last executing test programs: 4m52.732437083s ago: executing program 3 (id=1234): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x8, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x0, &(0x7f0000000380)="eb00140000000010000000000000", 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x50) 4m52.211721979s ago: executing program 3 (id=1238): openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x0, 0x18000000}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m50.107873873s ago: executing program 3 (id=1246): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 4m48.073682124s ago: executing program 3 (id=1248): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f000001bb80)='./bus\x00', 0x1000050, &(0x7f000001be00)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'grpquota'}}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, 'stripe'}}]}, 0x1, 0x5ee, &(0x7f000001c980)="$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") pread64(0xffffffffffffffff, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) (async) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) (async) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, r1, 0x1, 0x3, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(0x0, 0x0, 0x40) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x134}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) (async) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x134}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/19, 0x13}], 0x1) (async) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/19, 0x13}], 0x1) ptrace$setregs(0xf, r2, 0x2, &(0x7f0000019040)="21813ef0184955aaed0fd71e37cc2382fb1d92c27724ec61857b95b81220dd620500000000000000339e582b1f66b65f6b8e034858de179db6b88119fe7e3dea0d73d7417227a2bd794074eb7b2d0746f0a8b7f3b9d3da88ac2321d0") ptrace$cont(0x21, r2, 0x80000001, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x15}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f000001b980)={@desc={0x1, 0x0, @desc1}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x6000) madvise(&(0x7f0000109000/0x3000)=nil, 0x3000, 0x9) (async) madvise(&(0x7f0000109000/0x3000)=nil, 0x3000, 0x9) sendfile(r6, r5, 0x0, 0x7fffffff) (async) sendfile(r6, r5, 0x0, 0x7fffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44004}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44004}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000019140)={'ip6_vti0\x00', &(0x7f00000190c0)={'syztnl1\x00', r7, 0x4, 0xff, 0x2f, 0x7, 0x0, @loopback, @local, 0x7, 0x700, 0x76, 0x1}}) 4m45.94849765s ago: executing program 3 (id=1256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) 4m45.459669083s ago: executing program 3 (id=1258): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00'}) mlock2(&(0x7f0000341000/0x3000)=nil, 0x3000, 0x1) perf_event_open(0x0, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOl0hpYypQVGivD9JGQOc+6h93aG5Nym7dad148LOUvL6RUJxpQERES2RUYkKK6AcwzacVRavZCLg98+/n/r7r0b6UxmckapqfTspZRSanj03ZNncWfY+oBsjjzY+pr6svn35r9bP2cf5S2Vt1SxVFG6mit9ruhzpqEW8lZBU2raNHTLUPmiZZQb+VIjnzNLi4tVpRcXhhKLZcOylF6sqoJRVZWSqpSrKvRQzxeVpmlqKCHoJrsyM6OnD1k87/Nk8JuUy2k9JCLxPZnsSl8mBAAA+qq9/w+K8rP/Xz23URm8vTbs9P/rUa/+//Knxt/a1f/HRMSz/3cf37P/1+v9f1h67f/3dkRny5H6f5wMo9E9pwLNsJ4sp/WE8/9re3l/dcwO6P8BAAAAAAAAAAAAAAAAAAAAAPgTbNdqyVqtlnSP7k89FxOR1t/bhETk6vHPGH7qdP0Hul9/nALND+6Fh0XMV0vZpWzj6AzYEBFTDBmTpPyw7wdHPXY/eaTqRuS9uezULy9lQ3YmnZO8XT8uyYi019dqU9czk+OqYXd9RBKt9SlJyl/e9SnP+qhcON9Sr0lSPsxLSUxZsOfRrH8+rtS1m5m2+rg9DgAAAACA00BTOzz375rWKd+o39lft78+EGrur8c89+dh+S/c37UDAAAAAHBWWNWnBd00jfI+QVy6j2kEkR7GtAfhgww+QOCusNcq970MPk+jt8B98F2pmHPS96clcICnpUMQlMNUjdZXo466Cvdlo05jZHqi51WI+Hkp/3nz9rt/98aVtViXlR4+CO1/A0Sct38BAAAAOEWaTb97ZqK/EwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Aw6ju+36/caAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJPiVwAAAP//FZkC4A==") ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, 0x0) r4 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) ptrace(0x8, r4) r5 = dup(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa004, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0xa}, 0x2, 0x584, 0x10ffe, 0x3, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ptrace(0x8, r4) waitid(0x1, r4, 0x0, 0x4, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, 0x0) r6 = syz_io_uring_setup(0x5532, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x400249, 0x0, r5}, &(0x7f0000000340)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x102, &(0x7f0000000680)={0x0, 0x180334c, 0x10, 0x0, 0x3d3, 0x0, r6}, &(0x7f0000000200), &(0x7f0000000300)) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0xe5, @loopback, 0x6c379ec7}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) 4m45.355543729s ago: executing program 32 (id=1258): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00'}) mlock2(&(0x7f0000341000/0x3000)=nil, 0x3000, 0x1) perf_event_open(0x0, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$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") ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, 0x0) r4 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) ptrace(0x8, r4) r5 = dup(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa004, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0xa}, 0x2, 0x584, 0x10ffe, 0x3, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ptrace(0x8, r4) waitid(0x1, r4, 0x0, 0x4, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, 0x0) r6 = syz_io_uring_setup(0x5532, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x400249, 0x0, r5}, &(0x7f0000000340)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x102, &(0x7f0000000680)={0x0, 0x180334c, 0x10, 0x0, 0x3d3, 0x0, r6}, &(0x7f0000000200), &(0x7f0000000300)) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0xe5, @loopback, 0x6c379ec7}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) 4m26.579971449s ago: executing program 5 (id=1323): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000004000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117d00000000008510000002000000850000002b00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 4m26.37873762s ago: executing program 5 (id=1327): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x20, r0, 0x1, 0xfffffffd, 0xfffffffd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) unshare(0x24020400) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r2) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000000)=0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4m25.210709607s ago: executing program 5 (id=1335): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f80)={[{@grpquota}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}]}, 0xfe, 0x54c, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec+9Nzz0593t6Tk5CAhhaE9mPQsSrEfFtEnG47dho5Acn1s5bfXh9NtuSaDQ++yuJJN/XOj/Jfx/MM69ExG9fR5wsbCy3tryyUCqX08U8P1mvXJmsLa+culQpzafz6eXpmZkz78xMv//eu32r65vn//nh07sfnfnm+Or3v9w/cjuJs3EoP9Zejx240Z6ZiIn8ORmLs0+cONWHwgZJstsXwLaM5HE+FlkfcDhG8qgH/v++iogGMKQS8Q9DqjUOaM3t+zQPfmE8+HBtArSx/qNrr43Evubc6MBq8tjMKJvvjveh/KyMX/+8czvbon+vQwBs6cbNiDg9Orqx/0vy/m/7TvdwzpNl6P/g+bmbjX/e6jT+KayPf6LD+Odgh9jdjq3jv3C/D8V0lY3/Pug4/l1ftBofyXMvNcd8Y8nFS+U069tejogTMbY3y2+2nnNm9V6j27H28V+2ZeW3xoL5ddwf3fv4Y+ZK9dJO6tzuwc2I1zqOf5P19k86tH/2fJzvsYxj6Z3Xux3buv7PVuPniDc6tv+jFa1k8/XJyeb9MNm6Kzb6+9ax37uVv9v1z9r/wOb1H0/a12trT1/GT/v+Tbsd2+79vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr/Kz+J45v3v91uv/3R8QXPdb/1tFbXU8dhPafe6r2f/rEvY+//LFb+b21/9vN1Il8Ty/9X68XuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G5XHgAAAAAAAAAAAAAAAAAAAAbEwS6f/8/8MbLbVwc8c77yG4bXlvHfj296AgaS//8wvMQ/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/AMAAAAAAAAAAAAAAAAAAAAAAAAAAEBfnT93Ltsaqw+vz2b5uavLSwvVq6fm0tpCsbI0W5ytLl4pzler8+W0OFutbPX3ytXqlanpWLo2WU9r9cna8sqFSnXpcv3CpUppPr2Qjj2XWgEAAAAAAAAAAAAAAAAAAMCLpba8slAql9NFCYltJUYH4zIk+pzY7Z4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB75LwAA///MUDi3") chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 4m24.520735811s ago: executing program 5 (id=1341): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000006000000000000170700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000009500000000000000cd0a0100000000000700000001000000180000000000000000000000090000002d90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0xff2, &(0x7f0000001cc0)=""/4082, 0x40f00}, 0x94) 4m23.235375516s ago: executing program 5 (id=1346): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x3f}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m23.209890387s ago: executing program 33 (id=1346): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x3f}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m55.72251172s ago: executing program 2 (id=2148): munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9a, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)={'syztnl0\x00', r2, 0x7800, 0x20, 0x7fffffff, 0x0, {{0x25, 0x4, 0x2, 0x38, 0x94, 0x68, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @broadcast, {[@noop, @lsrr={0x83, 0x7, 0x5, [@rand_addr=0x64010101]}, @ssrr={0x89, 0x13, 0xf5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2, @local]}, @noop, @ssrr={0x89, 0x1b, 0x23, [@remote, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010102]}, @generic={0x88, 0x11, "d4f87f6217f4a55ce08244d5d79730"}, @noop, @cipso={0x86, 0x35, 0x5486f3b1a97ee2c2, [{0x0, 0x8, "1a2b6de77bc0"}, {0x7, 0xc, "f23f0218c7af008a224d"}, {0x6, 0x6, "fc4499ff"}, {0x0, 0x5, "bf62bd"}, {0x0, 0x10, "7fda9f7f7fb71a0b56bcfcdaa8d7"}]}, @end]}}}}}) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1m53.319193329s ago: executing program 2 (id=2158): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0xf88ce2e0571bc7ea}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0xffff, 0x0, @loopback, 0xfffffffb}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001840), 0x4) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000fbdbdf250100000008000100030000001c000c800c000b8008000a005a7600000c000b8008000a00b512000004000880040004800800020001000000a03e7e0b5527e43f43c19bd938fcf06d69c31f0ac3f2ea5fbc1a46e82b27f431902e144604f41a88d7f8c757e774b8aa344ee79a437de8a7332aeb71014be01354eef07f39ef23fdc2714d04a37e475ad6c6593f5b6b36cd025ce1dd563ffc91a6135a9d6ec391fee347b6fad066f16d6b546d9259366980517e4083fb40a43bce454f377844950a67283f699cd1423cabf1ca2621d4bdd376fd72fcc2bf0dd44a785c0c9212e602cd7cc5be0d212dd177586433bf9f039728e8c3e49b5eed657aba79a16ada57d3f5f545e9f59ab09e5e19a40d"], 0x48}}, 0x3000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000002700000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000380)={0x0, 0x2, 0x1, [0x400, 0x0, 0x7ff, 0x100000000], [0x80000000, 0x2, 0x8, 0x1, 0x8, 0x4, 0x0, 0x8, 0x73, 0x3, 0x9, 0x6, 0xc, 0x10000, 0x1, 0x29, 0xffffffffffffffff, 0x0, 0xc3, 0x80000001, 0x2, 0xb, 0x401, 0x73, 0xfff, 0x6b, 0x1, 0xfffffffffffffffb, 0x44de, 0x80000000, 0xe000000000000, 0x8000000000000000, 0x5, 0x8, 0x401, 0x0, 0x6, 0x7ff, 0x0, 0x7, 0x696, 0x8, 0x99b7, 0x2c45, 0xfffffffffffeffff, 0x7, 0x80000001, 0x81, 0xe49, 0x1a, 0x1600000000, 0xae, 0x8, 0x5, 0x60, 0x9, 0x3ff, 0xb1, 0x2, 0xd, 0x5, 0x3, 0x3, 0x3ff, 0x159e, 0x8, 0x9e, 0x5, 0xe9, 0x9, 0x3, 0xc, 0x401, 0x406, 0x9, 0x8, 0xfffffffffffffffb, 0x3, 0xc, 0xf3, 0x9, 0x4, 0x72, 0x1, 0x2249, 0x3, 0x6, 0x4800000000000000, 0x6, 0xff, 0x9, 0x9, 0xff, 0x72, 0x6, 0xd, 0x7f, 0x3, 0x2, 0x0, 0x180, 0x3ff, 0x4d0, 0x80, 0xf641, 0x7, 0x8000000000000000, 0x4, 0x4f9, 0x5317, 0x4, 0x80, 0x3, 0x0, 0x100, 0x3, 0x4, 0x4, 0x2, 0x4, 0x5f5]}) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)}], 0x2}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003e0000eb1cdf16662c415719082abd70"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000597fb1fec749000000000018450000010000000000000000000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040603000000000000000000010000080500010007000001"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000814) 1m52.464890351s ago: executing program 2 (id=2164): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x472, &(0x7f0000002400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0xfef4) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x42000, 0x10) read(r0, &(0x7f0000001400)=""/4096, 0x1000) 1m52.254918852s ago: executing program 2 (id=2169): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$eJzs3ctrW9kZAPDvyvKjTlK7UGjSlaHQGoLlOnWTFrpI6aIUGgi06yZCVkxq2QqWHGJjSEMpdFNoQxeFdpN12qa7btuZ7cy/MLMZhiEhM+OESZjF4OHqEcu25MgZWZqJfz+49jn3oXO++zj3yPdwHcCxNZX+yESciYg/JxETjflJRAzXUtmIi/X1nm1tFtIpie3tX32U1NZ5urVZiJZtYnw8TjQypyPijT9EnM3sL7eyvrGUL5WKq438bHX5xmxlfWPm+nJ+sbhYXDk/Nz9/7sIPL4z2LtZP3t44+egvP//evy9++vtvPfjTm0lcjJONZa1x9MpUTNX3SQynu3CXn/W6sAFLBl0BXkl6aQ7Vr/I4ExPZGOl+2+xRVgwAODK3I2IbADhmEvd/ADhmmn8HeLq1WUin7duD/XtEvz3+aUSM1eNvPt+sL8k2ntmN1Z6Djj9Ndj3vSCJisgflT0XEP/77m3+mUxzRc0iAdn53JyKuTk412/+d9ifZN2ahrvsBGd9vJg4YHDC1J6/9g/75X9r/+dFO/2/n+su86P9Em/7PaJtr91VMxe4RJ/uv/8zDHhTTUdr/+8nwzti2Zy3xN0wONXKnan2+4eTa9VIxbdu+HhHTMTya5ufaf3xteNn0k8+e7JrbEnFr/+/ju7+9n5af/t5ZI/Mwu6fJXchX872IPfX4TsS3s+3iT14c/6RD//dyl2X84sd//HunZWn8abzNaXf8Rz+qbPtexHejffxNyUHjE8/P1k6H2eZJ0cZ/3vvbeKfyW49/OqXl178LnOp9sG2kx3/84Pgnk9bxmpXDl/HWvYn/d1rWOf6m9uf/SPLrWrp5Kd3KV6urcxEjyS/3zz+3s20z31w/jX/6O+2v/4PO//Q74dUu488++vBfL42/OWNf/A1jXRZ2SGn8C4c6/m0T6VfhDovypQfPloY6ld/d8Z9PE0PTjTndtH8da5ovlUZa1nnlHQcAAAAAAAAAAAAAAAAAAAAAAAAAh5CpvaQ0yeRepDOZXC5q/8P7mzGeKZUr1bPXymsrC/WXmU7G8GhE1F51OdHyPtS5xvvwm/lze/I/iIhvRMRfR79Wy+cK5dLCoIMHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIYTHf7/f+qD0frv5wOtIQBwJMZeusaTYl8qAgD0zcvv/xExevT1AAD6p6v7PwDwWnH/B4DjZywz6BoAAP02FpEddB0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4rV2+dCmdtp9vbRbS/MLN9bWl8s2ZhWJlKbe8VsgVyqs3covl8mKpmCuUl1s2fafd55XK5RvzsbJ2a7ZarFRnK+sbV5bLayvVK9eX84vFK8XhvkUGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN2rrG8s5Uul4mojcX88YvecPiWGGhXq5SfPnOx3FP1IbE/U99SXpT49T4ztnfP+zLunD9rq7r7TWOILJwbZKgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8dXweAAD//9GqGUs=") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x0) fallocate(r0, 0x0, 0x4, 0xdfd6) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40000000}) ptrace$setsig(0x4203, r2, 0x72d8, &(0x7f0000000000)={0x15, 0x0, 0x899d}) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x11, 0x1a00, 0x0, 0x3) 1m51.803535264s ago: executing program 2 (id=2178): socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 1m45.59970704s ago: executing program 2 (id=2216): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x810c5c, &(0x7f0000000040), 0x1, 0x506, &(0x7f0000000ac0)="$eJzs3ctvW1kZAPDPTpw4j5lkhlkAgpkyM1BQVSdxZ6LRLHisEEIjIWYJUhsSN4pix1HslCZkka7ZIlGJFUhs+ANYd8WeDYIdm7JA4hGBGiQWHt3rm9RN7dZqHo7i30+6uufc4/o7p+k9p/4c+wQwtK5FxH5EjEXEnYiYya7nsiP127309ORgb/nwYG85F63Wp//Kpe3Jtej4M4mp7DmLEfHD70b8JPd83MbO7vpStVrZyupzzdrmXGNn9+ZabWm1slrZKJcXFxbnP7r1YfnMxvpObSwrffnxH/e/8bOkW9PZlc5xnKX20AvHcRKjEfH98wg2ACPZeMYG3RFeST4i3oyId9P7fyZG0p8mAHCVtVoz0ZrprAMAV10+zYHl8qUsFzAd+Xyp1M7hvRWT+Wq90bxxt769sdLOlc1GIX93rVqZz3KFs1HIJfWFtPy0Xj5RvxURb0TEL8Yn0nppuV5dGeR/fABgiE2dWP//O95e/wGAK6446A4AABfO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAMAF8vofAIaP9R8AhsoPPvkkOVqH2fdfr9zb2V6v37u5Ummsl2rby6Xl+tZmabVeX02/s6f2suer1uubCx/E9v3Zb242mnONnd3btfr2RvN2+r3etyuF9FH7FzAyAKCXN9559JdcsiJ/PJEe0bGXQ2GgPQPOW37QHQAGZmTQHQAGxm5fMLxO8RpfegCuiC5b9D6j2O0DQq1Wq3V+XQLO2fUvyP/DsOrI//stYBgy8v8wvOT/YXi1Wrl+9/yPfh8IAFxucvxAj/f/38zOv8veHPjxyslHPDzPXgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDldrT/bynbC3w68vlSKeK1iJiNQu7uWrUyHxGvR8SfxwvjSX1hwH0GAE4r//dctv/X9Zn3p59penvquDgWET/91ae/vL/UbG79KWIs9+/xo+vNh9n1cj/x9s98BADAix2t0+m544X8k4O95aPjIvvzj+9ERLEd//BgLA6P44/GaHouRiEiJv+Ty+ptuY7cxWnsP4iIz3cbfy6m0xxIe+fTk/GT2K9daPz8M/HzaVv7nPxdfO4M+gLD5lEy/3y72/2Xj2vpufv9X0xnqNPL5r/kqZYP0znwafyj+W+kx/x3rd8YH/zhe+3SxPNtDyK+OBpxFPuwY/45ip/rEf/9PuP/9Utvv9urrfXriOvRPX5nrLlmbXOusbN7c622tFpZrWyUy4sLi/Mf3fqwPJfmqOd6rwb//PjG673akvFP9ohffMn4v9rn+H/z/zs/+soL4n/9vW7x8/HWC+Ina+LX+oy/NPn7Yq+2JP5Kj/G/7Od/o8/4j/+2+9y24QDA4DR2dteXqtXK1hAWpuJSdEOh/0LyT/YSdKNr4VsXFWssujf9/L32PX2iqdV6pVi9ZoyzyLoBl8HxTR8R/xt0ZwAAAAAAAAAAAAAAgK4u4hNLgx4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV9dnAQAA//8bLc9D") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x1008802, &(0x7f0000000280), 0x1, 0x521, &(0x7f0000000580)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x11, 0x1e, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query, @map_fd={0x18, 0x3}, @generic={0x8, 0x9, 0x2, 0x5, 0x40}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0xe5, &(0x7f00000003c0)=""/229, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xf, 0x6a1, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0xffffffffffffffff], &(0x7f0000000240)=[{0x3cc, 0x1, 0x1, 0xb}, {0x5, 0x2, 0x4, 0x5}, {0x0, 0x2, 0x4, 0x4}, {0x0, 0x1, 0x3, 0x6}], 0x10, 0xe71a}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@o_path={&(0x7f00000000c0)='./bus\x00', r1, 0x4000, r0}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8541, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000005000000f8ffffffffffff0500006b3ce430723412d494"]) 1m45.599472851s ago: executing program 34 (id=2216): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x810c5c, &(0x7f0000000040), 0x1, 0x506, &(0x7f0000000ac0)="$eJzs3ctvW1kZAPDPTpw4j5lkhlkAgpkyM1BQVSdxZ6LRLHisEEIjIWYJUhsSN4pix1HslCZkka7ZIlGJFUhs+ANYd8WeDYIdm7JA4hGBGiQWHt3rm9RN7dZqHo7i30+6uufc4/o7p+k9p/4c+wQwtK5FxH5EjEXEnYiYya7nsiP127309ORgb/nwYG85F63Wp//Kpe3Jtej4M4mp7DmLEfHD70b8JPd83MbO7vpStVrZyupzzdrmXGNn9+ZabWm1slrZKJcXFxbnP7r1YfnMxvpObSwrffnxH/e/8bOkW9PZlc5xnKX20AvHcRKjEfH98wg2ACPZeMYG3RFeST4i3oyId9P7fyZG0p8mAHCVtVoz0ZrprAMAV10+zYHl8qUsFzAd+Xyp1M7hvRWT+Wq90bxxt769sdLOlc1GIX93rVqZz3KFs1HIJfWFtPy0Xj5RvxURb0TEL8Yn0nppuV5dGeR/fABgiE2dWP//O95e/wGAK6446A4AABfO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAMAF8vofAIaP9R8AhsoPPvkkOVqH2fdfr9zb2V6v37u5Ummsl2rby6Xl+tZmabVeX02/s6f2suer1uubCx/E9v3Zb242mnONnd3btfr2RvN2+r3etyuF9FH7FzAyAKCXN9559JdcsiJ/PJEe0bGXQ2GgPQPOW37QHQAGZmTQHQAGxm5fMLxO8RpfegCuiC5b9D6j2O0DQq1Wq3V+XQLO2fUvyP/DsOrI//stYBgy8v8wvOT/YXi1Wrl+9/yPfh8IAFxucvxAj/f/38zOv8veHPjxyslHPDzPXgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDldrT/bynbC3w68vlSKeK1iJiNQu7uWrUyHxGvR8SfxwvjSX1hwH0GAE4r//dctv/X9Zn3p59penvquDgWET/91ae/vL/UbG79KWIs9+/xo+vNh9n1cj/x9s98BADAix2t0+m544X8k4O95aPjIvvzj+9ERLEd//BgLA6P44/GaHouRiEiJv+Ty+ptuY7cxWnsP4iIz3cbfy6m0xxIe+fTk/GT2K9daPz8M/HzaVv7nPxdfO4M+gLD5lEy/3y72/2Xj2vpufv9X0xnqNPL5r/kqZYP0znwafyj+W+kx/x3rd8YH/zhe+3SxPNtDyK+OBpxFPuwY/45ip/rEf/9PuP/9Utvv9urrfXriOvRPX5nrLlmbXOusbN7c622tFpZrWyUy4sLi/Mf3fqwPJfmqOd6rwb//PjG673akvFP9ohffMn4v9rn+H/z/zs/+soL4n/9vW7x8/HWC+Ina+LX+oy/NPn7Yq+2JP5Kj/G/7Od/o8/4j/+2+9y24QDA4DR2dteXqtXK1hAWpuJSdEOh/0LyT/YSdKNr4VsXFWssujf9/L32PX2iqdV6pVi9ZoyzyLoBl8HxTR8R/xt0ZwAAAAAAAAAAAAAAgK4u4hNLgx4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV9dnAQAA//8bLc9D") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x1008802, &(0x7f0000000280), 0x1, 0x521, &(0x7f0000000580)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x11, 0x1e, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query, @map_fd={0x18, 0x3}, @generic={0x8, 0x9, 0x2, 0x5, 0x40}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0xe5, &(0x7f00000003c0)=""/229, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xf, 0x6a1, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0xffffffffffffffff], &(0x7f0000000240)=[{0x3cc, 0x1, 0x1, 0xb}, {0x5, 0x2, 0x4, 0x5}, {0x0, 0x2, 0x4, 0x4}, {0x0, 0x1, 0x3, 0x6}], 0x10, 0xe71a}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@o_path={&(0x7f00000000c0)='./bus\x00', r1, 0x4000, r0}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8541, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000005000000f8ffffffffffff0500006b3ce430723412d494"]) 1m9.877548286s ago: executing program 7 (id=2480): r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2000, 0x0) (async) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x10000000000001dd) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==") 1m9.815166469s ago: executing program 7 (id=2482): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x3000000}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2000002}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m9.499088495s ago: executing program 7 (id=2488): unshare(0x2a020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000004fb77f3a81fc120000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@perf_event={0x5}}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xc}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x4}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r7) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)=ANY=[@ANYBLOB="f785e9cf", @ANYRES16=r9, @ANYBLOB="21012dbd7000fbdbdf2501000000100002800c000180080001000000000014000180080003000300000008000100", @ANYRES32=r8, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x4000004) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xa1, 0x7, 0x6e5, 0x8, @loopback, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7800, 0x8, 0x3, 0x53}}) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r13 = socket(0x2, 0x80000, 0x1) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r12, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0x40, 0x4004095, &(0x7f0000000080)={0x11, 0x3, r14, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0xd) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x20, 0x80, 0x0, 0x3, {{0x15, 0x4, 0x3, 0x5, 0x54, 0x65, 0x0, 0xb, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x7, 0xa, "2d22d11176eac92f"}, {0x5, 0xb, "819ad3a4e9e3bc8eee"}]}, @timestamp={0x44, 0x8, 0x10, 0x0, 0x4, [0x3ff]}, @ssrr={0x89, 0x7, 0xc2, [@broadcast]}, @rr={0x7, 0x13, 0xdd, [@loopback, @multicast1, @local, @remote]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'pimreg1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x75, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14010300c58c9b4be012c5d29e7b3e1bf3958e065a9a305d721986eb715b26951b6aadda3e12acb048e725798f1306bee744e8fe99ece04721a91f2910205b624a4893ee766910771b33f6404b30027dab1094e88309f5da6da4c7ed1b1e1fdacff731f5837c2b7138f40f6a55e6e1", @ANYRES16=r10, @ANYBLOB="04022bbd7000ffdbdf2509000000180001801400020073797a6b616c6c6572300000000000001800018014000200626174616476300000000000000000004c00018008000100", @ANYRES32=r11, @ANYBLOB="14000200697036746e6c3000000000000000000008000100", @ANYRES32=r14, @ANYBLOB="08000300020000001400020076657468315f746f5f6272696467650008000300010000000c00018008000100", @ANYRES32=r15, @ANYBLOB="5c0001801400020076657468305f746f5f6272696467650008000100", @ANYRES32=r16, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000300000000000800030001000000140002006e7230000000000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="0800030002000000"], 0x114}}, 0x40000) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe}, {0xd, 0x2}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008840) prctl$PR_CAPBSET_DROP(0x18, 0x1e) 1m9.091582935s ago: executing program 7 (id=2489): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x472, &(0x7f0000002400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) fstat(r2, &(0x7f0000000dc0)) truncate(&(0x7f0000000900)='./file1\x00', 0xfef4) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x42000, 0x10) read(r0, &(0x7f0000001400)=""/4096, 0x1000) 1m8.863663666s ago: executing program 7 (id=2490): socket(0x2b, 0x80801, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 1m8.155440881s ago: executing program 7 (id=2494): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x5b938836}, 0x0, 0x2e, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8007, 0x0, 0x0, 0x0, 0x1000000b}, [@call={0x85, 0x0, 0x0, 0x27}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r3, 0x0, 0x8008, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m7.999665089s ago: executing program 35 (id=2494): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x5b938836}, 0x0, 0x2e, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8007, 0x0, 0x0, 0x0, 0x1000000b}, [@call={0x85, 0x0, 0x0, 0x27}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r3, 0x0, 0x8008, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 49.827257727s ago: executing program 6 (id=2584): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xefff, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0040002020800020003000a0004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b090002007379"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000fe880000000000000000000000000001fc010000000000000000000100000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff400000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_open_dev$loop(0x0, 0x3, 0xa004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x2000}, 0x10) ppoll(&(0x7f0000000640)=[{r7, 0x400}], 0x1, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = syz_io_uring_setup(0x5c4, &(0x7f0000001d40)={0x0, 0x1001, 0x800}, &(0x7f00000001c0), &(0x7f0000000580)) io_uring_enter(r9, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 48.895729463s ago: executing program 6 (id=2602): socket(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_SETMODE(r0, 0x5602, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x82}, 0x100b28, 0x5, 0x0, 0x8, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680080001"], 0x38}, 0x1, 0x0, 0x6fffffff}, 0x10) 48.795743908s ago: executing program 6 (id=2604): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r0, 0x0, 0x4, 0xdfd6) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x11, 0x1a00, 0x0, 0x3) (fail_nth: 6) 48.667850254s ago: executing program 6 (id=2607): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_remount}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@resgid, 0x32}]}, 0x1d, 0x4e8, &(0x7f0000000540)="$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") 48.429499236s ago: executing program 6 (id=2614): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0xffe4, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 48.35442646s ago: executing program 6 (id=2616): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x63d3, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330") ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) tkill(r4, 0x1a) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x8c, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x6, 0x50, 0x45, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0xd, 0xd}, {0x6, 0x24, 0x1a, 0x8, 0x13}, [@mbim_extended={0x8, 0x24, 0x1c, 0xc, 0x3, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0xf2, 0xfd, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x0, 0x100}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x54, 0x1b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0xe, 0xfa}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x0, 0xf}}}}}}}]}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r8 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1780, 0x0, 0x1, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/212, 0xd4}], 0x1}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x12, &(0x7f0000000c00)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @ringbuf_query, @alu={0x7, 0x0, 0x9, 0x9, 0xb, 0x100, 0x1}], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = semget$private(0x0, 0x0, 0x100) semop(r11, 0x0, 0x0) 33.337356822s ago: executing program 36 (id=2616): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x63d3, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330") ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) tkill(r4, 0x1a) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x8c, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x6, 0x50, 0x45, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0xd, 0xd}, {0x6, 0x24, 0x1a, 0x8, 0x13}, [@mbim_extended={0x8, 0x24, 0x1c, 0xc, 0x3, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0xf2, 0xfd, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x0, 0x100}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x54, 0x1b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0xe, 0xfa}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x0, 0xf}}}}}}}]}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r8 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1780, 0x0, 0x1, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/212, 0xd4}], 0x1}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x12, &(0x7f0000000c00)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @ringbuf_query, @alu={0x7, 0x0, 0x9, 0x9, 0xb, 0x100, 0x1}], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = semget$private(0x0, 0x0, 0x100) semop(r11, 0x0, 0x0) 16.18955765s ago: executing program 4 (id=2814): socket$packet(0x11, 0x3, 0x300) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0xa, 0x5, 0x0) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f0000000200)=0xfffffffb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x21, 0x6, 0x1fff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c", @ANYRES16=r3], 0x28}}, 0x0) unshare(0x20040400) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x0, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket(0x2, 0x80000, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0x40, 0x4004095, &(0x7f0000000080)={0x11, 0x3, r8, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0xd) 15.627495018s ago: executing program 4 (id=2817): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x40850) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000fffffed40a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000"], 0xf8}}, 0x0) 8.827596473s ago: executing program 1 (id=2862): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc096, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x471, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000ff842400028014000180080001000000000008000200e00000010c000280050001000000000008000740000000013c001080080002400000000708000140000046e2080003"], 0xc8}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) 8.827020574s ago: executing program 0 (id=2863): perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8800, 0x9ec4, 0x0, 0x0, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) capget(&(0x7f0000feaff9)={0x20080522}, &(0x7f0000000000)={0x0, 0x0, 0xfffffffc}) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_targets\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/195, 0xc3}], 0x1, 0x36, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') preadv(r1, &(0x7f00000011c0), 0x0, 0x200000, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)={0x108, r3, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3e, 0x51}, {0xc}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xc54}, {0xc, 0x90, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x7}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4010090}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1404, 0x200, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4009805}, 0x4000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8000000000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) 8.50168451s ago: executing program 8 (id=2864): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x18, 0x3f9, 0x8, 0x70bd2a, 0x25dfdbfb, {0x1, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2, 0x7, 0x8, 0x7, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x4400c420) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x32}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg$inet6(r2, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev, 0x4}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1, 0x20000810) 8.467068861s ago: executing program 0 (id=2865): openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x2000}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.313254119s ago: executing program 9 (id=2866): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000001300)=[{0x6, 0xfe, 0x8, 0x4}]}) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f00000011c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (fail_nth: 2) 8.055722592s ago: executing program 1 (id=2867): getpgrp(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) prlimit64(r0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r6, 0x4}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000002c0)={r6, 0x7}, &(0x7f0000000300)=0xc) 5.113314587s ago: executing program 9 (id=2868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x1b, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x800000000000000) 4.980969624s ago: executing program 8 (id=2869): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@acl}]}, 0x3, 0x465, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1") ioprio_set$pid(0x2, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x100, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20000000000200, 0x60, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x19491, 0x0, 0xfffffffc, 0x0, 0x0, 0xdffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x40, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) sendto(r0, &(0x7f0000000380)="7bb17cdb4eabac807a9e53840c31f381fec921b738989c6b456183067f3b82d4378c2f0f00fb42ef8ffc7f647b1779e8043c7e1ede46f2f22a402d7c73166583f01e258f1be9e81b29a9bb7e5dc88e9cf99fb510c09b625d9629339f89052de4cde67fa5238c7172cc", 0x69, 0x8000, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xcff5, r9}, 0x38) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000040), 0x4, r9}, 0x38) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000680)=ANY=[], 0x48, r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='-pids +rdma +net_cls +cpuset -cxuset '], 0x25) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x400c805}, 0x4008094) 4.86357982s ago: executing program 1 (id=2870): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x24, 0x6, 0x9}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x5c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0xe, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x7}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x5c}}, 0x0) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x1, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x1, 0x406, 0x4, 0x7fffffff, 0xe}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.843227761s ago: executing program 9 (id=2871): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xefff, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0040002020800020003000a0004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b090002007379"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000fe880000000000000000000000000001fc010000000000000000000100000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff400000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_open_dev$loop(0x0, 0x3, 0xa004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x2000}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = syz_io_uring_setup(0x5c4, &(0x7f0000001d40)={0x0, 0x1001, 0x800}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r9, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 4.757208855s ago: executing program 0 (id=2872): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400000000000000000000003f", @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r1], 0x64}}, 0x0) 4.721736357s ago: executing program 8 (id=2873): r0 = socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x6000, 0x8, 0x0) fchownat(0xffffffffffffffff, 0x0, r2, 0x0, 0x1000) setregid(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xd, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) socket(0x1d, 0x2, 0x6) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000600)="974501000000000001008cc5ffffffff0a30aec2d624d4983570946b", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x1000000, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) 4.65288574s ago: executing program 4 (id=2819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a9c, 0x4522f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) 4.399824193s ago: executing program 0 (id=2874): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000646000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x10010, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000"], 0x50) r6 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1b, 0x4, &(0x7f0000000200)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f0000000400)}, 0xf0245d9fd689ffac) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000004a00037e58dfc300000000000a0000", @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x400040c0) r9 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x600200, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xd) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x5, 0xc, 0x0, 0x3, 0x41}, 0x50) syz_open_procfs(0x0, 0x0) 3.426613141s ago: executing program 4 (id=2875): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$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") socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000400)={'lo\x00', 0x2b4b}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x390, 0x2e8, 0x218, 0xfeffffff, 0x2e8, 0xf0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x2e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x4, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x66}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc38bbe116d6334d29e1180000000001fdffff045851c506b281006fea248d053f3c0f7cc13058ccf23619da726100c11377e49a299794f9437325c963e53497ea3155e0cfb57357c9841ce9ee234cbb01fe28516cc3deb03c542a014cb07edcb4fffbade03b4be111271ad993946c95e46441e37a8f8cd4b130aa27a8ef8b6ab2674fb25e85fe77df2152b1affa120c3f9adf7257eab823742b172fc42a5aa36138a0664c2c43bbdc675d389e47f4b98fe98ba09ca8db541073d0a4bacd8b93e32dd6", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000240)="63eced8e465c1c76e716c0be4b07", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r7 = dup(r6) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x11, 0xffffffffffffffff, 0xec777000) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.717749306s ago: executing program 9 (id=2876): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="b6a242") syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x2, 0x46b, &(0x7f0000000580)="$eJzs3M1vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt3TZrd3PJxl4nn2e7TzfPvPMPDPPbgPoWUPZP0nEtoj4LSIGqtnaCkPV/65dOTf595Vzk0ksLr72Z5LXu3rl3GRZtXzf1iIznEakHyXFTmrNnTl7YmJmZvp0kR+dP/nO6NyZs08ePzlxbPrY9KnxQ4cOHhh75unxp9oSZxbX1T3vz+7d/dIbF1+ePHLx7R+/ydq7rShfGsct2XTzS0NZ4H8t5urLHon/r2l36832Jemkr4sNYVUqEZF1V38+/geiEjc6byBe/LCrjQNuq+zatLl58cIisIEl0e0WAN1RXuiz+99y69DUY124/Fz1BiiL+1qxVUv6Ii3q9Nfd37bTUEQcWfjni2yLdjyHAABYwSeTnx+OJxrN/9K4e0m9HcUaymBE3BEROyPizojYFRF3ReR174mIe1e5//qloZvnP+mlWwqsRdn879libat2/lfO/mKwUuS25/H3J0ePz0zvL34nw9G/OcuPLbOP71745dNmZUvnf9mW7b+cCxbtuNRX94BuamJ+Ip+UtsHlDyL29DWKP7m+EpBExO6I2LO6H72jTBx/7Ou9zSqtHP8y2rDOtPhVxKPV/l+IuvhLyfLrk6P/i5np/aPlUXGzn36+8Gqz/a8p/jbI+n9L7fFflHx5pkgMvrV0vXYuVr1yeeH3j5ve09zq8b8peT0/H5XLru9NzM+fHovYlBzO8zWvj994b5kv62fxD+9rPP53Fu/J+v++iMgO4vsj4oGIeLBo+0MR8XBE7Fsm/h+eb162Hvp/quH57/rxP5jU9P/qE5UT33/bbP+t9f/BPDVcvJKf/1bQagPX8rsDAACA/4o0/wx8ko5cT6fpyEj1M/y7Yks6Mzs3//jR2XdPTVU/Kz8Y/Wn5pGtgyfPQsWSh+InV/HjxrLgsP1A8N/6sEnl+ZHJ2ZqrLsUOv29pk/Gf+qHS7dcBt12gdbbzBF9qAjad+/Ke12fOvdLIxQEf5vjb0rhXGf9qpdgCd5/oPvavR+D9fl7cWABuT6z/0LuMfepfxD72rbvxX4tdutQTooLV8r1+ilxORrotmtJRo/e9B3O7Em+ujGS0kun1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//9sbvBf") r4 = openat(0xffffffffffffff9c, 0x0, 0x22042, 0xfc) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000000c0)={0x17c04, r4, 0x9, 0x400100080006, 0x4f3, 0xfff}) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x73, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) r8 = socket(0x1, 0x803, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TCSETAF(r9, 0x5408, &(0x7f0000000140)={0xfff7, 0xb79, 0xacb, 0xd6b0, 0xe, "c8cd1612469d83a4"}) socket$inet6(0xa, 0x80000, 0x1) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="6601000000f5fab15e000000006111680000000000850000001a000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) 2.607755591s ago: executing program 1 (id=2877): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x8000e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xd) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x81, 0xffffffff, 0x2241d13d}) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, 0x0, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x1000000007, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x106200, 0x10004, 0x4, 0x5, 0xa, 0xd, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x18, 0x1, 0x7, 0x101, 0x0, 0x0, {0x3}, [@NFACCT_FILTER={0x4}]}, 0x18}}, 0x8000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffb, 0x6, 0x8, @buffer={0x0, 0x22, 0x0}, &(0x7f0000000040), &(0x7f0000002240)=""/4115, 0x0, 0x10010, 0x1, 0x0}) 1.663261308s ago: executing program 8 (id=2878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000002900000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESOCT=r4, @ANYBLOB="f881f4ee0102ff2ce506d88d9461d813240ac2a6a79e8c8e07f0049d6e20d4dc025bad087808213607e77d9177796c02eb1ad5119d8fb999b4df83fe9088eac587afc8d946016563ed18523741cb5a698b2c9655d9dc04023df780c84ca06c354d0caeda63da589fd2c40c9af7afcc2b761a045f9ad1ccf530a2bcf66eb18e4eaf9ac535b6156523e8eb96d7b66feb6a094d625da23b771c6e9cec19077016bf75ed5d214fbf50cd70653e97c2daeadbd6d234a1686e5af1a06acdcde254bb4fb8e0cd9e063b1e3097", @ANYRES16=r0, @ANYRESDEC=r2, @ANYRESDEC], 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff) 1.291442626s ago: executing program 0 (id=2879): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x7}, 0x8591, 0xa88, 0x4, 0x5, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfefffffffffff, 0xffffffffffffffff, 0x1) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x7, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x3, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x2008, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x4, 0x4, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x2000, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x800073, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0xfffffffc, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x8, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x1, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x7ffe, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x1000, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x101, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x940, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000002240)=ANY=[@ANYBLOB="0d0000000200000004000000ff3f000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000110000000400"/28], 0x50) capset(&(0x7f0000000040)={0x19980330}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x14, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = syz_open_dev$sg(0x0, 0x6f5e, 0x2d42) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000002180), &(0x7f0000002200)=0x68) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) 1.290084966s ago: executing program 4 (id=2880): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xefff, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0040002020800020003000a0004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b090002007379"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000fe880000000000000000000000000001fc010000000000000000000100000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff400000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_open_dev$loop(0x0, 0x3, 0xa004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f0000000640)=[{r7, 0x400}], 0x1, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = syz_io_uring_setup(0x5c4, &(0x7f0000001d40)={0x0, 0x1001, 0x800}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r9, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 683.698566ms ago: executing program 1 (id=2881): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430005003f00064c0a000000040085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="2800000010003b14000010000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000f7e854f6bfd3", @ANYRES32=r2, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) ptrace(0x10, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x8, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0xbaba, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x3a, 0x0, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) 633.200629ms ago: executing program 9 (id=2882): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@acl}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") ioprio_set$pid(0x2, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x100, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20000000000200, 0x60, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x19491, 0x0, 0xfffffffc, 0x0, 0x0, 0xdffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x40, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) sendto(r0, &(0x7f0000000380)="7bb17cdb4eabac807a9e53840c31f381fec921b738989c6b456183067f3b82d4378c2f0f00fb42ef8ffc7f647b1779e8043c7e1ede46f2f22a402d7c73166583f01e258f1be9e81b29a9bb7e5dc88e9cf99fb510c09b625d9629339f89052de4cde67fa5238c7172cc", 0x69, 0x8000, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xcff5, r9}, 0x38) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000040), 0x4, r9}, 0x38) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000680)=ANY=[], 0x48, r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='-pids +rdma +net_cls +cpuset -cxuset '], 0x25) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x400c805}, 0x4008094) 567.840101ms ago: executing program 8 (id=2883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0xffff000000000000, 0x800}, 0x40c0080) 536.308263ms ago: executing program 8 (id=2884): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700400000004000000060ec97000f"], 0xffe) 302.738455ms ago: executing program 1 (id=2885): socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0xa, 0x5, 0x0) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f0000000200)=0xfffffffb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x21, 0x6, 0x1fff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c", @ANYRES16=r3], 0x28}}, 0x0) unshare(0x20040400) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x0, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket(0x2, 0x80000, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0x40, 0x4004095, &(0x7f0000000080)={0x11, 0x3, r8, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0xd) 68.645557ms ago: executing program 4 (id=2886): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x7}, 0x8591, 0xa88, 0x4, 0x5, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfefffffffffff, 0xffffffffffffffff, 0x1) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x7, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x3, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x2008, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x4, 0x4, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x2000, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x800073, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0xfffffffc, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x8, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x1, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x7ffe, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x1000, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x101, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x940, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000002240)=ANY=[@ANYBLOB="0d0000000200000004000000ff3f000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000110000000400"/28], 0x50) capset(&(0x7f0000000040)={0x19980330}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x14, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = syz_open_dev$sg(0x0, 0x6f5e, 0x2d42) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000002180), &(0x7f0000002200)=0x68) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) 63.343157ms ago: executing program 9 (id=2887): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x2f, 0xe, 0x2c, 0x40, 0xe9, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x700, 0x21002, 0x6997}}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfc3, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb5, 0x2, 0x2401, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xfa1, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs(0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x589, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 0s ago: executing program 0 (id=2888): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="54010000160033062cbd7000fddbdf250000000000000000000000000000000000000000000000000000000000000001000040004e248001000020003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/268], 0x154}}, 0x4004040) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20040010}, 0x60000010) getrlimit(0x5, &(0x7f0000000180)) r4 = dup2(r2, r1) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) unshare(0x26020480) syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaa15cc14e96b30800450000270000000000019078ac1e0001ac1414aa0500907803000000450000000000000001000000ffffffff00000000"], 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000240)=0xe) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x1) sendmsg$nl_xfrm(r7, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x29c, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_SOCK={0xc8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x46cebd11}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc83}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}]}]}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x615e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x69}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x80) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e23, @private=0xa010101}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kernel console output (not intermixed with test programs): gine, BIOS Google 02/12/2026 [ 411.958642][T11699] Call Trace: [ 411.958671][T11699] [ 411.958681][T11699] __dump_stack+0x1d/0x30 [ 411.958714][T11699] dump_stack_lvl+0x95/0xd0 [ 411.958790][T11699] dump_stack+0x15/0x1b [ 411.958814][T11699] should_fail_ex+0x263/0x280 [ 411.958842][T11699] should_fail+0xb/0x20 [ 411.958933][T11699] should_fail_usercopy+0x1a/0x20 [ 411.958964][T11699] _copy_from_user+0x1c/0xb0 [ 411.959005][T11699] ___sys_recvmsg+0xaa/0x3b0 [ 411.959048][T11699] ? __rcu_read_unlock+0x4e/0x70 [ 411.959163][T11699] __x64_sys_recvmsg+0xd1/0x160 [ 411.959254][T11699] x64_sys_call+0x2b1a/0x3020 [ 411.959285][T11699] do_syscall_64+0x12c/0x370 [ 411.959318][T11699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.959396][T11699] RIP: 0033:0x7f92f634c799 [ 411.959417][T11699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.959441][T11699] RSP: 002b:00007f92f4d9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 411.959521][T11699] RAX: ffffffffffffffda RBX: 00007f92f65c5fa0 RCX: 00007f92f634c799 [ 411.959585][T11699] RDX: 0000000000000020 RSI: 000020000000c1c0 RDI: 0000000000000004 [ 411.959602][T11699] RBP: 00007f92f4d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 411.959616][T11699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.959628][T11699] R13: 00007f92f65c6038 R14: 00007f92f65c5fa0 R15: 00007ffe0d4dad38 [ 411.959652][T11699] [ 412.197779][T11701] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2325'. [ 412.231711][T11701] loop6: detected capacity change from 0 to 512 [ 412.259605][T11703] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2327'. [ 412.289986][T11701] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.314358][T11701] EXT4-fs error (device loop6): ext4_validate_block_bitmap:423: comm syz.6.2325: bg 0: bad block bitmap checksum [ 412.338716][T11701] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Filesystem failed CRC [ 412.372500][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2325'. [ 412.435105][T11713] loop4: detected capacity change from 0 to 1024 [ 412.442050][T11713] EXT4-fs: dax option not supported [ 412.518631][ T8121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.007890][T11742] loop7: detected capacity change from 0 to 512 [ 413.908828][T11740] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 416.467839][T11757] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2340'. [ 417.170090][T11765] loop4: detected capacity change from 0 to 2048 [ 417.185265][T11763] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 418.160246][T11765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.189917][T11763] bond1 (unregistering): Released all slaves [ 418.218096][T11767] loop7: detected capacity change from 0 to 2048 [ 418.259631][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.336553][T11767] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.384153][T11305] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.569187][T11792] siw: device registration error -23 [ 418.580709][T11792] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 418.884216][T11804] loop1: detected capacity change from 0 to 512 [ 418.896870][T11805] loop4: detected capacity change from 0 to 512 [ 421.971100][T11817] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2355'. [ 422.303992][T11821] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 422.311075][T11821] syzkaller0: group set to 0 [ 422.319118][ T28] audit: type=1400 audit(1773940206.740:2264): avc: denied { create } for pid=11819 comm="syz.4.2357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 422.918295][ T28] audit: type=1400 audit(1773940207.310:2265): avc: denied { connect } for pid=11825 comm="syz.7.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 424.007544][T11840] netlink: 'syz.7.2363': attribute type 5 has an invalid length. [ 424.035771][T11844] netlink: 'syz.4.2365': attribute type 5 has an invalid length. [ 424.054293][T11840] netlink: 'syz.7.2363': attribute type 11 has an invalid length. [ 424.080674][T11844] netlink: 'syz.4.2365': attribute type 11 has an invalid length. [ 424.090878][T11840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11840 comm=syz.7.2363 [ 424.261652][T11849] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2363'. [ 424.263221][T11844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11844 comm=syz.4.2365 [ 424.290011][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2365'. [ 424.342693][T11842] siw: device registration error -23 [ 424.566412][T11847] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 424.727234][ T3527] hid-generic 0000:0003:0001.000D: unknown main item tag 0x0 [ 424.779225][ T3527] hid-generic 0000:0003:0001.000D: unknown main item tag 0x0 [ 424.880147][ T3527] hid-generic 0000:0003:0001.000D: hidraw0: HID v0.03 Device [syz0] on syz1 [ 425.147933][T11859] fido_id[11859]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 425.227422][ T3527] hid-generic 0000:0003:0001.000E: unknown main item tag 0x0 [ 425.238805][ T3527] hid-generic 0000:0003:0001.000E: unknown main item tag 0x0 [ 425.250233][ T3527] hid-generic 0000:0003:0001.000E: hidraw0: HID v0.03 Device [syz0] on syz1 [ 425.593130][T11874] siw: device registration error -23 [ 425.619856][T11874] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 425.669923][T11876] loop7: detected capacity change from 0 to 512 [ 425.696316][T11876] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 425.706812][T11876] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 425.717208][T11876] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.2375: Failed to acquire dquot type 1 [ 425.743994][T11876] loop7: lost filesystem error report for type 5 error -117 [ 425.744582][T11876] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 425.752107][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 425.752124][ C1] EXT4-fs (loop7): last error at time 1773940210: ext4_acquire_dquot:7001 [ 425.824197][T11876] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 425.848754][T11876] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.2375: Failed to acquire dquot type 1 [ 425.863233][T11884] loop1: detected capacity change from 0 to 512 [ 425.876257][T11876] loop7: lost filesystem error report for type 5 error -117 [ 425.877369][T11876] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2375: bg 0: block 248: padding at end of block bitmap is not set [ 425.953670][T11884] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2370: bad orphan inode 17 [ 425.966977][T11876] loop7: lost filesystem error report for type 5 error -117 [ 425.967178][T11876] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 426.000938][T11884] loop1: lost filesystem error report for type 5 error -117 [ 426.001160][T11884] ext4_test_bit(bit=16, block=4) = 1 [ 426.008662][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 426.008680][ C1] EXT4-fs (loop1): initial error at time 1773940210: ext4_orphan_get:1417 [ 426.008705][ C1] EXT4-fs (loop1): last error at time 1773940210: ext4_orphan_get:1417 [ 426.039541][T11876] loop7: lost filesystem error report for type 5 error -117 [ 426.039853][T11876] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 426.057627][T11876] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 426.074526][T11876] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.2375: Failed to acquire dquot type 1 [ 426.108517][T11876] loop7: lost filesystem error report for type 5 error -117 [ 426.108955][T11876] EXT4-fs (loop7): 1 orphan inode deleted [ 426.151949][T11876] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.166007][T11884] is_bad_inode(inode)=0 [ 426.178935][T11884] NEXT_ORPHAN(inode)=0 [ 426.183566][T11876] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.202393][T11884] max_ino=32 [ 426.211864][T11884] i_nlink=1 [ 426.230710][T11884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.338771][T11305] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.794069][ T1033] hid-generic 0000:0003:0001.000F: unknown main item tag 0x0 [ 426.865060][ T1033] hid-generic 0000:0003:0001.000F: unknown main item tag 0x0 [ 427.014042][ T1033] hid-generic 0000:0003:0001.000F: hidraw0: HID v0.03 Device [syz0] on syz1 [ 427.394048][T11904] fido_id[11904]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 427.701626][T11908] siw: device registration error -23 [ 427.835285][T11912] netlink: 'syz.4.2385': attribute type 5 has an invalid length. [ 427.879185][T11912] netlink: 'syz.4.2385': attribute type 11 has an invalid length. [ 427.917783][T11912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11912 comm=syz.4.2385 [ 427.988316][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2385'. [ 428.228982][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.286674][T11908] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 428.328450][T11902] Set syz1 is full, maxelem 65536 reached [ 428.551854][T11927] FAULT_INJECTION: forcing a failure. [ 428.551854][T11927] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 428.565833][T11927] CPU: 0 UID: 0 PID: 11927 Comm: syz.7.2389 Tainted: G W syzkaller #0 PREEMPT(full) [ 428.565921][T11927] Tainted: [W]=WARN [ 428.565930][T11927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 428.565975][T11927] Call Trace: [ 428.565994][T11927] [ 428.566003][T11927] __dump_stack+0x1d/0x30 [ 428.566039][T11927] dump_stack_lvl+0x95/0xd0 [ 428.566071][T11927] dump_stack+0x15/0x1b [ 428.566157][T11927] should_fail_ex+0x263/0x280 [ 428.566193][T11927] should_fail_alloc_page+0xf2/0x100 [ 428.566221][T11927] __alloc_frozen_pages_noprof+0x108/0x360 [ 428.566269][T11927] alloc_pages_mpol+0xb3/0x260 [ 428.566310][T11927] folio_alloc_mpol_noprof+0x39/0x80 [ 428.566350][T11927] shmem_get_folio_gfp+0x3da/0xd60 [ 428.566462][T11927] shmem_write_begin+0xfc/0x1f0 [ 428.566501][T11927] generic_perform_write+0x183/0x490 [ 428.566638][T11927] shmem_file_write_iter+0xc5/0xf0 [ 428.566681][T11927] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 428.566724][T11927] vfs_write+0x5a6/0x9f0 [ 428.566903][T11927] ksys_write+0xdc/0x1a0 [ 428.566930][T11927] __x64_sys_write+0x40/0x50 [ 428.566953][T11927] x64_sys_call+0x27e1/0x3020 [ 428.567001][T11927] do_syscall_64+0x12c/0x370 [ 428.567032][T11927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.567061][T11927] RIP: 0033:0x7f92f630cfce [ 428.567081][T11927] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 428.567179][T11927] RSP: 002b:00007f92f4d9eda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 428.567206][T11927] RAX: ffffffffffffffda RBX: 00007f92f4d9f6c0 RCX: 00007f92f630cfce [ 428.567223][T11927] RDX: 0000000000040000 RSI: 00007f92ec97f000 RDI: 0000000000000004 [ 428.567239][T11927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 428.567252][T11927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 428.567265][T11927] R13: 00007f92f4d9eee0 R14: 00007f92f4d9eea0 R15: 00007f92ec97f000 [ 428.567288][T11927] [ 428.844269][T11928] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2390'. [ 428.892404][T11934] siw: device registration error -23 [ 428.902959][T11934] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 428.904067][T11924] loop1: detected capacity change from 0 to 1024 [ 428.961344][ T28] audit: type=1326 audit(1773940213.370:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11936 comm="syz.6.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036ae4c799 code=0x7ffc0000 [ 428.985922][T11940] loop6: detected capacity change from 0 to 512 [ 428.995909][ T28] audit: type=1326 audit(1773940213.370:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11936 comm="syz.6.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036ae4c799 code=0x7ffc0000 [ 429.043090][ T28] audit: type=1326 audit(1773940213.370:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11936 comm="syz.6.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f036ae4c799 code=0x7ffc0000 [ 429.068775][ T28] audit: type=1326 audit(1773940213.370:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11936 comm="syz.6.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036ae4c799 code=0x7ffc0000 [ 429.079840][T11940] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.2395: corrupted in-inode xattr: invalid ea_ino [ 429.114224][T11940] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 429.114478][T11940] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2395: couldn't read orphan inode 15 (err -117) [ 429.123719][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 429.123743][ C1] EXT4-fs (loop6): initial error at time 1773940213: ext4_iget_extra_inode:5025: inode 15 [ 429.123777][ C1] EXT4-fs (loop6): last error at time 1773940213: ext4_iget_extra_inode:5025: inode 15 [ 429.125065][T11924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.136086][T11940] loop6: lost filesystem error report for type 5 error -117 [ 429.136644][T11940] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.183245][T11950] loop4: detected capacity change from 0 to 512 [ 429.263905][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2395'. [ 429.280257][T11950] EXT4-fs (loop4): 1 orphan inode deleted [ 429.305189][ T56] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 429.321350][T11950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.329789][ T56] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 1 [ 429.349803][ T56] loop4: lost filesystem error report for type 5 error -117 [ 429.351203][ T8121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.383589][T11950] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.415432][T11950] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.2396: iget: bad i_size value: -81346268269379574 [ 429.450896][T11960] netlink: 'syz.6.2399': attribute type 5 has an invalid length. [ 429.464514][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.474583][ T28] audit: type=1326 audit(1773940213.870:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11957 comm="syz.0.2401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f019e08c799 code=0x0 [ 429.501357][T11960] netlink: 'syz.6.2399': attribute type 11 has an invalid length. [ 429.511441][T11960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11960 comm=syz.6.2399 [ 429.524588][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2399'. [ 429.551575][T11971] 9p: Bad value for 'rfdno' [ 429.672741][ T28] audit: type=1326 audit(1773940214.090:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.7.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f634c799 code=0x7ffc0000 [ 429.718226][ T28] audit: type=1326 audit(1773940214.090:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.7.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f92f634c799 code=0x7ffc0000 [ 429.757199][ T28] audit: type=1326 audit(1773940214.090:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.7.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f634c799 code=0x7ffc0000 [ 429.781333][ T28] audit: type=1326 audit(1773940214.090:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.7.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f634c799 code=0x7ffc0000 [ 429.874569][T11982] siw: device registration error -23 [ 429.894823][T11982] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 429.936893][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.968337][T11991] loop6: detected capacity change from 0 to 512 [ 429.999320][T11991] EXT4-fs: Ignoring removed mblk_io_submit option [ 430.008738][T11991] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 430.047833][T11991] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.081440][T11991] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 430.138721][T12003] hub 1-0:1.0: USB hub found [ 430.151239][T12003] hub 1-0:1.0: 8 ports detected [ 430.202224][ T8121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.318070][T12009] netlink: 'syz.6.2418': attribute type 5 has an invalid length. [ 430.340552][T12009] netlink: 'syz.6.2418': attribute type 11 has an invalid length. [ 430.356437][T12009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12009 comm=syz.6.2418 [ 430.369988][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2418'. [ 430.764042][T12023] siw: device registration error -23 [ 430.823201][T12023] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 431.337043][T12042] loop6: detected capacity change from 0 to 512 [ 431.367267][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2431'. [ 431.398188][T12042] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.2430: corrupted in-inode xattr: invalid ea_ino [ 431.462461][T12042] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 431.462699][T12042] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2430: couldn't read orphan inode 15 (err -117) [ 431.472195][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 431.472215][ C0] EXT4-fs (loop6): initial error at time 1773940215: ext4_iget_extra_inode:5025: inode 15 [ 431.472274][ C0] EXT4-fs (loop6): last error at time 1773940215: ext4_iget_extra_inode:5025: inode 15 [ 431.531268][T12050] loop4: detected capacity change from 0 to 1024 [ 431.572688][T12050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 431.630185][T12050] ext4 filesystem being mounted at /508/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.650675][T12050] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2433: bg 0: block 112: padding at end of block bitmap is not set [ 431.666809][T12042] loop6: lost filesystem error report for type 5 error -117 [ 431.667437][T12042] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.690726][T12056] netlink: 'syz.0.2434': attribute type 5 has an invalid length. [ 431.704720][T12056] netlink: 'syz.0.2434': attribute type 11 has an invalid length. [ 431.728482][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 431.741010][T12056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12056 comm=syz.0.2434 [ 431.761275][T12042] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2430'. [ 431.771417][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2434'. [ 431.801496][ T8121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.829145][ T3424] hid-generic 0000:0003:0001.0010: unknown main item tag 0x0 [ 431.838692][ T3424] hid-generic 0000:0003:0001.0010: unknown main item tag 0x0 [ 431.852838][ T3424] hid-generic 0000:0003:0001.0010: hidraw0: HID v0.03 Device [syz0] on syz1 [ 431.894284][T12059] fido_id[12059]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 432.122784][T12076] FAULT_INJECTION: forcing a failure. [ 432.122784][T12076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.136493][T12076] CPU: 0 UID: 0 PID: 12076 Comm: syz.0.2445 Tainted: G W syzkaller #0 PREEMPT(full) [ 432.136525][T12076] Tainted: [W]=WARN [ 432.136532][T12076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 432.136627][T12076] Call Trace: [ 432.136636][T12076] [ 432.136646][T12076] __dump_stack+0x1d/0x30 [ 432.136679][T12076] dump_stack_lvl+0x95/0xd0 [ 432.136703][T12076] dump_stack+0x15/0x1b [ 432.136730][T12076] should_fail_ex+0x263/0x280 [ 432.136783][T12076] should_fail+0xb/0x20 [ 432.136809][T12076] should_fail_usercopy+0x1a/0x20 [ 432.136846][T12076] _copy_to_user+0x20/0xa0 [ 432.136943][T12076] simple_read_from_buffer+0xb5/0x130 [ 432.136974][T12076] proc_fail_nth_read+0x10e/0x150 [ 432.137015][T12076] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 432.137118][T12076] vfs_read+0x1ab/0x7f0 [ 432.137162][T12076] ? __sys_setsockopt+0x18e/0x200 [ 432.137199][T12076] ? kfree+0x303/0x380 [ 432.137223][T12076] ksys_read+0xdc/0x1a0 [ 432.137287][T12076] __x64_sys_read+0x40/0x50 [ 432.137307][T12076] x64_sys_call+0x2886/0x3020 [ 432.137371][T12076] do_syscall_64+0x12c/0x370 [ 432.137399][T12076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.137422][T12076] RIP: 0033:0x7f019e04cfce [ 432.137437][T12076] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 432.137523][T12076] RSP: 002b:00007f019cadefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 432.137543][T12076] RAX: ffffffffffffffda RBX: 00007f019cadf6c0 RCX: 00007f019e04cfce [ 432.137616][T12076] RDX: 000000000000000f RSI: 00007f019cadf0a0 RDI: 0000000000000005 [ 432.137629][T12076] RBP: 00007f019cadf090 R08: 0000000000000000 R09: 0000000000000000 [ 432.137642][T12076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.137654][T12076] R13: 00007f019e306038 R14: 00007f019e305fa0 R15: 00007ffc4018d4a8 [ 432.137674][T12076] [ 432.425525][T12079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2446'. [ 432.539402][T12086] netlink: 'syz.1.2447': attribute type 5 has an invalid length. [ 432.578286][T12086] netlink: 'syz.1.2447': attribute type 11 has an invalid length. [ 432.625243][ T3527] hid-generic 0000:0003:0001.0011: unknown main item tag 0x0 [ 432.643109][ T3527] hid-generic 0000:0003:0001.0011: unknown main item tag 0x0 [ 432.651611][T12086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12086 comm=syz.1.2447 [ 432.683536][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2447'. [ 432.684462][ T3527] hid-generic 0000:0003:0001.0011: hidraw0: HID v0.03 Device [syz0] on syz1 [ 432.745128][T12089] fido_id[12089]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 432.864805][T12099] loop6: detected capacity change from 0 to 512 [ 432.934701][T12099] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2436: bad orphan inode 17 [ 433.048726][T12099] loop6: lost filesystem error report for type 5 error -117 [ 433.048969][T12099] ext4_test_bit(bit=16, block=4) = 1 [ 433.061940][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 433.061964][ C1] EXT4-fs (loop6): initial error at time 1773940217: ext4_orphan_get:1417 [ 433.061991][ C1] EXT4-fs (loop6): last error at time 1773940217: ext4_orphan_get:1417 [ 433.173177][T12099] is_bad_inode(inode)=0 [ 433.177759][T12099] NEXT_ORPHAN(inode)=0 [ 433.182127][T12099] max_ino=32 [ 433.186416][T12099] i_nlink=1 [ 433.204156][T12099] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.339185][T12116] siw: device registration error -23 [ 433.577818][T12117] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 433.593123][T12139] netlink: 'syz.0.2462': attribute type 5 has an invalid length. [ 433.601397][T12139] netlink: 'syz.0.2462': attribute type 11 has an invalid length. [ 433.693420][T12116] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 433.702638][T12141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12141 comm=syz.0.2462 [ 433.853024][T12151] lo speed is unknown, defaulting to 1000 [ 433.859603][T12151] lo speed is unknown, defaulting to 1000 [ 433.939890][T12154] __nla_validate_parse: 1 callbacks suppressed [ 433.939908][T12154] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2468'. [ 433.970860][T12156] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2467'. [ 433.994462][T12151] lo speed is unknown, defaulting to 1000 [ 433.994479][T12156] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2467'. [ 434.296727][ T8121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.372953][T12167] loop6: detected capacity change from 0 to 1024 [ 434.437164][T12164] loop4: detected capacity change from 0 to 512 [ 434.452441][T12164] EXT4-fs: inline encryption not supported [ 434.470020][T12164] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 434.489971][T12171] netlink: 'syz.6.2473': attribute type 5 has an invalid length. [ 434.503854][T12164] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 434.516932][T12171] netlink: 'syz.6.2473': attribute type 11 has an invalid length. [ 434.547593][T12164] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 64)! [ 434.579315][T12171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12171 comm=syz.6.2473 [ 434.599055][T12164] EXT4-fs (loop4): group descriptors corrupted! [ 434.613211][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2473'. [ 434.689677][T12175] loop4: detected capacity change from 0 to 512 [ 434.721474][T12175] EXT4-fs (loop4): bad geometry: block count 65409 exceeds size of device (128 blocks) [ 434.886750][T12177] loop6: detected capacity change from 0 to 1024 [ 434.962668][T12177] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.107565][ T8121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.126010][T12184] siw: device registration error -23 [ 435.126853][T12188] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 435.161253][T12184] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 435.202319][T12199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2483'. [ 435.296825][T12208] netlink: 'syz.1.2485': attribute type 5 has an invalid length. [ 435.312497][T12208] netlink: 'syz.1.2485': attribute type 11 has an invalid length. [ 435.348278][T12208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12208 comm=syz.1.2485 [ 435.361047][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2485'. [ 435.434500][T12214] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2486'. [ 435.443787][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2486'. [ 435.510032][T12219] loop6: detected capacity change from 0 to 512 [ 435.582884][T12219] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2481: bad orphan inode 17 [ 435.608226][T12219] loop6: lost filesystem error report for type 5 error -117 [ 435.611211][T12219] ext4_test_bit(bit=16, block=4) = 1 [ 435.618588][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 435.618612][ C0] EXT4-fs (loop6): initial error at time 1773940220: ext4_orphan_get:1417 [ 435.618640][ C0] EXT4-fs (loop6): last error at time 1773940220: ext4_orphan_get:1417 [ 435.682470][T12219] is_bad_inode(inode)=0 [ 435.686982][T12219] NEXT_ORPHAN(inode)=0 [ 435.693720][T12219] max_ino=32 [ 435.697153][T12219] i_nlink=1 [ 435.703814][T12219] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.878868][T12229] loop7: detected capacity change from 0 to 512 [ 435.918526][T12229] EXT4-fs: Ignoring removed bh option [ 435.937037][T12229] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 435.965541][T12229] EXT4-fs (loop7): 1 truncate cleaned up [ 435.977354][T12229] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.010088][T12222] Set syz1 is full, maxelem 65536 reached [ 436.071077][T11305] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 436.130439][T11305] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 436.383043][T12233] loop4: detected capacity change from 0 to 1024 [ 436.478325][T12227] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 436.520180][T12233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.721504][ T6664] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.734864][T12231] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.746025][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.835532][ T6664] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.995388][ T6664] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.084814][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 437.084829][ T28] audit: type=1326 audit(1773940221.500:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12243 comm="syz.4.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7301c799 code=0x7ffc0000 [ 437.296638][ T6664] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.377648][ T28] audit: type=1326 audit(1773940221.530:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12243 comm="syz.4.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7301c799 code=0x7ffc0000 [ 437.548195][ T28] audit: type=1326 audit(1773940221.530:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12243 comm="syz.4.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fba7301c799 code=0x7ffc0000 [ 437.572358][ T28] audit: type=1326 audit(1773940221.550:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12243 comm="syz.4.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7301c799 code=0x7ffc0000 [ 438.548927][ T28] audit: type=1326 audit(1773940221.550:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12243 comm="syz.4.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7301c799 code=0x7ffc0000 [ 438.589190][T12257] netlink: 'syz.1.2497': attribute type 5 has an invalid length. [ 438.796579][T12257] netlink: 'syz.1.2497': attribute type 11 has an invalid length. [ 438.888873][T12259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12259 comm=syz.1.2497 [ 438.925060][ T6664] bridge_slave_1: left allmulticast mode [ 438.953792][ T6664] bridge_slave_1: left promiscuous mode [ 438.961959][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2497'. [ 438.990961][ T6664] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.040400][ T6664] bridge_slave_0: left allmulticast mode [ 439.061919][ T6664] bridge_slave_0: left promiscuous mode [ 439.093632][ T6664] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.115891][ T8121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.293435][ T6664] gretap0 (unregistering): left allmulticast mode [ 439.607240][T12278] loop6: detected capacity change from 0 to 2048 [ 439.631535][ T6664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.662281][T12278] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.691482][ T6664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.709520][ T6664] bond0 (unregistering): Released all slaves [ 439.866962][T12289] loop1: detected capacity change from 0 to 512 [ 439.889918][ T8121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.908637][T12289] EXT4-fs: inline encryption not supported [ 439.950449][T12289] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 439.978246][T12289] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 440.017722][T12247] lo speed is unknown, defaulting to 1000 [ 440.056606][ T6664] hsr_slave_0: left promiscuous mode [ 440.082845][ T6664] hsr_slave_1: left promiscuous mode [ 440.092817][ T6664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.103361][ T6664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.112037][ T6664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.129038][ T6664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.144000][T12289] EXT4-fs error (device loop1): ext4_init_orphan_info:583: comm syz.1.2502: inode #0: comm syz.1.2502: iget: illegal inode # [ 440.162123][T12289] loop1: lost filesystem error report for type 5 error -117 [ 440.162272][T12289] EXT4-fs (loop1): Remounting filesystem read-only [ 440.169741][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 440.169767][ C0] EXT4-fs (loop1): initial error at time 1773940224: ext4_init_orphan_info:583 [ 440.169791][ C0] EXT4-fs (loop1): last error at time 1773940224: ext4_init_orphan_info:583 [ 440.205757][ T6664] veth1_macvtap: left promiscuous mode [ 440.208505][T12289] EXT4-fs (loop1): get orphan inode failed [ 440.217795][T12289] EXT4-fs (loop1): mount failed [ 440.258193][ T6664] veth0_macvtap: left promiscuous mode [ 440.263760][ T6664] veth1_vlan: left promiscuous mode [ 440.301597][ T6664] veth0_vlan: left promiscuous mode [ 440.496934][ T6664] team0 (unregistering): Port device team_slave_1 removed [ 440.515286][ T6664] team0 (unregistering): Port device team_slave_0 removed [ 440.570296][T12327] loop1: detected capacity change from 0 to 128 [ 440.603127][T12302] bridge_slave_0 (unregistering): left allmulticast mode [ 440.610797][T12247] lo speed is unknown, defaulting to 1000 [ 440.610893][T12327] syz.1.2505: attempt to access beyond end of device [ 440.610893][T12327] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 440.628398][T12302] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.717570][T12247] lo speed is unknown, defaulting to 1000 [ 440.821976][T12337] netlink: 'syz.4.2509': attribute type 5 has an invalid length. [ 440.850514][T12337] netlink: 'syz.4.2509': attribute type 11 has an invalid length. [ 440.891991][T12337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12337 comm=syz.4.2509 [ 440.948293][T12326] Set syz1 is full, maxelem 65536 reached [ 440.956982][T12247] chnl_net:caif_netlink_parms(): no params data found [ 440.974971][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2509'. [ 441.125398][T12362] FAULT_INJECTION: forcing a failure. [ 441.125398][T12362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.142795][T12247] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.169480][T12247] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.176936][T12247] bridge_slave_0: entered allmulticast mode [ 441.219295][T12247] bridge_slave_0: entered promiscuous mode [ 441.236479][T12362] CPU: 0 UID: 0 PID: 12362 Comm: syz.1.2513 Tainted: G W syzkaller #0 PREEMPT(full) [ 441.236587][T12362] Tainted: [W]=WARN [ 441.236631][T12362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 441.236647][T12362] Call Trace: [ 441.236656][T12362] [ 441.236665][T12362] __dump_stack+0x1d/0x30 [ 441.236693][T12362] dump_stack_lvl+0x95/0xd0 [ 441.236720][T12362] dump_stack+0x15/0x1b [ 441.236749][T12362] should_fail_ex+0x263/0x280 [ 441.236784][T12362] should_fail+0xb/0x20 [ 441.236845][T12362] should_fail_usercopy+0x1a/0x20 [ 441.236883][T12362] _copy_from_iter+0xcf/0xea0 [ 441.236921][T12362] ? __alloc_skb+0x4f6/0x690 [ 441.236953][T12362] ? __alloc_skb+0x200/0x690 [ 441.236999][T12362] netlink_sendmsg+0x4ae/0x6f0 [ 441.237047][T12362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.237167][T12362] ____sys_sendmsg+0x563/0x5b0 [ 441.237214][T12362] ___sys_sendmsg+0x195/0x1e0 [ 441.237262][T12362] __x64_sys_sendmsg+0xd4/0x160 [ 441.237328][T12362] x64_sys_call+0x194c/0x3020 [ 441.237370][T12362] do_syscall_64+0x12c/0x370 [ 441.237405][T12362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.237430][T12362] RIP: 0033:0x7f563085c799 [ 441.237446][T12362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.237467][T12362] RSP: 002b:00007f562f2af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.237562][T12362] RAX: ffffffffffffffda RBX: 00007f5630ad5fa0 RCX: 00007f563085c799 [ 441.237577][T12362] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 441.237590][T12362] RBP: 00007f562f2af090 R08: 0000000000000000 R09: 0000000000000000 [ 441.237604][T12362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.237641][T12362] R13: 00007f5630ad6038 R14: 00007f5630ad5fa0 R15: 00007ffe6d694c98 [ 441.237666][T12362] [ 441.433303][T12247] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.440680][T12247] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.448072][T12247] bridge_slave_1: entered allmulticast mode [ 441.454814][T12247] bridge_slave_1: entered promiscuous mode [ 441.474335][T12247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.485615][T12247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.510584][T12247] team0: Port device team_slave_0 added [ 441.518396][T12247] team0: Port device team_slave_1 added [ 441.534566][T12371] syzkaller1: entered promiscuous mode [ 441.543860][T12371] syzkaller1: entered allmulticast mode [ 441.575612][T12247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.588810][T12247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.666223][T12247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.724702][T12247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.737991][T12247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.906074][ T3527] hid-generic 0000:0003:0001.0012: unknown main item tag 0x0 [ 441.927668][T12247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.932663][ T3527] hid-generic 0000:0003:0001.0012: unknown main item tag 0x0 [ 442.010559][ T3527] hid-generic 0000:0003:0001.0012: hidraw0: HID v0.03 Device [syz0] on syz1 [ 442.289798][T12391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2518'. [ 442.309054][T12401] loop4: detected capacity change from 0 to 512 [ 442.850838][T12399] fido_id[12399]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 443.759508][T12247] hsr_slave_0: entered promiscuous mode [ 443.765634][T12247] hsr_slave_1: entered promiscuous mode [ 443.780365][T12247] debugfs: 'hsr0' already exists in 'hsr' [ 443.786164][T12247] Cannot create hsr debugfs directory [ 444.762554][T12411] netlink: 'syz.1.2523': attribute type 5 has an invalid length. [ 444.778263][T12411] netlink: 'syz.1.2523': attribute type 11 has an invalid length. [ 445.270637][T12414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12414 comm=syz.1.2523 [ 445.583297][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2523'. [ 445.638328][ T28] audit: type=1326 audit(1773940230.040:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.4.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7301c799 code=0x7ffc0000 [ 445.758617][T12420] FAULT_INJECTION: forcing a failure. [ 445.758617][T12420] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 445.789831][ T28] audit: type=1326 audit(1773940230.040:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.4.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7301c799 code=0x7ffc0000 [ 445.836519][T12420] CPU: 0 UID: 0 PID: 12420 Comm: syz.4.2525 Tainted: G W syzkaller #0 PREEMPT(full) [ 445.836553][T12420] Tainted: [W]=WARN [ 445.836562][T12420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 445.836649][T12420] Call Trace: [ 445.836660][T12420] [ 445.836667][T12420] __dump_stack+0x1d/0x30 [ 445.836702][T12420] dump_stack_lvl+0x95/0xd0 [ 445.836814][T12420] dump_stack+0x15/0x1b [ 445.836840][T12420] should_fail_ex+0x263/0x280 [ 445.836877][T12420] should_fail_alloc_page+0xf2/0x100 [ 445.836916][T12420] __alloc_frozen_pages_noprof+0x108/0x360 [ 445.837013][T12420] alloc_pages_mpol+0xb3/0x260 [ 445.837045][T12420] folio_alloc_mpol_noprof+0x39/0x80 [ 445.837088][T12420] shmem_get_folio_gfp+0x3da/0xd60 [ 445.837170][T12420] shmem_write_begin+0xfc/0x1f0 [ 445.837209][T12420] generic_perform_write+0x183/0x490 [ 445.837248][T12420] shmem_file_write_iter+0xc5/0xf0 [ 445.837356][T12420] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 445.837403][T12420] vfs_write+0x5a6/0x9f0 [ 445.837442][T12420] ksys_write+0xdc/0x1a0 [ 445.837466][T12420] __x64_sys_write+0x40/0x50 [ 445.837491][T12420] x64_sys_call+0x27e1/0x3020 [ 445.837559][T12420] do_syscall_64+0x12c/0x370 [ 445.837589][T12420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.837616][T12420] RIP: 0033:0x7fba72fdcfce [ 445.837633][T12420] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 445.837718][T12420] RSP: 002b:00007fba71a76da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.837740][T12420] RAX: ffffffffffffffda RBX: 00007fba71a776c0 RCX: 00007fba72fdcfce [ 445.837756][T12420] RDX: 0000000000040000 RSI: 00007fba69657000 RDI: 0000000000000004 [ 445.837774][T12420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.837791][T12420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 445.837808][T12420] R13: 00007fba71a76ee0 R14: 00007fba71a76ea0 R15: 00007fba69657000 [ 445.837880][T12420] [ 446.088182][ T28] audit: type=1326 audit(1773940230.040:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.4.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fba7301c799 code=0x7ffc0000 [ 446.140027][ T28] audit: type=1326 audit(1773940230.040:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.4.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7301c799 code=0x7ffc0000 [ 446.265172][T12247] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 446.274211][T12247] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 446.321950][T12247] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 446.345949][T12247] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 446.422115][T12428] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2529'. [ 446.460610][T12247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.482337][T12247] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.495801][ T6683] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.503090][ T6683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.576966][T12247] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 446.602165][T12247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 446.888952][ T6683] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.896209][ T6683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.881052][T12445] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2531'. [ 447.952298][ T28] audit: type=1326 audit(1773940232.360:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12459 comm="syz.0.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019e08c799 code=0x7ffc0000 [ 448.036161][ T28] audit: type=1326 audit(1773940232.360:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12459 comm="syz.0.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f019e08c799 code=0x7ffc0000 [ 448.061326][T12247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.106593][ T28] audit: type=1326 audit(1773940232.360:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12459 comm="syz.0.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019e08c799 code=0x7ffc0000 [ 448.178335][ T28] audit: type=1326 audit(1773940232.360:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12459 comm="syz.0.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019e08c799 code=0x7ffc0000 [ 448.369630][T12247] veth0_vlan: entered promiscuous mode [ 448.390503][T12247] veth1_vlan: entered promiscuous mode [ 448.425971][T12247] veth0_macvtap: entered promiscuous mode [ 448.444765][T12247] veth1_macvtap: entered promiscuous mode [ 448.471422][T12247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.495097][T12247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.521800][ T309] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.550732][ T309] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.577639][ T309] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.604224][ T309] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.781095][T12484] netlink: 'syz.4.2535': attribute type 5 has an invalid length. [ 448.819985][T12484] netlink: 'syz.4.2535': attribute type 11 has an invalid length. [ 448.850970][T12484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12484 comm=syz.4.2535 [ 448.981376][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2535'. [ 449.268773][T12499] loop1: detected capacity change from 0 to 512 [ 449.321388][T12499] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 449.348222][T12499] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 449.358862][T12499] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.2542: Failed to acquire dquot type 1 [ 449.370682][T12499] loop1: lost filesystem error report for type 5 error -117 [ 449.378249][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 449.393620][ C0] EXT4-fs (loop1): last error at time 1773940233: ext4_acquire_dquot:7001 [ 449.396232][T12499] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.2542: Failed to acquire dquot type 1 [ 449.504520][T12499] loop1: lost filesystem error report for type 5 error -117 [ 449.534938][T12499] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2542: bg 0: block 248: padding at end of block bitmap is not set [ 449.556742][T12499] loop1: lost filesystem error report for type 5 error -117 [ 449.557804][T12499] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 449.598446][T12499] loop1: lost filesystem error report for type 5 error -117 [ 449.598975][T12499] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.2542: Failed to acquire dquot type 1 [ 449.758463][T12499] loop1: lost filesystem error report for type 5 error -117 [ 449.793547][T12499] EXT4-fs (loop1): 1 orphan inode deleted [ 449.843524][T12499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.940227][T12499] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.172018][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.291454][T12535] netlink: 'syz.4.2555': attribute type 5 has an invalid length. [ 450.299845][T12535] netlink: 'syz.4.2555': attribute type 11 has an invalid length. [ 450.370948][T12535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12535 comm=syz.4.2555 [ 450.512319][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2555'. [ 450.543793][T12542] netlink: 'syz.8.2556': attribute type 10 has an invalid length. [ 450.595344][T12546] FAULT_INJECTION: forcing a failure. [ 450.595344][T12546] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 450.629861][T12542] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.637418][T12542] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.696792][T12546] CPU: 1 UID: 0 PID: 12546 Comm: syz.1.2552 Tainted: G W syzkaller #0 PREEMPT(full) [ 450.696836][T12546] Tainted: [W]=WARN [ 450.696846][T12546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 450.696864][T12546] Call Trace: [ 450.696873][T12546] [ 450.696883][T12546] __dump_stack+0x1d/0x30 [ 450.696966][T12546] dump_stack_lvl+0x95/0xd0 [ 450.696999][T12546] dump_stack+0x15/0x1b [ 450.697028][T12546] should_fail_ex+0x263/0x280 [ 450.697080][T12546] should_fail_alloc_page+0xf2/0x100 [ 450.697106][T12546] __alloc_frozen_pages_noprof+0x108/0x360 [ 450.697176][T12546] alloc_pages_mpol+0xb3/0x260 [ 450.697208][T12546] vma_alloc_folio_noprof+0x1a9/0x300 [ 450.697250][T12546] handle_mm_fault+0x1129/0x3020 [ 450.697326][T12546] ? mt_find+0x291/0x3d0 [ 450.697360][T12546] do_user_addr_fault+0x3fd/0x1050 [ 450.697444][T12546] exc_page_fault+0x62/0xa0 [ 450.697566][T12546] asm_exc_page_fault+0x26/0x30 [ 450.697588][T12546] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 450.697626][T12546] Code: 19 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 19 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 450.697651][T12546] RSP: 0018:ffffc9000211f9d0 EFLAGS: 00050202 [ 450.697670][T12546] RAX: ffff88810e016f48 RBX: ffffc9000211fe80 RCX: 000000000000008c [ 450.697744][T12546] RDX: 0000000000000000 RSI: ffff88811bbf7000 RDI: 000020000000acc0 [ 450.697763][T12546] RBP: 0000000000000000 R08: 00000000000003c0 R09: 0000000000000000 [ 450.697780][T12546] R10: 000188811bbf7000 R11: 000188811bbf708b R12: ffffc9000211fe68 [ 450.697799][T12546] R13: 000000000000008c R14: 000000000000008c R15: 000000000000008c [ 450.697886][T12546] _copy_to_iter+0x2df/0xea0 [ 450.697964][T12546] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 450.698052][T12546] __skb_datagram_iter+0xc6/0x680 [ 450.698095][T12546] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 450.698158][T12546] skb_copy_datagram_iter+0x3f/0x120 [ 450.698200][T12546] netlink_recvmsg+0x1a8/0x550 [ 450.698247][T12546] ? __pfx_netlink_recvmsg+0x10/0x10 [ 450.698352][T12546] sock_recvmsg+0xf5/0x120 [ 450.698387][T12546] ____sys_recvmsg+0xf5/0x280 [ 450.698440][T12546] ___sys_recvmsg+0x11f/0x3b0 [ 450.698576][T12546] __x64_sys_recvmsg+0xd1/0x160 [ 450.698672][T12546] x64_sys_call+0x2b1a/0x3020 [ 450.698709][T12546] do_syscall_64+0x12c/0x370 [ 450.698740][T12546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.698783][T12546] RIP: 0033:0x7f563085c799 [ 450.698803][T12546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.698827][T12546] RSP: 002b:00007f562f2af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 450.698848][T12546] RAX: ffffffffffffffda RBX: 00007f5630ad5fa0 RCX: 00007f563085c799 [ 450.698863][T12546] RDX: 0000000000000020 RSI: 000020000000c1c0 RDI: 0000000000000004 [ 450.698946][T12546] RBP: 00007f562f2af090 R08: 0000000000000000 R09: 0000000000000000 [ 450.698959][T12546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.698972][T12546] R13: 00007f5630ad6038 R14: 00007f5630ad5fa0 R15: 00007ffe6d694c98 [ 450.698992][T12546] [ 451.081396][T12542] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.088646][T12542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.096151][T12542] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.103304][T12542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.201593][T12542] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 451.258985][T12550] loop6: detected capacity change from 0 to 512 [ 451.308686][T12550] EXT4-fs: Ignoring removed nobh option [ 451.326723][T12550] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 451.387768][T12548] syzkaller1: entered promiscuous mode [ 451.396218][T12548] syzkaller1: entered allmulticast mode [ 451.445743][T12550] EXT4-fs (loop6): 1 truncate cleaned up [ 451.453194][T12550] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.619172][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2558'. [ 451.629302][T12563] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2558'. [ 452.262569][ T8121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.327144][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 452.327159][ T28] audit: type=1326 audit(1773940236.740:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12572 comm="syz.4.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7301c799 code=0x7ffc0000 [ 452.424025][ T28] audit: type=1326 audit(1773940236.780:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12572 comm="syz.4.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fba7301c799 code=0x7ffc0000 [ 452.461698][ T28] audit: type=1326 audit(1773940236.780:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12572 comm="syz.4.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7301c799 code=0x7ffc0000 [ 452.473078][T12579] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2566'. [ 452.521969][T12585] loop4: detected capacity change from 0 to 1024 [ 452.554811][T12570] infiniband syz1: set active [ 452.556370][T12585] EXT4-fs: test_dummy_encryption option not supported [ 452.578194][ T28] audit: type=1326 audit(1773940236.780:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12572 comm="syz.4.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7301c799 code=0x7ffc0000 [ 452.608229][T12570] infiniband syz1: added syz_tun [ 452.693702][T12570] RDS/IB: syz1: added [ 452.697758][T12570] smc: adding ib device syz1 with port count 1 [ 452.807491][T12570] smc: ib device syz1 port 1 has no pnetid [ 452.985728][T12593] loop4: detected capacity change from 0 to 512 [ 453.093192][T12593] EXT4-fs (loop4): 1 orphan inode deleted [ 453.110324][T12593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.126375][T12593] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.186516][ T35] IPVS: starting estimator thread 0... [ 453.338476][T12599] IPVS: using max 2112 ests per chain, 105600 per kthread [ 453.762806][T12601] loop8: detected capacity change from 0 to 8192 [ 453.790294][ T6664] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 453.852770][ T6664] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:15: Failed to release dquot type 1 [ 453.884824][ T3303] loop8: p1 < > p2 p4 < p5 > [ 453.908200][ T3303] loop8: partition table partially beyond EOD, truncated [ 453.941808][ T3303] loop8: p1 start 134217728 is beyond EOD, truncated [ 453.970694][ T3303] loop8: p2 size 591360 extends beyond EOD, truncated [ 454.042415][ T3303] loop8: p5 size 591360 extends beyond EOD, truncated [ 454.107256][T12608] xt_hashlimit: size too large, truncated to 1048576 [ 454.255354][T12610] netlink: 'syz.6.2572': attribute type 10 has an invalid length. [ 454.442381][T12610] team0 (unregistering): Port device team_slave_0 removed [ 454.503520][T12610] team0 (unregistering): Port device team_slave_1 removed [ 454.522776][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.558561][T12601] loop8: p1 < > p2 p4 < p5 > [ 454.601113][T12616] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 454.614497][T12601] loop8: partition table partially beyond EOD, truncated [ 454.671783][T12601] loop8: p1 start 134217728 is beyond EOD, truncated [ 454.704287][T12601] loop8: p2 size 591360 extends beyond EOD, truncated [ 454.762846][ T28] audit: type=1326 audit(1773940239.170:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7301c799 code=0x7ffc0000 [ 454.802652][T12601] loop8: p5 size 591360 extends beyond EOD, truncated [ 454.844250][ T28] audit: type=1326 audit(1773940239.170:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7301c799 code=0x7ffc0000 [ 454.912901][T12626] siw: device registration error -23 [ 454.924888][ T28] audit: type=1326 audit(1773940239.180:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fba7301c799 code=0x7ffc0000 [ 455.020899][ T28] audit: type=1326 audit(1773940239.180:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7301c799 code=0x7ffc0000 [ 455.151296][ T28] audit: type=1326 audit(1773940239.180:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7301c799 code=0x7ffc0000 [ 455.166881][T12626] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 455.334237][T12647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2586'. [ 455.488734][T12662] siw: device registration error -23 [ 455.609060][T12662] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 455.864951][T12675] siw: device registration error -23 [ 456.114960][T12706] 9p: Could not find request transport: fd0x0000000000000003 [ 456.139554][T12675] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 456.151437][T12711] loop6: detected capacity change from 0 to 2048 [ 456.210750][T12711] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.225939][T12711] forcing mempool usage for bio_alloc_bioset+0x453/0x9a0 [ 456.256639][ T8121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.351308][T12725] loop6: detected capacity change from 0 to 512 [ 456.383234][T12725] EXT4-fs: inline encryption not supported [ 456.399556][T12725] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 456.416107][T12725] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 456.442468][T12725] EXT4-fs error (device loop6): ext4_init_orphan_info:583: comm syz.6.2607: inode #0: comm syz.6.2607: iget: illegal inode # [ 456.459221][T12725] loop6: lost filesystem error report for type 5 error -117 [ 456.459434][T12725] EXT4-fs (loop6): Remounting filesystem read-only [ 456.473529][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 456.473555][ C1] EXT4-fs (loop6): initial error at time 1773940240: ext4_init_orphan_info:583 [ 456.473591][ C1] EXT4-fs (loop6): last error at time 1773940240: ext4_init_orphan_info:583 [ 456.500631][T12725] EXT4-fs (loop6): get orphan inode failed [ 456.506682][T12725] EXT4-fs (loop6): mount failed [ 456.617678][T12745] siw: device registration error -23 [ 456.736242][T12745] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 456.745730][T12743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.751318][T12743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.947472][T12758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12758 comm=syz.1.2621 [ 457.138103][T12780] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2628'. [ 457.409619][T12801] 9pnet_fd: Insufficient options for proto=fd [ 457.543136][T12783] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 457.575926][T12796] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2630'. [ 458.987824][T12818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2633'. [ 459.272893][T12820] loop4: detected capacity change from 0 to 512 [ 459.340794][T12820] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.2634: corrupted in-inode xattr: invalid ea_ino [ 459.368180][T12820] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 459.370927][T12820] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2634: couldn't read orphan inode 15 (err -117) [ 459.380236][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 459.380269][ C1] EXT4-fs (loop4): initial error at time 1773940243: ext4_iget_extra_inode:5025: inode 15 [ 459.380310][ C1] EXT4-fs (loop4): last error at time 1773940243: ext4_iget_extra_inode:5025: inode 15 [ 459.419617][T12823] syzkaller1: entered promiscuous mode [ 459.425217][T12823] syzkaller1: entered allmulticast mode [ 459.451782][T12820] loop4: lost filesystem error report for type 5 error -117 [ 459.456690][T12820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.583916][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2634'. [ 459.607960][ T3527] hid-generic 0000:0003:0001.0013: unknown main item tag 0x0 [ 459.625515][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.637639][ T3527] hid-generic 0000:0003:0001.0013: unknown main item tag 0x0 [ 459.646779][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 459.646796][ T28] audit: type=1326 audit(1773940244.060:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12845 comm="syz.8.2643" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf41d2c799 code=0x0 [ 459.677753][ T3527] hid-generic 0000:0003:0001.0013: hidraw0: HID v0.03 Device [syz0] on syz1 [ 459.722583][T12850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2642'. [ 459.762526][T12849] fido_id[12849]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 459.783486][T12851] 9pnet_fd: Insufficient options for proto=fd [ 459.892181][T12866] loop4: detected capacity change from 0 to 2048 [ 459.940463][T12870] loop1: detected capacity change from 0 to 1024 [ 459.968821][ T4623] loop4: p3 p4 < > [ 459.983456][T12870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.995611][ T4623] loop4: p3 start 11362048 is beyond EOD, truncated [ 460.023298][T12866] loop4: p3 p4 < > [ 460.027599][T12866] loop4: p3 start 11362048 is beyond EOD, truncated [ 460.051511][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.055000][ T28] audit: type=1400 audit(1773940244.470:2436): avc: denied { mount } for pid=12854 comm="syz.4.2644" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 460.124597][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 460.204231][T12883] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 460.505404][T12894] loop8: detected capacity change from 0 to 512 [ 460.575080][T12894] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.2654: corrupted in-inode xattr: invalid ea_ino [ 460.599099][T12894] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 460.599276][T12894] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2654: couldn't read orphan inode 15 (err -117) [ 460.608559][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 460.608580][ C0] EXT4-fs (loop8): initial error at time 1773940245: ext4_iget_extra_inode:5025: inode 15 [ 460.608606][ C0] EXT4-fs (loop8): last error at time 1773940245: ext4_iget_extra_inode:5025: inode 15 [ 460.751842][T12894] loop8: lost filesystem error report for type 5 error -117 [ 460.754186][T12894] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.842050][T12894] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2654'. [ 460.868917][T12247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.068201][ T28] audit: type=1400 audit(1773940245.480:2437): avc: denied { create } for pid=12913 comm="syz.1.2662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 461.186617][ T28] audit: type=1326 audit(1773940245.600:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12919 comm="syz.0.2664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f019e08c799 code=0x0 [ 461.235636][T12924] 9pnet_fd: Insufficient options for proto=fd [ 461.274512][T12925] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2663'. [ 461.370369][T12929] loop1: detected capacity change from 0 to 512 [ 461.560758][T12932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2666'. [ 462.207250][T12938] loop4: detected capacity change from 0 to 512 [ 462.239434][T12938] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 462.293175][T12938] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 462.324570][T12938] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2669: bad orphan inode 4 [ 462.353548][T12938] loop4: lost filesystem error report for type 5 error -117 [ 462.353709][T12938] EXT4-fs (loop4): 1 orphan inode deleted [ 462.361116][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 462.361141][ C1] EXT4-fs (loop4): initial error at time 1773940246: ext4_orphan_get:1417 [ 462.361161][ C1] EXT4-fs (loop4): last error at time 1773940246: ext4_orphan_get:1417 [ 462.474163][T12938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.004579][T12947] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #2: block 4: comm syz.4.2669: lblock 0 mapped to illegal pblock 4 (length 1) [ 463.397113][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.527892][T12956] siw: device registration error -23 [ 463.631200][T12963] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 463.871726][T12968] loop4: detected capacity change from 0 to 1024 [ 463.897746][ T28] audit: type=1326 audit(1773940248.310:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12969 comm="syz.8.2678" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf41d2c799 code=0x0 [ 463.979390][T12968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.008363][T12974] 9pnet_fd: Insufficient options for proto=fd [ 464.765844][T12983] Set syz1 is full, maxelem 65536 reached [ 465.898717][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.944930][T12994] loop8: detected capacity change from 0 to 512 [ 465.965737][T12994] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 466.042938][T12994] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 466.061667][T12994] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2686: bad orphan inode 4 [ 466.081987][T12994] loop8: lost filesystem error report for type 5 error -117 [ 466.082211][T12994] EXT4-fs (loop8): 1 orphan inode deleted [ 466.089863][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 466.089887][ C1] EXT4-fs (loop8): initial error at time 1773940250: ext4_orphan_get:1417 [ 466.089937][ C1] EXT4-fs (loop8): last error at time 1773940250: ext4_orphan_get:1417 [ 466.161089][T12994] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.486832][T12997] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #2: block 4: comm syz.8.2686: lblock 0 mapped to illegal pblock 4 (length 1) [ 466.946737][T12247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.100964][T13009] lo speed is unknown, defaulting to 1000 [ 467.139515][T13009] lo speed is unknown, defaulting to 1000 [ 467.192886][T13009] lo speed is unknown, defaulting to 1000 [ 467.214973][T13015] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 467.241664][T13005] siw: device registration error -23 [ 467.274524][T13014] loop4: detected capacity change from 0 to 8192 [ 467.333928][ T28] audit: type=1326 audit(1773940251.750:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13020 comm="syz.0.2693" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f019e08c799 code=0x0 [ 467.378914][ T3303] loop4: p1 < > p2 p4 < p5 > [ 467.383964][ T3303] loop4: partition table partially beyond EOD, truncated [ 467.399816][ T3303] loop4: p1 start 134217728 is beyond EOD, truncated [ 467.407033][ T3303] loop4: p2 size 591360 extends beyond EOD, truncated [ 467.436681][T13024] 9pnet_fd: Insufficient options for proto=fd [ 467.451069][ T3303] loop4: p5 size 591360 extends beyond EOD, truncated [ 467.470593][T13014] loop4: p1 < > p2 p4 < p5 > [ 467.475362][T13014] loop4: partition table partially beyond EOD, truncated [ 467.561635][T13014] loop4: p1 start 134217728 is beyond EOD, truncated [ 467.572974][T13025] lo speed is unknown, defaulting to 1000 [ 467.585138][T13025] lo speed is unknown, defaulting to 1000 [ 467.598706][T13031] loop1: detected capacity change from 0 to 1024 [ 467.613324][T13031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.618218][T13014] loop4: p2 size 591360 extends beyond EOD, truncated [ 467.715149][T13014] loop4: p5 size 591360 extends beyond EOD, truncated [ 467.762925][T13025] lo speed is unknown, defaulting to 1000 [ 467.850890][T13028] netlink: 'syz.8.2695': attribute type 13 has an invalid length. [ 467.972309][T13029] loop8: detected capacity change from 0 to 512 [ 468.129243][T13028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 468.258823][T13029] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.317375][T13025] bond0 (unregistering): Released all slaves [ 468.460299][T13041] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 468.495204][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.532688][T12247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.603435][T13055] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2701'. [ 468.635136][T13055] tipc: Started in network mode [ 468.652819][T13055] tipc: Node identity 3a367ec4604d, cluster identity 4711 [ 468.680737][T13055] tipc: Enabled bearer , priority 0 [ 468.705012][T13060] syzkaller0: entered promiscuous mode [ 468.718861][T13060] syzkaller0: entered allmulticast mode [ 468.783776][T13055] tipc: Resetting bearer [ 468.814779][T13053] tipc: Resetting bearer [ 468.845653][T13053] tipc: Disabling bearer [ 468.866421][T13061] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2702'. [ 468.879323][T13057] lo speed is unknown, defaulting to 1000 [ 468.890200][T13057] lo speed is unknown, defaulting to 1000 [ 469.014671][T13057] lo speed is unknown, defaulting to 1000 [ 469.239370][T13071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2707'. [ 469.278436][T13071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2707'. [ 470.223703][T13084] loop4: detected capacity change from 0 to 512 [ 470.412221][T13084] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2708: bad orphan inode 17 [ 470.458041][T13084] loop4: lost filesystem error report for type 5 error -117 [ 470.458280][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 470.472195][ C0] EXT4-fs (loop4): initial error at time 1773940254: ext4_orphan_get:1417 [ 470.480864][ C0] EXT4-fs (loop4): last error at time 1773940254: ext4_orphan_get:1417 [ 470.565280][T13084] ext4_test_bit(bit=16, block=4) = 1 [ 470.594493][T13084] is_bad_inode(inode)=0 [ 470.616498][T13084] NEXT_ORPHAN(inode)=0 [ 470.636829][T13084] max_ino=32 [ 470.655348][T13084] i_nlink=1 [ 470.672872][T13084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.049596][ T5862] smc: removing ib device syz1 [ 471.097970][ T3420] syz1: Port: 1 Link DOWN [ 471.223436][T13079] lo speed is unknown, defaulting to 1000 [ 471.243931][T13079] lo speed is unknown, defaulting to 1000 [ 471.311285][T13099] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 471.409420][T13104] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 471.511008][T13079] lo speed is unknown, defaulting to 1000 [ 471.520090][T13094] siw: device registration error -23 [ 471.529422][T13101] siw: device registration error -23 [ 471.718744][T13113] xt_hashlimit: size too large, truncated to 1048576 [ 471.790614][ T6683] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.880140][ T6683] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.909319][T13079] chnl_net:caif_netlink_parms(): no params data found [ 471.928798][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.962338][ T6683] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.976389][T13125] loop4: detected capacity change from 0 to 512 [ 472.029938][T13125] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 472.079859][ T6683] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.114538][T13125] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 472.123281][T13125] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2718: bad orphan inode 4 [ 472.133879][T13125] loop4: lost filesystem error report for type 5 error -117 [ 472.134035][T13125] EXT4-fs (loop4): 1 orphan inode deleted [ 472.141536][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 472.141555][ C0] EXT4-fs (loop4): initial error at time 1773940256: ext4_orphan_get:1417 [ 472.141575][ C0] EXT4-fs (loop4): last error at time 1773940256: ext4_orphan_get:1417 [ 472.198640][T13125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.268922][T13115] lo speed is unknown, defaulting to 1000 [ 472.285413][T13115] lo speed is unknown, defaulting to 1000 [ 472.344416][T13138] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2719'. [ 472.345705][T13079] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.362080][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2719'. [ 472.433480][T13139] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #2: block 4: comm syz.4.2718: lblock 0 mapped to illegal pblock 4 (length 1) [ 472.890249][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.898600][T13079] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.906816][T13079] bridge_slave_0: entered allmulticast mode [ 472.919735][T13079] bridge_slave_0: entered promiscuous mode [ 472.938859][T13138] geneve0: entered allmulticast mode [ 472.946970][T13079] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.964926][T13079] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.978394][T13079] bridge_slave_1: entered allmulticast mode [ 472.985037][T13079] bridge_slave_1: entered promiscuous mode [ 473.108343][T13115] lo speed is unknown, defaulting to 1000 [ 473.125652][ T6683] bridge_slave_1: left allmulticast mode [ 473.133692][ T6683] bridge_slave_1: left promiscuous mode [ 473.146346][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.156070][ T6683] bridge_slave_0: left allmulticast mode [ 474.040759][T13155] siw: device registration error -23 [ 474.065205][T13151] Set syz1 is full, maxelem 65536 reached [ 474.112368][ T6683] bridge_slave_0: left promiscuous mode [ 474.118269][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.200807][ T6683] gretap0 (unregistering): left allmulticast mode [ 474.660924][ T6683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.682420][ T6683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.702259][ T6683] bond0 (unregistering): Released all slaves [ 474.722528][T13079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.742701][T13079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.788020][T13079] team0: Port device team_slave_0 added [ 474.801453][ T6683] IPVS: stopping backup sync thread 10883 ... [ 474.813581][T13079] team0: Port device team_slave_1 added [ 474.849320][T13079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.866726][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.914334][T13079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.054017][T13155] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 475.070191][T13161] syzkaller1: entered promiscuous mode [ 475.076131][T13161] syzkaller1: entered allmulticast mode [ 475.082695][T13169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13169 comm=syz.4.2727 [ 475.136132][T13079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.148399][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.208227][T13079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.222318][T13174] xt_hashlimit: size too large, truncated to 1048576 [ 475.241175][ T6683] hsr_slave_0: left promiscuous mode [ 475.258476][ T6683] hsr_slave_1: left promiscuous mode [ 475.264877][ T6683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.284671][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.308856][ T6683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.326663][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.355769][ T6683] veth1_macvtap: left promiscuous mode [ 475.365141][ T6683] veth0_macvtap: left promiscuous mode [ 475.476380][ T6683] pimreg3 (unregistering): left allmulticast mode [ 475.545075][ T6683] team0 (unregistering): Port device team_slave_1 removed [ 475.570648][ T6683] team0 (unregistering): Port device team_slave_0 removed [ 475.740264][T13079] hsr_slave_0: entered promiscuous mode [ 475.760901][T13079] hsr_slave_1: entered promiscuous mode [ 475.774478][T13079] debugfs: 'hsr0' already exists in 'hsr' [ 475.787025][T13079] Cannot create hsr debugfs directory [ 475.801999][T13196] loop8: detected capacity change from 0 to 512 [ 475.941455][T13196] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 476.010686][T13196] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 476.053122][ T6683] IPVS: stop unused estimator thread 0... [ 476.062623][T13115] chnl_net:caif_netlink_parms(): no params data found [ 476.075405][T13196] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2730: bad orphan inode 4 [ 476.130592][T13196] loop8: lost filesystem error report for type 5 error -117 [ 476.130846][T13196] EXT4-fs (loop8): 1 orphan inode deleted [ 476.138261][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 476.138285][ C1] EXT4-fs (loop8): initial error at time 1773940260: ext4_orphan_get:1417 [ 476.138315][ C1] EXT4-fs (loop8): last error at time 1773940260: ext4_orphan_get:1417 [ 476.199133][T13196] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.395310][T13115] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.402938][T13115] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.411078][T13115] bridge_slave_0: entered allmulticast mode [ 476.419126][T13115] bridge_slave_0: entered promiscuous mode [ 476.428603][T13115] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.436065][T13115] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.444676][T13115] bridge_slave_1: entered allmulticast mode [ 476.472235][T13224] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #2: block 4: comm syz.8.2730: lblock 0 mapped to illegal pblock 4 (length 1) [ 476.671825][T13115] bridge_slave_1: entered promiscuous mode [ 476.876398][T13115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.887470][T12247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.946094][T13240] netlink: 'syz.1.2735': attribute type 5 has an invalid length. [ 476.955217][T13115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.968308][T13240] netlink: 'syz.1.2735': attribute type 11 has an invalid length. [ 476.985189][T13241] loop8: detected capacity change from 0 to 512 [ 477.008266][T13244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=13244 comm=syz.1.2735 [ 477.031283][T13241] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.2733: inode has both inline data and extents flags [ 477.050931][ T28] audit: type=1400 audit(1773940261.440:2441): avc: denied { getopt } for pid=13238 comm="syz.8.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 477.087405][T13115] team0: Port device team_slave_0 added [ 477.101166][T13241] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 477.101340][T13241] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2733: couldn't read orphan inode 15 (err -117) [ 477.110563][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 477.110587][ C0] EXT4-fs (loop8): initial error at time 1773940261: ext4_orphan_get:1391: inode 15 [ 477.110647][ C0] EXT4-fs (loop8): last error at time 1773940261: ext4_orphan_get:1391: inode 15 [ 477.161960][T13115] team0: Port device team_slave_1 added [ 477.238213][T13241] loop8: lost filesystem error report for type 5 error -117 [ 477.239197][T13241] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.249409][T13115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.294578][T13115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.299339][T13241] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.350897][T13115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.362136][T13079] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 477.389559][T13079] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 477.590929][T13260] siw: device registration error -23 [ 477.596655][T13249] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 477.605644][T13270] loop8: detected capacity change from 0 to 1024 [ 477.638877][T13115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.645877][T13115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.650366][T13270] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 477.733910][T13115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.776125][T13079] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 477.812899][T13079] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 477.947191][T13260] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 478.081821][T13115] hsr_slave_0: entered promiscuous mode [ 478.128076][T13115] hsr_slave_1: entered promiscuous mode [ 478.148250][T13115] debugfs: 'hsr0' already exists in 'hsr' [ 478.154121][T13115] Cannot create hsr debugfs directory [ 478.363305][T13079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.419241][T13328] loop1: detected capacity change from 0 to 512 [ 478.466219][T13079] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.507648][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.514852][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.533046][T13328] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2744: bad orphan inode 17 [ 478.570541][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.577846][ T5862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.591163][T13328] loop1: lost filesystem error report for type 5 error -117 [ 478.591361][T13328] ext4_test_bit(bit=16, block=4) = 1 [ 478.598896][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 478.598917][ C0] EXT4-fs (loop1): initial error at time 1773940263: ext4_orphan_get:1417 [ 478.598953][ C0] EXT4-fs (loop1): last error at time 1773940263: ext4_orphan_get:1417 [ 478.628541][T13328] is_bad_inode(inode)=0 [ 478.632778][T13328] NEXT_ORPHAN(inode)=0 [ 478.636871][T13328] max_ino=32 [ 478.648277][T13328] i_nlink=1 [ 478.679226][T13328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.700131][T13115] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 478.720146][T13115] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 478.759887][T13115] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 478.788603][T13115] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 479.100820][T13115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.113220][T13079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.135703][T13115] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.166514][T13365] siw: device registration error -23 [ 479.202273][ T977] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.209707][ T977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.239523][ T977] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.246636][ T977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.480935][T13365] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 479.704615][T13115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.752187][T13079] veth0_vlan: entered promiscuous mode [ 479.794619][T13079] veth1_vlan: entered promiscuous mode [ 479.876634][T13079] veth0_macvtap: entered promiscuous mode [ 479.891065][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.910098][T13079] veth1_macvtap: entered promiscuous mode [ 479.976482][T13079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.015835][T13402] lo speed is unknown, defaulting to 1000 [ 480.024544][T13079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.035927][T13399] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 480.042491][T13399] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 480.058337][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.060909][T13399] vhci_hcd vhci_hcd.0: Device attached [ 480.067662][T13402] lo speed is unknown, defaulting to 1000 [ 480.078619][ T6683] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.087392][ T6671] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.111318][ T6671] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.216590][T13115] veth0_vlan: entered promiscuous mode [ 480.248684][T13115] veth1_vlan: entered promiscuous mode [ 480.258535][ T3396] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 480.279146][T13402] lo speed is unknown, defaulting to 1000 [ 480.338518][T13115] veth0_macvtap: entered promiscuous mode [ 480.344671][ T3396] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 480.365945][T13115] veth1_macvtap: entered promiscuous mode [ 480.455182][T13115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.467874][T13405] vhci_hcd: connection reset by peer [ 480.486869][T12453] hid-generic 0000:0003:0001.0014: unknown main item tag 0x0 [ 480.494514][ T6671] vhci_hcd vhci_hcd.1: stop threads [ 480.496325][T12453] hid-generic 0000:0003:0001.0014: unknown main item tag 0x0 [ 480.507076][ T6671] vhci_hcd vhci_hcd.1: release socket [ 480.538360][ T6671] vhci_hcd vhci_hcd.1: disconnect device [ 480.539277][T12453] hid-generic 0000:0003:0001.0014: hidraw0: HID v0.03 Device [syz0] on syz1 [ 480.580446][T13115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.637195][ T5862] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.651053][T13424] fido_id[13424]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 480.680592][T13426] loop4: detected capacity change from 0 to 256 [ 480.692691][ T5862] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.756403][ T5862] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.777990][ T5862] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.864424][T13423] siw: device registration error -23 [ 480.927947][T13439] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 481.094759][ T3393] hid-generic 0000:0003:0001.0015: unknown main item tag 0x0 [ 481.104761][ T3393] hid-generic 0000:0003:0001.0015: unknown main item tag 0x0 [ 481.122731][ T3393] hid-generic 0000:0003:0001.0015: hidraw0: HID v0.03 Device [syz0] on syz1 [ 481.182751][T13451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2768'. [ 481.196169][T13452] loop4: detected capacity change from 0 to 512 [ 481.219333][T13449] fido_id[13449]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 481.234077][T13451] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2768'. [ 481.474598][T13466] loop9: detected capacity change from 0 to 512 [ 481.592463][T13452] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2765: bad orphan inode 17 [ 481.603996][T13451] loop1: detected capacity change from 0 to 128 [ 481.720686][T13451] vfat: Unknown parameter '01777777777777777777777ÿ0xffffffffffffffff00000000000000000000000' [ 481.810742][T13452] loop4: lost filesystem error report for type 5 error -117 [ 481.811621][T13452] ext4_test_bit(bit=16, block=4) = 1 [ 481.819204][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 481.819224][ C0] EXT4-fs (loop4): initial error at time 1773940266: ext4_orphan_get:1417 [ 481.819261][ C0] EXT4-fs (loop4): last error at time 1773940266: ext4_orphan_get:1417 [ 482.455614][T13452] is_bad_inode(inode)=0 [ 482.507837][T13452] NEXT_ORPHAN(inode)=0 [ 482.561843][T13452] max_ino=32 [ 482.595098][T13452] i_nlink=1 [ 482.649895][T13452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.270253][ T28] audit: type=1400 audit(1773940267.690:2442): avc: denied { getopt } for pid=13478 comm="syz.9.2777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 483.270678][T13480] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2777'. [ 483.464926][ T3393] hid-generic 0000:0003:0001.0016: unknown main item tag 0x0 [ 483.472739][ T3393] hid-generic 0000:0003:0001.0016: unknown main item tag 0x0 [ 483.483211][ T3393] hid-generic 0000:0003:0001.0016: hidraw0: HID v0.03 Device [syz0] on syz1 [ 483.526281][T13493] netlink: 10 bytes leftover after parsing attributes in process `syz.8.2781'. [ 483.551285][T13493] tipc: Started in network mode [ 483.577122][T13492] fido_id[13492]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 483.578399][T13493] tipc: Node identity 3a6e21cca155, cluster identity 4711 [ 483.640091][T13493] tipc: Enabled bearer , priority 0 [ 483.699367][T13496] syzkaller0: entered promiscuous mode [ 483.704895][T13496] syzkaller0: entered allmulticast mode [ 483.774856][T13493] tipc: Resetting bearer [ 483.789120][T13491] tipc: Resetting bearer [ 483.815081][T13491] tipc: Disabling bearer [ 483.842142][T13501] loop9: detected capacity change from 0 to 2048 [ 483.878833][T13501] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.906830][T13484] Set syz1 is full, maxelem 65536 reached [ 483.950463][ T28] audit: type=1326 audit(1773940268.370:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13504 comm="syz.0.2785" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccef93c799 code=0x0 [ 484.004410][ T28] audit: type=1326 audit(1773940268.420:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13506 comm="syz.8.2786" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf41d2c799 code=0x0 [ 484.029529][T13115] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.062824][T13462] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 484.191367][ T28] audit: type=1326 audit(1773940268.610:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13510 comm="syz.9.2788" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02c7a0c799 code=0x0 [ 484.395454][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.427103][T13523] FAULT_INJECTION: forcing a failure. [ 484.427103][T13523] name failslab, interval 1, probability 0, space 0, times 0 [ 484.441414][T13523] CPU: 0 UID: 0 PID: 13523 Comm: syz.4.2789 Tainted: G W syzkaller #0 PREEMPT(full) [ 484.441471][T13523] Tainted: [W]=WARN [ 484.441480][T13523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 484.441499][T13523] Call Trace: [ 484.441508][T13523] [ 484.441517][T13523] __dump_stack+0x1d/0x30 [ 484.441634][T13523] dump_stack_lvl+0x95/0xd0 [ 484.441740][T13523] dump_stack+0x15/0x1b [ 484.441770][T13523] should_fail_ex+0x263/0x280 [ 484.441807][T13523] should_failslab+0x8c/0xb0 [ 484.441850][T13523] kmem_cache_alloc_noprof+0x66/0x400 [ 484.441880][T13523] ? skb_clone+0x151/0x1f0 [ 484.442056][T13523] skb_clone+0x151/0x1f0 [ 484.442099][T13523] __netlink_deliver_tap+0x2c9/0x500 [ 484.442200][T13523] ? netlink_attachskb+0x2e2/0x660 [ 484.442240][T13523] netlink_sendskb+0x126/0x150 [ 484.442276][T13523] netlink_unicast+0x2a2/0x690 [ 484.442387][T13523] netlink_ack+0x4c8/0x500 [ 484.442429][T13523] netlink_rcv_skb+0x192/0x220 [ 484.442499][T13523] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 484.442542][T13523] nfnetlink_rcv+0x167/0x1720 [ 484.442575][T13523] ? consume_skb+0x4b/0x160 [ 484.442612][T13523] ? __dev_queue_xmit+0x148/0x1f20 [ 484.442764][T13523] ? preempt_schedule_common+0x11/0x30 [ 484.442804][T13523] ? preempt_schedule_thunk+0x16/0x30 [ 484.442849][T13523] ? __dev_queue_xmit+0x148/0x1f20 [ 484.442919][T13523] ? __local_bh_enable_ip+0x5f/0x80 [ 484.442946][T13523] ? __dev_queue_xmit+0x136c/0x1f20 [ 484.443075][T13523] ? __dev_queue_xmit+0x148/0x1f20 [ 484.443119][T13523] ? ref_tracker_free+0x37d/0x3e0 [ 484.443155][T13523] ? _raw_spin_lock+0x52/0xa0 [ 484.443186][T13523] ? __list_del_entry_valid_or_report+0x65/0x130 [ 484.443329][T13523] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 484.443394][T13523] ? rcu_preempt_deferred_qs_irqrestore+0x3dd/0x5c0 [ 484.443528][T13523] ? rcu_read_unlock_special+0x9f/0x200 [ 484.443561][T13523] netlink_unicast+0x5c0/0x690 [ 484.443592][T13523] netlink_sendmsg+0x5c8/0x6f0 [ 484.443690][T13523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.443735][T13523] ____sys_sendmsg+0x563/0x5b0 [ 484.443782][T13523] ___sys_sendmsg+0x195/0x1e0 [ 484.443907][T13523] __x64_sys_sendmsg+0xd4/0x160 [ 484.443968][T13523] x64_sys_call+0x194c/0x3020 [ 484.444003][T13523] do_syscall_64+0x12c/0x370 [ 484.444036][T13523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.444065][T13523] RIP: 0033:0x7fba7301c799 [ 484.444109][T13523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.444135][T13523] RSP: 002b:00007fba71a77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.444162][T13523] RAX: ffffffffffffffda RBX: 00007fba73295fa0 RCX: 00007fba7301c799 [ 484.444182][T13523] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 484.444205][T13523] RBP: 00007fba71a77090 R08: 0000000000000000 R09: 0000000000000000 [ 484.444223][T13523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.444240][T13523] R13: 00007fba73296038 R14: 00007fba73295fa0 R15: 00007ffd7afc3838 [ 484.444267][T13523] [ 484.759359][T13524] loop1: detected capacity change from 0 to 512 [ 485.435280][ T3396] usb 3-1: enqueue for inactive port 0 [ 485.454657][ T3396] usb 3-1: enqueue for inactive port 0 [ 486.438114][ T3396] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 486.492729][T13536] loop8: detected capacity change from 0 to 256 [ 486.666266][T13545] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2796'. [ 486.722469][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2796'. [ 486.749780][T13541] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.757143][T13541] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.821176][T13548] siw: device registration error -23 [ 486.896597][T13541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.938180][T13541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.005450][T13542] geneve2: entered promiscuous mode [ 487.119514][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2803'. [ 487.243214][T13548] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 487.282041][ T6671] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.298168][ T6671] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 43026 - 0 [ 487.331437][ T6671] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.341841][ T6671] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 43026 - 0 [ 487.350983][T13562] netlink: 'syz.4.2802': attribute type 29 has an invalid length. [ 487.377864][ T3396] hid-generic 0000:0003:0001.0017: unknown main item tag 0x0 [ 487.386185][ T6671] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.404619][ T3396] hid-generic 0000:0003:0001.0017: unknown main item tag 0x0 [ 487.429995][ T6671] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 43026 - 0 [ 487.455668][ T3396] hid-generic 0000:0003:0001.0017: hidraw0: HID v0.03 Device [syz0] on syz1 [ 487.480210][ T6671] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.519181][T13573] fido_id[13573]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 487.529005][ T6671] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 43026 - 0 [ 487.681068][T13581] openvswitch: netlink: Missing key (keys=40, expected=100) [ 487.856320][T13579] loop9: detected capacity change from 0 to 8192 [ 487.873074][T13574] loop4: detected capacity change from 0 to 8192 [ 488.028407][ T3303] loop9: p1 < > p2 p4 < p5 > [ 488.043532][ T3303] loop9: partition table partially beyond EOD, truncated [ 488.083495][ T3303] loop9: p1 start 134217728 is beyond EOD, truncated [ 488.121274][ T3303] loop9: p2 size 591360 extends beyond EOD, truncated [ 488.132310][T13591] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2811'. [ 488.168822][ T3303] loop9: p5 size 591360 extends beyond EOD, truncated [ 488.198853][ T4623] loop4: p1 < > p2 p4 < p5 > [ 488.203587][ T4623] loop4: partition table partially beyond EOD, truncated [ 488.231325][ T4623] loop4: p1 start 134217728 is beyond EOD, truncated [ 488.251769][ T4623] loop4: p2 size 591360 extends beyond EOD, truncated [ 488.270327][ T4623] loop4: p5 size 591360 extends beyond EOD, truncated [ 488.326426][T13597] loop8: detected capacity change from 0 to 1024 [ 488.338632][T13579] loop9: p1 < > p2 p4 < p5 > [ 488.351714][T13574] loop4: p1 < > p2 p4 < p5 > [ 488.367938][T13574] loop4: partition table partially beyond EOD, truncated [ 488.407450][T13579] loop9: partition table partially beyond EOD, truncated [ 488.463012][T13597] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 488.481624][T13574] loop4: p1 start 134217728 is beyond EOD, truncated [ 488.489011][T13597] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 488.510407][T13574] loop4: p2 size 591360 extends beyond EOD, truncated [ 488.527612][T13597] EXT4-fs error (device loop8): ext4_get_journal_inode:5863: comm syz.8.2813: inode #4294967295: comm syz.8.2813: iget: illegal inode # [ 488.582013][T13597] loop8: lost filesystem error report for type 5 error -117 [ 488.582128][T13597] EXT4-fs (loop8): no journal found [ 488.589534][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 488.589559][ C1] EXT4-fs (loop8): initial error at time 1773940273: ext4_get_journal_inode:5863 [ 488.589593][ C1] EXT4-fs (loop8): last error at time 1773940273: ext4_get_journal_inode:5863 [ 488.672229][T13574] loop4: p5 size 591360 extends beyond EOD, truncated [ 488.718706][T13579] loop9: p1 start 134217728 is beyond EOD, truncated [ 488.725754][T13597] EXT4-fs (loop8): can't get journal size [ 488.832506][T13597] EXT4-fs (loop8): failed to initialize system zone (-22) [ 488.911043][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 488.947459][T13579] loop9: p2 size 591360 extends beyond EOD, truncated [ 488.966363][T13597] EXT4-fs (loop8): mount failed [ 489.062436][T13579] loop9: p5 size 591360 extends beyond EOD, truncated [ 489.080020][T13606] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 489.172788][ T4623] udevd[4623]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 489.188603][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 489.214638][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 489.275807][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 489.281050][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 489.296735][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 489.381929][ T3420] hid-generic 0000:0003:0001.0018: unknown main item tag 0x0 [ 489.390043][ T3420] hid-generic 0000:0003:0001.0018: unknown main item tag 0x0 [ 489.408809][ T3420] hid-generic 0000:0003:0001.0018: hidraw0: HID v0.03 Device [syz0] on syz1 [ 489.508480][T13616] fido_id[13616]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 489.634905][ T28] audit: type=1400 audit(1773940274.050:2446): avc: denied { getopt } for pid=13620 comm="syz.8.2820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 489.796928][ T28] audit: type=1400 audit(1773940274.210:2447): avc: denied { setopt } for pid=13631 comm="syz.9.2821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 489.936990][T13622] lo speed is unknown, defaulting to 1000 [ 489.977913][T13622] lo speed is unknown, defaulting to 1000 [ 489.995820][T13649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2829'. [ 490.115377][T13652] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 490.158237][T13622] lo speed is unknown, defaulting to 1000 [ 490.174417][T13650] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 490.185200][T13642] loop8: detected capacity change from 0 to 8192 [ 490.244306][T13661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2833'. [ 490.308273][ T3303] loop8: p1 < > p2 p4 < p5 > [ 490.313016][ T3303] loop8: partition table partially beyond EOD, truncated [ 490.333446][ T3303] loop8: p1 start 134217728 is beyond EOD, truncated [ 490.380634][ T3303] loop8: p2 size 591360 extends beyond EOD, truncated [ 490.414507][T13622] chnl_net:caif_netlink_parms(): no params data found [ 490.444731][ T3303] loop8: p5 size 591360 extends beyond EOD, truncated [ 490.502685][T13642] loop8: p1 < > p2 p4 < p5 > [ 490.507602][T13642] loop8: partition table partially beyond EOD, truncated [ 490.608039][T13642] loop8: p1 start 134217728 is beyond EOD, truncated [ 490.693088][T13622] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.701108][T13622] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.708732][T13622] bridge_slave_0: entered allmulticast mode [ 490.715572][T13622] bridge_slave_0: entered promiscuous mode [ 490.723266][T13622] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.783880][T13622] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.794278][T13689] netlink: 'syz.0.2841': attribute type 5 has an invalid length. [ 490.810874][T13642] loop8: p2 size 591360 extends beyond EOD, truncated [ 490.812940][T13689] netlink: 'syz.0.2841': attribute type 11 has an invalid length. [ 490.840288][T13642] loop8: p5 size 591360 extends beyond EOD, truncated [ 490.844292][T13622] bridge_slave_1: entered allmulticast mode [ 490.870497][T13622] bridge_slave_1: entered promiscuous mode [ 490.878803][T13691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13691 comm=syz.0.2841 [ 491.069878][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2841'. [ 491.260006][T13622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.331343][T13622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.375172][T13622] team0: Port device team_slave_0 added [ 491.398576][T13622] team0: Port device team_slave_1 added [ 491.496213][T13622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.558098][T13622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.589192][T13622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.669305][T13622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.710836][T13622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.787347][T13697] siw: device registration error -23 [ 491.849001][T13622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.952386][T13711] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2846'. [ 492.029112][T13715] loop8: detected capacity change from 0 to 512 [ 492.049105][T13715] EXT4-fs (loop8): bad geometry: block count 65409 exceeds size of device (128 blocks) [ 492.102796][T13697] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 492.176954][T13622] hsr_slave_0: entered promiscuous mode [ 492.184629][T13622] hsr_slave_1: entered promiscuous mode [ 492.206486][T13622] debugfs: 'hsr0' already exists in 'hsr' [ 492.212836][T13622] Cannot create hsr debugfs directory [ 492.428346][T13622] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.443849][T13622] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.498199][T13726] loop9: detected capacity change from 0 to 512 [ 492.757932][T13622] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.864107][T13622] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.054158][T13622] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.159744][T13622] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.200616][T13731] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2852'. [ 493.291140][T13622] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.332115][T13622] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.549392][T13622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 493.618923][T13622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 493.640667][T13736] loop8: detected capacity change from 0 to 2048 [ 493.667812][T13622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 493.701204][T13736] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.726802][T13622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 493.749690][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2855'. [ 493.874682][T12247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.058542][T13622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.225687][T13622] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.276747][T13754] netlink: 'syz.9.2858': attribute type 8 has an invalid length. [ 494.346057][ T6683] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.353189][ T6683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.814705][T13760] loop8: detected capacity change from 0 to 1024 [ 494.900087][ T6683] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.907261][ T6683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.959130][T13760] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.134866][T13764] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2859'. [ 495.531369][T12247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.569303][T13771] loop9: detected capacity change from 0 to 512 [ 495.590640][T13771] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 495.645352][T13622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.658771][T13771] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 495.697780][T13771] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.2860: bad orphan inode 4 [ 495.738994][T13771] loop9: lost filesystem error report for type 5 error -117 [ 495.739163][T13771] EXT4-fs (loop9): 1 orphan inode deleted [ 495.752267][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 495.752284][ C1] EXT4-fs (loop9): initial error at time 1773940280: ext4_orphan_get:1417 [ 495.752304][ C1] EXT4-fs (loop9): last error at time 1773940280: ext4_orphan_get:1417 [ 495.884253][T13771] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.114848][T13783] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2863'. [ 496.190579][T13787] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #2: block 4: comm syz.9.2860: lblock 0 mapped to illegal pblock 4 (length 1) [ 496.294990][T13794] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2862'. [ 496.338162][ T28] audit: type=1400 audit(1773940280.740:2448): avc: denied { name_bind } for pid=13782 comm="syz.0.2863" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 496.437808][T13794] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2862'. [ 496.472667][T13622] veth0_vlan: entered promiscuous mode [ 496.620772][ T28] audit: type=1400 audit(1773940280.910:2449): avc: denied { nlmsg_tty_audit } for pid=13796 comm="syz.8.2864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 496.643405][T13115] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.658976][T13622] veth1_vlan: entered promiscuous mode [ 496.829434][T13622] veth0_macvtap: entered promiscuous mode [ 496.904730][T13622] veth1_macvtap: entered promiscuous mode [ 496.935396][T13622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.946874][T13622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.112045][ T5862] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.933360][ T28] audit: type=1326 audit(1773940282.400:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13812 comm="syz.9.2866" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02c7a0c799 code=0x0 [ 499.369820][T13848] FAULT_INJECTION: forcing a failure. [ 499.369820][T13848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.572694][T13848] CPU: 1 UID: 0 PID: 13848 Comm: syz.9.2866 Tainted: G W syzkaller #0 PREEMPT(full) [ 499.572739][T13848] Tainted: [W]=WARN [ 499.572749][T13848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.572766][T13848] Call Trace: [ 499.572774][T13848] [ 499.572782][T13848] __dump_stack+0x1d/0x30 [ 499.572846][T13848] dump_stack_lvl+0x95/0xd0 [ 499.572910][T13848] dump_stack+0x15/0x1b [ 499.573006][T13848] should_fail_ex+0x263/0x280 [ 499.573156][T13848] should_fail+0xb/0x20 [ 499.573188][T13848] should_fail_usercopy+0x1a/0x20 [ 499.573224][T13848] _copy_from_user+0x1c/0xb0 [ 499.573292][T13848] memdup_user+0x5e/0xd0 [ 499.573318][T13848] strndup_user+0x68/0xb0 [ 499.573345][T13848] __se_sys_mount+0x4d/0x2e0 [ 499.573375][T13848] ? fput+0x8f/0xc0 [ 499.573405][T13848] ? ksys_write+0x194/0x1a0 [ 499.573437][T13848] __x64_sys_mount+0x67/0x80 [ 499.573477][T13848] x64_sys_call+0x2d61/0x3020 [ 499.573506][T13848] do_syscall_64+0x12c/0x370 [ 499.573597][T13848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.573631][T13848] RIP: 0033:0x7f02c7a0c799 [ 499.573652][T13848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.573675][T13848] RSP: 002b:00007f02c6446028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 499.573695][T13848] RAX: ffffffffffffffda RBX: 00007f02c7c86090 RCX: 00007f02c7a0c799 [ 499.573712][T13848] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 499.573783][T13848] RBP: 00007f02c6446090 R08: 00002000000011c0 R09: 0000000000000000 [ 499.573798][T13848] R10: 0000000000000084 R11: 0000000000000246 R12: 0000000000000001 [ 499.573811][T13848] R13: 00007f02c7c86128 R14: 00007f02c7c86090 R15: 00007ffc5e69a128 [ 499.573836][T13848] [ 500.001555][T13874] loop8: detected capacity change from 0 to 512 [ 500.030134][T13874] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.2869: corrupted in-inode xattr: invalid ea_ino [ 500.062718][T13874] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 500.063462][T13874] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2869: couldn't read orphan inode 15 (err -117) [ 500.073221][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 500.073250][ C0] EXT4-fs (loop8): initial error at time 1773940284: ext4_iget_extra_inode:5025: inode 15 [ 500.073290][ C0] EXT4-fs (loop8): last error at time 1773940284: ext4_iget_extra_inode:5025: inode 15 [ 500.074705][ T6676] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.089936][T13874] loop8: lost filesystem error report for type 5 error -117 [ 500.152553][ T6676] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.169993][T13874] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.201312][T13881] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2870'. [ 500.243748][T13884] netlink: 'syz.0.2872': attribute type 9 has an invalid length. [ 500.251727][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2872'. [ 500.262389][T12247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.266530][ T6676] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.295162][T13884] macvlan2: entered promiscuous mode [ 500.328949][T13884] gretap0: entered promiscuous mode [ 500.339286][T13884] macvlan2: entered allmulticast mode [ 500.448481][T13884] gretap0: entered allmulticast mode [ 500.480306][T13878] tipc: Started in network mode [ 500.485405][T13878] tipc: Node identity 468ec33e10af, cluster identity 4711 [ 500.499910][T13878] tipc: Enabled bearer , priority 0 [ 500.506987][T13881] syzkaller0: entered promiscuous mode [ 500.522413][T13881] syzkaller0: entered allmulticast mode [ 501.493291][T13888] geneve2: entered allmulticast mode [ 501.519381][T13877] tipc: Resetting bearer [ 502.049133][T13898] loop4: detected capacity change from 0 to 512 [ 502.084776][T13877] tipc: Disabling bearer [ 502.174985][T13898] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 502.230317][ T3424] tipc: Node number set to 1445053246 [ 502.260291][T13898] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 502.280619][T13898] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2875: bad orphan inode 4 [ 502.333857][T13898] loop4: lost filesystem error report for type 5 error -117 [ 502.334071][T13898] EXT4-fs (loop4): 1 orphan inode deleted [ 502.341459][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 502.341478][ C0] EXT4-fs (loop4): initial error at time 1773940286: ext4_orphan_get:1417 [ 502.341515][ C0] EXT4-fs (loop4): last error at time 1773940286: ext4_orphan_get:1417 [ 502.492330][T13898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.692847][T13901] loop9: detected capacity change from 0 to 512 [ 503.263848][T13905] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #2: block 4: comm syz.4.2875: lblock 0 mapped to illegal pblock 4 (length 1) [ 503.371598][T13901] EXT4-fs: Ignoring removed oldalloc option [ 503.665007][T13622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.706526][T13901] EXT4-fs (loop9): 1 truncate cleaned up [ 503.726932][T13901] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.764056][T13914] netlink: 'syz.8.2878': attribute type 4 has an invalid length. [ 504.358046][T13923] netlink: 'syz.1.2881': attribute type 5 has an invalid length. [ 504.367080][T13115] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.393780][T13923] netlink: 'syz.1.2881': attribute type 11 has an invalid length. [ 504.451324][T13923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=13923 comm=syz.1.2881 [ 504.472378][T13928] loop9: detected capacity change from 0 to 512 [ 504.484646][T13923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2881'. [ 504.499422][T13929] xt_hashlimit: size too large, truncated to 1048576 [ 504.521317][T13928] EXT4-fs error (device loop9): ext4_iget_extra_inode:5025: inode #15: comm syz.9.2882: corrupted in-inode xattr: invalid ea_ino [ 504.561413][T13928] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 504.568191][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 504.584012][ C1] EXT4-fs (loop9): initial error at time 1773940288: ext4_iget_extra_inode:5025: inode 15 [ 504.594115][ C1] EXT4-fs (loop9): last error at time 1773940288: ext4_iget_extra_inode:5025: inode 15 [ 504.610702][T13928] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.2882: couldn't read orphan inode 15 (err -117) [ 504.657354][T13928] loop9: lost filesystem error report for type 5 error -117 [ 504.660288][T13928] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.763783][T13933] siw: device registration error -23 [ 504.893681][T13115] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.972587][T13115] ================================================================== [ 504.980739][T13115] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 504.988332][T13115] [ 504.990674][T13115] read-write to 0xffff888237d26668 of 1 bytes by task 13938 on cpu 1: [ 504.998939][T13115] folio_add_lru+0xa4/0x1e0 [ 505.003485][T13115] shmem_get_folio_gfp+0x7b0/0xd60 [ 505.008833][T13115] shmem_fault+0xf6/0x250 [ 505.013215][T13115] __do_fault+0xbc/0x200 [ 505.017515][T13115] handle_mm_fault+0x11e2/0x3020 [ 505.022586][T13115] __get_user_pages+0x1023/0x1ea0 [ 505.027666][T13115] __mm_populate+0x242/0x390 [ 505.032321][T13115] vm_mmap_pgoff+0x23b/0x2d0 [ 505.036956][T13115] ksys_mmap_pgoff+0xc1/0x310 [ 505.041689][T13115] x64_sys_call+0x14df/0x3020 [ 505.046473][T13115] do_syscall_64+0x12c/0x370 [ 505.051104][T13115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.057036][T13115] [ 505.059379][T13115] read to 0xffff888237d26668 of 1 bytes by task 13115 on cpu 0: [ 505.067220][T13115] __lru_add_drain_all+0x17e/0x450 [ 505.072394][T13115] lru_add_drain_all+0x10/0x20 [ 505.077198][T13115] invalidate_bdev+0x47/0x70 [ 505.081835][T13115] ext4_put_super+0x624/0x7d0 [ 505.086545][T13115] generic_shutdown_super+0xee/0x220 [ 505.091884][T13115] kill_block_super+0x2a/0x70 [ 505.096614][T13115] ext4_kill_sb+0x42/0x80 [ 505.100981][T13115] deactivate_locked_super+0x75/0x1c0 [ 505.106406][T13115] deactivate_super+0x97/0xa0 [ 505.111122][T13115] cleanup_mnt+0x2bb/0x330 [ 505.115668][T13115] __cleanup_mnt+0x19/0x20 [ 505.120123][T13115] task_work_run+0x130/0x1a0 [ 505.124753][T13115] exit_to_user_mode_loop+0x1f4/0x6f0 [ 505.130255][T13115] do_syscall_64+0x249/0x370 [ 505.134944][T13115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.140872][T13115] [ 505.143254][T13115] value changed: 0x16 -> 0x18 [ 505.147955][T13115] [ 505.150299][T13115] Reported by Kernel Concurrency Sanitizer on: [ 505.151284][T13933] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 505.156484][T13115] CPU: 0 UID: 0 PID: 13115 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 505.156526][T13115] Tainted: [W]=WARN [ 505.156536][T13115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 505.156552][T13115] ================================================================== [ 505.482764][T13944] loop9: detected capacity change from 0 to 1024 [ 506.083123][T13941] loop4: detected capacity change from 0 to 8192 [ 506.394778][T13944] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.443196][T13941] loop4: p1 < > p2 p4 < p5 > [ 506.468354][T13941] loop4: partition table partially beyond EOD, truncated [ 506.588994][T13941] loop4: p1 start 134217728 is beyond EOD, truncated [ 506.663589][T13941] loop4: p2 size 591360 extends beyond EOD, truncated [ 506.719151][T13941] loop4: p5 size 591360 extends beyond EOD, truncated [ 507.242876][T13115] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.330851][ T5862] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.380018][ T5862] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.429871][ T5862] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.509607][ T5862] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.573120][ T5862] bridge_slave_1: left allmulticast mode [ 509.579028][ T5862] bridge_slave_1: left promiscuous mode [ 509.585014][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.593620][ T5862] bridge_slave_0: left allmulticast mode [ 509.599616][ T5862] bridge_slave_0: left promiscuous mode [ 509.605477][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.661073][ T5862] gretap0 (unregistering): left allmulticast mode [ 509.950725][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.960909][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.971071][ T5862] bond0 (unregistering): Released all slaves [ 509.979201][ T5862] bond1 (unregistering): Released all slaves [ 510.001017][ T5862] tipc: Left network mode [ 510.031856][ T5862] hsr_slave_0: left promiscuous mode [ 510.037729][ T5862] hsr_slave_1: left promiscuous mode [ 510.044062][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.053132][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.060947][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.068652][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.079697][ T5862] veth0_macvtap: left promiscuous mode [ 510.085298][ T5862] veth1_vlan: left promiscuous mode [ 510.090827][ T5862] veth0_vlan: left promiscuous mode