce78b50d3939a97150846d5e6b6fc2b5256ba"}]}}, {{0x9, 0x5, 0x1, 0x24, 0x400, 0xc8, 0xf5, 0x8}}]}}, {{0x9, 0x4, 0xf8, 0x5, 0x2, 0x0, 0x15, 0xe2, 0x1, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "4c1b66"}, {0x5, 0x24, 0x0, 0x98}, {0xd, 0x24, 0xf, 0x1, 0xffa, 0x5bc, 0x3}, {0x6, 0x24, 0x1a, 0x200, 0x24}}], [{{0x9, 0x5, 0x8, 0x10, 0x10, 0x5, 0x9, 0x6d}}, {{0x9, 0x5, 0x80, 0x10, 0x0, 0x3, 0x16, 0x9e, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb2, 0xb7e}, @generic={0x51, 0x22, "bec0f3853851e7b6e7a4c2a51aad1e77d710e55ec5c01bc418a1272f985f86eb7665a2ce077e0590e34b57ecf33ebcaf5f7c65a0af9a2f658b98acf6b5d5f23d75f04d30c653a6f47d07e5e3ea8568"}]}}]}}]}}]}}, &(0x7f0000003a80)={0xa, &(0x7f0000003840)={0xa, 0x6, 0x200, 0x4, 0x3, 0x4, 0x15e, 0x10}, 0x19c, &(0x7f0000003880)={0x5, 0xf, 0x19c, 0x6, [@generic={0x9d, 0x10, 0xb, "6246bcce4f3f92c16d2bbe3223cdb414db891e758b1b65a18ba75e1534d94f5a22fa799474016bdd863aa9034cb10d9db8736d42c0a5f3228150f73eddb973324e7affbcd6e780b2303efd92743b9d313f46936f777e6f1f93ff3845b5698ab167acfd9c5ceec5e17a3a684f545f5cbba77a23e55a9dc755ad80f778cfd3936ed930c3ef2ee18a3a53ca60d5bc15877f1e25cb25edf984683faf"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x7f, 0xba, 0x7ff}, @generic={0xdf, 0x10, 0x4, "6877fdd4de83410718b745b6042851dc5bfdfcfca62b2615066559f26c0c73e0a0f0ef4ff416da7f4579ef52dab370dd2ba202db34d12aaf6642d6a082f7d82e83eef29e6bd706b4a6612e426e00fb4d5c554bed4c4cef8b9289f213353d6ac1cbe94795face15c6e968aa475754526c165a5ffe2bbc5e5c9f5a838af4db1352b10cb9b5be85baa25b541180fde3f3395ffbb19ba84821f1aadc295c56d29969ebe5507870d03d938d2f1a70a1397c5aa7425caddc03666e9c0168ce2c25af315de0d360bf54cd01b08b82f536965923e2c4fd290c2f61fb9bc93522"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xc, 0x3, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x6, 0x7, 0x4}]}, 0x1, [{0x4, &(0x7f0000003a40)=@lang_id={0x4, 0x3, 0x455}}]}) fcntl$addseals(r1, 0x409, 0x9) fcntl$getownex(r4, 0x10, &(0x7f0000003ac0)={0x0, 0x0}) r11 = syz_open_procfs(r10, &(0x7f0000003b00)='net/raw\x00') ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000003b40)={0x5, 0x7f, 0x0, 0xc, 0x0, "997e9babb22ae176996dda08f4514727cd1a86", 0x3, 0x7fff}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000003b80), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000c, 0x2010, r9, 0x910d8000) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$CAN_RAW_RECV_OWN_MSGS(r11, 0x65, 0x4, &(0x7f0000003bc0)=0x1, 0x4) socket$igmp6(0xa, 0x3, 0x2) perf_event_open(&(0x7f0000003c00)={0x1, 0x80, 0xf, 0x5, 0xf8, 0xe8, 0x0, 0x7fffffff, 0x20004, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_config_ext={0x3, 0x5ae}, 0x10000, 0x100000001, 0x8, 0x1, 0x9, 0xf68, 0x7, 0x0, 0x80000000, 0x0, 0x100}, 0x0, 0x3, 0xffffffffffffffff, 0x2) 478.25336ms ago: executing program 7 (id=6399): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f00000004c0)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@block_validity}, {@resuid}, {@usrquota}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") clock_gettime(0xfffffffffffffffd, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x519002) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x11f191210ac3045d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@errors_remount}, {@noblock_validity}]}, 0x1, 0x4f9, &(0x7f0000001480)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x400, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x53e7e5a6a3739329}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80015}, 0x20004010) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x8000, 0x7, 0x4, 0xd, {{0x1e, 0x4, 0x3, 0x6, 0x78, 0x64, 0x0, 0x5, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x23}, {[@cipso={0x86, 0x34, 0x3, [{0x5, 0xd, "27545509a8b3368821ae57"}, {0x1, 0x10, "1eb23c13d860e6ce991f1357d910"}, {0x7, 0x11, "2dd4c44b4fe2011172c567e9a35f93"}]}, @cipso={0x86, 0x26, 0x3, [{0x1, 0x8, "83b844a0cd45"}, {0x0, 0x6, "7ec3b634"}, {0x7, 0x12, "8c80b8790f4c6bd962628d0bdbd4de35"}]}, @lsrr={0x83, 0x7, 0x8e, [@multicast1]}]}}}}}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x6, 0x6, @remote}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x720, 0x10, 0x4, 0x6, {{0xf, 0x4, 0x3, 0x3, 0x3c, 0x68, 0x0, 0x9, 0x29, 0x0, @broadcast, @loopback, {[@generic={0x83, 0x12, "dec249ff7434604e5d66c1812f5403f5"}, @timestamp_addr={0x44, 0x14, 0xbe, 0x1, 0x6, [{@multicast2, 0x80000000}, {@empty}]}]}}}}}) getsockname$packet(r1, &(0x7f0000000380), &(0x7f00000003c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000740)={'syztnl1\x00', &(0x7f0000000600)={'tunl0\x00', 0x0, 0x8007, 0x700, 0x80, 0x5341, {{0x45, 0x4, 0x0, 0x36, 0x114, 0x66, 0x0, 0x7, 0x29, 0x0, @multicast2, @empty, {[@rr={0x7, 0xf, 0x41, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @cipso={0x86, 0x6c, 0x3, [{0x1, 0x6, "6b3d4316"}, {0x0, 0xb, "bd4c554687a5db8add"}, {0x6, 0x8, "43aa1447f668"}, {0x6, 0x9, "f0f95a376b0b64"}, {0x5, 0xa, "5f0cdc034f91e6d5"}, {0x6, 0x7, "cc7c584691"}, {0x2, 0xe, "6fee7c14f4f0f8124b5ec7f4"}, {0x7, 0xb, "69879b5e4b04acabe0"}, {0x7, 0x8, "5b22fbbe6706"}, {0x4, 0x12, "5ef9fce69a82b37c77aeeca5e257c3de"}]}, @lsrr={0x83, 0x7, 0x42, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0xdb, 0x3, 0x6, [{@remote, 0x5}, {@multicast2, 0x4}, {@rand_addr=0x64010101, 0x8}, {@broadcast, 0x3562}]}, @timestamp_addr={0x44, 0x54, 0x6e, 0x1, 0x0, [{@remote}, {@remote, 0x8}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x6}, {@remote, 0x1}, {@private=0xa010102, 0x555}, {@empty, 0x5}, {@multicast1, 0x5}, {@multicast1, 0xf7}, {@multicast1, 0xfffffffd}]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000880)={'tunl0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x20, 0x80, 0x4b1, 0x6, {{0x33, 0x4, 0x0, 0x27, 0xcc, 0x66, 0x0, 0x10, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x36}, {[@timestamp={0x44, 0x28, 0x11, 0x0, 0x7, [0xfffffffc, 0x10000, 0x618, 0x19, 0x2, 0xff, 0x9, 0x200, 0xfffffffc]}, @timestamp_addr={0x44, 0x2c, 0xfc, 0x1, 0x7, [{@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}, {@loopback, 0x4}, {@local, 0x9}, {@broadcast, 0x3ff}]}, @timestamp_prespec={0x44, 0x1c, 0x8a, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@loopback, 0xfffffffc}]}, @timestamp={0x44, 0x10, 0x50, 0x0, 0x8, [0x2, 0x3, 0x9]}, @noop, @timestamp_prespec={0x44, 0x34, 0x8, 0x3, 0x7, [{@local, 0x13}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0xa}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8b60}, {@dev={0xac, 0x14, 0x14, 0x36}}, {@multicast2}]}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40, 0xa3) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000005c0)) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) 67.095928ms ago: executing program 2 (id=6400): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x4000, 0x6622b533, 0x0, 0x0, 0x0, 0x6}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=6401): r0 = epoll_create1(0x80000) memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) (async) r1 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) (async) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) (async) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x4000010) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0xc000000b}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r6 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r6}, &(0x7f0000000140)) (async) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r6}, &(0x7f0000000140)=0x0) timer_settime(r7, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) kernel console output (not intermixed with test programs): R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.941282][T25188] R13: 00007f2aeeb96038 R14: 00007f2aeeb95fa0 R15: 00007ffdd6b32ba8 [ 708.941301][T25188] [ 709.115509][T25192] set_capacity_and_notify: 4 callbacks suppressed [ 709.115523][T25192] loop7: detected capacity change from 0 to 512 [ 709.258551][T25192] EXT4-fs warning (device loop7): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 709.335907][T25205] loop4: detected capacity change from 0 to 512 [ 709.355754][T25192] EXT4-fs (loop7): mount failed [ 709.361254][T25205] EXT4-fs: Ignoring removed nobh option [ 709.410656][T25205] EXT4-fs: dax option not supported [ 709.515220][T25219] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 709.525576][T25217] loop4: detected capacity change from 0 to 512 [ 709.540051][T25217] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 709.608079][T25217] EXT4-fs (loop4): 1 truncate cleaned up [ 709.650341][T25217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.711496][T25231] loop2: detected capacity change from 0 to 1024 [ 709.779035][T25231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 710.208867][T17653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.288910][T20639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 710.374962][T25243] loop4: detected capacity change from 0 to 1024 [ 710.396083][T25243] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 710.421038][T25243] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 710.429316][T25243] EXT4-fs (loop4): orphan cleanup on readonly fs [ 710.436853][T25243] EXT4-fs error (device loop4): __ext4_get_inode_loc:4797: comm syz.4.5811: Invalid inode table block 0 in block_group 0 [ 710.458775][T25243] loop4: lost filesystem error report for type 5 error -117 [ 710.468545][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 710.482286][ C0] EXT4-fs (loop4): initial error at time 1776108014: __ext4_get_inode_loc:4797 [ 710.491239][ C0] EXT4-fs (loop4): last error at time 1776108014: __ext4_get_inode_loc:4797 [ 710.500012][T25243] EXT4-fs (loop4): Remounting filesystem read-only [ 710.506505][T25243] __quota_error: 39 callbacks suppressed [ 710.506517][T25243] Quota error (device loop4): write_blk: dquota write failed [ 710.526915][T25243] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 710.550559][T25243] EXT4-fs (loop4): 1 truncate cleaned up [ 710.557058][T25243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 710.607430][T17653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.744850][T25271] __nla_validate_parse: 2 callbacks suppressed [ 710.744867][T25271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5820'. [ 710.865325][T25271] vlan0: entered allmulticast mode [ 710.870673][T25271] bridge4: entered allmulticast mode [ 710.909796][T25271] bridge4: port 1(bond3) entered blocking state [ 710.916101][T25271] bridge4: port 1(bond3) entered disabled state [ 710.929887][T25271] bond3: entered allmulticast mode [ 710.992817][T25271] bond3: entered promiscuous mode [ 711.030904][T25281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5821'. [ 711.302432][T25301] FAULT_INJECTION: forcing a failure. [ 711.302432][T25301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.341194][T25301] CPU: 1 UID: 0 PID: 25301 Comm: syz.2.5830 Tainted: G W syzkaller #0 PREEMPT(full) [ 711.341241][T25301] Tainted: [W]=WARN [ 711.341248][T25301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 711.341265][T25301] Call Trace: [ 711.341271][T25301] [ 711.341279][T25301] __dump_stack+0x1d/0x30 [ 711.341303][T25301] dump_stack_lvl+0x95/0xd0 [ 711.341385][T25301] dump_stack+0x15/0x1b [ 711.341409][T25301] should_fail_ex+0x263/0x280 [ 711.341463][T25301] should_fail+0xb/0x20 [ 711.341509][T25301] should_fail_usercopy+0x1a/0x20 [ 711.341546][T25301] _copy_from_iter+0xcf/0xea0 [ 711.341598][T25301] ? __alloc_skb+0x541/0x690 [ 711.341804][T25301] ? skb_put+0xa9/0xf0 [ 711.341929][T25301] tipc_msg_build+0x50d/0x880 [ 711.341966][T25301] tipc_send_group_bcast+0x5dc/0x6f0 [ 711.342056][T25301] ? __pfx_woken_wake_function+0x10/0x10 [ 711.342080][T25301] __tipc_sendmsg+0x186/0x1c10 [ 711.342112][T25301] ? avc_has_perm+0x101/0x190 [ 711.342210][T25301] __tipc_sendstream+0xa88/0xb90 [ 711.342243][T25301] ? _raw_spin_lock_bh+0x56/0xb0 [ 711.342275][T25301] ? _raw_spin_unlock_bh+0x18/0x20 [ 711.342335][T25301] tipc_send_packet+0x65/0x80 [ 711.342361][T25301] ? __pfx_tipc_send_packet+0x10/0x10 [ 711.342390][T25301] ____sys_sendmsg+0x563/0x5b0 [ 711.342516][T25301] ___sys_sendmsg+0x195/0x1e0 [ 711.342550][T25301] __x64_sys_sendmsg+0xd4/0x160 [ 711.342574][T25301] x64_sys_call+0x194c/0x3020 [ 711.342673][T25301] do_syscall_64+0x12c/0x370 [ 711.342699][T25301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.342775][T25301] RIP: 0033:0x7f2aee91c819 [ 711.342793][T25301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.342813][T25301] RSP: 002b:00007f2aed36f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 711.342840][T25301] RAX: ffffffffffffffda RBX: 00007f2aeeb95fa0 RCX: 00007f2aee91c819 [ 711.342856][T25301] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 711.342870][T25301] RBP: 00007f2aed36f090 R08: 0000000000000000 R09: 0000000000000000 [ 711.342953][T25301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 711.342965][T25301] R13: 00007f2aeeb96038 R14: 00007f2aeeb95fa0 R15: 00007ffdd6b32ba8 [ 711.342985][T25301] [ 712.350075][T25316] nfs: Unexpected value for 'acl' [ 712.846689][T25328] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5840'. [ 712.973260][T25334] loop4: detected capacity change from 0 to 8192 [ 713.060259][ T28] audit: type=1326 audit(1776108016.713:7799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990b45c819 code=0x7ffc0000 [ 713.104405][ T28] audit: type=1326 audit(1776108016.713:7800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990b45c819 code=0x7ffc0000 [ 713.144233][ T28] audit: type=1326 audit(1776108016.713:7801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990b45c819 code=0x7ffc0000 [ 713.168120][ T28] audit: type=1326 audit(1776108016.713:7802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f990b45c819 code=0x7ffc0000 [ 713.200438][ T28] audit: type=1326 audit(1776108016.713:7803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990b45c819 code=0x7ffc0000 [ 713.226377][T25345] loop2: detected capacity change from 0 to 512 [ 713.237873][T25345] EXT4-fs: Ignoring removed mblk_io_submit option [ 713.249055][ T28] audit: type=1326 audit(1776108016.713:7804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f990b41d04e code=0x7ffc0000 [ 713.273154][ T28] audit: type=1326 audit(1776108016.713:7805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990b45c819 code=0x7ffc0000 [ 713.297387][ T28] audit: type=1326 audit(1776108016.713:7806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f990b41d04e code=0x7ffc0000 [ 713.342037][T25345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.364859][T25345] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 713.452688][T25345] EXT4-fs error (device loop2): __ext4_remount:6829: comm syz.2.5846: Abort forced by user [ 713.467911][T25345] EXT4-fs (loop2): Remounting filesystem read-only [ 713.474831][T25345] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 713.495785][T20639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.506275][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5847'. [ 713.704740][T25356] loop4: detected capacity change from 0 to 256 [ 713.714219][T25358] xt_CT: You must specify a L4 protocol and not use inversions on it [ 713.739986][T25358] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5850'. [ 713.753326][T25356] FAT-fs (loop4): codepage cp852 not found [ 713.761941][T25358] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5850'. [ 713.795957][T25363] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 713.901486][T25364] loop2: detected capacity change from 0 to 1024 [ 713.991942][T11478] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.023375][T25364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.208023][T25369] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5853'. [ 714.239439][T11478] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.296054][T11478] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.306140][T11478] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.341910][T25385] nfs: Unexpected value for 'acl' [ 714.646300][T11478] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.666238][T11478] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.724652][T25361] chnl_net:caif_netlink_parms(): no params data found [ 714.767548][T25409] loop4: detected capacity change from 0 to 1024 [ 714.783952][T20639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.794008][T25409] EXT4-fs: Ignoring removed orlov option [ 714.802104][T11478] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.816251][T11478] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.841779][T25417] loop2: detected capacity change from 0 to 512 [ 714.868955][T25417] EXT4-fs: Ignoring removed mblk_io_submit option [ 714.883672][T25409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.890949][T25361] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.903448][T25361] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.910679][T25361] bridge_slave_0: entered allmulticast mode [ 714.917032][T25361] bridge_slave_0: entered promiscuous mode [ 714.926509][T25361] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.927846][T25409] EXT4-fs error (device loop4): __ext4_new_inode:1285: comm syz.4.5858: failed to insert inode 12: doubly allocated? [ 714.933623][T25361] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.953133][T25361] bridge_slave_1: entered allmulticast mode [ 714.959915][T25361] bridge_slave_1: entered promiscuous mode [ 714.967288][T25409] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 714.967780][T25429] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 714.984473][T25417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.994764][T25429] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 715.021965][T25417] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 715.027189][T25361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.045359][T25361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.061078][T25417] EXT4-fs error (device loop2): __ext4_remount:6829: comm syz.2.5859: Abort forced by user [ 715.077409][T25361] team0: Port device team_slave_0 added [ 715.084317][T25361] team0: Port device team_slave_1 added [ 715.094528][T25376] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 715.105264][T17653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.118106][T25417] EXT4-fs (loop2): Remounting filesystem read-only [ 715.127829][T25417] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 715.144753][T25438] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5864'. [ 715.166060][T25361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.175387][T25361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.208860][T25361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.219950][T20639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.229872][T25361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.237072][T25361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.263913][T25361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.304356][T11478] bridge_slave_1: left allmulticast mode [ 715.311757][T11478] bridge_slave_1: left promiscuous mode [ 715.317535][T11478] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.331568][T11478] bridge_slave_0: left allmulticast mode [ 715.337588][T11478] bridge_slave_0: left promiscuous mode [ 715.346346][T11478] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.376302][T25454] loop4: detected capacity change from 0 to 8192 [ 715.424873][T25454] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5863'. [ 715.475416][T11478] bond1: left allmulticast mode [ 715.480495][T11478] bond1: left promiscuous mode [ 715.485477][T11478] bridge1: port 1(bond1) entered disabled state [ 715.495045][T11478] bond0: left allmulticast mode [ 715.500230][T11478] bond0: left promiscuous mode [ 715.505594][T11478] bridge9: port 1(bond0) entered disabled state [ 716.272805][T25462] nfs: Unexpected value for 'acl' [ 716.577385][T25467] loop2: detected capacity change from 0 to 512 [ 716.909903][T11478] bond1 (unregistering): Released all slaves [ 716.918094][T11478] bond2 (unregistering): Released all slaves [ 716.926065][T11478] bond0 (unregistering): Released all slaves [ 716.992638][T25493] FAULT_INJECTION: forcing a failure. [ 716.992638][T25493] name failslab, interval 1, probability 0, space 0, times 0 [ 717.015810][T25493] CPU: 1 UID: 0 PID: 25493 Comm: syz.4.5881 Tainted: G W syzkaller #0 PREEMPT(full) [ 717.015845][T25493] Tainted: [W]=WARN [ 717.015853][T25493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 717.015898][T25493] Call Trace: [ 717.015904][T25493] [ 717.015911][T25493] __dump_stack+0x1d/0x30 [ 717.015977][T25493] dump_stack_lvl+0x95/0xd0 [ 717.016010][T25493] dump_stack+0x15/0x1b [ 717.016032][T25493] should_fail_ex+0x263/0x280 [ 717.016065][T25493] should_failslab+0x8c/0xb0 [ 717.016086][T25493] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 717.016174][T25493] ? __alloc_skb+0x2d6/0x690 [ 717.016210][T25493] __alloc_skb+0x2d6/0x690 [ 717.016241][T25493] ? __alloc_skb+0x200/0x690 [ 717.016269][T25493] skb_copy+0xf0/0x3f0 [ 717.016325][T25493] ? __copy_skb_header+0x22f/0x2b0 [ 717.016356][T25493] ? skb_pull+0x93/0x110 [ 717.016377][T25493] tipc_buf_append+0x434/0x4d0 [ 717.016455][T25493] tipc_msg_reassemble+0x178/0x280 [ 717.016488][T25493] tipc_mcast_xmit+0xe5/0xd00 [ 717.016525][T25493] tipc_send_group_bcast+0x611/0x6f0 [ 717.016559][T25493] ? __pfx_woken_wake_function+0x10/0x10 [ 717.016653][T25493] __tipc_sendmsg+0x186/0x1c10 [ 717.016688][T25493] ? __perf_event_task_sched_in+0xa65/0xad0 [ 717.016714][T25493] __tipc_sendstream+0xa88/0xb90 [ 717.016783][T25493] ? _raw_spin_lock_bh+0x56/0xb0 [ 717.016810][T25493] ? _raw_spin_unlock_bh+0x18/0x20 [ 717.016906][T25493] tipc_send_packet+0x65/0x80 [ 717.016936][T25493] ? __pfx_tipc_send_packet+0x10/0x10 [ 717.016961][T25493] ____sys_sendmsg+0x563/0x5b0 [ 717.017023][T25493] ___sys_sendmsg+0x195/0x1e0 [ 717.017093][T25493] __x64_sys_sendmsg+0xd4/0x160 [ 717.017114][T25493] x64_sys_call+0x194c/0x3020 [ 717.017148][T25493] do_syscall_64+0x12c/0x370 [ 717.017326][T25493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.017347][T25493] RIP: 0033:0x7f990b45c819 [ 717.017397][T25493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.017417][T25493] RSP: 002b:00007f9909eb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.017440][T25493] RAX: ffffffffffffffda RBX: 00007f990b6d5fa0 RCX: 00007f990b45c819 [ 717.017453][T25493] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 717.017508][T25493] RBP: 00007f9909eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 717.017522][T25493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 717.017669][T25493] R13: 00007f990b6d6038 R14: 00007f990b6d5fa0 R15: 00007ffc21b54c78 [ 717.017691][T25493] [ 717.017871][T25493] tipc: Failed do clone local mcast rcv buffer [ 717.436681][T25469] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 717.648830][T25514] sg_write: data in/out 431069/402 bytes for SCSI command 0x0-- guessing data in; [ 717.648830][T25514] program syz.2.5883 not setting count and/or reply_len properly [ 717.728818][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 717.728842][ T28] audit: type=1400 audit(1776108021.343:7871): avc: denied { read } for pid=25513 comm="syz.2.5883" path="socket:[80101]" dev="sockfs" ino=80101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 717.763094][T25517] loop2: detected capacity change from 0 to 256 [ 717.787382][T25517] FAT-fs (loop2): codepage cp852 not found [ 717.910836][T25361] hsr_slave_0: entered promiscuous mode [ 717.916871][T25361] hsr_slave_1: entered promiscuous mode [ 717.922749][T25361] debugfs: 'hsr0' already exists in 'hsr' [ 717.928459][T25361] Cannot create hsr debugfs directory [ 717.946486][T11478] hsr_slave_0: left promiscuous mode [ 717.952768][T11478] hsr_slave_1: left promiscuous mode [ 717.958639][T11478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.967227][T11478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.722823][T25522] nfs: Unexpected value for 'acl' [ 718.769308][T11478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.776798][T11478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.807648][T11478] batman_adv: batadv0: Interface deactivated: dummy0 [ 718.814426][T11478] batman_adv: batadv0: Removing interface: dummy0 [ 718.834445][T25525] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5885'. [ 719.017687][T11478] veth1_macvtap: left promiscuous mode [ 719.023342][T11478] veth0_macvtap: left promiscuous mode [ 719.028962][T11478] veth1_vlan: left promiscuous mode [ 719.034420][T11478] veth0_vlan: left promiscuous mode [ 719.741702][T11478] IPVS: stop unused estimator thread 0... [ 719.751907][T25570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5897'. [ 719.841491][T25578] loop4: detected capacity change from 0 to 1024 [ 719.859321][T25578] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 719.871066][T25578] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 719.883772][T25578] EXT4-fs (loop4): orphan cleanup on readonly fs [ 719.891322][T25578] EXT4-fs error (device loop4): __ext4_get_inode_loc:4797: comm syz.4.5899: Invalid inode table block 0 in block_group 0 [ 719.905387][T25578] loop4: lost filesystem error report for type 5 error -117 [ 719.905459][T25578] EXT4-fs (loop4): Remounting filesystem read-only [ 719.912761][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 719.912797][ C1] EXT4-fs (loop4): initial error at time 1776108023: __ext4_get_inode_loc:4797 [ 719.912823][ C1] EXT4-fs (loop4): last error at time 1776108023: __ext4_get_inode_loc:4797 [ 719.943713][T25578] Quota error (device loop4): write_blk: dquota write failed [ 719.951194][T25578] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 719.961354][T25578] EXT4-fs (loop4): 1 truncate cleaned up [ 720.050812][T25361] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 720.060418][T25361] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 720.072362][T25361] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 720.081171][T25361] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 720.090600][T25538] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 720.476247][T25619] loop2: detected capacity change from 0 to 256 [ 720.491500][T25578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 720.529780][T25619] FAT-fs (loop2): codepage cp852 not found [ 720.555012][T17653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.560321][T25361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.587880][T25361] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.711139][T21199] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.718297][T21199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.729408][T21199] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.736464][T21199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.847729][T25639] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5903'. [ 720.859732][T25641] nfs: Unexpected value for 'acl' [ 720.915444][T25361] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 720.926478][T25361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 721.000593][T25644] loop4: detected capacity change from 0 to 512 [ 721.062702][T25644] EXT4-fs: Ignoring removed mblk_io_submit option [ 721.114844][T25644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.149339][T25644] ext4 filesystem being mounted at /367/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 721.243009][T25361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.313991][T25644] EXT4-fs error (device loop4): __ext4_remount:6829: comm syz.4.5904: Abort forced by user [ 721.324827][T25644] EXT4-fs (loop4): Remounting filesystem read-only [ 721.339626][T25644] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 721.365699][T17653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.381017][T25361] veth0_vlan: entered promiscuous mode [ 721.389205][T25361] veth1_vlan: entered promiscuous mode [ 721.401863][T25361] veth0_macvtap: entered promiscuous mode [ 721.409031][T25361] veth1_macvtap: entered promiscuous mode [ 721.524755][T25361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.533990][T25361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.547978][T21197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.570889][T21197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.625006][T25663] loop4: detected capacity change from 0 to 512 [ 721.705171][T25664] loop2: detected capacity change from 0 to 1024 [ 721.769090][T25664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.782794][T25664] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 721.832987][T25663] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 721.877808][T25663] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 721.921446][T25663] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 721.957117][T25663] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 721.986404][T25663] System zones: 0-2, 18-18, 34-35 [ 722.006428][T25663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.244632][T17653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.254864][T25669] xt_CT: No such helper "snmp_trap" [ 723.151476][T20639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 723.167677][T21197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.193421][T25674] loop7: detected capacity change from 0 to 1764 [ 723.199898][T21197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.215469][T25674] ISOFS: Unable to identify CD-ROM format. [ 723.309846][ T28] audit: type=1400 audit(1776108026.953:7872): avc: denied { write } for pid=25361 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:crack_exec_t:s0" [ 723.429711][ T28] audit: type=1400 audit(1776108026.953:7873): avc: denied { open } for pid=25361 comm="syz-executor" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:crack_exec_t:s0" [ 723.577909][T25691] vlan3: entered promiscuous mode [ 723.594921][T25691] macvlan1: entered promiscuous mode [ 723.775025][T25697] loop3: detected capacity change from 0 to 512 [ 723.809214][T25699] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5916'. [ 723.846126][T25697] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 723.864198][T25697] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 723.884778][T25697] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 723.886051][T25704] netlink: 'syz.4.5919': attribute type 4 has an invalid length. [ 723.907326][T25697] System zones: 0-2, 18-18, 34-35 [ 723.919267][T25697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 723.974620][T25361] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.292643][ T28] audit: type=1400 audit(1776108027.943:7874): avc: denied { listen } for pid=25709 comm="syz.3.5922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 724.332476][ T28] audit: type=1400 audit(1776108027.943:7875): avc: denied { accept } for pid=25709 comm="syz.3.5922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 724.339858][T25721] raw_sendmsg: syz.3.5922 forgot to set AF_INET. Fix it! [ 724.374831][T25732] SELinux: Context ›Y7»ôj [ 724.374831][T25732] u/$2SÙŸ»2'´ƒk€s2- vj×džÃ û#ž»œ,ÙN< [ 724.374831][T25732] :æºE]Yù´\?˜ͼ•=ê¯Ù‹1ÛKI‹À­ßÇäî‚kÎé°{kL^‰—ù0¦óýÒë}å4nšrº }–¢ÏpįÚ¥›ÙN»wŸ‚Þyxiu?+ëþÑý½ÜH~›ö»F¦–ý1ùW¤¹÷jm &8›UÛ‚VŠƒß‹œNÃ’œ2ù)GxÆVÔ%‘5œõxeRM4r4c¥îÿJsÏHU&Ÿ“ä§'p…Œ2EMMàk&‰Îc«bUƒÎÈ,ä,ÏÖÝÁâÂfÓ@Õï8¿ÅøœÎœ¶bÁˆD™¨%$¬œÓfÚ=½š¾÷8®@ì§k¤I|íþ€w íOç£x&KCH;ÁÝx-ÍK³²oå4˜i!ÿÿOi%Ú‚2 úë´F"2‹E,P] èôkÇ? is not valid (left unmapped). [ 724.421921][T25732] SELinux: Context *mþkX is not valid (left unmapped). [ 724.429430][T25732] SELinux: Context ¬õ–KM*º,hÃc¶¼I¨Ç¾Êû·ßÌ‹yÖÔõ+á.ë+yÒÿ0ª[prŸ;J©A9ÅõIqÒ j¦Ç¼=7)oM{ìší–nFÓÙ=«¾ø‰Xmnxºœr¶Dß㑉³åž³ç4ÌÚTW²ü}»tŠóôòò%È–Y…É^sìlF¬€¤§Bˆ53²‰hÖmì‰âÝ5þ}ßã;J™¬ìÁXom%~"á¿~9mM¾–~alʺLàI8­„iÛþ&†åœZw8 lX&ôD;tæd ‹Bå°IøÝ›~ø¬©L [ 724.507023][T25732] uSÄ‹ÊkxIŒR¾¤I$4"©l«ÑXö7f9áÙ¬ÜÊb–«BÑÄ|72Ÿ*©—‚k‘Œ‘NMø§žªÝñ is not valid (left unmapped). [ 724.558606][T25732] SELinux: Context åWé½Xó®’Eë•Ó][Oü:ѸÍ÷÷o‡ß­OöìªÌbZDî¢fq :Å~€t6µuY¼x’´ð(ÇèQßïž8…Å×÷NPZðeoÄìáþQ[aSêáI> is not valid (left unmapped). [ 724.644969][T25741] loop4: detected capacity change from 0 to 128 [ 724.651451][ T28] audit: type=1400 audit(1776108028.293:7876): avc: denied { read } for pid=25740 comm="syz.7.5931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 725.899827][T25755] nfs: Unexpected value for 'acl' [ 727.132921][T25770] loop7: detected capacity change from 0 to 1024 [ 727.147253][T25770] EXT4-fs: test_dummy_encryption option not supported [ 727.177515][T25774] loop3: detected capacity change from 0 to 2048 [ 727.190134][T25774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.205161][T25774] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 727.398851][T25789] xt_CT: No such helper "snmp_trap" [ 727.458361][T25361] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.506895][T25794] loop7: detected capacity change from 0 to 512 [ 727.535122][T25794] EXT4-fs (loop7): 1 orphan inode deleted [ 727.543583][T25794] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.561785][T25794] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 727.602048][T21197] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 727.617255][T25801] loop4: detected capacity change from 0 to 512 [ 727.630650][T21197] EXT4-fs error (device loop7): ext4_release_dquot:7062: comm kworker/u8:30: Failed to release dquot type 1 [ 727.651990][T25800] blktrace: Concurrent blktraces are not allowed on loop4 [ 727.659785][T25801] EXT4-fs: Ignoring removed mblk_io_submit option [ 727.689549][T25801] /dev/loop4: Can't open blockdev [ 727.760732][T25801] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5948'. [ 727.882894][T25809] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5950'. [ 727.927872][T25813] loop2: detected capacity change from 0 to 512 [ 727.949649][T25815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5953'. [ 727.972600][T25817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5953'. [ 727.981911][T25816] xt_CT: You must specify a L4 protocol and not use inversions on it [ 727.992376][T25815] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5953'. [ 727.998562][T25817] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5953'. [ 728.005024][T25815] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 728.037795][T25821] loop2: detected capacity change from 0 to 512 [ 728.078792][T25821] EXT4-fs: Ignoring removed mblk_io_submit option [ 728.090273][T25821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.109350][T25823] loop4: detected capacity change from 0 to 256 [ 728.119305][T25821] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 728.277794][T25821] EXT4-fs error (device loop2): __ext4_remount:6829: comm syz.2.5954: Abort forced by user [ 728.291329][T25821] EXT4-fs (loop2): Remounting filesystem read-only [ 728.302753][T25821] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 728.370031][T20639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.188578][ T28] audit: type=1400 audit(1776108032.823:7877): avc: denied { map } for pid=25846 comm="syz.2.5963" path="socket:[81462]" dev="sockfs" ino=81462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 729.213415][T25847] netlink: 'syz.2.5963': attribute type 11 has an invalid length. [ 729.233553][T25847] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5963'. [ 729.564412][T25859] loop4: detected capacity change from 0 to 512 [ 730.183040][T25859] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 730.258732][T25859] EXT4-fs (loop4): mount failed [ 730.347474][T25871] loop3: detected capacity change from 0 to 4096 [ 730.380013][T25871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.436845][ T28] audit: type=1326 audit(1776108034.073:7878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25873 comm="syz.2.5971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aee91c819 code=0x7ffc0000 [ 730.489288][T25361] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.623945][T25882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 730.655033][ T28] audit: type=1326 audit(1776108034.073:7879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25873 comm="syz.2.5971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aee91c819 code=0x7ffc0000 [ 730.699055][ T28] audit: type=1326 audit(1776108034.073:7880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25873 comm="syz.2.5971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2aee91c819 code=0x7ffc0000 [ 730.758723][ T28] audit: type=1326 audit(1776108034.073:7881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25873 comm="syz.2.5971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aee91c819 code=0x7ffc0000 [ 730.785499][T25887] loop3: detected capacity change from 0 to 1024 [ 730.802272][T25886] 8021q: VLANs not supported on nlmon0 [ 730.849530][T25887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 730.878567][ T28] audit: type=1326 audit(1776108034.073:7882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25873 comm="syz.2.5971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aee91c819 code=0x7ffc0000 [ 730.948676][ T28] audit: type=1326 audit(1776108034.313:7883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.8.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 731.011631][ T28] audit: type=1326 audit(1776108034.323:7884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.8.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 731.068619][ T28] audit: type=1326 audit(1776108034.323:7885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.8.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 731.103850][T25361] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.128351][ T28] audit: type=1326 audit(1776108034.323:7886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.8.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 731.187958][T25906] FAT-fs (loop3): codepage cp852 not found [ 731.343896][T25911] nfs: Unexpected value for 'acl' [ 731.400964][T25921] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 731.455286][T25926] vlan3: entered promiscuous mode [ 731.519662][T24187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.695396][T25941] FAULT_INJECTION: forcing a failure. [ 731.695396][T25941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.708610][T25941] CPU: 0 UID: 0 PID: 25941 Comm: syz.2.5994 Tainted: G W syzkaller #0 PREEMPT(full) [ 731.708665][T25941] Tainted: [W]=WARN [ 731.708671][T25941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 731.708685][T25941] Call Trace: [ 731.708693][T25941] [ 731.708701][T25941] __dump_stack+0x1d/0x30 [ 731.708731][T25941] dump_stack_lvl+0x95/0xd0 [ 731.708774][T25941] dump_stack+0x15/0x1b [ 731.708811][T25941] should_fail_ex+0x263/0x280 [ 731.708843][T25941] should_fail+0xb/0x20 [ 731.708870][T25941] should_fail_usercopy+0x1a/0x20 [ 731.708977][T25941] _copy_to_user+0x20/0xa0 [ 731.709011][T25941] simple_read_from_buffer+0xb5/0x130 [ 731.709050][T25941] proc_fail_nth_read+0x10e/0x150 [ 731.709144][T25941] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 731.709171][T25941] vfs_read+0x1ab/0x7f0 [ 731.709188][T25941] ? __rcu_read_unlock+0x4e/0x70 [ 731.709210][T25941] ? __fget_files+0x184/0x1c0 [ 731.709282][T25941] ? mutex_lock+0x57/0x90 [ 731.709306][T25941] ksys_read+0xdc/0x1a0 [ 731.709325][T25941] __x64_sys_read+0x40/0x50 [ 731.709343][T25941] x64_sys_call+0x2886/0x3020 [ 731.709427][T25941] do_syscall_64+0x12c/0x370 [ 731.709458][T25941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.709536][T25941] RIP: 0033:0x7f2aee8dd04e [ 731.709551][T25941] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 731.709568][T25941] RSP: 002b:00007f2aed36efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 731.709593][T25941] RAX: ffffffffffffffda RBX: 00007f2aed36f6c0 RCX: 00007f2aee8dd04e [ 731.709609][T25941] RDX: 000000000000000f RSI: 00007f2aed36f0a0 RDI: 0000000000000003 [ 731.709622][T25941] RBP: 00007f2aed36f090 R08: 0000000000000000 R09: 0000000000000000 [ 731.709656][T25941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.709668][T25941] R13: 00007f2aeeb96038 R14: 00007f2aeeb95fa0 R15: 00007ffdd6b32ba8 [ 731.709685][T25941] [ 731.921076][T25944] xt_CT: You must specify a L4 protocol and not use inversions on it [ 731.934144][T25943] xt_CT: No such helper "snmp_trap" [ 732.075599][T25951] vlan3: entered promiscuous mode [ 732.153647][T25957] Can't find ip_set type bitmap:ip [ 732.163224][T25962] netlink: 244 bytes leftover after parsing attributes in process `syz.7.6002'. [ 732.178336][T25965] set_capacity_and_notify: 2 callbacks suppressed [ 732.178354][T25965] loop2: detected capacity change from 0 to 512 [ 732.198857][T25962] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6002'. [ 732.220844][T25965] ext3: Unknown parameter 'pcr' [ 732.257957][T25968] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6004'. [ 732.282194][T25971] loop2: detected capacity change from 0 to 512 [ 732.289002][T25971] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 732.307287][T25971] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 732.445072][T25978] loop3: detected capacity change from 0 to 512 [ 732.448848][T25971] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 732.458921][T25978] EXT4-fs: Ignoring removed mblk_io_submit option [ 732.624886][T25979] loop7: detected capacity change from 0 to 1024 [ 732.644530][T25979] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 732.656554][T25979] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 732.668456][T25979] EXT4-fs error (device loop7): ext4_get_journal_inode:5888: comm syz.7.6005: inode #1: comm syz.7.6005: iget: illegal inode # [ 732.682657][T25979] loop7: lost filesystem error report for type 5 error -117 [ 732.685205][T25979] EXT4-fs (loop7): no journal found [ 732.692836][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 732.692954][ C0] EXT4-fs (loop7): initial error at time 1776108036: ext4_get_journal_inode:5888 [ 732.693195][ C0] EXT4-fs (loop7): last error at time 1776108036: ext4_get_journal_inode:5888 [ 732.724971][T25979] EXT4-fs (loop7): can't get journal size [ 732.798192][T25979] EXT4-fs (loop7): failed to initialize system zone (-22) [ 732.806186][T25979] EXT4-fs (loop7): mount failed [ 732.845484][T25971] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 732.910192][T25971] System zones: 0-2, 18-18, 34-35 [ 732.993563][T25971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 733.245642][T25990] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6009'. [ 733.414607][T20639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.511464][T25978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.816465][T25997] nfs: Unexpected value for 'acl' [ 733.982774][T25978] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 734.317550][T26011] EXT4-fs error (device loop3): __ext4_remount:6829: comm syz.3.6006: Abort forced by user [ 734.330062][T26011] EXT4-fs (loop3): Remounting filesystem read-only [ 734.336793][T26011] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 734.658134][T26035] loop2: detected capacity change from 0 to 1024 [ 734.709403][T25361] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.722117][T26035] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 734.755913][T26035] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 734.774302][T26035] EXT4-fs (loop2): orphan cleanup on readonly fs [ 734.789682][T26035] EXT4-fs error (device loop2): __ext4_get_inode_loc:4797: comm syz.2.6018: Invalid inode table block 0 in block_group 0 [ 734.818390][T26035] loop2: lost filesystem error report for type 5 error -117 [ 734.818528][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 734.832258][ C0] EXT4-fs (loop2): initial error at time 1776108038: __ext4_get_inode_loc:4797 [ 734.841386][ C0] EXT4-fs (loop2): last error at time 1776108038: __ext4_get_inode_loc:4797 [ 734.922834][T26042] loop7: detected capacity change from 0 to 1024 [ 735.011969][T26035] EXT4-fs (loop2): Remounting filesystem read-only [ 735.052489][T26042] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 735.066019][T26042] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 735.095677][T26050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6023'. [ 735.121955][T26035] __quota_error: 4 callbacks suppressed [ 735.121977][T26035] Quota error (device loop2): write_blk: dquota write failed [ 735.197074][T26050] vlan2: entered allmulticast mode [ 735.214127][T26035] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 735.231265][T26050] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 735.262679][T26035] EXT4-fs (loop2): 1 truncate cleaned up [ 735.295537][T26055] bond1 (unregistering): Released all slaves [ 735.305425][T26035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 735.527006][T20639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.585201][T26064] xt_CT: You must specify a L4 protocol and not use inversions on it [ 735.608585][ T28] audit: type=1326 audit(1776108039.243:7891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26056 comm="syz.8.6026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 735.807208][ T28] audit: type=1326 audit(1776108039.283:7892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26056 comm="syz.8.6026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 735.913585][T26071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6031'. [ 735.937021][ T28] audit: type=1326 audit(1776108039.283:7893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26056 comm="syz.8.6026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 736.070596][ T28] audit: type=1326 audit(1776108039.283:7894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26056 comm="syz.8.6026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 736.336531][T24187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 736.346702][ T28] audit: type=1326 audit(1776108039.453:7895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26056 comm="syz.8.6026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4d3eaad04e code=0x7ffc0000 [ 736.378586][ T28] audit: type=1326 audit(1776108039.493:7897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26056 comm="syz.8.6026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 736.405688][ T28] audit: type=1326 audit(1776108039.453:7896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26056 comm="syz.8.6026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 736.443804][ T28] audit: type=1326 audit(1776108039.493:7898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26056 comm="syz.8.6026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 736.549076][T26093] nfs: Unexpected value for 'acl' [ 736.575497][T26099] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6037'. [ 736.632161][T26103] loop3: detected capacity change from 0 to 1024 [ 736.640970][T26107] loop7: detected capacity change from 0 to 512 [ 736.656276][T26107] EXT4-fs: Ignoring removed mblk_io_submit option [ 736.667301][T26109] loop4: detected capacity change from 0 to 1024 [ 736.681234][T26103] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 736.691741][T26109] EXT4-fs: test_dummy_encryption option not supported [ 736.693082][T26103] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 736.708878][T26103] EXT4-fs (loop3): orphan cleanup on readonly fs [ 736.727820][T26107] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.745035][T26103] EXT4-fs error (device loop3): __ext4_get_inode_loc:4797: comm syz.3.6039: Invalid inode table block 0 in block_group 0 [ 736.757989][T26107] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 736.768770][T26103] loop3: lost filesystem error report for type 5 error -117 [ 736.769152][T26103] EXT4-fs (loop3): Remounting filesystem read-only [ 736.782951][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 736.782971][ C0] EXT4-fs (loop3): initial error at time 1776108040: __ext4_get_inode_loc:4797 [ 736.783000][ C0] EXT4-fs (loop3): last error at time 1776108040: __ext4_get_inode_loc:4797 [ 736.899582][T26103] EXT4-fs (loop3): 1 truncate cleaned up [ 736.930698][T26103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 737.093272][T26118] EXT4-fs error (device loop7): __ext4_remount:6829: comm syz.7.6041: Abort forced by user [ 737.103938][T26118] EXT4-fs (loop7): Remounting filesystem read-only [ 737.110490][T26118] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 737.211279][T25361] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.700625][T24187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.750583][T26125] loop3: detected capacity change from 0 to 8192 [ 737.810979][T26131] xt_CT: No such helper "snmp_trap" [ 737.868735][T26136] tmpfs: Bad value for 'mpol' [ 737.885670][T26136] vlan2: entered allmulticast mode [ 737.906797][T26138] netlink: 'syz.8.6051': attribute type 2 has an invalid length. [ 737.930967][T26138] netlink: 191880 bytes leftover after parsing attributes in process `syz.8.6051'. [ 738.019472][T26144] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6053'. [ 738.065175][T26148] loop7: detected capacity change from 0 to 1024 [ 738.082563][T26148] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 738.149580][T26148] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 738.158207][T26148] EXT4-fs (loop7): orphan cleanup on readonly fs [ 738.169454][T26157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6058'. [ 738.197760][T26148] EXT4-fs error (device loop7): __ext4_get_inode_loc:4797: comm syz.7.6055: Invalid inode table block 0 in block_group 0 [ 738.233734][T26148] loop7: lost filesystem error report for type 5 error -117 [ 738.233900][T26148] EXT4-fs (loop7): Remounting filesystem read-only [ 738.241211][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 738.241250][ C0] EXT4-fs (loop7): initial error at time 1776108041: __ext4_get_inode_loc:4797 [ 738.241272][ C0] EXT4-fs (loop7): last error at time 1776108041: __ext4_get_inode_loc:4797 [ 738.358655][T26148] EXT4-fs (loop7): 1 truncate cleaned up [ 738.379515][T26148] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 738.409312][T26148] FAULT_INJECTION: forcing a failure. [ 738.409312][T26148] name failslab, interval 1, probability 0, space 0, times 0 [ 738.440049][T26148] CPU: 1 UID: 0 PID: 26148 Comm: syz.7.6055 Tainted: G W syzkaller #0 PREEMPT(full) [ 738.440083][T26148] Tainted: [W]=WARN [ 738.440090][T26148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 738.440102][T26148] Call Trace: [ 738.440108][T26148] [ 738.440115][T26148] __dump_stack+0x1d/0x30 [ 738.440210][T26148] dump_stack_lvl+0x95/0xd0 [ 738.440233][T26148] dump_stack+0x15/0x1b [ 738.440253][T26148] should_fail_ex+0x263/0x280 [ 738.440279][T26148] should_failslab+0x8c/0xb0 [ 738.440307][T26148] kmem_cache_alloc_noprof+0x66/0x400 [ 738.440333][T26148] ? do_getname+0x2e/0x1c0 [ 738.440355][T26148] do_getname+0x2e/0x1c0 [ 738.440508][T26148] __se_sys_mkdirat+0x21/0xf0 [ 738.440528][T26148] __x64_sys_mkdirat+0x43/0x50 [ 738.440549][T26148] x64_sys_call+0x2c4e/0x3020 [ 738.440607][T26148] do_syscall_64+0x12c/0x370 [ 738.440633][T26148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.440702][T26148] RIP: 0033:0x7fea21a5c819 [ 738.440717][T26148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.440795][T26148] RSP: 002b:00007fea204b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 738.440816][T26148] RAX: ffffffffffffffda RBX: 00007fea21cd5fa0 RCX: 00007fea21a5c819 [ 738.440837][T26148] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 738.440853][T26148] RBP: 00007fea204b7090 R08: 0000000000000000 R09: 0000000000000000 [ 738.440868][T26148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.440883][T26148] R13: 00007fea21cd6038 R14: 00007fea21cd5fa0 R15: 00007fff92d9c868 [ 738.440904][T26148] [ 738.648760][T26171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6063'. [ 738.658349][T24187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.916761][T26180] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6064'. [ 739.490700][T26194] loop3: detected capacity change from 0 to 128 [ 739.934968][T26200] loop7: detected capacity change from 0 to 128 [ 739.967656][T26200] vfat: Unknown parameter 'ê´ì½^º¡ewÈ€@7JºÓ¼ÝF¸óNË/Jn¼jÃØ¤O¿íó8X?cºFô0¬À©‹O˵' [ 740.026465][T26200] loop7: detected capacity change from 0 to 1024 [ 740.090437][T26200] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 740.155533][T26200] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 740.260398][T26200] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 740.336336][T26200] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6073'. [ 740.389026][T26210] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿš@­LqE:†‹ á艞Õt}²0ü$‰' [ 740.498191][T24187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.686658][T26212] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 740.873286][T26222] xt_CT: You must specify a L4 protocol and not use inversions on it [ 741.101683][T26228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 741.292357][T26230] loop3: detected capacity change from 0 to 1024 [ 741.359764][T26230] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 741.371681][T26230] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 741.383408][T26230] EXT4-fs error (device loop3): ext4_get_journal_inode:5888: comm syz.3.6081: inode #1: comm syz.3.6081: iget: illegal inode # [ 741.397261][T26230] loop3: lost filesystem error report for type 5 error -117 [ 741.398743][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 741.413000][ C0] EXT4-fs (loop3): initial error at time 1776108045: ext4_get_journal_inode:5888 [ 741.422529][ C0] EXT4-fs (loop3): last error at time 1776108045: ext4_get_journal_inode:5888 [ 741.435284][T26230] EXT4-fs (loop3): no journal found [ 741.440930][T26230] EXT4-fs (loop3): can't get journal size [ 741.494377][T26230] EXT4-fs (loop3): failed to initialize system zone (-22) [ 741.502973][T26230] EXT4-fs (loop3): mount failed [ 742.233371][T26234] loop7: detected capacity change from 0 to 512 [ 742.580137][T26234] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.912253][T24187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.047756][T26249] xt_CT: You must specify a L4 protocol and not use inversions on it [ 743.069556][T26253] loop2: detected capacity change from 0 to 512 [ 743.084165][T26251] loop7: detected capacity change from 0 to 1024 [ 743.086636][T26253] EXT4-fs: Ignoring removed mblk_io_submit option [ 743.135457][T26251] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 743.179562][T26253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.207239][T26251] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 743.230949][T26253] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 743.248007][T26251] EXT4-fs (loop7): orphan cleanup on readonly fs [ 743.278849][T26253] EXT4-fs error (device loop2): __ext4_remount:6829: comm syz.2.6087: Abort forced by user [ 743.298612][T26251] EXT4-fs error (device loop7): __ext4_get_inode_loc:4797: comm syz.7.6086: Invalid inode table block 0 in block_group 0 [ 743.320382][T26253] EXT4-fs (loop2): Remounting filesystem read-only [ 743.326918][T26253] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 743.336503][T26251] loop7: lost filesystem error report for type 5 error -117 [ 743.336720][T26251] EXT4-fs (loop7): Remounting filesystem read-only [ 743.344099][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 743.344114][ C1] EXT4-fs (loop7): initial error at time 1776108046: __ext4_get_inode_loc:4797 [ 743.344135][ C1] EXT4-fs (loop7): last error at time 1776108046: __ext4_get_inode_loc:4797 [ 743.355721][T26259] loop3: detected capacity change from 0 to 512 [ 743.357164][T26251] __quota_error: 40 callbacks suppressed [ 743.357177][T26251] Quota error (device loop7): write_blk: dquota write failed [ 743.397432][T26251] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 743.407749][T26251] EXT4-fs (loop7): 1 truncate cleaned up [ 743.410668][T26259] EXT4-fs: Ignoring removed mblk_io_submit option [ 743.424202][T26261] syz.4.6089 (26261): attempted to duplicate a private mapping with mremap. This is not supported. [ 743.430503][T20639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.447638][T26251] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 743.489373][T26259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.503889][T26265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6090'. [ 743.528586][T26265] vlan3: entered allmulticast mode [ 743.533758][T26265] bridge5: entered allmulticast mode [ 743.548592][T26259] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 743.583873][T26268] bridge5: port 1(bond4) entered blocking state [ 743.590453][T26268] bridge5: port 1(bond4) entered disabled state [ 743.597175][T26268] bond4: entered allmulticast mode [ 743.603219][T26268] bond4: entered promiscuous mode [ 743.650077][T24187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.662534][T26272] ext4: Unknown parameter '½_¾·ò–—ø£r黴訟ao³Ìð- [ 743.662534][T26272] ¡K¶ÿÉœiJX¢:×dí)·×cZï‡8_}ñõ¼®œ^Ot3hª¶î ç"ñoº÷½$Ð Þ^û'þOÕ¿†¯¼ÈŒa›ÜL˜nJÊ@›Ä7—ŒMІ^Ñ•Ï)w¥¿•¡¥AÀ [ 743.662534][T26272] äFa% ' [ 743.703307][T26275] xt_CT: You must specify a L4 protocol and not use inversions on it [ 743.980700][T26281] team0: Port device gtp0 added [ 744.856045][T25361] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.394450][T26283] loop7: detected capacity change from 0 to 1024 [ 746.138764][T26283] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 746.150583][T26283] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 746.162825][T26283] EXT4-fs error (device loop7): ext4_get_journal_inode:5888: comm syz.7.6094: inode #1: comm syz.7.6094: iget: illegal inode # [ 746.176808][T26283] loop7: lost filesystem error report for type 5 error -117 [ 746.188509][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 746.202211][ C1] EXT4-fs (loop7): initial error at time 1776108049: ext4_get_journal_inode:5888 [ 746.211332][ C1] EXT4-fs (loop7): last error at time 1776108049: ext4_get_journal_inode:5888 [ 746.628891][T26283] EXT4-fs (loop7): no journal found [ 746.634484][T26283] EXT4-fs (loop7): can't get journal size [ 746.642264][T26283] EXT4-fs (loop7): failed to initialize system zone (-22) [ 746.652455][T26283] EXT4-fs (loop7): mount failed [ 746.694209][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6099'. [ 746.772585][T26293] loop4: detected capacity change from 0 to 1764 [ 746.783224][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6099'. [ 747.299520][T26290] loop2: detected capacity change from 0 to 512 [ 747.331303][T26302] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6101'. [ 747.365541][T26290] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 747.499330][T26290] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.6099: bg 0: block 104: invalid block bitmap [ 747.532544][T26290] loop2: lost filesystem error report for type 5 error -117 [ 747.532706][T26290] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 747.540020][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 747.540059][ C1] EXT4-fs (loop2): initial error at time 1776108051: ext4_validate_block_bitmap:432 [ 747.540085][ C1] EXT4-fs (loop2): last error at time 1776108051: ext4_validate_block_bitmap:432 [ 747.609559][T26296] loop3: detected capacity change from 0 to 512 [ 747.652532][T26296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.705587][T26290] loop2: lost filesystem error report for type 5 error -117 [ 747.705760][T26290] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.6099: invalid indirect mapped block 1 (level 1) [ 747.747463][T17444] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 747.766188][T17444] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 747.796094][T26290] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 747.796325][T26290] EXT4-fs (loop2): 1 truncate cleaned up [ 747.836401][T26290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.980025][T20639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.012620][T25361] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.190959][T26321] bridge_slave_0: left allmulticast mode [ 748.206828][T26321] bridge_slave_0: left promiscuous mode [ 748.258358][T26321] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.280673][T26321] bridge_slave_1: left allmulticast mode [ 748.286330][T26321] bridge_slave_1: left promiscuous mode [ 748.309812][T26330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6106'. [ 748.312596][T26321] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.343979][T26321] bond0: (slave bond_slave_0): Releasing backup interface [ 748.362286][T26333] xt_CT: You must specify a L4 protocol and not use inversions on it [ 748.377915][T26321] bond0: (slave bond_slave_1): Releasing backup interface [ 748.385243][T26335] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6110'. [ 748.408962][T26321] team0: Port device team_slave_0 removed [ 748.425830][T26321] team0: Port device team_slave_1 removed [ 748.437060][T26321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.444807][T26321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.453776][T26321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.461633][T26321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.472226][T26321] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 748.488714][T26324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6107'. [ 748.497722][T26324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6107'. [ 748.507214][T26324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6107'. [ 749.389245][T26367] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6121'. [ 749.553776][T26367] bridge6: entered promiscuous mode [ 749.593992][T26367] bridge6: entered allmulticast mode [ 749.654620][T26373] loop7: detected capacity change from 0 to 512 [ 749.698038][T26373] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 749.761314][T26373] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 749.778215][T26373] EXT4-fs (loop7): Invalid default hash set in the superblock [ 749.941010][T26375] debugfs: Bad value for 'gid' [ 749.945808][T26375] debugfs: Bad value for 'gid' [ 749.959753][ T28] audit: type=1400 audit(1776108053.593:7935): avc: denied { remount } for pid=26374 comm="syz.2.6124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 750.043105][T26380] program syz.7.6126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 750.061969][ T28] audit: type=1400 audit(1776108053.613:7936): avc: denied { unmount } for pid=20639 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 750.103247][T26383] lo speed is unknown, defaulting to 1000 [ 750.133186][T26383] lo speed is unknown, defaulting to 1000 [ 750.228786][T26383] lo speed is unknown, defaulting to 1000 [ 750.235433][T26383] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 750.652333][T26393] loop4: detected capacity change from 0 to 1024 [ 750.699710][T26393] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 750.711369][T26393] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 750.724686][T26393] EXT4-fs error (device loop4): ext4_get_journal_inode:5888: comm syz.4.6129: inode #1: comm syz.4.6129: iget: illegal inode # [ 750.738570][T26393] loop4: lost filesystem error report for type 5 error -117 [ 750.748507][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 750.762211][ C1] EXT4-fs (loop4): initial error at time 1776108054: ext4_get_journal_inode:5888 [ 750.771343][ C1] EXT4-fs (loop4): last error at time 1776108054: ext4_get_journal_inode:5888 [ 750.785948][T26393] EXT4-fs (loop4): no journal found [ 750.792443][T26393] EXT4-fs (loop4): can't get journal size [ 750.804285][T26393] EXT4-fs (loop4): failed to initialize system zone (-22) [ 750.812200][T26393] EXT4-fs (loop4): mount failed [ 750.965339][T26383] lo speed is unknown, defaulting to 1000 [ 751.058038][T26403] loop7: detected capacity change from 0 to 512 [ 751.087997][T26383] lo speed is unknown, defaulting to 1000 [ 751.099195][T26403] EXT4-fs: Ignoring removed mblk_io_submit option [ 751.180527][T26403] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.198630][T26403] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 751.229120][T26383] lo speed is unknown, defaulting to 1000 [ 751.235451][T26383] lo speed is unknown, defaulting to 1000 [ 751.291101][T26403] FAULT_INJECTION: forcing a failure. [ 751.291101][T26403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.313693][T26383] lo speed is unknown, defaulting to 1000 [ 751.319611][T26408] loop3: detected capacity change from 0 to 256 [ 751.326055][T26403] CPU: 1 UID: 0 PID: 26403 Comm: syz.7.6133 Tainted: G W syzkaller #0 PREEMPT(full) [ 751.326164][T26403] Tainted: [W]=WARN [ 751.326173][T26403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 751.326186][T26403] Call Trace: [ 751.326193][T26403] [ 751.326201][T26403] __dump_stack+0x1d/0x30 [ 751.326256][T26403] dump_stack_lvl+0x95/0xd0 [ 751.326378][T26403] dump_stack+0x15/0x1b [ 751.326463][T26403] should_fail_ex+0x263/0x280 [ 751.326513][T26403] should_fail+0xb/0x20 [ 751.326542][T26403] should_fail_usercopy+0x1a/0x20 [ 751.326632][T26403] strncpy_from_user+0x27/0x250 [ 751.326656][T26403] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 751.326686][T26403] do_getname+0x59/0x1c0 [ 751.326773][T26403] __se_sys_mkdirat+0x21/0xf0 [ 751.326842][T26403] __x64_sys_mkdirat+0x43/0x50 [ 751.326900][T26403] x64_sys_call+0x2c4e/0x3020 [ 751.326929][T26403] do_syscall_64+0x12c/0x370 [ 751.326961][T26403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.327062][T26403] RIP: 0033:0x7fea21a5b687 [ 751.327114][T26403] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.327172][T26403] RSP: 002b:00007fea204b6e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 751.327192][T26403] RAX: ffffffffffffffda RBX: 00007fea204b6ee0 RCX: 00007fea21a5b687 [ 751.327207][T26403] RDX: 00000000000001ff RSI: 0000200000000f00 RDI: 00000000ffffff9c [ 751.327222][T26403] RBP: 0000200000000f40 R08: 000020000001f940 R09: 0000000000000000 [ 751.327268][T26403] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000200000000f00 [ 751.327284][T26403] R13: 00007fea204b6ea0 R14: 0000000000000000 R15: 00002000000008c0 [ 751.327302][T26403] [ 751.540836][T26403] EXT4-fs error (device loop7): __ext4_remount:6829: comm syz.7.6133: Abort forced by user [ 751.588711][T26403] EXT4-fs (loop7): Remounting filesystem read-only [ 751.599733][T26408] FAT-fs (loop3): codepage cp852 not found [ 751.615669][T26403] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 751.767623][T26410] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6135'. [ 751.796119][T26383] lo speed is unknown, defaulting to 1000 [ 752.082813][T26416] nfs: Unexpected value for 'acl' [ 752.398332][T26422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6139'. [ 752.452509][T24187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.505986][T26426] loop2: detected capacity change from 0 to 1024 [ 752.515038][ T28] audit: type=1400 audit(1776108056.163:7937): avc: denied { getopt } for pid=26425 comm="syz.4.6141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 752.534799][T26429] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6138'. [ 752.553855][T26426] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 752.553855][T26426] [ 752.566208][ T28] audit: type=1326 audit(1776108056.163:7938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26425 comm="syz.4.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990b45c819 code=0x7ffc0000 [ 752.603231][ T28] audit: type=1326 audit(1776108056.163:7939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26425 comm="syz.4.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990b45c819 code=0x7ffc0000 [ 752.632368][ T28] audit: type=1326 audit(1776108056.163:7940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26425 comm="syz.4.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f990b45c819 code=0x7ffc0000 [ 752.656418][T26433] SET target dimension over the limit! [ 752.709196][T26433] loop2: detected capacity change from 0 to 1024 [ 752.715959][ T28] audit: type=1326 audit(1776108056.163:7941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26425 comm="syz.4.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990b45c819 code=0x7ffc0000 [ 752.741524][T26433] EXT4-fs: Ignoring removed mblk_io_submit option [ 752.753910][ T28] audit: type=1326 audit(1776108056.163:7942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26425 comm="syz.4.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990b45c819 code=0x7ffc0000 [ 752.782698][ T28] audit: type=1326 audit(1776108056.163:7943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26425 comm="syz.4.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f990b45c819 code=0x7ffc0000 [ 752.818058][ T28] audit: type=1326 audit(1776108056.163:7944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26425 comm="syz.4.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990b45c819 code=0x7ffc0000 [ 752.854808][T26433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 752.868262][T26433] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.887935][T26433] 8021q: VLANs not supported on team0 [ 752.954670][T26446] xt_CT: No such helper "snmp_trap" [ 752.967389][T26450] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6146'. [ 752.976834][T26426] EXT4-fs error (device loop2): ext4_map_blocks:828: inode #15: comm syz.2.6140: lblock 0 mapped to illegal pblock 0 (length 1) [ 752.993045][T26451] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 753.093370][T26459] loop3: detected capacity change from 0 to 1024 [ 753.101595][T26459] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 753.112701][T26459] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 753.120822][T26459] EXT4-fs (loop3): orphan cleanup on readonly fs [ 753.128033][T26459] EXT4-fs error (device loop3): __ext4_get_inode_loc:4797: comm syz.3.6150: Invalid inode table block 0 in block_group 0 [ 753.128299][T20639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 753.144231][T26459] loop3: lost filesystem error report for type 5 error -117 [ 753.150986][T26459] EXT4-fs (loop3): Remounting filesystem read-only [ 753.158517][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 753.164903][T26459] EXT4-fs (loop3): 1 truncate cleaned up [ 753.171242][ C0] EXT4-fs (loop3): initial error at time 1776108056: __ext4_get_inode_loc:4797 [ 753.187183][ C0] EXT4-fs (loop3): last error at time 1776108056: __ext4_get_inode_loc:4797 [ 754.101704][T26459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 754.139573][T26432] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 754.192498][T25361] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.295712][T26477] loop3: detected capacity change from 0 to 256 [ 754.332573][T26481] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6158'. [ 754.372000][T26477] FAT-fs (loop3): codepage cp852 not found [ 754.637157][T26492] nfs: Unexpected value for 'acl' [ 754.731058][T26494] 8021q: VLANs not supported on nlmon0 [ 754.769997][T26496] loop4: detected capacity change from 0 to 512 [ 754.830383][T26496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 754.961660][T26496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 755.034759][T26496] ext4 filesystem being mounted at /408/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 755.096183][T17653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.249333][T26501] loop7: detected capacity change from 0 to 1764 [ 755.261522][T26509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6160'. [ 755.275184][T26502] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6164'. [ 755.879876][T26525] loop4: detected capacity change from 0 to 512 [ 755.922222][T26525] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 755.957816][T26525] EXT4-fs (loop4): mount failed [ 756.251324][T26541] loop3: detected capacity change from 0 to 1024 [ 756.353947][T26541] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 756.365807][T26541] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 756.377622][T26541] EXT4-fs error (device loop3): ext4_get_journal_inode:5888: comm syz.3.6173: inode #1: comm syz.3.6173: iget: illegal inode # [ 756.391580][T26541] loop3: lost filesystem error report for type 5 error -117 [ 756.398503][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 756.412213][ C1] EXT4-fs (loop3): initial error at time 1776108060: ext4_get_journal_inode:5888 [ 756.421332][ C1] EXT4-fs (loop3): last error at time 1776108060: ext4_get_journal_inode:5888 [ 756.435021][T26541] EXT4-fs (loop3): no journal found [ 756.440953][T26541] EXT4-fs (loop3): can't get journal size [ 756.456495][T26541] EXT4-fs (loop3): failed to initialize system zone (-22) [ 756.465210][T26541] EXT4-fs (loop3): mount failed [ 757.468470][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 757.490973][ T28] audit: type=1326 audit(1776108061.023:7957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="syz.8.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 757.524458][T26556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6180'. [ 757.584297][ T28] audit: type=1326 audit(1776108061.023:7958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="syz.8.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 757.672456][ T28] audit: type=1326 audit(1776108061.023:7959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="syz.8.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 757.748140][ T28] audit: type=1326 audit(1776108061.023:7960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="syz.8.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 757.801335][T26560] loop3: detected capacity change from 0 to 128 [ 757.846842][ T28] audit: type=1326 audit(1776108061.023:7961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="syz.8.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 757.883898][ T28] audit: type=1326 audit(1776108061.023:7962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="syz.8.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 757.925002][ T28] audit: type=1326 audit(1776108061.023:7963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="syz.8.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d3eaad04e code=0x7ffc0000 [ 757.985695][ T28] audit: type=1326 audit(1776108061.023:7964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="syz.8.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 758.010540][T26571] loop3: detected capacity change from 0 to 512 [ 758.045552][T26571] EXT4-fs: Ignoring removed mblk_io_submit option [ 758.056196][ T28] audit: type=1326 audit(1776108061.023:7965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="syz.8.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 758.083243][ T28] audit: type=1326 audit(1776108061.023:7966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="syz.8.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 758.108802][T26571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.149060][T26571] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 758.197716][T25361] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.451326][T26589] loop2: detected capacity change from 0 to 512 [ 758.480022][T26589] EXT4-fs: Ignoring removed bh option [ 758.485522][T26589] EXT4-fs: inline encryption not supported [ 758.507520][T26589] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 758.695753][T26592] loop3: detected capacity change from 0 to 1024 [ 758.736707][T26592] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 758.748323][T26592] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 758.759630][T26592] EXT4-fs error (device loop3): ext4_get_journal_inode:5888: comm syz.3.6192: inode #1: comm syz.3.6192: iget: illegal inode # [ 758.773290][T26592] loop3: lost filesystem error report for type 5 error -117 [ 758.777968][T26592] EXT4-fs (loop3): no journal found [ 758.785811][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 758.785833][ C1] EXT4-fs (loop3): initial error at time 1776108062: ext4_get_journal_inode:5888 [ 758.785867][ C1] EXT4-fs (loop3): last error at time 1776108062: ext4_get_journal_inode:5888 [ 758.817969][T26592] EXT4-fs (loop3): can't get journal size [ 758.834017][T26592] EXT4-fs (loop3): failed to initialize system zone (-22) [ 758.843090][T26592] EXT4-fs (loop3): mount failed [ 758.874398][T26589] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 758.981435][T26589] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6193: bg 0: block 248: padding at end of block bitmap is not set [ 759.110493][T26589] loop2: lost filesystem error report for type 5 error -117 [ 759.113497][T26589] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.6193: Failed to acquire dquot type 1 [ 759.120896][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 759.120914][ C1] EXT4-fs (loop2): last error at time 1776108062: ext4_validate_block_bitmap:441 [ 759.347687][T26589] loop2: lost filesystem error report for type 5 error -28 [ 759.351557][T26589] EXT4-fs (loop2): 1 truncate cleaned up [ 759.427978][T26589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 759.679320][T26589] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.6193'. [ 759.784766][T26589] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 760.372525][T20639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 760.393049][T26603] loop3: detected capacity change from 0 to 128 [ 760.408545][T21189] EXT4-fs error (device loop2): ext4_release_dquot:7062: comm kworker/u8:22: Failed to release dquot type 1 [ 760.419025][T26603] msdos: Bad value for 'gid' [ 760.430327][T26603] msdos: Bad value for 'gid' [ 760.438625][T21189] loop2: lost filesystem error report for type 5 error -117 [ 761.525576][T26603] loop3: detected capacity change from 0 to 1764 [ 761.719080][T26619] loop2: detected capacity change from 0 to 512 [ 761.759467][T26619] EXT4-fs: inline encryption not supported [ 761.807098][T26619] EXT4-fs: Ignoring removed i_version option [ 761.858826][T26619] EXT4-fs (loop2): 1 orphan inode deleted [ 761.885237][T26619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 761.982341][T26624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6203'. [ 761.999174][T20639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.335235][T26638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6206'. [ 762.688111][T26641] loop4: detected capacity change from 0 to 1024 [ 762.733247][T26642] loop3: detected capacity change from 0 to 256 [ 762.758925][T26641] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 762.770641][T26641] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 762.782184][T26641] EXT4-fs error (device loop4): ext4_get_journal_inode:5888: comm syz.4.6207: inode #1: comm syz.4.6207: iget: illegal inode # [ 762.795903][T26641] loop4: lost filesystem error report for type 5 error -117 [ 762.798519][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 762.812263][ C0] EXT4-fs (loop4): initial error at time 1776108066: ext4_get_journal_inode:5888 [ 762.821414][ C0] EXT4-fs (loop4): last error at time 1776108066: ext4_get_journal_inode:5888 [ 762.833345][T26641] EXT4-fs (loop4): no journal found [ 762.839541][T26641] EXT4-fs (loop4): can't get journal size [ 762.955419][T26648] batadv0: entered promiscuous mode [ 763.007186][T26641] EXT4-fs (loop4): failed to initialize system zone (-22) [ 763.015226][T26641] EXT4-fs (loop4): mount failed [ 763.099683][T26648] vlan2: entered promiscuous mode [ 763.227326][T26655] netlink: 'syz.2.6213': attribute type 83 has an invalid length. [ 763.265173][T26655] netlink: 'syz.2.6213': attribute type 1 has an invalid length. [ 763.288896][T26642] FAT-fs (loop3): codepage cp852 not found [ 763.428851][T26655] bond5: entered promiscuous mode [ 763.433954][T26655] bond5: entered allmulticast mode [ 763.449620][T26655] 8021q: adding VLAN 0 to HW filter on device bond5 [ 763.970102][T26659] erspan1: entered allmulticast mode [ 763.982219][T26659] bond5: (slave erspan1): making interface the new active one [ 764.141565][T26662] nfs: Unexpected value for 'acl' [ 764.160373][T26659] erspan1: entered promiscuous mode [ 764.167700][T26659] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 764.391192][T26666] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6216'. [ 764.413324][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 764.413341][ T28] audit: type=1400 audit(1776108068.063:7982): avc: denied { create } for pid=26656 comm="syz.8.6214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 764.442484][T26655] loop2: detected capacity change from 0 to 4096 [ 764.469333][T26655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.502067][T26672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6217'. [ 764.521545][T26672] vlan4: entered allmulticast mode [ 764.526659][T26672] bridge7: entered allmulticast mode [ 764.570504][ T28] audit: type=1326 audit(1776108068.183:7983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26654 comm="syz.2.6213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aee91c819 code=0x7ffc0000 [ 764.625093][ T28] audit: type=1326 audit(1776108068.183:7984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26654 comm="syz.2.6213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aee91c819 code=0x7ffc0000 [ 764.652193][ T28] audit: type=1326 audit(1776108068.183:7985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26654 comm="syz.2.6213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aee91c819 code=0x7ffc0000 [ 764.675986][ T28] audit: type=1326 audit(1776108068.183:7986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26654 comm="syz.2.6213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f2aee91c819 code=0x7ffc0000 [ 764.699778][ T28] audit: type=1326 audit(1776108068.183:7987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26654 comm="syz.2.6213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aee91c819 code=0x7ffc0000 [ 764.723679][T26665] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 764.731869][ T28] audit: type=1326 audit(1776108068.183:7988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26654 comm="syz.2.6213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aee91c819 code=0x7ffc0000 [ 764.739859][T26677] bridge7: port 1(bond4) entered blocking state [ 764.755669][ T28] audit: type=1326 audit(1776108068.183:7989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26654 comm="syz.2.6213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aee91c819 code=0x7ffc0000 [ 764.786774][ T28] audit: type=1326 audit(1776108068.183:7990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26654 comm="syz.2.6213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2aee91c819 code=0x7ffc0000 [ 764.824108][T26677] bridge7: port 1(bond4) entered disabled state [ 764.827364][ T28] audit: type=1326 audit(1776108068.183:7991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26654 comm="syz.2.6213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2aee91c582 code=0x7ffc0000 [ 764.842753][T26677] bond4: entered allmulticast mode [ 764.859491][T20639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.861501][T26695] xt_CT: No such helper "snmp_trap" [ 764.874635][T26677] bond4: entered promiscuous mode [ 764.884896][T26697] xt_CT: You must specify a L4 protocol and not use inversions on it [ 764.929904][T26703] loop3: detected capacity change from 0 to 128 [ 764.982980][T26707] loop4: detected capacity change from 0 to 512 [ 764.989814][T26707] EXT4-fs: Ignoring removed mblk_io_submit option [ 765.055991][T26707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.071166][T26707] ext4 filesystem being mounted at /415/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 765.445514][T26725] loop7: detected capacity change from 0 to 512 [ 765.452761][T17653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.471988][T26725] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 765.519010][T26725] EXT4-fs (loop7): 1 truncate cleaned up [ 765.532473][T26725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 765.679995][T26731] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 765.752151][T24187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.763253][T26740] vlan5: entered promiscuous mode [ 766.117707][T26755] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6243'. [ 766.255136][T26763] xt_CT: You must specify a L4 protocol and not use inversions on it [ 766.321336][T26767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6248'. [ 766.428320][T26773] loop4: detected capacity change from 0 to 512 [ 766.448245][T26773] EXT4-fs: Ignoring removed nobh option [ 766.469424][T26773] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 766.490230][T26773] EXT4-fs (loop4): 1 truncate cleaned up [ 766.496850][T26773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 766.627451][T17653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.721570][T26780] loop4: detected capacity change from 0 to 128 [ 766.729061][T26780] msdos: Bad value for 'gid' [ 766.750011][T26780] msdos: Bad value for 'gid' [ 766.885112][T26780] loop4: detected capacity change from 0 to 1764 [ 767.570684][T26791] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 767.692205][T26802] xt_CT: No such helper "snmp_trap" [ 767.738330][T26812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=126 sclass=netlink_route_socket pid=26812 comm=syz.8.6261 [ 767.756289][T26814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6262'. [ 767.770866][T26818] loop7: detected capacity change from 0 to 512 [ 767.780996][T26814] vlan5: entered allmulticast mode [ 767.786117][T26814] bridge8: entered allmulticast mode [ 767.793575][T26814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6262'. [ 767.810522][T26814] bridge8: port 1(bond5) entered blocking state [ 767.816922][T26814] bridge8: port 1(bond5) entered disabled state [ 767.848965][T26814] bond5: entered allmulticast mode [ 767.854716][T26814] bond5: entered promiscuous mode [ 768.014829][T26818] netlink: 3776 bytes leftover after parsing attributes in process `syz.7.6264'. [ 768.033192][T26828] xt_CT: You must specify a L4 protocol and not use inversions on it [ 768.038549][T26818] netlink: zone id is out of range [ 768.046848][T26818] netlink: zone id is out of range [ 768.097251][T26829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6265'. [ 768.194309][T26818] netlink: zone id is out of range [ 768.236679][T26818] netlink: zone id is out of range [ 768.259559][T26818] netlink: zone id is out of range [ 768.280900][T26818] netlink: zone id is out of range [ 768.322389][T26818] netlink: zone id is out of range [ 768.360468][T26818] netlink: zone id is out of range [ 768.398332][T26818] netlink: zone id is out of range [ 768.429308][T26818] netlink: zone id is out of range [ 768.505699][T26833] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6268'. [ 768.522371][T26833] loop7: detected capacity change from 0 to 512 [ 768.532309][T26833] ext3: Unknown parameter 'fsname' [ 768.916427][T26848] loop2: detected capacity change from 0 to 1024 [ 768.931210][T26848] EXT4-fs: test_dummy_encryption option not supported [ 769.358067][T26861] loop7: detected capacity change from 0 to 1024 [ 769.487786][T26861] loop7: detected capacity change from 0 to 1024 [ 769.675208][T26861] loop7: detected capacity change from 0 to 1024 [ 769.702855][T26862] netlink: 88 bytes leftover after parsing attributes in process `syz.8.6274'. [ 770.118335][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 770.118400][ T28] audit: type=1326 audit(1776108073.763:8001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26866 comm="syz.3.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ade7c819 code=0x7ffc0000 [ 770.150349][ T28] audit: type=1326 audit(1776108073.763:8002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26866 comm="syz.3.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ade7c819 code=0x7ffc0000 [ 770.468143][T26861] set_capacity_and_notify: 28 callbacks suppressed [ 770.468160][T26861] loop7: detected capacity change from 0 to 1024 [ 770.510396][T26861] loop7: detected capacity change from 0 to 1024 [ 770.544950][T26861] loop7: detected capacity change from 0 to 1024 [ 770.592726][T26861] loop7: detected capacity change from 0 to 1024 [ 770.657253][T26861] loop7: detected capacity change from 0 to 1024 [ 770.691070][T26861] loop7: detected capacity change from 0 to 1024 [ 770.699847][ T28] audit: type=1326 audit(1776108073.763:8003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26866 comm="syz.3.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ade7c819 code=0x7ffc0000 [ 770.725344][ T28] audit: type=1326 audit(1776108073.763:8004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26866 comm="syz.3.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ade7c819 code=0x7ffc0000 [ 770.749466][ T28] audit: type=1326 audit(1776108073.763:8005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26866 comm="syz.3.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe2ade7c819 code=0x7ffc0000 [ 770.779403][T26861] loop7: detected capacity change from 0 to 1024 [ 770.795822][ T28] audit: type=1326 audit(1776108073.763:8006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26866 comm="syz.3.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ade7c819 code=0x7ffc0000 [ 770.822867][ T28] audit: type=1326 audit(1776108073.763:8007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26866 comm="syz.3.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ade7c819 code=0x7ffc0000 [ 770.851154][ T28] audit: type=1326 audit(1776108073.763:8008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26866 comm="syz.3.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ade7c819 code=0x7ffc0000 [ 770.882235][ T28] audit: type=1326 audit(1776108073.763:8009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26866 comm="syz.3.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ade7c819 code=0x7ffc0000 [ 770.907968][ T28] audit: type=1326 audit(1776108073.763:8010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26866 comm="syz.3.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ade7c819 code=0x7ffc0000 [ 770.943440][T26861] loop7: detected capacity change from 0 to 1024 [ 770.963930][T26861] loop7: detected capacity change from 0 to 1024 [ 770.983884][T26861] loop7: detected capacity change from 0 to 1024 [ 771.105870][T26879] xt_CT: You must specify a L4 protocol and not use inversions on it [ 772.240384][T26884] lo speed is unknown, defaulting to 1000 [ 773.276709][T26899] EXT4-fs: Ignoring removed mblk_io_submit option [ 773.819037][T26895] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 773.830786][T26895] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 773.841663][T26895] EXT4-fs error (device loop2): ext4_get_journal_inode:5888: comm syz.2.6288: inode #1: comm syz.2.6288: iget: illegal inode # [ 773.863118][T26895] loop2: lost filesystem error report for type 5 error -117 [ 773.864232][T26895] EXT4-fs (loop2): no journal found [ 773.871638][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 773.871856][ C1] EXT4-fs (loop2): initial error at time 1776108077: ext4_get_journal_inode:5888 [ 773.872416][ C1] EXT4-fs (loop2): last error at time 1776108077: ext4_get_journal_inode:5888 [ 773.878825][T26901] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6290'. [ 773.882961][T26895] EXT4-fs (loop2): can't get journal size [ 773.924487][T26895] EXT4-fs (loop2): failed to initialize system zone (-22) [ 773.932424][T26895] EXT4-fs (loop2): mount failed [ 773.997539][T26899] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.019274][T26899] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 774.048893][T26899] FAULT_INJECTION: forcing a failure. [ 774.048893][T26899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.109369][T26918] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6296'. [ 774.110860][T26899] CPU: 1 UID: 0 PID: 26899 Comm: syz.7.6289 Tainted: G W syzkaller #0 PREEMPT(full) [ 774.110893][T26899] Tainted: [W]=WARN [ 774.110901][T26899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 774.110915][T26899] Call Trace: [ 774.110967][T26899] [ 774.110975][T26899] __dump_stack+0x1d/0x30 [ 774.111003][T26899] dump_stack_lvl+0x95/0xd0 [ 774.111027][T26899] dump_stack+0x15/0x1b [ 774.111050][T26899] should_fail_ex+0x263/0x280 [ 774.111113][T26899] should_fail+0xb/0x20 [ 774.111180][T26899] should_fail_usercopy+0x1a/0x20 [ 774.111273][T26899] strncpy_from_user+0x27/0x250 [ 774.111296][T26899] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 774.111383][T26899] do_getname+0x59/0x1c0 [ 774.111408][T26899] user_path_at+0x28/0x100 [ 774.111438][T26899] __se_sys_mount+0x25b/0x2e0 [ 774.111506][T26899] ? __se_sys_mkdirat+0xa2/0xf0 [ 774.111591][T26899] ? kmem_cache_free+0xc8/0x380 [ 774.111618][T26899] __x64_sys_mount+0x67/0x80 [ 774.111642][T26899] x64_sys_call+0x2d61/0x3020 [ 774.111669][T26899] do_syscall_64+0x12c/0x370 [ 774.111720][T26899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.111744][T26899] RIP: 0033:0x7fea21a5da8a [ 774.111789][T26899] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.111808][T26899] RSP: 002b:00007fea204b6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 774.111828][T26899] RAX: ffffffffffffffda RBX: 00007fea204b6ee0 RCX: 00007fea21a5da8a [ 774.111952][T26899] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 774.111967][T26899] RBP: 0000200000000f40 R08: 00007fea204b6ee0 R09: 0000000001a4a438 [ 774.112028][T26899] R10: 0000000001a4a438 R11: 0000000000000246 R12: 0000200000000f00 [ 774.112042][T26899] R13: 00007fea204b6ea0 R14: 0000000000000000 R15: 00002000000008c0 [ 774.112061][T26899] [ 774.238358][T26926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6299'. [ 774.309094][T24187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.357769][T26928] EXT4-fs: Ignoring removed mblk_io_submit option [ 774.421298][T26928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.435452][T26928] ext4 filesystem being mounted at /433/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 775.437569][T26928] EXT4-fs error (device loop4): __ext4_remount:6829: comm syz.4.6300: Abort forced by user [ 775.448334][T26928] EXT4-fs (loop4): Remounting filesystem read-only [ 775.455102][T26928] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 775.478908][T17653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.643996][T26949] xt_CT: No such helper "snmp_trap" [ 775.693186][T26958] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6307'. [ 775.721487][T26960] set_capacity_and_notify: 16 callbacks suppressed [ 775.721504][T26960] loop4: detected capacity change from 0 to 1024 [ 775.811078][T26964] netlink: 'syz.3.6311': attribute type 4 has an invalid length. [ 775.829960][T26960] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 775.868676][T26958] unsupported nlmsg_type 40 [ 775.898774][T26960] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 775.932663][T26960] EXT4-fs (loop4): orphan cleanup on readonly fs [ 775.973375][T26960] EXT4-fs error (device loop4): __ext4_get_inode_loc:4797: comm syz.4.6309: Invalid inode table block 0 in block_group 0 [ 775.986696][T26960] loop4: lost filesystem error report for type 5 error -117 [ 775.986791][T26960] EXT4-fs (loop4): Remounting filesystem read-only [ 775.994111][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 775.994129][ C1] EXT4-fs (loop4): initial error at time 1776108079: __ext4_get_inode_loc:4797 [ 775.994161][ C1] EXT4-fs (loop4): last error at time 1776108079: __ext4_get_inode_loc:4797 [ 776.031948][T26978] loop3: detected capacity change from 0 to 1764 [ 776.055067][T26978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6312'. [ 776.064111][T26978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6312'. [ 776.074440][T26978] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 776.089505][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 776.089517][ T28] audit: type=1400 audit(1776108079.723:8079): avc: denied { getopt } for pid=26974 comm="syz.3.6312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 776.141471][T26960] Quota error (device loop4): write_blk: dquota write failed [ 776.172617][T26960] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 776.193288][T26960] EXT4-fs (loop4): 1 truncate cleaned up [ 776.896281][T26960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 777.009183][T26998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6320'. [ 777.088416][T26998] vlan4: entered allmulticast mode [ 777.103919][T26998] bridge6: entered allmulticast mode [ 777.132812][T27004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6320'. [ 777.184222][T27006] loop7: detected capacity change from 0 to 512 [ 777.211702][T27004] bridge6: port 1(bond6) entered blocking state [ 777.228456][T27006] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 777.244054][T27009] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6324'. [ 777.249494][T27004] bridge6: port 1(bond6) entered disabled state [ 777.260260][T27004] bond6: entered allmulticast mode [ 777.266272][T27004] bond6: entered promiscuous mode [ 777.297536][T27006] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 777.312304][T27006] Quota error (device loop7): write_blk: dquota write failed [ 777.319705][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 777.319728][ C0] EXT4-fs (loop7): initial error at time 1776108080: ext4_mb_generate_buddy:1317 [ 777.319768][ C0] EXT4-fs (loop7): last error at time 1776108080: ext4_mb_generate_buddy:1317 [ 777.348692][T27006] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 777.373282][T27006] Quota error (device loop7): write_blk: dquota write failed [ 777.383249][T27006] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 777.399795][T27006] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.6323: Failed to acquire dquot type 1 [ 777.411265][T27006] loop7: lost filesystem error report for type 5 error -28 [ 777.411495][T27006] EXT4-fs (loop7): 1 truncate cleaned up [ 777.424916][T27006] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 777.431252][T27017] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6327'. [ 777.470119][T27006] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6323'. [ 777.490376][T27025] xt_CT: You must specify a L4 protocol and not use inversions on it [ 777.511467][T27026] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6323'. [ 777.557957][T27006] EXT4-fs: Cannot change journaled quota options when quota turned on [ 777.575616][T17653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.592233][T27033] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6333'. [ 777.657242][T27036] loop2: detected capacity change from 0 to 512 [ 777.696997][T24187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.743994][T27036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 777.756651][T27036] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 777.875491][T27042] tipc: Enabling of bearer rejected, failed to enable media [ 777.946401][T27045] loop4: detected capacity change from 0 to 512 [ 777.980188][T27045] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 778.036529][T27045] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #2: block 9: comm syz.4.6337: lblock 0 mapped to illegal pblock 9 (length 1) [ 778.050693][T27045] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 778.054733][T27050] x_tables: duplicate underflow at hook 2 [ 778.060394][T27045] EXT4-fs (loop4): mount failed [ 778.069549][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 778.069572][ C1] EXT4-fs (loop4): initial error at time 1776108081: ext4_map_blocks:786: inode 2: block 9 [ 778.069611][ C1] EXT4-fs (loop4): last error at time 1776108081: ext4_map_blocks:786: inode 2: block 9 [ 778.089048][T27047] netlink: 'syz.8.6338': attribute type 1 has an invalid length. [ 778.133414][T27047] bond3 (unregistering): Released all slaves [ 778.218913][T27066] netlink: 'syz.7.6344': attribute type 4 has an invalid length. [ 778.226752][ T28] audit: type=1326 audit(1776108081.873:8080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27067 comm="syz.8.6345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 778.302805][ T28] audit: type=1326 audit(1776108081.873:8081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27067 comm="syz.8.6345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 778.338345][T20639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.347109][ T28] audit: type=1326 audit(1776108081.873:8082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27067 comm="syz.8.6345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 778.373014][T27076] loop7: detected capacity change from 0 to 256 [ 778.381696][T27076] /dev/loop7: Can't open blockdev [ 778.462933][T17963] IPVS: starting estimator thread 0... [ 778.473526][T27089] loop4: detected capacity change from 0 to 512 [ 778.500177][T27089] EXT4-fs: Ignoring removed nomblk_io_submit option [ 778.508064][T27089] EXT4-fs: Ignoring removed mblk_io_submit option [ 778.585181][T27090] IPVS: using max 2400 ests per chain, 120000 per kthread [ 778.592906][T27089] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 778.602523][T27089] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 778.611688][T27089] EXT4-fs (loop4): 1 truncate cleaned up [ 778.619105][T27089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.665108][T27089] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #2: block 4: comm syz.4.6355: lblock 0 mapped to illegal pblock 4 (length 1) [ 779.199597][T27089] EXT4-fs (loop4): Remounting filesystem read-only [ 779.285510][T17653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.350501][T27108] vlan6: entered allmulticast mode [ 779.355693][T27108] bridge9: entered allmulticast mode [ 779.441478][T27108] bridge9: port 1(bond6) entered blocking state [ 779.447889][T27108] bridge9: port 1(bond6) entered disabled state [ 779.454661][T27108] bond6: entered allmulticast mode [ 779.460640][T27108] bond6: entered promiscuous mode [ 779.526966][T27122] loop3: detected capacity change from 0 to 1024 [ 779.538404][T27122] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 779.570882][T27122] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 779.753505][T27122] EXT4-fs (loop3): orphan cleanup on readonly fs [ 779.789913][T27122] EXT4-fs error (device loop3): __ext4_get_inode_loc:4797: comm syz.3.6364: Invalid inode table block 0 in block_group 0 [ 779.803005][T27122] loop3: lost filesystem error report for type 5 error -117 [ 779.806317][T27122] EXT4-fs (loop3): Remounting filesystem read-only [ 779.813724][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 779.813741][ C0] EXT4-fs (loop3): initial error at time 1776108083: __ext4_get_inode_loc:4797 [ 779.813770][ C0] EXT4-fs (loop3): last error at time 1776108083: __ext4_get_inode_loc:4797 [ 779.846827][T27122] EXT4-fs (loop3): 1 truncate cleaned up [ 779.859549][T27130] netlink: 'syz.8.6362': attribute type 1 has an invalid length. [ 779.917714][T27122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 779.947061][T27136] loop2: detected capacity change from 0 to 512 [ 779.979251][T27136] EXT4-fs: Ignoring removed mblk_io_submit option [ 780.025844][T27136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.056778][T27136] ext4 filesystem being mounted at /315/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 780.068001][T27136] FAULT_INJECTION: forcing a failure. [ 780.068001][T27136] name failslab, interval 1, probability 0, space 0, times 0 [ 780.083229][T27136] CPU: 1 UID: 0 PID: 27136 Comm: syz.2.6368 Tainted: G W syzkaller #0 PREEMPT(full) [ 780.083315][T27136] Tainted: [W]=WARN [ 780.083321][T27136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 780.083334][T27136] Call Trace: [ 780.083340][T27136] [ 780.083401][T27136] __dump_stack+0x1d/0x30 [ 780.083426][T27136] dump_stack_lvl+0x95/0xd0 [ 780.083451][T27136] dump_stack+0x15/0x1b [ 780.083491][T27136] should_fail_ex+0x263/0x280 [ 780.083517][T27136] ? ext4_init_fs_context+0x32/0x90 [ 780.083538][T27136] should_failslab+0x8c/0xb0 [ 780.083579][T27136] __kmalloc_cache_noprof+0x5f/0x410 [ 780.083607][T27136] ? alloc_fs_context+0x46/0x580 [ 780.083630][T27136] ext4_init_fs_context+0x32/0x90 [ 780.083651][T27136] alloc_fs_context+0x4a6/0x580 [ 780.083679][T27136] fs_context_for_reconfigure+0x42/0x50 [ 780.083729][T27136] path_mount+0xa61/0xbc0 [ 780.083769][T27136] __se_sys_mount+0x28c/0x2e0 [ 780.083807][T27136] ? __se_sys_mkdirat+0xa2/0xf0 [ 780.083828][T27136] ? kmem_cache_free+0xc8/0x380 [ 780.083855][T27136] __x64_sys_mount+0x67/0x80 [ 780.083882][T27136] x64_sys_call+0x2d61/0x3020 [ 780.083953][T27136] do_syscall_64+0x12c/0x370 [ 780.083983][T27136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.084008][T27136] RIP: 0033:0x7f2aee91da8a [ 780.084025][T27136] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.084068][T27136] RSP: 002b:00007f2aed36ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 780.084088][T27136] RAX: ffffffffffffffda RBX: 00007f2aed36eee0 RCX: 00007f2aee91da8a [ 780.084105][T27136] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 780.084191][T27136] RBP: 0000200000000f40 R08: 00007f2aed36eee0 R09: 0000000001a4a438 [ 780.084206][T27136] R10: 0000000001a4a438 R11: 0000000000000246 R12: 0000200000000f00 [ 780.084219][T27136] R13: 00007f2aed36eea0 R14: 0000000000000000 R15: 00002000000008c0 [ 780.084235][T27136] [ 780.362899][T25361] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.373208][T20639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.527709][T27165] loop4: detected capacity change from 0 to 512 [ 780.599044][T27160] net_ratelimit: 614 callbacks suppressed [ 780.599138][T27160] openvswitch: netlink: Missing key (keys=400040, expected=2000) [ 780.635465][T27165] EXT4-fs: Ignoring removed mblk_io_submit option [ 780.675755][T27167] ip6gre1: entered promiscuous mode [ 780.757508][T27165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.777859][T27167] ip6gre1: entered allmulticast mode [ 780.813759][T27165] ext4 filesystem being mounted at /450/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 780.884358][T27176] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 780.982828][T27165] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #19: comm syz.4.6377: corrupted inode contents [ 781.070831][T27165] loop4: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 781.072236][T27165] EXT4-fs error (device loop4): ext4_dirty_inode:6495: inode #19: comm syz.4.6377: mark_inode_dirty error [ 781.128806][T27179] __nla_validate_parse: 6 callbacks suppressed [ 781.128820][T27179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6380'. [ 781.156434][T27180] netlink: 'syz.8.6379': attribute type 15 has an invalid length. [ 781.164507][T27180] netlink: 'syz.8.6379': attribute type 7 has an invalid length. [ 781.180088][T27165] loop4: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 781.180529][T27165] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #19: comm syz.4.6377: corrupted inode contents [ 781.311407][T27165] loop4: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 781.313081][T27165] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #19: comm syz.4.6377: mark_inode_dirty error [ 781.453779][T27165] loop4: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 781.453934][T27165] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #19: comm syz.4.6377: mark inode dirty (error -117) [ 781.527579][T27198] loop3: detected capacity change from 0 to 1024 [ 781.545528][T27165] loop4: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 781.545798][T27165] EXT4-fs warning (device loop4): ext4_evict_inode:285: xattr delete (err -117) [ 781.579118][T27200] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6388'. [ 781.593464][T27198] EXT4-fs: inline encryption not supported [ 781.602995][T27201] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6386'. [ 781.623862][T27200] vlan2: entered allmulticast mode [ 781.640917][T27200] bridge2: entered allmulticast mode [ 781.651564][T27198] EXT4-fs error (device loop3): __ext4_iget:5393: inode #2: block 127754: comm syz.3.6387: invalid block [ 781.689270][T27204] bridge2: port 1(bond3) entered blocking state [ 781.694802][T27198] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 781.695630][T27204] bridge2: port 1(bond3) entered disabled state [ 781.695875][T27204] bond3: entered allmulticast mode [ 781.748350][T17653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.758417][T27204] bond3: entered promiscuous mode [ 781.794512][T27198] EXT4-fs (loop3): get root inode failed [ 781.800260][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 781.800275][ C1] EXT4-fs (loop3): initial error at time 1776108085: __ext4_iget:5393: inode 2: block 127754 [ 781.800314][ C1] EXT4-fs (loop3): last error at time 1776108085: __ext4_iget:5393: inode 2: block 127754 [ 781.911268][T27198] EXT4-fs (loop3): mount failed [ 781.968138][ T28] kauditd_printk_skb: 203 callbacks suppressed [ 781.968152][ T28] audit: type=1326 audit(1776108085.613:8284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27218 comm="syz.8.6395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 782.033163][ T28] audit: type=1326 audit(1776108085.613:8285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27218 comm="syz.8.6395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 782.056703][ T28] audit: type=1326 audit(1776108085.613:8286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27218 comm="syz.8.6395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 782.057862][T27219] syz.8.6395: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 782.105983][T27227] loop4: detected capacity change from 0 to 256 [ 782.111639][T27219] CPU: 1 UID: 0 PID: 27219 Comm: syz.8.6395 Tainted: G W syzkaller #0 PREEMPT(full) [ 782.111786][T27219] Tainted: [W]=WARN [ 782.111794][T27219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 782.111808][T27219] Call Trace: [ 782.111815][T27219] [ 782.111823][T27219] __dump_stack+0x1d/0x30 [ 782.111894][T27219] dump_stack_lvl+0x95/0xd0 [ 782.111921][T27219] dump_stack+0x15/0x1b [ 782.111945][T27219] warn_alloc+0x145/0x1c0 [ 782.112055][T27219] ? vsnprintf+0x7ee/0x860 [ 782.112095][T27219] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 782.112129][T27219] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 782.112234][T27219] ? __rcu_read_unlock+0x4e/0x70 [ 782.112270][T27219] ? avc_has_perm_noaudit+0xab/0x130 [ 782.112357][T27219] vmalloc_user_noprof+0x7d/0xb0 [ 782.112389][T27219] ? xskq_create+0x80/0xe0 [ 782.112425][T27219] xskq_create+0x80/0xe0 [ 782.112456][T27219] xsk_init_queue+0x70/0xb0 [ 782.112493][T27219] xsk_setsockopt+0x477/0x640 [ 782.112522][T27219] ? __pfx_xsk_setsockopt+0x10/0x10 [ 782.112551][T27219] __sys_setsockopt+0x184/0x200 [ 782.112718][T27219] __x64_sys_setsockopt+0x64/0x80 [ 782.112754][T27219] x64_sys_call+0x2327/0x3020 [ 782.112786][T27219] do_syscall_64+0x12c/0x370 [ 782.112905][T27219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.112930][T27219] RIP: 0033:0x7f4d3eaec819 [ 782.112947][T27219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.112967][T27219] RSP: 002b:00007f4d3d547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 782.112989][T27219] RAX: ffffffffffffffda RBX: 00007f4d3ed65fa0 RCX: 00007f4d3eaec819 [ 782.113027][T27219] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 782.113041][T27219] RBP: 00007f4d3eb82c91 R08: 0000000000000004 R09: 0000000000000000 [ 782.113056][T27219] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 782.113072][T27219] R13: 00007f4d3ed66038 R14: 00007f4d3ed65fa0 R15: 00007ffc0cf2f438 [ 782.113135][T27219] [ 782.113169][T27219] Mem-Info: [ 782.128586][ T28] audit: type=1326 audit(1776108085.613:8287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27218 comm="syz.8.6395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 782.161758][T27229] loop7: detected capacity change from 0 to 512 [ 782.172714][ T28] audit: type=1326 audit(1776108085.613:8288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27218 comm="syz.8.6395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3eaec819 code=0x7ffc0000 [ 782.183822][T27229] EXT4-fs: Ignoring removed mblk_io_submit option [ 782.195265][ T28] audit: type=1326 audit(1776108085.613:8289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27218 comm="syz.8.6395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4d3eaad04e code=0x7ffc0000 [ 782.197492][T27219] active_anon:12622 inactive_anon:8 isolated_anon:0 [ 782.197492][T27219] active_file:15968 inactive_file:13387 isolated_file:0 [ 782.197492][T27219] unevictable:0 dirty:173 writeback:0 [ 782.197492][T27219] slab_reclaimable:3016 slab_unreclaimable:40458 [ 782.197492][T27219] mapped:30214 shmem:1632 pagetables:4517 [ 782.197492][T27219] sec_pagetables:0 bounce:0 [ 782.197492][T27219] kernel_misc_reclaimable:0 [ 782.197492][T27219] free:1849199 free_pcp:5457 free_cma:0 [ 782.245145][T27227] FAT-fs (loop4): codepage cp852 not found [ 782.246489][T27219] Node 0 active_anon:50488kB inactive_anon:32kB active_file:63872kB inactive_file:53548kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120856kB dirty:692kB writeback:0kB shmem:6528kB kernel_stack:5280kB pagetables:18184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 782.270553][T27229] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.388725][ T28] audit: type=1326 audit(1776108085.613:8290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27218 comm="syz.8.6395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4d3eaad04e code=0x7ffc0000 [ 782.408088][T27219] Node 0 [ 782.458750][ T28] audit: type=1326 audit(1776108085.613:8291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27218 comm="syz.8.6395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4d3eaec582 code=0x7ffc0000 [ 782.501189][T27219] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 782.522445][T27229] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 782.525512][T27219] lowmem_reserve[]: [ 782.548783][ T28] audit: type=1326 audit(1776108085.613:8292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27218 comm="syz.8.6395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4d3eaec647 code=0x7ffc0000 [ 782.624250][T27219] 0 2879 7857 7857 [ 782.631604][T27219] Node 0 DMA32 free:2944488kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948116kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 782.688669][ T28] audit: type=1326 audit(1776108085.613:8293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27218 comm="syz.8.6395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4d3eaec647 code=0x7ffc0000 [ 782.712685][T27219] lowmem_reserve[]: 0 0 4978 4978 [ 782.717796][T27219] Node 0 Normal free:4428888kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:61984kB inactive_anon:32kB active_file:63888kB inactive_file:53520kB unevictable:0kB writepending:684kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:14260kB local_pcp:11820kB free_cma:0kB [ 782.755551][T27240] ================================================================== [ 782.763667][T27240] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 782.771372][T27219] lowmem_reserve[]: [ 782.772306][T27240] [ 782.772309][T27219] 0 0 0 [ 782.776095][T27240] write to 0xffff8881139e9e28 of 8 bytes by task 27241 on cpu 0: [ 782.788856][T27219] 0 [ 782.788931][T27240] shmem_file_splice_read+0x470/0x600 [ 782.788967][T27240] splice_direct_to_actor+0x26e/0x670 [ 782.788987][T27240] do_splice_direct+0x119/0x1a0 [ 782.789006][T27240] do_sendfile+0x382/0x650 [ 782.806548][T27219] Node 0 [ 782.807014][T27240] __x64_sys_sendfile64+0xb8/0x150 [ 782.818495][T27219] DMA: 0*4kB [ 782.819404][T27240] x64_sys_call+0x2dc4/0x3020 [ 782.819420][T27219] 0*8kB [ 782.819439][T27240] do_syscall_64+0x12c/0x370 [ 782.822725][T27219] 0*16kB [ 782.827349][T27240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.830612][T27219] 0*32kB [ 782.834746][T27240] [ 782.834754][T27240] write to 0xffff8881139e9e28 of 8 bytes by task 27240 on cpu 1: [ 782.847767][T27219] 0*64kB [ 782.848759][T27240] shmem_file_splice_read+0x470/0x600 [ 782.848795][T27240] splice_direct_to_actor+0x26e/0x670 [ 782.870092][T27240] do_splice_direct+0x119/0x1a0 [ 782.874939][T27240] do_sendfile+0x382/0x650 [ 782.879350][T27240] __x64_sys_sendfile64+0xb8/0x150 [ 782.884460][T27240] x64_sys_call+0x2dc4/0x3020 [ 782.889132][T27240] do_syscall_64+0x12c/0x370 [ 782.893718][T27240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.899616][T27240] [ 782.901926][T27240] value changed: 0x0000000000000228 -> 0x000000000000022e [ 782.909015][T27240] [ 782.911320][T27240] Reported by Kernel Concurrency Sanitizer on: [ 782.917456][T27240] CPU: 1 UID: 0 PID: 27240 Comm: syz.2.6401 Tainted: G W syzkaller #0 PREEMPT(full) [ 782.928821][T27240] Tainted: [W]=WARN [ 782.932611][T27240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 782.942653][T27240] ================================================================== [ 782.958094][T27243] nfs: Unexpected value for 'acl' [ 782.972390][T27229] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #19: comm syz.7.6399: corrupted inode contents [ 782.985695][T27219] 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 782.990194][T27229] loop7: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 782.994781][T27229] EXT4-fs error (device loop7): ext4_dirty_inode:6495: inode #19: comm syz.7.6399: mark_inode_dirty error [ 782.998544][T27219] Node 0 [ 783.016162][T27229] loop7: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 783.022636][T27219] DMA32: [ 783.028234][T27229] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #19: comm syz.7.6399: corrupted inode contents [ 783.038559][T27219] 2*4kB (M) 2*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944488kB [ 783.064477][T27229] loop7: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 783.064627][T27229] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2999: inode #19: comm syz.7.6399: mark_inode_dirty error [ 783.093623][T27229] loop7: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 783.093927][T27229] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3002: inode #19: comm syz.7.6399: mark inode dirty (error -117) [ 783.108333][T27219] Node 0 [ 783.118533][T27229] loop7: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 783.121716][T27229] EXT4-fs warning (device loop7): ext4_evict_inode:285: xattr delete (err -117) [ 783.153042][T27219] Normal: 2603*4kB (UME) 3863*8kB (UME) 1525*16kB (UME) 1237*32kB (UME) 714*64kB (UME) 377*128kB (UME) 213*256kB (UME) 174*512kB (UME) 134*1024kB (UME) 104*2048kB (UME) 912*4096kB (UM) = 4428628kB [ 783.177036][T24187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.187401][T27219] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 783.196893][T27219] 33853 total pagecache pages [ 783.201806][T27219] 16 pages in swap cache [ 783.206075][T27219] Free swap = 124932kB [ 783.210438][T27219] Total swap = 124996kB [ 783.214620][T27219] 2097051 pages RAM [ 783.218598][T27219] 0 pages HighMem/MovableOnly [ 783.223309][T27219] 81622 pages reserved