last executing test programs: 12m6.369389829s ago: executing program 32 (id=27): r0 = syz_io_uring_setup(0x850, &(0x7f0000000840)={0x0, 0x5c2d, 0x80, 0x2, 0x3be}, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index=0x8, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004005}, 0x4000040) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x3000, 0x800, 0x0) unshare(0x6020400) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000080)={{0x3, 0x109003fd}, {0xff039010, 0x868}, 0x5, 0x1}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303042b174bbec5979673030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b0a37094c30303030303030303030303030303030303034302c757066383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d00000000722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad42090698f0e4f19feef92", @ANYRES8=0x0], 0x16, 0x2b0, &(0x7f0000000280)="$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") r7 = open(&(0x7f00000000c0)='.\x00', 0x12080, 0x65) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000004100)=[0xab, 0x8], 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r9, @ANYBLOB="050427bd7000fcdbdf250100010008000100", @ANYRES32=r10, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400"], 0xd0}, 0x1, 0x0, 0x0, 0x48894}, 0x20004080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9d, 0x9, 0x7, 0x1, 0x4e19}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x809b}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendfile(r13, r8, &(0x7f0000001e40)=0x100, 0x6) preadv(r12, &(0x7f0000004080)=[{&(0x7f0000001e80)=""/2, 0x2}, {&(0x7f0000001ec0)=""/130, 0x82}, {&(0x7f0000001f80)=""/60, 0x3c}], 0x3, 0x6, 0xfff) 11m48.150396878s ago: executing program 33 (id=181): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x2, 0x3fff8000}, 0x631, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140005001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000007c000000030a01020000000000000000010000000900010073797a30000000000900030073797a3100000000140004800800024000000000080001400000000008000b4000000003340008800c00024000000000000000080c000140"], 0x130}, 0x1, 0x0, 0x0, 0x400d9}, 0x0) 11m46.612852513s ago: executing program 34 (id=194): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000070000823b3b670200090008000000010000000000000003000600000000000200000000000000000000fdffffff0002000100000000000000050000000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) 11m23.015850971s ago: executing program 35 (id=244): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000004880)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x20}}], 0x1, 0x4000080) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000003000002000100000000000000030000000000030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100"], 0x68}, 0x1, 0x7}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000040)=0x5) r4 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f00000004c0), &(0x7f0000000400)=0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100), 0xfd, 0x269, &(0x7f0000000a00)="$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") r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0xff73) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000080)={r9, 0x4, 0xe, 0x8, 0x7, 0x7d78, 0x7, 0xfff, {0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x6, 0xfff, 0x0, 0x3, 0x2000}}, &(0x7f00000002c0)=0xb0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f000043b000/0x3000)=nil, 0x3000, 0x1000004, 0x28011, r10, 0xffff7000) mprotect(&(0x7f000028d000/0x2000)=nil, 0x2000, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x200000, 0x200000, 0x0, 0x8, 0x5989, 0x4}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r11, 0x0) socket$netlink(0x10, 0x3, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 10m17.497941575s ago: executing program 36 (id=999): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) (async) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) tgkill(r0, r0, 0x4) 9m49.11493292s ago: executing program 37 (id=1110): perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'vlan0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x9, 0x91f4}, {0x800c6, 0x1}]}}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x49, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x9, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, [0x0, 0x4]}}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee8, 0x0, 0x0, 0x0, 0x5}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = syz_io_uring_setup(0x117, &(0x7f00000004c0)={0x0, 0xa528, 0x80, 0x2000000, 0x3a2}, 0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syslog(0x4, &(0x7f0000000040)=""/38, 0x26) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xd}, &(0x7f0000000100)=0x8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, 0x0, 0x40000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) io_uring_enter(r7, 0x1e75, 0x82ffff, 0xe, 0x0, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000001000)=ANY=[@ANYBLOB="9feb01001800000000000000280066002800000009000000040000000000000401000000060000000210000604000000010000000001000006000600000000000061002e2e302e3b00"], 0x0, 0x49}, 0x28) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32=r9], 0x44}}, 0x804) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b"], 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 7m30.572907761s ago: executing program 38 (id=2540): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setpipe(r1, 0x407, 0xb) creat(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file2\x00', 0x2018084, &(0x7f0000000000)=ANY=[], 0x1, 0x2eb, &(0x7f00000004c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x67, 0x0, 0xff, 0x9, 0x0, 0x7, 0x40, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0xd}, 0x8424, 0x0, 0x10000, 0x9, 0x2, 0x80000001, 0xfffe, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, r0, 0x9) syz_open_procfs(0x0, &(0x7f00000008c0)='net/fib_triestat\x00') socket$packet(0x11, 0x3, 0x300) r3 = syz_io_uring_setup(0x643f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8115, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f00000007c0)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="fd"], 0x118) mmap(&(0x7f00004fe000/0x4000)=nil, 0x4000, 0xd, 0x100010, r6, 0xe9522000) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="7000000002060103090000000000000000000007050004000302000011000300686173683a69702c706f72030000000016000300686073683a6e75742c706f72742c6e655600000005000500020000001400032c6970dd0800020073797a300000000000000000000000000000000000e496d10de22bcb3ada399fc77a1fc5395c531e6126280d71a32c8574909c4eaab5d9a72dbecbde59205569"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x240048d5) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x3000005) r7 = openat(r2, &(0x7f0000000040)='./file2\x00', 0x143002, 0xf8) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000002600)={0x5, 0x80, 0xf, 0x1, 0xd, 0x8, 0x0, 0xe15, 0x10480, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x41, 0x5, 0xfffffffe, 0x7, 0x8, 0x7, 0x3e2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x10191c, &(0x7f0000000840)={0x0, 0x896a, 0x100, 0xffffffff, 0xda}, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$selinux_attr(r6, &(0x7f0000000800)='system_u:object_r:devicekit_exec_t:s0\x00', 0x26) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xb, 0x0, 0x0, 0xc, 0x0, 0x9, 0x4c, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x8f, 0x1}, 0x1186ca, 0xa7, 0x2, 0x5, 0xa5, 0x8, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) 5m36.335772178s ago: executing program 4 (id=3386): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000980)={[{@noblock_validity}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x8000}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@mblk_io_submit}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@noload}]}, 0xf5, 0x4a2, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) unshare(0x62040200) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x19105d55dfc078f, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x1eb4, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_MEM_REGION(r2, 0x22, &(0x7f00000000c0)={&(0x7f0000000280)={&(0x7f00000000c0), 0x0, 0x1, 0x2, 0x6}, 0x1}, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20b01}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x24000090) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000002040)={0x0, 0x989680}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$kcm(0x10, 0x2, 0x0) 5m35.348402573s ago: executing program 4 (id=3392): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000c7d000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/237, 0xed, 0x0, &(0x7f00000004c0)=""/169, 0xa9}, &(0x7f00000001c0)=0x40) syz_open_dev$loop(0x0, 0x7, 0x0) socket$rxrpc(0x21, 0x2, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x3, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000d80)='\x00', 0x89901) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x70}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 5m34.00370403s ago: executing program 4 (id=3398): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdf7ffff0a000000020000000020000005000000020000000400000600000000000000010500000020000000006100302e615f5f610061"], 0x0, 0x58, 0x0, 0x1}, 0x28) 5m33.906353879s ago: executing program 4 (id=3400): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) syz_mount_image$msdos(&(0x7f0000000600), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11c1, &(0x7f0000002440)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000000c0)=r1, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xb) r2 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b', 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000001000007000000890b040a0101027f00000100000000001c00"], 0x40}, 0xfffe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101100000005f1affd5020000000900010073797a3000000000080002c0000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x1914}}, 0x4048010) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x9) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000f00)={[{@mb_optimize_scan}]}, 0x0, 0x24c, &(0x7f0000000f40)="$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") r5 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0xf) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r4, 0x358, 0x3) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f00000003c0)={{0x3, 0x9}, 0x100, './file0\x00'}) socket$isdn(0x22, 0x3, 0x25) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x60008801}, 0x8a4) sendmsg$inet(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x20040044) write$sndseq(r0, &(0x7f0000000000)=[{0x1, 0x7, 0x0, 0x0, @tick=0x6, {}, {}, @note={0x6, 0x2, 0x61, 0x7, 0x8}}], 0x1c) 5m33.282842813s ago: executing program 4 (id=3404): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000210425bd700000000000000000006536c1da06b3932beac541d5861f8cb8618f0cafe0048a8b93efebec7a4fa084a07914f62a84dcab9880b4f6ba507160491eda4a71ae3c29ddd485d96c6a3eb8d182b3733f2c26d050408e2e2dd69c29527b91eca5c75754b1ea55376c95bc76e461ab809a21a8503b332fde43745184d3d36c1fea936137aaeea3b5ed7a07d293f6f5035c977501d2ac1c80d65ccf807a46d24272cafc9d4d1b6e00c6439cadb7719fe84982e3e2702ab1d98e544564c4300c9c548da61f6b1947853cc3d71a140bf95b7dd483907e0d5356b22505998c1a43a73048bf8acfefb06bb37eb22cfc64b5eb5fd681d771bae5903a05eac6cc9a0b45c2a5dd6b342e8f252b", @ANYRES32=r1, @ANYBLOB="000000000002010020001280080001006772650014000280060010004e200000060011004e230000"], 0x40}}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r3 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x1, 0x179}, &(0x7f0000000540)=0x0, &(0x7f00000007c0)=0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000200"/20], 0x14}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) io_uring_enter(r3, 0x3fc9, 0x9765, 0x2, 0x0, 0x0) 5m32.510475124s ago: executing program 4 (id=3415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 5m32.493086251s ago: executing program 39 (id=3415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 4m39.220448322s ago: executing program 8 (id=3788): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffec1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x505c1, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x4, 0x7, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x12f0, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98, 0x40000}, {0x28}}}}, 0x1350) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001480)=ANY=[@ANYBLOB="6d0000e90f005fba0000000000000000000000006dc670795c17d719f03508ab5dc34ba81a1045a2a4a4b9812eaf8bbcad6b28b10b1dd506e5d68488aca8286824f5df14e04c42b7b82ca96a645150fafcfcf6ca22d66d8fa7050f20df4d650a6769dbe51b065f32c5f1851612f6ceab4fd86bc9c7afb1351ed7e572aae0d3450f8c6900"/144, @ANYRES32=0x0, @ANYBLOB="80000200c988000008001b0000000000"], 0x28}}, 0x800) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 4m37.884940771s ago: executing program 8 (id=3795): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./bus\x00', 0x210000, &(0x7f0000000cc0)={[{@jqfmt_vfsv1}, {}, {@prjquota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@sb}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000002840)=[{{&(0x7f0000001240)={0xa, 0x4e24, 0x4, @remote, 0x7}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001280)='.', 0x1}], 0x1}}], 0x1, 0x20000810) (async) sendmmsg$inet6(r1, &(0x7f0000002840)=[{{&(0x7f0000001240)={0xa, 0x4e24, 0x4, @remote, 0x7}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001280)='.', 0x1}], 0x1}}], 0x1, 0x20000810) shutdown(r1, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x981a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x3}, 0xd000, 0x94, 0xfffffff9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x981a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x3}, 0xd000, 0x94, 0xfffffff9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0x0, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES16=r4, @ANYRES16=r4, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES16=r4, @ANYRES16=r4, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) getpid() ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000010200), r8) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000010200), r8) write(r7, &(0x7f0000004200)='t', 0x1) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1100000037dad749", @ANYRES16=0x0, @ANYBLOB="880d0000231201003c0012800b00010062726964676500002c00028005002600010000000500290000000000060009000500000005002d"], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x20040040) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x48805}, 0x4) (async) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x48805}, 0x4) sendfile(r7, r6, 0x0, 0x3ffff) recvmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc12082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) (async) write$cgroup_subtree(r10, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc12082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 4m37.550126998s ago: executing program 8 (id=3799): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0), 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000c7d000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/169, 0xa9}, &(0x7f00000001c0)=0x40) syz_open_dev$loop(0x0, 0x7, 0x0) socket$rxrpc(0x21, 0x2, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x3, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000d80)='\x00', 0x89901) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x70}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 4m37.10074778s ago: executing program 8 (id=3805): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x1, 0x7fff0026}]}) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000ee0351c5156321a7d21c00080000000000000000000000000000000000000000002d0d3ad12af90a4a646a25134756b322adcb85f2b997681877e3f2d55206c6395394ab4c84499aeb982baade2de267c48860666e211dc3e27587c0873c092f43c799b3b9559ed1ceb2ccda0d079786bf5d89463809c4e53020073af029d2f77a5b33f122ec5e96a0985c3ba26b310ddee1d5614cd7293d9a9a364e31297cc5dc21f45a67d6c6f442c5f414312357c249ab4ef9a266f69f869dbcd0a24bf6a91dcb7a241014234153bd0de2c272ab"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pi6 \x00'}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000800000200000a4c000000060a010400000000000006000a00040509000100733100000000200004801c0001800a000100696e6e65da"], 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1200000004000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f600c196b5620400000073f3f0e1bbfb00000000000000000000000000000000000000efff000000ff00"], 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000480), &(0x7f0000000280)=@udp=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r3, &(0x7f0000000380), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2, 0xffffffffffffffff}, 0x4) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x17f, 0x4, 0x11, 0x1, 0x8}, &(0x7f0000000040)=0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x4e23, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r8 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r8, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) fchown(r0, 0xffffffffffffffff, 0xee01) 4m36.679555129s ago: executing program 8 (id=3807): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000050010000500000005"], 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180100001a0001002bbd7000fbdbdf25e0000001000000000000000000000000e00000010000000000000000000000004e24fff74e2200000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000004d33c000000e000000100000000000000000000000001000000000000000800000000000000060000000000000096676a00000000005b22000000000000020000000000000008000000000000006106000000000000e60000000000000001000000000000800400000000000000ff0700000000000006000000000000800500000025bd7000033500000200020f000000000000000008001d000500000014000e00ffffffff0000000000000000000000000c0015"], 0x118}, 0x1, 0x0, 0x0, 0xc008040}, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, &(0x7f0000000100), &(0x7f0000000180)=""/177}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, &(0x7f0000000100), &(0x7f0000000180)=""/177}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) setpriority(0x2, 0x0, 0x2) (async) setpriority(0x2, 0x0, 0x2) mq_open(&(0x7f0000000440)='!\x7f\x00\xca\x00\x00\xa3\xcco\xdc\xfb\x84>\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x8, 0x0) (async) mq_open(&(0x7f0000000440)='!\x7f\x00\xca\x00\x00\xa3\xcco\xdc\xfb\x84>\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x8, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000033c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}}, 0x4) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000033c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}}, 0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x24, r8, 0xf2ff96e223395e37, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) close(r5) (async) close(r5) r9 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000100)={0x10000000}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x4898, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0b19050000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000008000200e0000002"], 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010) 4m35.836739875s ago: executing program 8 (id=3812): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) 4m35.807766329s ago: executing program 40 (id=3812): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) 2m57.203228692s ago: executing program 0 (id=4420): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000600bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2m56.680515669s ago: executing program 0 (id=4424): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffec1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x505c1, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x4, 0x7, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x12f0, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x88}}, {0x28}}}}, 0x1350) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001480)=ANY=[@ANYBLOB="6d0000e90f005fba0000000000000000000000006dc670795c17d719f03508ab5dc34ba81a1045a2a4a4b9812eaf8bbcad6b28b10b1dd506e5d68488aca8286824f5df14e04c42b7b82ca96a645150fafcfcf6ca22d66d8fa7050f20df4d650a6769dbe51b065f32c5f1851612f6ceab4fd86bc9c7afb1351ed7e572aae0d3450f8c6900"/144, @ANYRES32=0x0, @ANYBLOB="80000200c988000008001b0000000000"], 0x28}}, 0x800) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 2m54.659300878s ago: executing program 0 (id=4430): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00000008ffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x8000000) 2m54.554661715s ago: executing program 0 (id=4432): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@nombcache}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0x460b8000}}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x20880, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pread64(r1, &(0x7f0000000000)=""/235, 0xeb, 0x9) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x147042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x8000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000980)={{r0, &(0x7f00000001c0)='barrier', 0x40000, &(0x7f0000000240)={@align=0x2, {0xb6, 0xff, 0x1, 0x1ff}}, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x9}, 0x6, &(0x7f00000008c0)=[{0x3, 0x5, &(0x7f0000000340)='@\x00', &(0x7f0000000380)="10f3a626d99e3c1b6812c72183cd07d8c29d6a661802b2cc6780ace1251b790dd92e9f2a2e57783753a9c1ab173184d6933154e545191b023cad010c54506f1cf629f9c6dd7a3496a002107a1aabd965efc24bac7b74a87c61f286fedf5c2bd003026ece52d399b45969f5b198c6b93c58ac8dee8c702bf8978d197ec5485e982e26ae564794c2a02a9c9d1f86feb8feabaa62d2eb149c272e0df0d4fee9071576af653ad6b183ffe60e4416a4f26b7d4b301aa731d6a7a04b595562133903c32fdf44063c550353f00d77edf9dbaffd7d106af9ea33", 0xd6, 0x10}, {0x1, 0x9, &(0x7f0000000480)='/dev/hwrng\x00', &(0x7f00000004c0)="04c772d145a6ea784989524fa5dd1f1501b7fe05fa02b5ddf63ad6389ddabf2dff7e44473e025d0a523810f6d549168be2a488c8ba0949b047c2115ae6b5fb8ec7ed171269da61e05ce7a12994c719a41af23efcba547ac91a81cbba46ba3e0dc940d9c465d86e0ec303cc3133de24517a790672e56384801b8f491cf4f58609a4dca92d0702e358303c0980238759da9d8c7f81c70dc87b", 0x98, 0x20}, {0x3, 0x18000, &(0x7f0000000580)='barrier', &(0x7f00000005c0)="0e9762900f297b2beaad8b61884f240d08b0cccca76e68abfd59ca790125b2", 0x1f, 0x2}, {0x3, 0x3, &(0x7f0000000600)=',\']%\x00', &(0x7f0000000640)="166c4e743a707d1ec115514025a94283b57fc0f54866a5a87fe317980e89c9f00bec080fef9a7b19544daeda14e72c29d4282f19621e4bdbf48b121a24b572d75e6125f7896e5823d33f44cf814ff9e0fc7c9afa5a1e4af75f832523232fe392d5f210eff191bf616d93dc49e5a9ec8b865b3b159cc66a9b9af6270347e0871ec788a0f9286977bb1f24de82db3052efb21a14dd07d03bd509cd73f6", 0x9c, 0x60}, {0x1, 0x26fe, &(0x7f0000000700)='%)\x00', &(0x7f0000000740)="959542ec3bf97f2e587bde3421037d77fd", 0x11, 0x22}, {0x1, 0x6, &(0x7f0000000780)='journal_dev', &(0x7f00000007c0)="f729ab194953292d04a4d29ba8a74eb5941e997095e5c1d1c54598804c07f6c152cc6245b2ba5fbaf186a197c6f3ebf8e0700398e5c9b9c4b97845eaaebc391aecff9740de05c7b80c6dabe5123f819026c8ba1c62a9e76f98dacbcbf95b81db25d49a93b0159f4dc68760ea5b6c440c4153959fca74c5234ca9c428167484dd212829e548b2e94bc62a2f9a219b935a8e2ce7eee990ae7426929bb3b225d8cc8c0f9b906777d0620b824f2db7adebcc9aed9a2c509277fb7f316403eeade765349d8381fd9d7c9ab76ba8801f07ae166fa6288fe0fd7f5d7fecf6f1156b08cc", 0xe0}]}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) tkill(r4, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, 0x0) ptrace(0x10, r4) ptrace$peeksig(0x4209, r4, &(0x7f0000000140)={0x1}, &(0x7f0000000040)) 2m52.37184146s ago: executing program 0 (id=4436): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32=r2, @ANYBLOB="e3171617"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") r5 = syz_open_procfs(0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$ipvs(0x0, r5) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x94, r6, 0x84, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x23}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x6) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000001900010000000000000000001c140000fe03000100000000840013"], 0xd4}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17", 0xac) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 2m50.714764228s ago: executing program 0 (id=4445): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x402}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xf9}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}, {0x95, 0x0, 0x0, 0x20000000}}, &(0x7f0000000300)='syzkaller\x00', 0xb, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24}, 0x94) 2m50.714531028s ago: executing program 41 (id=4445): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x402}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xf9}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}, {0x95, 0x0, 0x0, 0x20000000}}, &(0x7f0000000300)='syzkaller\x00', 0xb, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24}, 0x94) 2m44.164407441s ago: executing program 1 (id=4470): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="fc0571b287e8495040951028428a78c5f8bf8fa4c0c0ea03b3864e2ca7690fa76bdf8bceaad10fe12006ca544d1e1538ddb690cf9ea086aa21410e18e3d4522de696946b36"], 0x48) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup2(r1, 0xffffffffffffffff) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10010000100007000000000000000493491f67dc15cc52a8a08cbbf20000ff020000000000000000000000000001e00000020000000000000000000000004e20", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb0c0015005b0735003b"], 0x110}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) 2m43.005489979s ago: executing program 1 (id=4476): socket$kcm(0xa, 0x2, 0x73) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) socket$pppl2tp(0x18, 0x1, 0x1) setrlimit(0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m41.962620411s ago: executing program 1 (id=4481): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200000000000000000010003200f7ffffff000000000000000010006c00000000000000040000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000200000000000030006"], 0x80}}, 0x0) 2m41.878562893s ago: executing program 1 (id=4482): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7, 0x46, 0x1, 0x5, 0x0, 0x9, 0x20020, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x10001, 0x4}, 0x0, 0xfffffffffffffff9, 0x7, 0x8, 0x7, 0x3, 0x7, 0x0, 0x2, 0x0, 0x5}, r5, 0xf, r0, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m41.529818597s ago: executing program 1 (id=4484): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2d2a8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xa, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="89a000fe0000000069100c000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) 2m39.344428301s ago: executing program 1 (id=4495): r0 = getpgid(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001340)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r2, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="00000000f87b5d24f858d102c42a792f42905db20ab90fc63555f695bfcb77ee37c150631f4e967c61fbbf84b9e0a8af22e089e314be360742eb9e1d7ec40db08324c824cea73dbabe12ad8e6d052fe4a27d6c6d44a88c76ebeadd1f477f4fda56965314b602cf400a193d3c6853545365d0455167247bef3501a9b4b404328ff2faf9c16f8d23ac13af644709d95235d5049743613c35cfe85eaff8810a5d49e6ac5daa495ad0390e0265c2c93ab0aacc03466bd6b87cfe8f46609d520fd922c96ca8b4baac7cfa5ef22a0650056427636c8409771b16ebace2bfedfd", @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf2501000000040001800800028004000180"], 0x20}, 0x1, 0x0, 0x0, 0x20008805}, 0x4004000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000580)={@dev={0xfe, 0x80, '\x00', 0x36}, @dev={0xfe, 0x80, '\x00', 0x13}, @local, 0x2000000, 0x0, 0x7d, 0x180, 0xfffffffffffffffe, 0x9b0318}) r5 = syz_pidfd_open(r0, 0x0) process_madvise(r5, &(0x7f0000001300), 0x0, 0x11, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x8, 0x7f}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ec6000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="00000000001200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r9, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @private=0xa010102}, @ib={0x1b, 0x4, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000240)={0x13, 0xe, 0xfa00, {&(0x7f0000000a00), r9, 0x2}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000001380)='vegas', 0xfffffffffffffed3) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRES64=r6], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000036ce9490f2ac0f6742dc8f2a91af00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r12, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 2m39.320678746s ago: executing program 42 (id=4495): r0 = getpgid(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001340)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r2, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="00000000f87b5d24f858d102c42a792f42905db20ab90fc63555f695bfcb77ee37c150631f4e967c61fbbf84b9e0a8af22e089e314be360742eb9e1d7ec40db08324c824cea73dbabe12ad8e6d052fe4a27d6c6d44a88c76ebeadd1f477f4fda56965314b602cf400a193d3c6853545365d0455167247bef3501a9b4b404328ff2faf9c16f8d23ac13af644709d95235d5049743613c35cfe85eaff8810a5d49e6ac5daa495ad0390e0265c2c93ab0aacc03466bd6b87cfe8f46609d520fd922c96ca8b4baac7cfa5ef22a0650056427636c8409771b16ebace2bfedfd", @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf2501000000040001800800028004000180"], 0x20}, 0x1, 0x0, 0x0, 0x20008805}, 0x4004000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000580)={@dev={0xfe, 0x80, '\x00', 0x36}, @dev={0xfe, 0x80, '\x00', 0x13}, @local, 0x2000000, 0x0, 0x7d, 0x180, 0xfffffffffffffffe, 0x9b0318}) r5 = syz_pidfd_open(r0, 0x0) process_madvise(r5, &(0x7f0000001300), 0x0, 0x11, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x8, 0x7f}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ec6000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="00000000001200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r9, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @private=0xa010102}, @ib={0x1b, 0x4, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000240)={0x13, 0xe, 0xfa00, {&(0x7f0000000a00), r9, 0x2}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000001380)='vegas', 0xfffffffffffffed3) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRES64=r6], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000036ce9490f2ac0f6742dc8f2a91af00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r12, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 25.93777278s ago: executing program 7 (id=5664): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000001bc0), 0x0, 0x40010140, 0x0) 25.910316054s ago: executing program 7 (id=5665): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x4002, 0x0, 0x3, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu>=0|&!') 25.807579992s ago: executing program 7 (id=5668): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x3, 0x2001e}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfb59}]}, 0x38}}, 0x480d0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 25.806869512s ago: executing program 7 (id=5669): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x200012, &(0x7f0000000600), 0x0, 0x5a4, &(0x7f0000000640)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006980c70000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ptrace(0x10, r0) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000380)='\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40000000}) ptrace$setsig(0x4203, r0, 0x72d8, &(0x7f0000000000)={0x15, 0x0, 0x899d}) rmdir(&(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9805, 0x0, 0x7fc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x0, @multicast2}}) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @multicast2}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) pipe2(&(0x7f0000000000), 0x0) 24.580697704s ago: executing program 7 (id=5671): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c600010025000000851000000100000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 23.617489313s ago: executing program 7 (id=5678): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32=r2, @ANYBLOB="e3171617"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$ipvs(0x0, r5) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x94, r6, 0x84, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x23}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x6) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000001900010000000000000000001c140000fe03000100000000840013"], 0xd4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17", 0xac) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 23.617158863s ago: executing program 43 (id=5678): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32=r2, @ANYBLOB="e3171617"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$ipvs(0x0, r5) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x94, r6, 0x84, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x23}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x6) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000001900010000000000000000001c140000fe03000100000000840013"], 0xd4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17", 0xac) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 3.886605159s ago: executing program 2 (id=5824): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c000280"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0xf, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da539706", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x50) sendmsg$netlink(r0, &(0x7f0000000580)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x2004c810}, 0x20008001) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000040)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="ab8b2dbd7000f9dbdf251100000004b584794d5c3cf15b893d000180"], 0x18}, 0x1, 0x0, 0x0, 0x24044841}, 0x4044) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x401}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x20c51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 3.641552127s ago: executing program 6 (id=5825): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x5, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x3, 0xffffffff, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x100000001}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xffff, 0x8, 0x6, 0x9, 0x3, 0x4}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0x9c, 0x6, @random="48802e59d488"}, 0x14) 3.504403816s ago: executing program 9 (id=5826): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xf9, 0x1213, &(0x7f0000000600)="$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") rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x3) 3.128767034s ago: executing program 9 (id=5829): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000058c0), 0x2, 0x0) writev(r0, &(0x7f00000062c0)=[{&(0x7f0000005d40)="78627e9062", 0x5}, {0x0}], 0x2) (fail_nth: 2) 3.039183634s ago: executing program 6 (id=5830): r0 = syz_io_uring_setup(0x3a, &(0x7f0000000580)={0x0, 0xaa9b, 0x13500, 0xfffffffd}, &(0x7f0000000240), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000040)="89", 0x1}], 0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$nvram(0xffffffffffffff9c, 0x0, 0x840, 0x0) io_uring_enter(r5, 0x1654, 0xb43c, 0x4, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="980000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000040000000000000000010c00028005000100000000e33b000180a50fe72dc664f928e48355b99531530c00028005000100000000002c00018014000300ff02000000000000000000000000000114000408fe8000000000000000000000000000aa080007400000000104000680"], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) 2.969577169s ago: executing program 9 (id=5831): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) close(r3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x40) 2.932214951s ago: executing program 2 (id=5833): sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xef`i\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2c7, &(0x7f0000000b80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xc0102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x58, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x12}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f00000007c0)="00000000000000009526310b0037", 0x0, 0x3, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) statfs(&(0x7f0000000200)='.\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x160, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cpu={{0x28}, {0x9}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x23, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, 0x100, 0x964}}}, {{@uncond, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xff000000, 0xffffff00, 'bond_slave_1\x00', 'bond_slave_0\x00', {}, {}, 0x8, 0x1, 0x9}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x5, 0x0, 0x2]}, {0xfffc, [0x0, 0x5, 0x0, 0x2, 0x0, 0x1], 0x2, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000040)=0x0) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, r6, &(0x7f0000000080)) r7 = syz_clone(0x30011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r7, 0x0, 0x1, 0x0) 2.905595345s ago: executing program 6 (id=5834): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x4005, 0xa600000, 0x3, 0x2, 0x7, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a4000000002140011800cef0100636f756e7465720004000280400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x2f0c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 2.83643217s ago: executing program 9 (id=5837): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) timer_create(0xb, &(0x7f0000000ac0)={0x0, 0x25, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000b00)=0x0) timer_settime(r1, 0x0, &(0x7f0000000b80)={{}, {0x77359400}}, &(0x7f0000000bc0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0xffffffff, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xf, 0x0, 0x10000000, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x3000000) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x1f4, 0x0, 0x0, 0x54}, 0x9c) 2.750652772s ago: executing program 6 (id=5838): ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}}, 0x0) flock(0xffffffffffffffff, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) quotactl_fd$Q_SYNC(r4, 0xffffffff80000102, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000c40)={0x0, 0x7}) openat$full(0xffffffffffffff9c, 0x0, 0x400080, 0x0) 2.310778995s ago: executing program 3 (id=5842): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000010000000000"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000080ff0000000000000a0030"], 0xb8}}, 0x4000) 2.307498405s ago: executing program 3 (id=5844): socket$kcm(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f0000000000)) socket$pppl2tp(0x18, 0x1, 0x1) setrlimit(0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.050979018s ago: executing program 2 (id=5846): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x4e887}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) (fail_nth: 5) 1.989414425s ago: executing program 5 (id=5847): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (rerun: 64) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c23004a) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230007) (async) close(r5) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async, rerun: 64) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x400aee2, 0x400, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0x2, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_MSG_RING={0x28, 0x2a, 0x0, r7, 0x1, &(0x7f00000000c0), 0x0, 0x0, 0x1}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x7a, &(0x7f0000000340)={r12, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x7fffffff, 0x7f, 0x7, 0x7, 0x10, 0x5, 0x8}, &(0x7f00000000c0)=0x9c) (async, rerun: 32) io_uring_enter(r7, 0x47d6, 0x0, 0x2, 0x0, 0x0) (async, rerun: 32) r13 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r13, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r14, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) 1.704311973s ago: executing program 9 (id=5848): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffec1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x505c1, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x4, 0x7, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x12f0, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x1100000000000000}}, {0x28}}}}, 0x1350) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001480)=ANY=[@ANYBLOB="6d0000e90f005fba0000000000000000000000006dc670795c17d719f03508ab5dc34ba81a1045a2a4a4b9812eaf8bbcad6b28b10b1dd506e5d68488aca8286824f5df14e04c42b7b82ca96a645150fafcfcf6ca22d66d8fa7050f20df4d650a6769dbe51b065f32c5f1851612f6ceab4fd86bc9c7afb1351ed7e572aae0d3450f8c6900"/144, @ANYRES32=0x0, @ANYBLOB="80000200c988000008001b0000000000"], 0x28}}, 0x800) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 1.631251396s ago: executing program 2 (id=5849): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x240000c0) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$kcm(r0, 0x0, 0x24048800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bfafff000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf672000000000001602000000c0ffff6702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x48) 1.627474016s ago: executing program 5 (id=5850): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x3) 1.579506195s ago: executing program 5 (id=5851): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x5, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x3, 0xffffffff, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x100000001}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xffff, 0x8, 0x6, 0x9, 0x3, 0x4}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0x9c, 0x6, @random="48802e59d488"}, 0x14) 1.135461268s ago: executing program 5 (id=5852): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff25bd7000f7d9de25000000", @ANYRES32=0x0, @ANYBLOB="13280000212c0000080005006940b91c8535d1f00ed0b7820c8058c7877b3f325cbaec26fb8d521978c7b4dfdf0eecbea49d6e60fa6fa5f99776171fdd85791a6acfe410c5e775530b41546c0f84d78e49adddd0fd24cb73426d478de7afebfd704b49998d39dbb9a03f00788376724e06d25dcead42250550094acc0c919f11c68d2b363abe21952e"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 1.134360778s ago: executing program 3 (id=5853): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000980)={[{@noblock_validity}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x8000}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@mblk_io_submit}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@noload}]}, 0xf5, 0x4a2, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) unshare(0x62040200) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x19105d55dfc078f, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_setup(0x1eb4, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) setgid(0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@dellink={0x6c, 0x11, 0x100, 0x70bd21, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x8408, 0x2000}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x6}, @IFLA_ADDRESS={0xa, 0x1, @random="2023f6b651a2"}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6820e}, @IFLA_IFALIAS={0x14, 0x14, 'pimreg\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x83}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_vlan\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x20000090) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000002040)={0x0, 0x989680}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'}) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$kcm(0x10, 0x2, 0x0) 1.016826482s ago: executing program 5 (id=5854): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x3}) syz_open_pts(r3, 0x34081) r5 = gettid() syz_clone3(&(0x7f0000000280)={0x800000, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r5], 0x1}, 0x58) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000300)={'syztnl2\x00', r6, 0x13, 0x9, 0x2, 0x7, 0x12, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0xffcf, 0x8, 0x5, 0x5}}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_LINKMODE={0x5, 0x11, 0x1}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x68}}, 0x8000002) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 784.252201ms ago: executing program 3 (id=5855): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x4002, 0x0, 0x3, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu>=0|&!') 680.765349ms ago: executing program 3 (id=5856): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 480.748085ms ago: executing program 5 (id=5857): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) close(r3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x40) 420.618562ms ago: executing program 3 (id=5858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file1\x00'}, 0x6e) fcntl$setown(r0, 0x8, r1) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f00000004c0)='gfs2\x00', 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x2, 0xfffffffd, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x64, 0x1, 0x0, 0x5e55b37311de6d89, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, {[@ra={0x94, 0x4}]}}}}}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r7, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5fb, 0x3c}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000100001d44000000000000db0a00fe410000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 362.677149ms ago: executing program 6 (id=5859): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f000000172f71d34460bc24eab5560000000ebab8bebf9367140051f60a64c9f4d4778037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xfffffffffffffff0) 235.754112ms ago: executing program 2 (id=5860): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x40, &(0x7f00000000c0)={[{@check_strict}, {@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@block={'block', 0x3d, 0x200}}, {@nocompress}, {@hide}, {}, {@unhide}, {@check_strict}]}, 0x1, 0x558, &(0x7f0000001800)="$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") 184.406201ms ago: executing program 6 (id=5861): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb4}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904", 0x3b}], 0x1}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000240)=0xfffff800) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x8}}, './file1\x00'}) ioctl$XFS_IOC_DIOINFO(r7, 0x800c581e, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 26.758576ms ago: executing program 9 (id=5862): mknod$loop(0x0, 0x0, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$eJzs3U9sHFcZAPBvdh0ndU1dm1pqysGBRLh/FNvtSk4NB8IBDhT1UiRUqRysZGMHr2Nju6I2F/fGiQoJBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHggBjGZ3NtnYs2bBjhcyv5+02TdvnvO9t5vvafe9iSeAwjqR/pFE9EfE1YgYaBze2uBE4+kblY3ZK5WN2SS2t5/6U1Jvd7myMdts2vy5uyNiPSLuj4jvX4g4d2R33OXVtbnpWq26lB2Pr8wvji+vrp2+OD89U52pXqpUHp+anJw6MznxH4wm2fPsRxffGPrF7JMzL4/8/ekz81/5YxJn6+OOHeM4SHk96kkizt6OYF1QTscTEX0dth+uvvDKbe4SHfrc0OZ4+t7dFxGn6vk/EOX6uxnxvpee+ctAvPd6u5+9uvnS7w6zrwDAwdlOHd37NHBnKkX63T8pjUVEo1wqjY01vsPfF32l2sLyyiMXFp69dL6xRnBvHClduFirTmRrBffGkSQ9frRevnn82I7jSkQMRsSny3fVj8fOLdTOH+pMBzT1R7z+zU+c6717R/7/ttzIf+DOleb/z37w7e+m5bfK3e4NcJjS/P/aW/NPhPyHwpH/UFzyH4pL/kNxyX8oLvkPxSX/objkPxSX/Ifikv9QXK35L/2hmAZHXt1MImL9PXfVH6ne7FzOr+0B7iDb24n/5A8F5bM/FFdPtzsAdI3v+MDevzk74li7E4sH3xfgcJS63QGga0aP2/+DorL+D8Vl/R+Ky2d8wPo/FI/1fyiu/jb3/3pby727JiLinoj4UfnI0ea9voD/X/0Rr7949VvPRJR+n2Sf/0cHTvVPv/Ha91rb9SZ/rW8R9EbEJ1986gvPTa+sLD2a1v/5Rv3KF7P6x7o1GqATzTxt5jFQXMura3PTtVp1SUFBoXCF5jxwubIx23wc1tzzwsMRb76/cRFCGvdK9mic7cnWJo/V9yj7tpJbrlVIDmDv8jOnI9afj4j788afZPc7b+x89G2Vd8V/e/acPo5n6ydpm+EO45fv2V/8B1rij7TEf0eH8Tc/0mHD22Tw692N//Ivs9d/oqcn7/Xf77UxQ//m/BNf3WeAffrNr7sb/9RId+N/fiHi1XT+mcjLv1Kaljd2PnfOP/0t10n/tz41enP+u7Jr/ivdmP/Kbea/Ex3G+eHT1Y/l1Zd/HPHm8xEP5MZvxjtWj9W3VdoV/2TL/PPgHvH/8OGfzuXVn30tYvtyxGjkx2+NNb4yvzi+vLp2+uL89Ex1pnqpUnl8anJy6szkxHh9jXq8uVK925PXhz+QV3/yy43x97WJ3xx/u9d/e48xt1r70sf735lT/5PjjfgPnsx//4ey+I3Xv2dX/Hdlz+m/k39k1/Kmba5FxNGs/qGI+M4rgw/n9etD1xvxz7cZf+mW+LvH/0iH4//sr/75bF79cx/s8C8AAA5U+6WBbvcMAAA4aIex09jtMQL5+rZ6o3UbOFlv2VdYv7mvkNZfy/YXyusRf8v2GNL6h7JdsrScu9EA/M8ZXnv3z7vdBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICiW15dm5uu1apLy93uCXDY/hUAAP//T2kBHQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000000004c900200040000000300010000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000007000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 0s ago: executing program 2 (id=5863): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x5, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x3, 0xffffffff, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x100000001}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xffff, 0x8, 0x6, 0x9, 0x3, 0x4}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x9c, 0x6, @random="48802e59d488"}, 0x14) kernel console output (not intermixed with test programs): 261495][ T28] audit: type=1400 audit(1772277807.093:7006): avc: denied { listen } for pid=24562 comm="syz.7.5199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 691.333085][T24569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.367482][T24569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.380561][ T28] audit: type=1400 audit(1772277807.223:7007): avc: denied { accept } for pid=24562 comm="syz.7.5199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 691.959343][T24616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.979756][T24616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.992725][ T6538] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.014166][ T6538] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.029969][ T6538] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.049295][ T6538] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.376317][T24636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.378429][ T28] audit: type=1400 audit(1772277808.243:7008): avc: denied { create } for pid=24631 comm="syz.7.5206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 692.402229][T24636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.416225][ T28] audit: type=1400 audit(1772277808.283:7009): avc: denied { ioctl } for pid=24631 comm="syz.7.5206" path="socket:[81992]" dev="sockfs" ino=81992 ioctlcmd=0x61e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 692.441413][T24638] loop9: detected capacity change from 0 to 1024 [ 692.479852][T24638] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 692.587962][T24638] System zones: 0-1, 3-36 [ 692.603715][T24638] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.621072][T24643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.667606][T24643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.726098][T21892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.759393][T24653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.762271][T24654] loop9: detected capacity change from 0 to 512 [ 692.768706][T24653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.785099][T24654] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6054e01c, mo2=0102] [ 692.798885][T24654] System zones: 1-12 [ 692.802945][T24654] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.5213: inode has both inline data and extents flags [ 692.816511][T24654] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 692.816756][T24654] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.5213: couldn't read orphan inode 15 (err -117) [ 692.826022][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 692.826037][ C1] EXT4-fs (loop9): initial error at time 1772277808: ext4_orphan_get:1391: inode 15 [ 692.826070][ C1] EXT4-fs (loop9): last error at time 1772277808: ext4_orphan_get:1391: inode 15 [ 692.863274][T24654] loop9: lost filesystem error report for type 5 error -117 [ 692.863802][T24654] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.893137][T21892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.909310][T24659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.918211][T24659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.066882][T24666] loop5: detected capacity change from 0 to 256 [ 693.110021][T24666] FAT-fs (loop5): codepage cp737 not found [ 693.318318][ T28] audit: type=1400 audit(1772277809.183:7010): avc: denied { getopt } for pid=24670 comm="syz.5.5219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 693.325428][T24674] lo speed is unknown, defaulting to 1000 [ 693.364262][ T28] audit: type=1400 audit(1772277809.233:7011): avc: denied { create } for pid=24673 comm="syz.7.5220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 693.379813][T24679] batadv1: entered promiscuous mode [ 693.389791][T24679] batadv1: entered allmulticast mode [ 693.397146][T24679] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 693.585856][ T9778] IPVS: starting estimator thread 0... [ 693.708508][T24681] IPVS: using max 2496 ests per chain, 124800 per kthread [ 693.921211][ T6526] IPVS: stop unused estimator thread 0... [ 694.218405][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 694.450593][T24696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.517344][T24696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.691957][ T28] audit: type=1400 audit(1772277810.533:7012): avc: denied { nlmsg_write } for pid=24704 comm="syz.5.5228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 695.161694][T24724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5236'. [ 695.189962][T24724] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24724 comm=syz.2.5236 [ 695.281865][T24734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.290768][T24734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.714649][T24647] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 696.003226][T24757] syzkaller0: entered promiscuous mode [ 696.009023][T24757] syzkaller0: entered allmulticast mode [ 696.121873][T24761] tipc: Started in network mode [ 696.126953][T24761] tipc: Node identity 4, cluster identity 4711 [ 696.133310][T24761] tipc: Node number set to 4 [ 696.205326][T24765] syzkaller0: entered promiscuous mode [ 696.211108][T24765] syzkaller0: entered allmulticast mode [ 696.437386][T24783] loop9: detected capacity change from 0 to 164 [ 696.451132][T24785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.466826][T24785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.555492][T24797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.568234][T24797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.643743][T24803] loop2: detected capacity change from 0 to 256 [ 696.695190][T24807] loop2: detected capacity change from 0 to 512 [ 696.703173][T24807] EXT4-fs: Ignoring removed i_version option [ 696.709851][T24807] EXT4-fs: Ignoring removed bh option [ 696.721711][T24807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.734820][T24807] ext4 filesystem being mounted at /230/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 696.835664][ T28] audit: type=1400 audit(1772277812.703:7013): avc: denied { listen } for pid=24812 comm="syz.6.5272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 697.113775][T19812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.168006][T24828] loop6: detected capacity change from 0 to 256 [ 697.577722][T24845] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5288'. [ 697.587686][T24845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5288'. [ 697.601475][T24847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.624700][T24847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.789227][T24859] loop2: detected capacity change from 0 to 256 [ 697.985740][T24862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.996006][T24862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.026658][T24864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.076967][T24864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.215881][T24866] loop9: detected capacity change from 0 to 164 [ 698.439820][ T28] audit: type=1400 audit(1772277814.313:7014): avc: denied { bind } for pid=24875 comm="syz.6.5301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 698.459722][T24872] loop9: detected capacity change from 0 to 8192 [ 698.462222][T24872] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 698.596776][ T28] audit: type=1400 audit(1772277814.463:7015): avc: denied { write } for pid=24883 comm="syz.5.5306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 698.599205][T24888] loop7: detected capacity change from 0 to 164 [ 698.627903][T24885] loop9: detected capacity change from 0 to 256 [ 698.697988][T24892] loop7: detected capacity change from 0 to 1024 [ 698.705894][T24892] EXT4-fs: Ignoring removed nomblk_io_submit option [ 698.715190][T24892] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 698.723528][T24892] System zones: 0-1, 3-36 [ 698.730539][T24892] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 698.797721][T24894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.806597][T24894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.075616][T24900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.095821][T24900] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.5311: corrupted inode contents [ 699.108218][T24900] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 699.108983][T24900] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.5311: mark_inode_dirty error [ 699.133528][T24900] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 699.133814][T24900] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.5311: corrupted inode contents [ 699.155296][T24900] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 699.155526][T24900] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.5311: mark_inode_dirty error [ 699.176462][T24900] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 699.176752][T24900] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.5311: corrupted inode contents [ 699.198132][T24900] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 699.198702][T24900] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.5311: mark_inode_dirty error [ 699.219603][T24900] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 699.219882][T24900] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.5311: corrupted inode contents [ 699.241521][T24900] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 699.241861][T24900] EXT4-fs error (device loop2): ext4_truncate:4587: inode #15: comm syz.2.5311: mark_inode_dirty error [ 699.263243][T24900] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 699.263419][T24900] EXT4-fs error (device loop2): ext4_evict_inode:266: comm syz.2.5311: couldn't truncate inode 15 (err -117) [ 699.318639][T19812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.485583][T24925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.498575][T24925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.536897][T24929] lo speed is unknown, defaulting to 1000 [ 699.931482][T24932] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 699.973569][T24932] EXT4-fs (loop6): 1 truncate cleaned up [ 700.021102][T24932] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 700.078434][T18789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.399558][T24943] FAT-fs (loop6): Directory bread(block 64) failed [ 700.406383][T24943] FAT-fs (loop6): Directory bread(block 65) failed [ 700.413507][T24943] FAT-fs (loop6): Directory bread(block 66) failed [ 700.420366][T24943] FAT-fs (loop6): Directory bread(block 67) failed [ 700.427150][T24943] FAT-fs (loop6): Directory bread(block 68) failed [ 700.433875][T24943] FAT-fs (loop6): Directory bread(block 69) failed [ 700.440714][T24943] FAT-fs (loop6): Directory bread(block 70) failed [ 700.447250][T24943] FAT-fs (loop6): Directory bread(block 71) failed [ 700.453851][T24943] FAT-fs (loop6): Directory bread(block 72) failed [ 700.460786][T24943] FAT-fs (loop6): Directory bread(block 73) failed [ 700.538708][T24943] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5325'. [ 700.791414][T24943] lo speed is unknown, defaulting to 1000 [ 701.201398][ T6549] Bluetooth: hci0: Frame reassembly failed (-84) [ 701.795289][T21496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.014873][T24950] set_capacity_and_notify: 5 callbacks suppressed [ 702.014890][T24950] loop7: detected capacity change from 0 to 512 [ 702.041993][T24954] loop5: detected capacity change from 0 to 164 [ 702.058026][T24954] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 702.081649][T24950] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.111035][T24950] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 702.148367][T24950] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #2: block 18: comm syz.7.5330: lblock 23 mapped to illegal pblock 18 (length 1) [ 702.178969][T24950] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #2: block 18: comm syz.7.5330: lblock 23 mapped to illegal pblock 18 (length 1) [ 702.356686][T21496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.409339][T24966] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5336'. [ 702.425680][T24964] loop6: detected capacity change from 0 to 512 [ 702.577716][T24964] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 702.629746][T24964] EXT4-fs (loop6): 1 truncate cleaned up [ 702.651277][T24964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 702.680121][T24974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5336'. [ 702.940969][T24977] loop5: detected capacity change from 0 to 256 [ 703.152290][T18789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.184828][T24979] loop6: detected capacity change from 0 to 1024 [ 703.191715][T24979] EXT4-fs: Ignoring removed nomblk_io_submit option [ 703.199594][T24979] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 703.207722][T24979] System zones: 0-1, 3-36 [ 703.213551][T24979] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.272678][T21177] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 703.313345][T24981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.323542][T24981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.353000][ T28] audit: type=1400 audit(1772277819.203:7016): avc: denied { setopt } for pid=24982 comm="syz.9.5341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 703.357226][T24985] loop7: detected capacity change from 0 to 256 [ 703.902914][T18789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.976654][T25004] netlink: 'syz.6.5349': attribute type 10 has an invalid length. [ 703.996967][T25006] loop5: detected capacity change from 0 to 256 [ 704.004488][ T3487] Bluetooth: hci0: Frame reassembly failed (-84) [ 704.011110][ T3487] Bluetooth: hci0: Frame reassembly failed (-84) [ 704.244300][T25019] loop7: detected capacity change from 0 to 1024 [ 704.268836][T25017] loop2: detected capacity change from 0 to 8192 [ 704.289027][T25019] EXT4-fs: inline encryption not supported [ 704.295292][T25019] EXT4-fs: Ignoring removed nobh option [ 704.302595][T25019] EXT4-fs: Ignoring removed nobh option [ 704.310943][T25019] EXT4-fs: Ignoring removed bh option [ 704.555266][T25019] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 704.879739][T25019] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5356'. [ 705.151037][T25030] loop9: detected capacity change from 0 to 1024 [ 705.195701][T25030] EXT4-fs: Ignoring removed nomblk_io_submit option [ 705.224864][T25030] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 705.263241][T25032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.277540][T25030] System zones: 0-1, 3-36 [ 705.295356][T25030] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.308260][T25032] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 705.356021][T25032] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #2: block 18: comm syz.2.5360: lblock 23 mapped to illegal pblock 18 (length 1) [ 705.373610][T25040] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 705.383777][T25041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.395227][T25032] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #2: block 18: comm syz.2.5360: lblock 23 mapped to illegal pblock 18 (length 1) [ 705.418530][T25041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.464212][T19812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.058364][ T3618] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 706.231709][T25060] netlink: 'syz.5.5369': attribute type 10 has an invalid length. [ 706.427680][T21892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.443513][T25064] EXT4-fs: inline encryption not supported [ 706.461499][T25064] EXT4-fs: Ignoring removed nobh option [ 706.467291][T25064] EXT4-fs: Ignoring removed nobh option [ 706.482052][T25064] EXT4-fs: Ignoring removed bh option [ 706.508486][T25064] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 706.553934][T25064] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5371'. [ 706.738878][T25089] 9p: Bad value for 'wfdno' [ 706.970739][T25093] EXT4-fs: Ignoring removed nomblk_io_submit option [ 707.061436][T25093] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 707.137700][T25093] System zones: 0-1, 3-36 [ 707.155899][ T28] audit: type=1326 audit(1772277823.013:7017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25094 comm="syz.9.5383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8dce89c799 code=0x0 [ 707.209045][T25093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.322578][T25088] set_capacity_and_notify: 5 callbacks suppressed [ 707.322697][T25088] loop2: detected capacity change from 0 to 512 [ 707.367844][T25102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.378992][T25102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.389099][T25088] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 707.410348][T25088] EXT4-fs (loop2): 1 truncate cleaned up [ 707.427078][T25088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 707.493279][T19812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.537601][T25108] syzkaller0: entered promiscuous mode [ 707.543618][T25108] syzkaller0: entered allmulticast mode [ 707.551696][T25108] tipc: Started in network mode [ 707.556634][T25108] tipc: Node identity 869e1af8662, cluster identity 4711 [ 707.563939][T25108] tipc: Enabled bearer , priority 0 [ 707.573274][T25107] tipc: Resetting bearer [ 707.592112][T25112] loop2: detected capacity change from 0 to 164 [ 707.593840][T25107] tipc: Disabling bearer [ 707.641301][T25116] loop2: detected capacity change from 0 to 256 [ 707.685868][T25118] loop7: detected capacity change from 0 to 1024 [ 707.692848][T25118] EXT4-fs: inline encryption not supported [ 707.700869][T25118] EXT4-fs: Ignoring removed nobh option [ 707.709162][T25118] EXT4-fs: Ignoring removed nobh option [ 707.715368][T25118] EXT4-fs: Ignoring removed bh option [ 707.738931][T25118] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 707.756366][T25118] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5391'. [ 707.765561][T25120] loop2: detected capacity change from 0 to 8192 [ 707.792159][T25123] loop9: detected capacity change from 0 to 256 [ 707.808878][ T3801] loop2: p1 p3 p4 [ 707.812969][ T3801] loop2: p1 size 477167616 extends beyond EOD, truncated [ 707.824268][ T3801] loop2: p3 start 4294901760 is beyond EOD, truncated [ 707.832429][ T3801] loop2: p4 size 32768 extends beyond EOD, truncated [ 707.841319][T25120] loop2: p1 p3 p4 [ 707.846058][T25120] loop2: p1 size 477167616 extends beyond EOD, truncated [ 707.854065][T25120] loop2: p3 start 4294901760 is beyond EOD, truncated [ 707.861055][T25120] loop2: p4 size 32768 extends beyond EOD, truncated [ 707.872375][T25119] delete_channel: no stack [ 707.949232][ T3800] udevd[3800]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 707.956140][ T3801] udevd[3801]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 707.975094][T14485] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.978974][ T3801] udevd[3801]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 707.988134][T25130] loop7: detected capacity change from 0 to 164 [ 707.995424][ T3800] udevd[3800]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 708.204292][T25136] loop6: detected capacity change from 0 to 164 [ 708.471162][ T28] audit: type=1326 audit(1772277824.343:7018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25147 comm="syz.2.5405" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59c115c799 code=0x7f7e0000 [ 708.499449][T25148] loop7: detected capacity change from 0 to 1024 [ 708.509440][T25148] EXT4-fs: inline encryption not supported [ 708.516348][T25148] EXT4-fs: Ignoring removed nobh option [ 708.533300][T25148] EXT4-fs: Ignoring removed nobh option [ 708.542653][T25132] loop5: detected capacity change from 0 to 512 [ 708.550943][T25148] EXT4-fs: Ignoring removed bh option [ 708.588104][T25148] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 708.610355][T25132] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 708.686285][T25132] EXT4-fs (loop5): 1 truncate cleaned up [ 708.690944][T25156] EXT4-fs: Ignoring removed nomblk_io_submit option [ 708.729891][T25159] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 708.745287][T25132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 708.748783][T25159] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.5408: bad orphan inode 131083 [ 708.775063][T25156] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 708.798051][T25140] EXT4-fs (loop6): 1 truncate cleaned up [ 708.805977][T25159] loop7: lost filesystem error report for type 5 error -117 [ 708.806076][T25156] System zones: [ 708.813466][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 708.813490][ C1] EXT4-fs (loop7): initial error at time 1772277824: ext4_orphan_get:1417 [ 708.813540][ C1] EXT4-fs (loop7): last error at time 1772277824: ext4_orphan_get:1417 [ 708.836370][T25159] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 708.840817][T25156] 0-1, 3-36 [ 708.862524][T25140] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 708.875328][T25156] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.905555][T14485] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.954115][T25163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5409'. [ 708.970277][T25164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.979055][T25164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.010447][T25159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=25159 comm=syz.7.5408 [ 709.138163][ T3487] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 465: padding at end of block bitmap is not set [ 709.252222][ T3487] EXT4-fs (loop6): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 709.339607][ T3487] EXT4-fs (loop6): This should not happen!! Data will be lost [ 709.339607][ T3487] [ 709.380482][ T3487] EXT4-fs (loop6): Total free blocks count 0 [ 709.419989][ T3487] EXT4-fs (loop6): Free/Dirty block details [ 709.467680][ T3487] EXT4-fs (loop6): free_blocks=0 [ 709.486072][ T3487] EXT4-fs (loop6): dirty_blocks=2 [ 709.491304][ T3487] EXT4-fs (loop6): Block reservation details [ 709.497330][ T3487] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 709.506358][T18789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.753733][T21496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.941805][T25187] FAT-fs (loop5): Directory bread(block 414) failed [ 709.948956][T25187] FAT-fs (loop5): Directory bread(block 415) failed [ 709.957905][T25187] FAT-fs (loop5): Directory bread(block 416) failed [ 709.967554][T25187] FAT-fs (loop5): Directory bread(block 417) failed [ 709.974487][T25187] FAT-fs (loop5): Directory bread(block 418) failed [ 709.981505][T25187] FAT-fs (loop5): Directory bread(block 419) failed [ 709.988531][T25187] FAT-fs (loop5): Directory bread(block 420) failed [ 709.995461][T25187] FAT-fs (loop5): Directory bread(block 421) failed [ 710.003076][T25187] FAT-fs (loop5): Directory bread(block 414) failed [ 710.011382][T25187] FAT-fs (loop5): Directory bread(block 415) failed [ 710.090341][T25190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5414'. [ 710.099782][T25190] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5414'. [ 710.152946][T25192] FAULT_INJECTION: forcing a failure. [ 710.152946][T25192] name fail_futex, interval 1, probability 0, space 0, times 0 [ 710.165919][T25192] CPU: 0 UID: 0 PID: 25192 Comm: syz.2.5418 Tainted: G W syzkaller #0 PREEMPT(full) [ 710.165946][T25192] Tainted: [W]=WARN [ 710.165954][T25192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 710.165968][T25192] Call Trace: [ 710.165976][T25192] [ 710.165985][T25192] __dump_stack+0x1d/0x30 [ 710.166101][T25192] dump_stack_lvl+0x95/0xd0 [ 710.166116][T25192] dump_stack+0x15/0x1b [ 710.166130][T25192] should_fail_ex+0x263/0x280 [ 710.166146][T25192] should_fail+0xb/0x20 [ 710.166208][T25192] get_futex_key+0x12f/0xbe0 [ 710.166226][T25192] ? should_fail_ex+0xd9/0x280 [ 710.166313][T25192] futex_lock_pi+0xfe/0x7e0 [ 710.166461][T25192] ? __pfx_futex_wake_mark+0x10/0x10 [ 710.166491][T25192] do_futex+0x21f/0x380 [ 710.166598][T25192] __se_sys_futex+0x2f6/0x370 [ 710.166658][T25192] __x64_sys_futex+0x78/0x90 [ 710.166676][T25192] x64_sys_call+0x24ab/0x3020 [ 710.166694][T25192] do_syscall_64+0x12c/0x370 [ 710.166708][T25192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.166762][T25192] RIP: 0033:0x7f59c115c799 [ 710.166774][T25192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.166788][T25192] RSP: 002b:00007f59bfbb7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 710.166872][T25192] RAX: ffffffffffffffda RBX: 00007f59c13d5fa0 RCX: 00007f59c115c799 [ 710.166882][T25192] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 000020000000cffc [ 710.166891][T25192] RBP: 00007f59bfbb7090 R08: 0000000000000000 R09: 00000000fffffffc [ 710.166900][T25192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 710.166909][T25192] R13: 00007f59c13d6038 R14: 00007f59c13d5fa0 R15: 00007ffef16b8df8 [ 710.166994][T25192] [ 710.540069][T25206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5425'. [ 710.671092][T25198] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 710.697099][T25198] EXT4-fs (loop2): 1 truncate cleaned up [ 710.717078][T25198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 710.858384][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 711.068265][T19812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.249898][T25218] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 711.321677][T25218] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 711.422422][T21496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 711.688781][T25228] loop7: p1 p2 p4 [ 711.695212][T25228] loop7: p4 size 262144 extends beyond EOD, truncated [ 711.754341][T21892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.120343][ T28] audit: type=1400 audit(1772277827.993:7019): avc: denied { mounton } for pid=25246 comm="syz.2.5440" path="/267/file0" dev="cgroup2" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 712.183861][T25252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5441'. [ 712.211629][T25245] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 712.284612][T25245] EXT4-fs (loop7): 1 truncate cleaned up [ 712.302327][T25254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.303023][T25245] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 712.315153][T25254] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 712.317101][T25254] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #2: block 18: comm syz.2.5442: lblock 23 mapped to illegal pblock 18 (length 1) [ 712.510558][T21496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.533635][T25261] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #2: block 18: comm syz.2.5442: lblock 23 mapped to illegal pblock 18 (length 1) [ 712.598216][T19812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.866923][T25275] set_capacity_and_notify: 14 callbacks suppressed [ 712.866940][T25275] loop7: detected capacity change from 0 to 164 [ 712.882675][T25270] loop2: detected capacity change from 0 to 1024 [ 712.889058][T25276] netlink: 'syz.9.5448': attribute type 1 has an invalid length. [ 712.890117][T25270] EXT4-fs: Ignoring removed nomblk_io_submit option [ 712.903239][T25276] 8021q: adding VLAN 0 to HW filter on device bond4 [ 712.914256][T25276] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5448'. [ 712.929384][T25276] bond4: entered promiscuous mode [ 712.937035][T25270] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 712.948070][T25276] bond4: entered allmulticast mode [ 712.960606][T25270] System zones: 0-1, 3-36 [ 712.966217][T25270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.019815][T25282] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5450'. [ 713.039575][T25285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.048790][T25285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.098874][T25283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.107458][T25283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.134081][T25282] bond4: entered promiscuous mode [ 713.139518][T25282] 8021q: adding VLAN 0 to HW filter on device bond4 [ 713.176911][T25287] 8021q: adding VLAN 0 to HW filter on device bond4 [ 713.190436][T25287] bond4: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 713.203367][T25287] bond4: (slave ip6tnl2): Error -95 calling set_mac_address [ 713.289406][T25294] loop7: detected capacity change from 0 to 512 [ 713.310644][T25294] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.323483][T25294] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 713.335699][T25294] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #2: block 18: comm syz.7.5454: lblock 23 mapped to illegal pblock 18 (length 1) [ 713.352208][T25294] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #2: block 18: comm syz.7.5454: lblock 23 mapped to illegal pblock 18 (length 1) [ 713.376263][T21496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.530185][T25299] loop7: detected capacity change from 0 to 128 [ 713.537028][T25299] msdos: Bad value for 'gid' [ 713.541783][T25299] msdos: Bad value for 'gid' [ 713.685818][T25307] loop9: detected capacity change from 0 to 512 [ 713.694754][T25307] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6054e01c, mo2=0102] [ 713.703769][T25307] System zones: 1-12 [ 713.708119][T25307] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.5459: inode has both inline data and extents flags [ 713.721702][T25307] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 713.721949][T25307] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.5459: couldn't read orphan inode 15 (err -117) [ 713.731221][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 713.731241][ C0] EXT4-fs (loop9): initial error at time 1772277829: ext4_orphan_get:1391: inode 15 [ 713.731269][ C0] EXT4-fs (loop9): last error at time 1772277829: ext4_orphan_get:1391: inode 15 [ 713.768253][T25307] loop9: lost filesystem error report for type 5 error -117 [ 713.768808][T25307] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.799508][T21892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.820636][T25310] loop9: detected capacity change from 0 to 512 [ 713.832869][T25310] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 713.843202][T25310] FAT-fs (loop9): Filesystem has been set read-only [ 713.895016][T25313] loop6: detected capacity change from 0 to 164 [ 713.954403][T25319] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5464'. [ 713.981386][T25323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.990738][T25323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.061181][T25331] loop9: detected capacity change from 0 to 512 [ 714.071050][T25331] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6054e01c, mo2=0102] [ 714.090226][T25331] System zones: 1-12 [ 714.096527][T25331] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.5470: inode has both inline data and extents flags [ 714.109894][T25331] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 714.110050][T25331] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.5470: couldn't read orphan inode 15 (err -117) [ 714.119444][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 714.119466][ C0] EXT4-fs (loop9): initial error at time 1772277829: ext4_orphan_get:1391: inode 15 [ 714.119499][ C0] EXT4-fs (loop9): last error at time 1772277829: ext4_orphan_get:1391: inode 15 [ 714.158050][T25331] loop9: lost filesystem error report for type 5 error -117 [ 714.158522][T25331] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.190237][T21892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.267761][T25338] loop9: detected capacity change from 0 to 1024 [ 714.290407][T25334] loop5: detected capacity change from 0 to 512 [ 714.298856][T25338] Quota error (device loop9): do_check_range: Getting block 64 out of range 1-5 [ 714.332408][T25338] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 714.350132][T25338] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.5473: Failed to acquire dquot type 0 [ 714.350809][T25334] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 714.380787][T25338] loop9: lost filesystem error report for type 5 error -117 [ 714.383695][T25338] EXT4-fs error (device loop9): mb_free_blocks:2047: group 0, [ 714.391222][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 714.391241][ C1] EXT4-fs (loop9): initial error at time 1772277830: ext4_acquire_dquot:7001 [ 714.391269][ C1] EXT4-fs (loop9): last error at time 1772277830: ext4_acquire_dquot:7001 [ 714.414493][T25338] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 714.433402][T25338] EXT4-fs (loop9): 1 truncate cleaned up [ 714.439684][T25338] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.455794][T25338] Quota error (device loop9): do_check_range: Getting block 64 out of range 1-5 [ 714.457718][T25334] EXT4-fs (loop5): 1 truncate cleaned up [ 714.471924][T25338] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 714.481508][T25338] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.5473: Failed to acquire dquot type 0 [ 714.506260][T25334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.522112][T25338] forcing mempool usage for fserror_report+0x1b4/0x500 [ 714.564510][T25348] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5478'. [ 714.574139][T21892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.629498][T14485] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.706152][T25358] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 714.797540][T25364] EXT4-fs: Ignoring removed bh option [ 714.807295][T25364] EXT4-fs: inline encryption not supported [ 714.818095][T25364] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 714.828697][T25367] syzkaller1: entered promiscuous mode [ 714.834449][T25367] syzkaller1: entered allmulticast mode [ 714.842819][T25364] EXT4-fs error (device loop5): __ext4_fill_super:5563: inode #2: comm syz.5.5485: iget: special inode unallocated [ 714.856157][T25364] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 714.856570][T25364] EXT4-fs (loop5): get root inode failed [ 714.865870][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 714.865894][ C1] EXT4-fs (loop5): last error at time 1772277830: __ext4_fill_super:5563: inode 2 [ 714.875027][ T28] audit: type=1400 audit(1772277830.733:7020): avc: denied { unmount } for pid=21892 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 714.878522][T25364] EXT4-fs (loop5): mount failed [ 714.937729][T25377] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5490'. [ 715.010882][ T28] audit: type=1400 audit(1772277830.883:7021): avc: denied { ioctl } for pid=25384 comm="syz.9.5494" path="socket:[83874]" dev="sockfs" ino=83874 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 715.117344][T25396] syzkaller1: entered promiscuous mode [ 715.128391][T25396] syzkaller1: entered allmulticast mode [ 715.271097][T25406] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5502'. [ 715.354364][T25383] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 715.391393][T25383] EXT4-fs (loop7): 1 truncate cleaned up [ 715.419807][T25383] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 715.507219][T25425] geneve2: entered allmulticast mode [ 715.554808][T21496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.568712][T25430] FAT-fs (loop6): codepage cp1255 not found [ 715.576806][T25434] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5515'. [ 715.705798][ T28] audit: type=1400 audit(1772277831.573:7022): avc: denied { name_connect } for pid=25435 comm="syz.9.5516" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 715.823940][T25451] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.5513'. [ 715.859273][T25451] netlink: zone id is out of range [ 715.867189][T19812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.876043][T25451] netlink: zone id is out of range [ 715.877725][T25451] netlink: zone id is out of range [ 715.966732][T25458] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.022979][T25451] netlink: zone id is out of range [ 716.128758][T25458] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.144947][T25449] EXT4-fs: inline encryption not supported [ 716.155072][T25449] EXT4-fs: Ignoring removed i_version option [ 716.228986][T25458] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #2: block 18: comm syz.7.5522: lblock 23 mapped to illegal pblock 18 (length 1) [ 716.276146][T25449] EXT4-fs (loop9): 1 orphan inode deleted [ 716.286200][T25466] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #2: block 18: comm syz.7.5522: lblock 23 mapped to illegal pblock 18 (length 1) [ 716.305217][T25449] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.413416][T25451] netlink: set zone limit has 8 unknown bytes [ 716.426324][T21496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.466823][T25480] EXT4-fs: Ignoring removed nomblk_io_submit option [ 716.489662][T25480] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 716.507412][T25480] System zones: 0-1, 3-36 [ 716.553837][T25480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.608057][T21892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.686370][T25493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5536'. [ 716.692910][T25495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.712275][T25495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.717567][T25491] lo speed is unknown, defaulting to 1000 [ 716.841386][T25500] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.854435][T25500] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 717.024189][T25500] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #2: block 18: comm syz.9.5538: lblock 23 mapped to illegal pblock 18 (length 1) [ 717.084142][T25510] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #2: block 18: comm syz.9.5538: lblock 23 mapped to illegal pblock 18 (length 1) [ 717.268586][T25491] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.362997][T21892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.419380][T25520] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5545'. [ 717.476266][T25526] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 717.583006][T21496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.742593][T25551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5558'. [ 718.575306][T25563] set_capacity_and_notify: 14 callbacks suppressed [ 718.575349][T25563] loop9: detected capacity change from 0 to 128 [ 718.654208][T25565] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5564'. [ 718.797951][T25572] loop7: detected capacity change from 0 to 164 [ 718.910053][T25579] batman_adv: batadv0: Adding interface: macsec1 [ 718.931314][T25579] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.962884][T25582] loop2: detected capacity change from 0 to 512 [ 718.989864][T25582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.006428][T25579] batman_adv: batadv0: Interface activated: macsec1 [ 719.013785][T25582] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.072387][T19812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.132277][T25589] loop9: detected capacity change from 0 to 512 [ 719.164903][T25589] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 719.205115][T25589] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.5575: bad orphan inode 131083 [ 719.235598][T25589] loop9: lost filesystem error report for type 5 error -117 [ 719.236178][T25589] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.484417][T25601] netlink: 'syz.6.5579': attribute type 1 has an invalid length. [ 719.498564][T25601] bond8: entered promiscuous mode [ 719.503728][T25601] 8021q: adding VLAN 0 to HW filter on device bond8 [ 719.504310][T25589] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5575'. [ 719.513587][T25601] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5579'. [ 719.562334][T14485] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.583966][T25604] loop6: detected capacity change from 0 to 256 [ 719.612747][T25604] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 719.641411][T25599] loop2: detected capacity change from 0 to 8192 [ 719.675614][T25604] lo speed is unknown, defaulting to 1000 [ 719.692054][ T3800] loop2: p1 < > p2 p4 < p5 > [ 719.698745][ T3800] loop2: partition table partially beyond EOD, truncated [ 719.721477][T25608] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5581'. [ 719.721971][ T3800] loop2: p1 start 134217728 is beyond EOD, truncated [ 719.756794][ T3800] loop2: p2 size 591360 extends beyond EOD, truncated [ 719.777236][ T3800] loop2: p5 size 591360 extends beyond EOD, truncated [ 719.844022][T21892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.926664][T25599] loop2: p1 < > p2 p4 < p5 > [ 719.961567][T25599] loop2: partition table partially beyond EOD, truncated [ 720.007932][T25599] loop2: p1 start 134217728 is beyond EOD, truncated [ 720.044436][T25599] loop2: p2 size 591360 extends beyond EOD, truncated [ 720.103282][T25599] loop2: p5 size 591360 extends beyond EOD, truncated [ 720.103844][T25610] lo speed is unknown, defaulting to 1000 [ 720.378447][ T28] audit: type=1400 audit(1772277836.213:7023): avc: denied { listen } for pid=25620 comm="syz.9.5584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 720.425031][T25622] loop9: detected capacity change from 0 to 256 [ 720.439645][ T6526] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 720.449355][ T28] audit: type=1400 audit(1772277836.233:7024): avc: denied { accept } for pid=25620 comm="syz.9.5584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 720.471039][T25622] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 720.494890][T25622] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 720.809682][T25631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.861095][T25631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.922939][T25633] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5587'. [ 721.557600][T25645] loop6: detected capacity change from 0 to 512 [ 721.564616][T25639] loop2: detected capacity change from 0 to 8192 [ 721.582052][T25645] EXT4-fs: Ignoring removed mblk_io_submit option [ 721.981649][T25648] loop9: detected capacity change from 0 to 256 [ 722.105467][T25639] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 722.116203][T25645] EXT4-fs: quotafile must be on filesystem root [ 723.181747][T25645] lo speed is unknown, defaulting to 1000 [ 723.693301][T25655] loop7: detected capacity change from 0 to 164 [ 723.808833][T25648] FAT-fs (loop9): Directory bread(block 64) failed [ 723.815567][T25648] FAT-fs (loop9): Directory bread(block 65) failed [ 723.822200][T25648] FAT-fs (loop9): Directory bread(block 66) failed [ 723.828747][T25648] FAT-fs (loop9): Directory bread(block 67) failed [ 723.835314][T25648] FAT-fs (loop9): Directory bread(block 68) failed [ 723.841885][T25648] FAT-fs (loop9): Directory bread(block 69) failed [ 723.848509][T25648] FAT-fs (loop9): Directory bread(block 70) failed [ 723.855091][T25648] FAT-fs (loop9): Directory bread(block 71) failed [ 723.861689][T25648] FAT-fs (loop9): Directory bread(block 72) failed [ 723.868250][T25648] FAT-fs (loop9): Directory bread(block 73) failed [ 723.932910][T25647] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5592'. [ 724.007722][ T28] audit: type=1400 audit(1772277839.853:7025): avc: denied { setopt } for pid=25642 comm="syz.6.5593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 724.151073][T25647] lo speed is unknown, defaulting to 1000 [ 724.165981][ T28] audit: type=1400 audit(1772277839.853:7026): avc: denied { read } for pid=25642 comm="syz.6.5593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 724.350958][T25662] loop5: detected capacity change from 0 to 8192 [ 724.364133][T25662] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 724.515487][T25671] loop5: detected capacity change from 0 to 164 [ 724.694598][T25666] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5600'. [ 724.783345][T25679] netlink: 'syz.9.5603': attribute type 10 has an invalid length. [ 724.803119][T25676] loop2: detected capacity change from 0 to 128 [ 724.809917][T25680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.863552][T25676] FAT-fs (loop2): Directory bread(block 414) failed [ 724.896948][T25680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.908400][T25676] FAT-fs (loop2): Directory bread(block 415) failed [ 724.915043][T25676] FAT-fs (loop2): Directory bread(block 416) failed [ 724.922859][T25679] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 724.932157][T25679] team0: Failed to send options change via netlink (err -105) [ 724.939887][T25679] team0: Port device netdevsim1 added [ 724.945457][T25676] FAT-fs (loop2): Directory bread(block 417) failed [ 724.958042][T25676] FAT-fs (loop2): Directory bread(block 418) failed [ 724.965082][T25676] FAT-fs (loop2): Directory bread(block 419) failed [ 724.976351][T25676] FAT-fs (loop2): Directory bread(block 420) failed [ 724.983457][T25676] FAT-fs (loop2): Directory bread(block 421) failed [ 724.991528][T25676] FAT-fs (loop2): Directory bread(block 414) failed [ 725.007861][T25676] FAT-fs (loop2): Directory bread(block 415) failed [ 725.016311][ T28] audit: type=1400 audit(1772277840.883:7027): avc: denied { create } for pid=25683 comm="syz.6.5606" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=mctp_socket permissive=1 [ 725.046663][ T28] audit: type=1400 audit(1772277840.913:7028): avc: denied { mounton } for pid=25683 comm="syz.6.5606" path="/334/file0" dev="gadgetfs" ino=3720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 725.104686][T25676] SET target dimension over the limit! [ 725.166675][T25696] loop7: detected capacity change from 0 to 256 [ 725.225405][T25700] veth0: entered promiscuous mode [ 725.231192][T25700] veth0: left promiscuous mode [ 725.257437][ T28] audit: type=1400 audit(1772277841.123:7029): avc: denied { unmount } for pid=18789 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 725.301229][ T28] audit: type=1400 audit(1772277841.143:7030): avc: denied { unmount } for pid=18789 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 725.344292][T25707] loop6: detected capacity change from 0 to 256 [ 725.395115][ T28] audit: type=1326 audit(1772277841.253:7031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25710 comm="syz.9.5616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8dce89c799 code=0x0 [ 725.463812][ T28] audit: type=1326 audit(1772277841.333:7032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25713 comm="syz.6.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05395c799 code=0x7ffc0000 [ 725.555185][ T28] audit: type=1326 audit(1772277841.353:7033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25713 comm="syz.6.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7ff05395c799 code=0x7ffc0000 [ 725.621744][ T28] audit: type=1326 audit(1772277841.353:7034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25713 comm="syz.6.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05395c799 code=0x7ffc0000 [ 725.650931][ T28] audit: type=1326 audit(1772277841.353:7035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25713 comm="syz.6.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff05395c799 code=0x7ffc0000 [ 725.678003][ T28] audit: type=1326 audit(1772277841.353:7036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25713 comm="syz.6.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05395c799 code=0x7ffc0000 [ 725.720817][ T28] audit: type=1326 audit(1772277841.363:7037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25713 comm="syz.6.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff05395c799 code=0x7ffc0000 [ 725.764485][ T28] audit: type=1326 audit(1772277841.363:7038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25713 comm="syz.6.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05395c799 code=0x7ffc0000 [ 725.788537][ T28] audit: type=1326 audit(1772277841.363:7039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25713 comm="syz.6.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff05395c799 code=0x7ffc0000 [ 725.813877][ T28] audit: type=1326 audit(1772277841.363:7040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25713 comm="syz.6.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff05395c502 code=0x7ffc0000 [ 725.854204][T25722] syzkaller0: entered promiscuous mode [ 725.860122][T25722] syzkaller0: entered allmulticast mode [ 725.873731][T25714] loop6: detected capacity change from 0 to 1024 [ 725.916711][T25714] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 725.925849][T25714] System zones: 0-1, 3-36 [ 725.934796][T25714] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.5617: bad orphan inode 134217728 [ 725.950655][T25714] loop6: lost filesystem error report for type 5 error -117 [ 725.960924][T25714] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.052377][T25729] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5622'. [ 726.119911][T25735] loop2: detected capacity change from 0 to 512 [ 726.132317][T25735] EXT4-fs: Ignoring removed mblk_io_submit option [ 726.141407][T25735] EXT4-fs: quotafile must be on filesystem root [ 726.196933][T25735] lo speed is unknown, defaulting to 1000 [ 726.245742][T25740] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5627'. [ 726.300703][T25748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.309897][T25748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.319121][T25749] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5625'. [ 726.411145][T25756] loop5: detected capacity change from 0 to 128 [ 726.427023][T25757] loop7: detected capacity change from 0 to 128 [ 726.434651][T25756] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 726.447064][T25756] ext4 filesystem being mounted at /565/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 726.470138][T25757] FAT-fs (loop7): Directory bread(block 414) failed [ 726.476905][T25757] FAT-fs (loop7): Directory bread(block 415) failed [ 726.502450][T25757] FAT-fs (loop7): Directory bread(block 416) failed [ 726.509907][T14485] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 726.519066][T25757] FAT-fs (loop7): Directory bread(block 417) failed [ 726.525890][T25757] FAT-fs (loop7): Directory bread(block 418) failed [ 726.532638][T25757] FAT-fs (loop7): Directory bread(block 419) failed [ 726.540574][T25757] FAT-fs (loop7): Directory bread(block 420) failed [ 726.547385][T25757] FAT-fs (loop7): Directory bread(block 421) failed [ 726.572665][T18789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.574108][T25757] FAT-fs (loop7): Directory bread(block 414) failed [ 726.589210][T25757] FAT-fs (loop7): Directory bread(block 415) failed [ 726.628469][T25766] syzkaller0: entered promiscuous mode [ 726.647079][T25766] syzkaller0: entered allmulticast mode [ 726.674985][T25774] SET target dimension over the limit! [ 726.785277][T25781] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5636'. [ 726.794753][T25781] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5636'. [ 726.865709][T25785] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5638'. [ 726.880550][T25785] netlink: 55 bytes leftover after parsing attributes in process `syz.9.5638'. [ 728.008784][T25793] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5639'. [ 729.046599][T25801] loop6: detected capacity change from 0 to 512 [ 729.559256][T25793] lo speed is unknown, defaulting to 1000 [ 729.945442][T25794] lo speed is unknown, defaulting to 1000 [ 730.048132][T25801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.063660][T25770] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 731.028009][T25801] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 731.287808][T25811] __nla_validate_parse: 1 callbacks suppressed [ 731.287827][T25811] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5645'. [ 731.304584][T25811] lo speed is unknown, defaulting to 1000 [ 731.310844][T25811] lo speed is unknown, defaulting to 1000 [ 731.317022][T25811] lo speed is unknown, defaulting to 1000 [ 731.323788][T25811] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 731.351354][T25811] lo speed is unknown, defaulting to 1000 [ 731.358930][T25811] lo speed is unknown, defaulting to 1000 [ 731.367412][T25811] lo speed is unknown, defaulting to 1000 [ 731.376145][T25811] lo speed is unknown, defaulting to 1000 [ 731.382786][T25811] lo speed is unknown, defaulting to 1000 [ 731.389638][T25811] lo speed is unknown, defaulting to 1000 [ 731.472438][T25816] syzkaller0: entered promiscuous mode [ 731.480384][T25816] syzkaller0: entered allmulticast mode [ 731.502826][T25818] loop7: detected capacity change from 0 to 164 [ 731.549604][T18789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.705462][T25831] loop9: detected capacity change from 0 to 128 [ 731.729135][T25831] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 731.743860][T25839] loop6: detected capacity change from 0 to 1024 [ 731.754389][T25831] ext4 filesystem being mounted at /243/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 731.794841][T25839] __quota_error: 52 callbacks suppressed [ 731.794863][T25839] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 731.808533][T25843] loop5: detected capacity change from 0 to 164 [ 731.823953][T25839] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 731.833783][T25839] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.5654: Failed to acquire dquot type 0 [ 731.845468][T25839] loop6: lost filesystem error report for type 5 error -117 [ 731.845847][T25839] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, [ 731.853253][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 731.853276][ C0] EXT4-fs (loop6): initial error at time 1772277847: ext4_acquire_dquot:7001 [ 731.853318][ C0] EXT4-fs (loop6): last error at time 1772277847: ext4_acquire_dquot:7001 [ 731.885394][T25839] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 731.896108][T25839] EXT4-fs (loop6): 1 truncate cleaned up [ 731.902439][T25839] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.915936][T25839] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 731.925516][T25839] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 731.935064][T25839] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.5654: Failed to acquire dquot type 0 [ 731.946519][T25839] forcing mempool usage for bio_alloc_bioset+0x453/0x9a0 [ 731.968626][T18789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.120073][T25853] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5656'. [ 732.336054][T25853] lo speed is unknown, defaulting to 1000 [ 732.351800][T25853] lo speed is unknown, defaulting to 1000 [ 733.245379][T25860] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5661'. [ 733.470367][T25868] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5663'. [ 733.596213][T25874] loop5: detected capacity change from 0 to 164 [ 733.671258][T25878] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5668'. [ 733.716817][T25881] loop7: detected capacity change from 0 to 1024 [ 733.749413][T25881] Quota error (device loop7): do_check_range: Getting block 64 out of range 1-5 [ 733.759269][T25881] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 733.768811][T25881] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.5669: Failed to acquire dquot type 0 [ 733.780312][T25881] loop7: lost filesystem error report for type 5 error -117 [ 733.780643][T25881] EXT4-fs error (device loop7): mb_free_blocks:2047: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 733.802468][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 733.802493][ C1] EXT4-fs (loop7): initial error at time 1772277849: ext4_acquire_dquot:7001 [ 733.802514][ C1] EXT4-fs (loop7): last error at time 1772277849: ext4_acquire_dquot:7001 [ 733.827539][T25881] EXT4-fs (loop7): 1 truncate cleaned up [ 733.834051][T25881] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.857988][T25883] loop5: detected capacity change from 0 to 256 [ 733.883888][T25883] FAT-fs (loop5): Directory bread(block 64) failed [ 733.890633][T25883] FAT-fs (loop5): Directory bread(block 65) failed [ 733.897415][T25883] FAT-fs (loop5): Directory bread(block 66) failed [ 733.904101][T25883] FAT-fs (loop5): Directory bread(block 67) failed [ 733.910913][T25883] FAT-fs (loop5): Directory bread(block 68) failed [ 733.917471][T25883] FAT-fs (loop5): Directory bread(block 69) failed [ 733.924154][T25883] FAT-fs (loop5): Directory bread(block 70) failed [ 733.931096][T25883] FAT-fs (loop5): Directory bread(block 71) failed [ 733.937766][T25883] FAT-fs (loop5): Directory bread(block 72) failed [ 733.944636][T25883] FAT-fs (loop5): Directory bread(block 73) failed [ 733.996729][T25883] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5667'. [ 734.228489][T25883] lo speed is unknown, defaulting to 1000 [ 734.244091][T25883] lo speed is unknown, defaulting to 1000 [ 734.802024][T25833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 735.052021][T21496] EXT4-fs error (device loop7): ext4_readdir:265: inode #11: block 74: comm syz-executor: path /276/file0/lost+found: bad entry in directory: directory entry overrun - offset=768, inode=0, rec_len=1024, size=1024 fake=0 [ 735.113868][T25886] loop2: detected capacity change from 0 to 1024 [ 735.152104][T25886] EXT4-fs: Ignoring removed nomblk_io_submit option [ 735.182605][T25888] geneve2: entered allmulticast mode [ 735.254381][T21496] Quota error (device loop7): do_check_range: Getting block 64 out of range 1-5 [ 735.285896][T25886] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 735.294390][T21496] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 735.307406][T25886] System zones: 0-1, 3-36 [ 735.313750][T25886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 735.327974][T21496] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz-executor: Failed to acquire dquot type 0 [ 735.573910][T25894] random: crng reseeded on system resumption [ 735.595500][ T3487] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.655825][T25894] lo speed is unknown, defaulting to 1000 [ 735.662568][T25894] lo speed is unknown, defaulting to 1000 [ 735.683164][ T3487] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.697662][T25884] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.707420][T19812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.772506][ T3487] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.783137][T21892] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 735.810975][T25900] loop5: detected capacity change from 0 to 512 [ 735.828176][ T3487] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.839175][T25903] loop9: detected capacity change from 0 to 164 [ 735.857183][T25900] EXT4-fs: Ignoring removed mblk_io_submit option [ 735.871522][T25900] EXT4-fs: quotafile must be on filesystem root [ 735.910076][T25901] bond6: option miimon: invalid value (18446744073709551615) [ 735.930384][T25901] bond6: option miimon: allowed values 0 - 2147483647 [ 735.938127][T25901] bond6 (unregistering): Released all slaves [ 736.001129][T25900] lo speed is unknown, defaulting to 1000 [ 736.007418][T25900] lo speed is unknown, defaulting to 1000 [ 736.317711][ T28] audit: type=1400 audit(1772277852.183:7093): avc: denied { connect } for pid=25914 comm="syz.9.5681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 736.394348][ T3487] bond0 (unregistering): (slave veth0_to_hsr): Releasing backup interface [ 736.419462][T25936] loop2: detected capacity change from 0 to 512 [ 736.431351][T25938] loop6: detected capacity change from 0 to 256 [ 736.460420][T25936] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 736.498152][T25936] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 736.510383][ T3487] veth0_to_hsr: left promiscuous mode [ 736.519762][ T3487] bond0 (unregistering): Released all slaves [ 736.543509][ T3487] bond1 (unregistering): Released all slaves [ 736.578755][ T3487] bond2 (unregistering): Released all slaves [ 736.616538][ T3487] bond3 (unregistering): Released all slaves [ 736.653202][ T3487] bond4 (unregistering): Released all slaves [ 736.759719][ T3487] tipc: Left network mode [ 736.774920][T25908] lo speed is unknown, defaulting to 1000 [ 736.799060][T25908] lo speed is unknown, defaulting to 1000 [ 736.806890][T25936] loop2: detected capacity change from 0 to 8192 [ 736.820205][ T3487] hsr_slave_0: left promiscuous mode [ 736.829066][T25951] loop5: detected capacity change from 0 to 512 [ 736.836649][ T3487] hsr_slave_1: left promiscuous mode [ 736.843258][ T3487] batman_adv: batadv0: Interface deactivated: macsec1 [ 736.855135][ T3487] batman_adv: batadv0: Removing interface: macsec1 [ 736.884403][T25951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.900524][ T3487] veth1_macvtap: left promiscuous mode [ 736.906028][ T3487] veth0_macvtap: left promiscuous mode [ 736.924670][ T3487] veth1_vlan: left promiscuous mode [ 736.932038][T25951] ext4 filesystem being mounted at /576/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 736.945466][ T3487] veth0_vlan: left promiscuous mode [ 736.952280][T25951] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 18: comm syz.5.5685: lblock 23 mapped to illegal pblock 18 (length 1) [ 736.983149][T25951] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 18: comm syz.5.5685: lblock 23 mapped to illegal pblock 18 (length 1) [ 737.012112][T14485] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.074341][T25970] loop5: detected capacity change from 0 to 256 [ 737.104122][T25970] FAULT_INJECTION: forcing a failure. [ 737.104122][T25970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 737.156419][T25970] CPU: 0 UID: 0 PID: 25970 Comm: syz.5.5686 Tainted: G W syzkaller #0 PREEMPT(full) [ 737.156451][T25970] Tainted: [W]=WARN [ 737.156459][T25970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 737.156524][T25970] Call Trace: [ 737.156533][T25970] [ 737.156542][T25970] __dump_stack+0x1d/0x30 [ 737.156576][T25970] dump_stack_lvl+0x95/0xd0 [ 737.156601][T25970] dump_stack+0x15/0x1b [ 737.156702][T25970] should_fail_ex+0x263/0x280 [ 737.156727][T25970] should_fail+0xb/0x20 [ 737.156811][T25970] should_fail_usercopy+0x1a/0x20 [ 737.156836][T25970] strncpy_from_user+0x27/0x250 [ 737.156868][T25970] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 737.156894][T25970] do_getname+0x59/0x1c0 [ 737.156930][T25970] getname_flags+0x1d/0x30 [ 737.156979][T25970] do_sys_openat2+0x60/0x130 [ 737.157015][T25970] __x64_sys_openat+0xf2/0x120 [ 737.157045][T25970] x64_sys_call+0x1e39/0x3020 [ 737.157131][T25970] do_syscall_64+0x12c/0x370 [ 737.157156][T25970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.157182][T25970] RIP: 0033:0x7f6c4521cfce [ 737.157201][T25970] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 737.157292][T25970] RSP: 002b:00007f6c43cb6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 737.157318][T25970] RAX: ffffffffffffffda RBX: 00007f6c43cb76c0 RCX: 00007f6c4521cfce [ 737.157335][T25970] RDX: 0000000000000000 RSI: 00007f6c43cb6c00 RDI: ffffffffffffff9c [ 737.157351][T25970] RBP: 00007f6c43cb6c00 R08: 0000000000000000 R09: 0000000000000000 [ 737.157367][T25970] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 737.157449][T25970] R13: 00007f6c454d6038 R14: 00007f6c454d5fa0 R15: 00007ffe05a368c8 [ 737.157472][T25970] [ 737.339690][T25908] chnl_net:caif_netlink_parms(): no params data found [ 737.432612][T25988] loop6: detected capacity change from 0 to 256 [ 737.435212][T25908] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.449701][T25908] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.457343][T25908] bridge_slave_0: entered allmulticast mode [ 737.464488][T25908] bridge_slave_0: entered promiscuous mode [ 737.472606][T25908] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.480004][T25908] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.487205][T25908] bridge_slave_1: entered allmulticast mode [ 737.494262][T25908] bridge_slave_1: entered promiscuous mode [ 737.526207][T25908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.555569][T25908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.574857][T25998] loop2: detected capacity change from 0 to 164 [ 737.608253][T25908] team0: Port device team_slave_0 added [ 737.636182][T25908] team0: Port device team_slave_1 added [ 737.664589][T26007] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5693'. [ 737.683025][T25996] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 737.687933][T25908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.711012][T25908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.738348][T25908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.780936][T25908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.789105][T25908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.796610][T26017] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5694'. [ 737.824850][T25908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.833059][T26017] netlink: 55 bytes leftover after parsing attributes in process `syz.5.5694'. [ 737.872852][T26021] FAULT_INJECTION: forcing a failure. [ 737.872852][T26021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 737.905855][T25908] hsr_slave_0: entered promiscuous mode [ 737.916156][T26021] CPU: 0 UID: 0 PID: 26021 Comm: syz.2.5695 Tainted: G W syzkaller #0 PREEMPT(full) [ 737.916194][T26021] Tainted: [W]=WARN [ 737.916202][T26021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 737.916215][T26021] Call Trace: [ 737.916290][T26021] [ 737.916300][T26021] __dump_stack+0x1d/0x30 [ 737.916328][T26021] dump_stack_lvl+0x95/0xd0 [ 737.916349][T26021] dump_stack+0x15/0x1b [ 737.916370][T26021] should_fail_ex+0x263/0x280 [ 737.916429][T26021] should_fail+0xb/0x20 [ 737.916447][T26021] should_fail_usercopy+0x1a/0x20 [ 737.916468][T26021] _copy_to_user+0x20/0xa0 [ 737.916495][T26021] perf_read+0x5a7/0x670 [ 737.916559][T26021] ? __pfx_perf_read+0x10/0x10 [ 737.916591][T26021] vfs_read+0x1ab/0x7f0 [ 737.916622][T26021] ? __rcu_read_unlock+0x4e/0x70 [ 737.916708][T26021] ? __fget_files+0x184/0x1c0 [ 737.916736][T26021] ksys_read+0xdc/0x1a0 [ 737.916765][T26021] __x64_sys_read+0x40/0x50 [ 737.916915][T26021] x64_sys_call+0x2886/0x3020 [ 737.916945][T26021] do_syscall_64+0x12c/0x370 [ 737.916969][T26021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.916994][T26021] RIP: 0033:0x7f59c115c799 [ 737.917011][T26021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.917080][T26021] RSP: 002b:00007f59bfbb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 737.917161][T26021] RAX: ffffffffffffffda RBX: 00007f59c13d5fa0 RCX: 00007f59c115c799 [ 737.917185][T26021] RDX: 000000000000009d RSI: 0000200000000240 RDI: 0000000000000004 [ 737.917200][T26021] RBP: 00007f59bfbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 737.917214][T26021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.917229][T26021] R13: 00007f59c13d6038 R14: 00007f59c13d5fa0 R15: 00007ffef16b8df8 [ 737.917310][T26021] [ 738.104793][T25908] hsr_slave_1: entered promiscuous mode [ 738.110880][T25908] debugfs: 'hsr0' already exists in 'hsr' [ 738.116757][T25908] Cannot create hsr debugfs directory [ 738.308206][T26061] netlink: 'syz.2.5704': attribute type 1 has an invalid length. [ 738.339526][T26061] bond6: entered promiscuous mode [ 738.344873][T26061] 8021q: adding VLAN 0 to HW filter on device bond6 [ 738.354219][T26059] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 738.370328][T26061] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5704'. [ 738.408577][ T28] audit: type=1400 audit(1772277854.273:7094): avc: denied { execute } for pid=26057 comm="syz.6.5703" path="/355/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 738.459205][T26080] netlink: 'syz.2.5707': attribute type 1 has an invalid length. [ 738.500251][T26080] 8021q: adding VLAN 0 to HW filter on device bond7 [ 738.528706][ T28] audit: type=1400 audit(1772277854.393:7095): avc: denied { setopt } for pid=26078 comm="syz.5.5708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 738.535294][T26086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5707'. [ 738.623584][T26086] bond7: entered promiscuous mode [ 738.632501][T26086] bond7: entered allmulticast mode [ 738.696917][T18789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.702637][T25908] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 738.720540][T25908] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 738.734524][T25908] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 738.814261][T25908] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 738.919271][T26109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 738.938603][T26109] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 738.962549][T25908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.975326][T25908] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.017569][T14485] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 739.048762][T25908] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 739.059662][T25908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 739.106791][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.113962][ T6549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.131402][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.138697][ T6549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.179343][T26127] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 739.198066][T26136] FAULT_INJECTION: forcing a failure. [ 739.198066][T26136] name failslab, interval 1, probability 0, space 0, times 0 [ 739.216794][T25908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.217792][T26136] CPU: 1 UID: 0 PID: 26136 Comm: syz.5.5716 Tainted: G W syzkaller #0 PREEMPT(full) [ 739.217885][T26136] Tainted: [W]=WARN [ 739.217893][T26136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 739.217905][T26136] Call Trace: [ 739.217912][T26136] [ 739.217920][T26136] __dump_stack+0x1d/0x30 [ 739.217948][T26136] dump_stack_lvl+0x95/0xd0 [ 739.217972][T26136] dump_stack+0x15/0x1b [ 739.218004][T26136] should_fail_ex+0x263/0x280 [ 739.218027][T26136] should_failslab+0x8c/0xb0 [ 739.218048][T26136] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 739.218094][T26136] ? __alloc_skb+0x2d6/0x690 [ 739.218122][T26136] __alloc_skb+0x2d6/0x690 [ 739.218141][T26136] ? __alloc_skb+0x200/0x690 [ 739.218163][T26136] netlink_alloc_large_skb+0xbf/0xf0 [ 739.218192][T26136] netlink_sendmsg+0x40c/0x6f0 [ 739.218223][T26136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.218249][T26136] ____sys_sendmsg+0x5af/0x600 [ 739.218359][T26136] ___sys_sendmsg+0x195/0x1e0 [ 739.218424][T26136] __x64_sys_sendmsg+0xd4/0x160 [ 739.218454][T26136] x64_sys_call+0x194c/0x3020 [ 739.218508][T26136] do_syscall_64+0x12c/0x370 [ 739.218530][T26136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.218551][T26136] RIP: 0033:0x7f6c4525c799 [ 739.218578][T26136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.218598][T26136] RSP: 002b:00007f6c43cb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 739.218620][T26136] RAX: ffffffffffffffda RBX: 00007f6c454d5fa0 RCX: 00007f6c4525c799 [ 739.218634][T26136] RDX: 0000000000008000 RSI: 0000200000000080 RDI: 0000000000000003 [ 739.218746][T26136] RBP: 00007f6c43cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 739.218760][T26136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.218773][T26136] R13: 00007f6c454d6038 R14: 00007f6c454d5fa0 R15: 00007ffe05a368c8 [ 739.218792][T26136] [ 739.380192][T26127] ext4 filesystem being mounted at /320/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 739.464385][T26139] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5717'. [ 739.473656][T26143] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 739.505128][T26143] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 739.564203][T25908] veth0_vlan: entered promiscuous mode [ 739.604350][T25908] veth1_vlan: entered promiscuous mode [ 739.621980][T26160] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 739.646225][T25908] veth0_macvtap: entered promiscuous mode [ 739.672876][T25908] veth1_macvtap: entered promiscuous mode [ 739.683394][T19812] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 739.706183][T25908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.715386][T26160] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.729920][T25908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.746588][T26160] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 739.845440][T26179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.899659][ T6536] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.909501][T26184] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5725'. [ 739.931964][T26179] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 739.945665][T21892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.958691][ T6536] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.967958][ T6536] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.992821][T26179] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #2: block 18: comm syz.2.5723: lblock 23 mapped to illegal pblock 18 (length 1) [ 740.098556][T26179] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #2: block 18: comm syz.2.5723: lblock 23 mapped to illegal pblock 18 (length 1) [ 740.143119][ T6536] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.187248][T26193] set_capacity_and_notify: 11 callbacks suppressed [ 740.187267][T26193] loop5: detected capacity change from 0 to 512 [ 740.217598][T19812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.229171][T26193] EXT4-fs: test_dummy_encryption option not supported [ 740.391265][T26208] loop2: detected capacity change from 0 to 512 [ 740.523187][T26210] loop5: detected capacity change from 0 to 512 [ 740.534658][T26210] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 740.566961][T26210] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.5728: invalid indirect mapped block 83886080 (level 1) [ 740.580987][T26210] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 740.588286][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 740.604044][ C1] EXT4-fs (loop5): initial error at time 1772277856: ext4_free_branches:1023: inode 16 [ 740.613825][ C1] EXT4-fs (loop5): last error at time 1772277856: ext4_free_branches:1023: inode 16 [ 740.631998][T26210] EXT4-fs (loop5): Remounting filesystem read-only [ 740.638946][T26210] EXT4-fs (loop5): 1 orphan inode deleted [ 740.644711][T26210] EXT4-fs (loop5): 1 truncate cleaned up [ 740.651217][T26210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.674052][T26208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.725200][T26208] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 740.873310][T19812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.942339][T26221] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5732'. [ 740.955555][ T28] audit: type=1400 audit(1772277856.813:7096): avc: denied { getopt } for pid=26220 comm="syz.9.5732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 741.218353][T26251] lo speed is unknown, defaulting to 1000 [ 741.264478][T26261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5730'. [ 742.003053][T26308] loop9: detected capacity change from 0 to 164 [ 742.052345][T26314] netlink: 'syz.9.5738': attribute type 10 has an invalid length. [ 742.115753][T26324] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5739'. [ 742.188858][T26331] syzkaller0: entered promiscuous mode [ 742.194398][T26331] syzkaller0: entered allmulticast mode [ 742.386898][T26358] loop9: detected capacity change from 0 to 512 [ 742.413067][T26358] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.425814][T26358] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 742.437688][T26358] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #2: block 18: comm syz.9.5742: lblock 23 mapped to illegal pblock 18 (length 1) [ 742.452578][T26358] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #2: block 18: comm syz.9.5742: lblock 23 mapped to illegal pblock 18 (length 1) [ 742.475595][T21892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.254283][T26199] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 743.381751][T26370] loop9: detected capacity change from 0 to 164 [ 743.397159][ T9778] hid (null): report_id 0 is invalid [ 743.403247][ T28] audit: type=1400 audit(1772277859.273:7097): avc: denied { ioctl } for pid=26365 comm="syz.3.5745" path="socket:[88219]" dev="sockfs" ino=88219 ioctlcmd=0x582d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 743.434753][T14485] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.446276][T26373] loop6: detected capacity change from 0 to 256 [ 743.447528][ T9778] hid-generic 0001:0080:0009.0002: report_id 0 is invalid [ 743.479587][ T9778] hid-generic 0001:0080:0009.0002: item 0 0 1 8 parsing failed [ 743.511023][ T9778] hid-generic 0001:0080:0009.0002: probe with driver hid-generic failed with error -22 [ 743.523676][T26378] syzkaller1: entered promiscuous mode [ 743.532487][T26378] syzkaller1: entered allmulticast mode [ 743.582249][T26382] loop3: detected capacity change from 0 to 128 [ 743.599248][T26382] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 743.607436][T26382] FAT-fs (loop3): Filesystem has been set read-only [ 743.614258][T26382] bio_check_eod: 33 callbacks suppressed [ 743.614272][T26382] syz.3.5750: attempt to access beyond end of device [ 743.614272][T26382] loop3: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 743.620988][T26384] syzkaller0: entered promiscuous mode [ 743.634121][T26382] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 743.639500][T26384] syzkaller0: entered allmulticast mode [ 743.647577][T26382] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 743.661665][T26382] syz.3.5750: attempt to access beyond end of device [ 743.661665][T26382] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 743.679944][T26382] syz.3.5750: attempt to access beyond end of device [ 743.679944][T26382] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 743.694177][T26382] syz.3.5750: attempt to access beyond end of device [ 743.694177][T26382] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 743.708390][T26382] syz.3.5750: attempt to access beyond end of device [ 743.708390][T26382] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 743.722665][T26387] loop5: detected capacity change from 0 to 512 [ 743.726215][T26382] syz.3.5750: attempt to access beyond end of device [ 743.726215][T26382] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 743.729999][T26387] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 743.747975][T26382] syz.3.5750: attempt to access beyond end of device [ 743.747975][T26382] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 743.755404][T26387] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.5752: bad orphan inode 131083 [ 743.777221][T26387] loop5: lost filesystem error report for type 5 error -117 [ 743.778007][T26387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 743.800838][T26382] syz.3.5750: attempt to access beyond end of device [ 743.800838][T26382] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 743.815640][T26382] syz.3.5750: attempt to access beyond end of device [ 743.815640][T26382] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 743.822922][T26387] tun0: tun_chr_ioctl cmd 1074025672 [ 743.830289][T26382] syz.3.5750: attempt to access beyond end of device [ 743.830289][T26382] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 743.836880][T26387] tun0: ignored: set checksum enabled [ 743.899452][T26391] loop9: detected capacity change from 0 to 512 [ 744.032252][T26398] netlink: 'syz.9.5755': attribute type 3 has an invalid length. [ 744.056794][T26398] __nla_validate_parse: 1 callbacks suppressed [ 744.056814][T26398] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5755'. [ 744.136805][T14485] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.451844][T26410] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 744.533940][T26418] netlink: 'syz.6.5762': attribute type 1 has an invalid length. [ 744.565402][T26418] bond9: entered promiscuous mode [ 744.575746][T26418] 8021q: adding VLAN 0 to HW filter on device bond9 [ 744.591181][T26418] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5762'. [ 744.601486][T26423] cgroup: Setting release_agent not allowed [ 744.678451][T26430] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5765'. [ 744.720354][T26432] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 744.841796][T26432] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 744.861765][T26432] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.5767: Failed to acquire dquot type 0 [ 744.897728][T26432] loop2: lost filesystem error report for type 5 error -117 [ 744.898291][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 744.912158][ C0] EXT4-fs (loop2): initial error at time 1772277860: ext4_acquire_dquot:7001 [ 744.920982][ C0] EXT4-fs (loop2): last error at time 1772277860: ext4_acquire_dquot:7001 [ 744.934240][T26432] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 744.951988][T26432] EXT4-fs (loop2): 1 truncate cleaned up [ 744.958972][T26432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.044232][T26443] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 745.053671][T26443] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 745.063355][T26443] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.5767: Failed to acquire dquot type 0 [ 745.075840][T26443] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 745.087201][T26443] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 745.097429][T26443] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.5767: Failed to acquire dquot type 0 [ 745.206700][T26447] lo speed is unknown, defaulting to 1000 [ 745.238613][T26447] netlink: 'syz.5.5771': attribute type 7 has an invalid length. [ 745.410334][T26447] A link change request failed with some changes committed already. Interface vlan3 may have been left with an inconsistent configuration, please check. [ 745.581138][T26450] lo speed is unknown, defaulting to 1000 [ 745.654964][T26450] chnl_net:caif_netlink_parms(): no params data found [ 745.678239][T26462] set_capacity_and_notify: 4 callbacks suppressed [ 745.684826][T26462] loop6: detected capacity change from 0 to 1024 [ 745.695970][T26462] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 745.705362][T26462] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 745.714973][T26462] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.5773: Failed to acquire dquot type 0 [ 745.726427][T26462] loop6: lost filesystem error report for type 5 error -117 [ 745.726883][T26462] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, [ 745.734426][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 745.734448][ C0] EXT4-fs (loop6): initial error at time 1772277861: ext4_acquire_dquot:7001 [ 745.734470][ C0] EXT4-fs (loop6): last error at time 1772277861: ext4_acquire_dquot:7001 [ 745.766354][T26462] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 745.776889][T26462] EXT4-fs (loop6): 1 truncate cleaned up [ 745.782897][T26462] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.799406][T26462] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 745.808617][T26462] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 745.818004][T26462] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.5773: Failed to acquire dquot type 0 [ 745.819042][T26450] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.836918][T26462] FAULT_INJECTION: forcing a failure. [ 745.836918][T26462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.850169][T26462] CPU: 1 UID: 0 PID: 26462 Comm: syz.6.5773 Tainted: G W syzkaller #0 PREEMPT(full) [ 745.850206][T26462] Tainted: [W]=WARN [ 745.850213][T26462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 745.850226][T26462] Call Trace: [ 745.850234][T26462] [ 745.850243][T26462] __dump_stack+0x1d/0x30 [ 745.850321][T26462] dump_stack_lvl+0x95/0xd0 [ 745.850346][T26462] dump_stack+0x15/0x1b [ 745.850362][T26450] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.850371][T26462] should_fail_ex+0x263/0x280 [ 745.850393][T26462] should_fail+0xb/0x20 [ 745.850442][T26462] should_fail_usercopy+0x1a/0x20 [ 745.850511][T26462] _copy_to_user+0x20/0xa0 [ 745.850597][T26462] simple_read_from_buffer+0xb5/0x130 [ 745.850619][T26462] proc_fail_nth_read+0x10e/0x150 [ 745.850648][T26462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 745.850675][T26462] vfs_read+0x1ab/0x7f0 [ 745.850776][T26462] ? __rcu_read_unlock+0x4e/0x70 [ 745.850868][T26462] ? __fget_files+0x184/0x1c0 [ 745.850943][T26462] ? mutex_lock+0x57/0x90 [ 745.850971][T26462] ksys_read+0xdc/0x1a0 [ 745.851000][T26462] __x64_sys_read+0x40/0x50 [ 745.851079][T26462] x64_sys_call+0x2886/0x3020 [ 745.851106][T26462] do_syscall_64+0x12c/0x370 [ 745.851126][T26462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.851197][T26462] RIP: 0033:0x7ff05391cfce [ 745.851214][T26462] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 745.851275][T26462] RSP: 002b:00007ff0523aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 745.851297][T26462] RAX: ffffffffffffffda RBX: 00007ff0523af6c0 RCX: 00007ff05391cfce [ 745.851312][T26462] RDX: 000000000000000f RSI: 00007ff0523af0a0 RDI: 0000000000000004 [ 745.851326][T26462] RBP: 00007ff0523af090 R08: 0000000000000000 R09: 0000000000000000 [ 745.851339][T26462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 745.851353][T26462] R13: 00007ff053bd6038 R14: 00007ff053bd5fa0 R15: 00007ffd9fab7998 [ 745.851430][T26462] [ 745.889214][T26468] loop3: detected capacity change from 0 to 128 [ 745.892492][T26450] bridge_slave_0: entered allmulticast mode [ 745.922751][T26468] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 745.926794][T26450] bridge_slave_0: entered promiscuous mode [ 745.959067][T18789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.961376][T26450] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.999733][T26469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5774'. [ 746.006775][T26450] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.022998][T26469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5774'. [ 746.029155][T26450] bridge_slave_1: entered allmulticast mode [ 746.131611][T26450] bridge_slave_1: entered promiscuous mode [ 746.190900][T26450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.201978][T26450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.228984][T26450] team0: Port device team_slave_0 added [ 746.235766][T26450] team0: Port device team_slave_1 added [ 746.264682][T26450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.271855][T26450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.297996][T26450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.309421][T26450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.326901][T26450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.353190][T26450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.354263][ T6538] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 746.433916][ T6516] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 746.442364][ T6516] ip6gretap1 (unregistering): left promiscuous mode [ 746.449029][ T6516] ip6gretap1 (unregistering): left allmulticast mode [ 746.530001][ T6516] bond4 (unregistering): (slave ip6tnl1): Releasing backup interface [ 746.538692][ T6516] ip6tnl1 (unregistering): left promiscuous mode [ 746.590488][ T6516] bond12 (unregistering): (slave bridge1): Releasing active interface [ 746.651856][ T6516] bond0 (unregistering): Released all slaves [ 746.660037][ T6516] bond1 (unregistering): Released all slaves [ 746.668958][ T6516] bond2 (unregistering): Released all slaves [ 746.677931][ T6516] bond3 (unregistering): Released all slaves [ 746.688901][ T6516] bond4 (unregistering): Released all slaves [ 746.707085][ T6516] bond5 (unregistering): Released all slaves [ 746.715883][ T6516] bond6 (unregistering): Released all slaves [ 746.724759][ T6516] bond7 (unregistering): Released all slaves [ 746.733670][ T6516] bond8 (unregistering): Released all slaves [ 746.743227][ T6516] bond9 (unregistering): Released all slaves [ 746.752829][ T6516] bond10 (unregistering): Released all slaves [ 746.762070][ T6516] bond11 (unregistering): Released all slaves [ 746.771613][ T6516] bond12 (unregistering): Released all slaves [ 746.783487][T26450] hsr_slave_0: entered promiscuous mode [ 746.789627][T26450] hsr_slave_1: entered promiscuous mode [ 746.795599][T26450] debugfs: 'hsr0' already exists in 'hsr' [ 746.802625][T26450] Cannot create hsr debugfs directory [ 746.811086][T26485] syzkaller1: entered promiscuous mode [ 746.816577][T26485] syzkaller1: entered allmulticast mode [ 746.832322][ T6516] tipc: Left network mode [ 746.859019][ T6516] hsr_slave_0: left promiscuous mode [ 746.865297][ T6516] hsr_slave_1: left promiscuous mode [ 746.871981][ T6516] team0 (unregistering): Port device batadv1 removed [ 747.258501][T26400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 747.320840][T19812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.543457][T26497] loop9: detected capacity change from 0 to 512 [ 747.588779][T26497] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 747.632322][T26497] EXT4-fs (loop9): 1 truncate cleaned up [ 747.657934][T26497] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.676729][T26504] syzkaller1: entered promiscuous mode [ 747.695621][T26504] syzkaller1: entered allmulticast mode [ 747.825135][T26512] loop3: detected capacity change from 0 to 512 [ 747.870098][T26512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.914335][T26450] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 747.940898][T26450] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 747.954767][T26512] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 747.984972][T26450] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 748.010282][T26522] loop2: detected capacity change from 0 to 128 [ 748.017064][T26522] msdos: Bad value for 'gid' [ 748.023557][T26497] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.038092][T26450] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 748.045082][T26522] msdos: Bad value for 'gid' [ 748.059293][ T6516] IPVS: stop unused estimator thread 0... [ 748.143171][T25908] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.174652][T26450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.198468][T26450] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.219879][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.227147][ T6516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.287478][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.294703][ T6516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.306233][T26544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5787'. [ 748.331422][T26450] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 748.357115][T26450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 748.427538][T26557] loop9: detected capacity change from 0 to 8192 [ 748.452494][T26557] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 748.511566][T26450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.762535][T26450] veth0_vlan: entered promiscuous mode [ 748.771047][T26450] veth1_vlan: entered promiscuous mode [ 748.788073][T26450] veth0_macvtap: entered promiscuous mode [ 748.795934][T26450] veth1_macvtap: entered promiscuous mode [ 748.806899][T26450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.817916][T26450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.828648][ T6541] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.837835][T26593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5795'. [ 748.848076][ T6541] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.857581][ T6541] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.869510][ T6538] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.542476][T26605] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5796'. [ 749.623946][T26608] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5797'. [ 750.596681][T26633] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.5798'. [ 750.659139][T26633] netlink: zone id is out of range [ 750.665387][T26633] netlink: zone id is out of range [ 750.711785][T26633] netlink: zone id is out of range [ 750.925876][T26633] netlink: set zone limit has 8 unknown bytes [ 751.555563][T26568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 751.745761][T26661] loop9: detected capacity change from 0 to 8192 [ 751.772093][T26661] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 751.978081][T26683] loop5: detected capacity change from 0 to 1024 [ 751.989195][T26683] EXT4-fs: Ignoring removed orlov option [ 751.999008][T26686] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5809'. [ 752.034060][T26688] netlink: 'syz.2.5808': attribute type 13 has an invalid length. [ 752.042340][T26688] lo: entered promiscuous mode [ 752.047267][T26688] lo: entered allmulticast mode [ 752.053693][T26688] tunl0: entered promiscuous mode [ 752.058913][T26688] tunl0: entered allmulticast mode [ 752.065512][T26688] gre0: entered promiscuous mode [ 752.071137][T26688] gre0: entered allmulticast mode [ 752.084841][T26688] gretap0: entered promiscuous mode [ 752.094943][T26688] gretap0: entered allmulticast mode [ 752.121681][T26683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.128807][T26688] erspan0: entered promiscuous mode [ 752.139873][T26688] erspan0: entered allmulticast mode [ 752.146490][T26688] ip_vti0: entered promiscuous mode [ 752.152017][T26688] ip_vti0: entered allmulticast mode [ 752.158079][T26688] ip6_vti0: entered promiscuous mode [ 752.163478][T26688] ip6_vti0: entered allmulticast mode [ 752.169701][T26688] sit0: entered promiscuous mode [ 752.174875][T26688] sit0: entered allmulticast mode [ 752.186094][T26688] ip6tnl0: entered promiscuous mode [ 752.192008][T26688] ip6tnl0: entered allmulticast mode [ 752.199767][T26688] ip6gre0: entered promiscuous mode [ 752.205234][T26688] ip6gre0: entered allmulticast mode [ 752.214936][T26688] syz_tun: entered promiscuous mode [ 752.224027][T26688] syz_tun: entered allmulticast mode [ 752.232072][T26699] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5809'. [ 752.314569][T26688] ip6gretap0: entered promiscuous mode [ 752.342241][T26688] ip6gretap0: entered allmulticast mode [ 752.374680][T26688] bridge0: entered promiscuous mode [ 752.400413][T26688] bridge0: entered allmulticast mode [ 752.432007][T26688] vcan0: entered promiscuous mode [ 752.478936][T26688] vcan0: entered allmulticast mode [ 752.503468][T26688] bond0: entered promiscuous mode [ 752.523928][T26688] bond0: entered allmulticast mode [ 752.546132][T26688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.650070][T26701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5810'. [ 752.660424][T26688] team0: entered promiscuous mode [ 752.665559][T26688] batadv1: entered promiscuous mode [ 752.671364][T26688] batadv2: entered promiscuous mode [ 752.676819][T26688] team0: entered allmulticast mode [ 752.682349][T26688] batadv1: entered allmulticast mode [ 752.687688][T26688] batadv2: entered allmulticast mode [ 752.709679][T26688] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.719700][T26688] dummy0: entered promiscuous mode [ 752.724965][T26688] dummy0: entered allmulticast mode [ 752.732033][T26688] nlmon0: entered promiscuous mode [ 752.737356][T26688] nlmon0: entered allmulticast mode [ 752.780821][T26688] caif0: entered promiscuous mode [ 752.786737][T26688] caif0: entered allmulticast mode [ 752.792293][T26688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 753.043920][T26709] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5814'. [ 753.450499][T26718] tipc: Enabling of bearer rejected, failed to enable media [ 754.695893][T26736] loop2: detected capacity change from 0 to 128 [ 754.730203][T26736] FAT-fs (loop2): Directory bread(block 414) failed [ 754.766407][T26736] FAT-fs (loop2): Directory bread(block 415) failed [ 754.840357][T26736] FAT-fs (loop2): Directory bread(block 416) failed [ 754.883948][T26736] FAT-fs (loop2): Directory bread(block 417) failed [ 754.914289][T26736] FAT-fs (loop2): Directory bread(block 418) failed [ 754.952957][T26736] FAT-fs (loop2): Directory bread(block 419) failed [ 754.987769][T26736] FAT-fs (loop2): Directory bread(block 420) failed [ 755.015489][T26736] FAT-fs (loop2): Directory bread(block 421) failed [ 755.037459][T26736] FAT-fs (loop2): Directory bread(block 414) failed [ 755.046973][T26450] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.080966][T26736] FAT-fs (loop2): Directory bread(block 415) failed [ 755.090099][T26745] loop9: detected capacity change from 0 to 128 [ 755.211170][T26745] FAT-fs (loop9): Directory bread(block 414) failed [ 755.224734][T12715] IPVS: starting estimator thread 0... [ 755.243230][T26745] FAT-fs (loop9): Directory bread(block 415) failed [ 755.267866][T26745] FAT-fs (loop9): Directory bread(block 416) failed [ 755.285454][T26745] FAT-fs (loop9): Directory bread(block 417) failed [ 755.292148][T26745] FAT-fs (loop9): Directory bread(block 418) failed [ 755.292312][T26742] loop6: detected capacity change from 0 to 128 [ 755.300388][T26745] FAT-fs (loop9): Directory bread(block 419) failed [ 755.316743][T26745] FAT-fs (loop9): Directory bread(block 420) failed [ 755.323926][T26745] FAT-fs (loop9): Directory bread(block 421) failed [ 755.367585][T26745] FAT-fs (loop9): Directory bread(block 414) failed [ 755.374399][T26748] IPVS: using max 2496 ests per chain, 124800 per kthread [ 755.391616][T26745] FAT-fs (loop9): Directory bread(block 415) failed [ 755.494864][T26757] SET target dimension over the limit! [ 755.576029][T26764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5824'. [ 755.776410][T26766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5824'. [ 756.287694][T26776] loop9: detected capacity change from 0 to 8192 [ 756.313428][T26776] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 756.478928][T26790] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5830'. [ 756.501083][T26792] netlink: 'syz.9.5831': attribute type 10 has an invalid length. [ 756.511736][T26793] loop5: detected capacity change from 0 to 128 [ 756.519105][T26790] netlink: 55 bytes leftover after parsing attributes in process `syz.6.5830'. [ 756.563767][T26793] msdos: Bad value for 'gid' [ 756.579303][T26793] msdos: Bad value for 'gid' [ 756.600794][T26795] loop2: detected capacity change from 0 to 128 [ 756.619062][T26799] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5834'. [ 756.631803][T26795] FAT-fs (loop2): Directory bread(block 414) failed [ 756.660605][T26795] FAT-fs (loop2): Directory bread(block 415) failed [ 756.672740][T26795] FAT-fs (loop2): Directory bread(block 416) failed [ 756.689909][T26795] FAT-fs (loop2): Directory bread(block 417) failed [ 756.696778][T26795] FAT-fs (loop2): Directory bread(block 418) failed [ 756.708363][T26795] FAT-fs (loop2): Directory bread(block 419) failed [ 756.715070][T26795] FAT-fs (loop2): Directory bread(block 420) failed [ 756.742304][T26795] FAT-fs (loop2): Directory bread(block 421) failed [ 756.770755][T26795] FAT-fs (loop2): Directory bread(block 414) failed [ 756.777502][T26795] FAT-fs (loop2): Directory bread(block 415) failed [ 756.787855][T26810] loop3: detected capacity change from 0 to 8192 [ 756.794642][T26812] loop6: detected capacity change from 0 to 512 [ 756.805501][T26812] EXT4-fs: Ignoring removed nobh option [ 756.814666][T26810] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 756.844724][T26812] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 756.897971][T26812] EXT4-fs (loop6): 1 truncate cleaned up [ 756.911251][T26812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.492285][T26837] FAULT_INJECTION: forcing a failure. [ 757.492285][T26837] name failslab, interval 1, probability 0, space 0, times 0 [ 757.527168][T26837] CPU: 1 UID: 0 PID: 26837 Comm: syz.2.5846 Tainted: G W syzkaller #0 PREEMPT(full) [ 757.527284][T26837] Tainted: [W]=WARN [ 757.527293][T26837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 757.527306][T26837] Call Trace: [ 757.527315][T26837] [ 757.527387][T26837] __dump_stack+0x1d/0x30 [ 757.527420][T26837] dump_stack_lvl+0x95/0xd0 [ 757.527442][T26837] dump_stack+0x15/0x1b [ 757.527462][T26837] should_fail_ex+0x263/0x280 [ 757.527515][T26837] ? rtnl_newlink+0x5c/0x1330 [ 757.527581][T26837] should_failslab+0x8c/0xb0 [ 757.527599][T26837] __kmalloc_cache_noprof+0x5f/0x410 [ 757.527681][T26837] ? __pfx_rtnl_newlink+0x10/0x10 [ 757.527731][T26837] rtnl_newlink+0x5c/0x1330 [ 757.527873][T26837] ? __memcg_slab_free_hook+0x154/0x250 [ 757.527900][T26837] ? __rcu_read_unlock+0x4e/0x70 [ 757.527919][T26837] ? avc_has_perm_noaudit+0xab/0x130 [ 757.527942][T26837] ? cred_has_capability+0x224/0x2a0 [ 757.528027][T26837] ? selinux_capable+0x31/0x40 [ 757.528050][T26837] ? security_capable+0x7b/0x90 [ 757.528117][T26837] ? ns_capable+0x7c/0xb0 [ 757.528133][T26837] ? __pfx_rtnl_newlink+0x10/0x10 [ 757.528160][T26837] rtnetlink_rcv_msg+0x64b/0x720 [ 757.528250][T26837] netlink_rcv_skb+0x123/0x220 [ 757.528276][T26837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 757.528318][T26837] rtnetlink_rcv+0x1c/0x30 [ 757.528399][T26837] netlink_unicast+0x5c0/0x690 [ 757.528422][T26837] netlink_sendmsg+0x5c8/0x6f0 [ 757.528447][T26837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.528471][T26837] ____sys_sendmsg+0x5af/0x600 [ 757.528520][T26837] ___sys_sendmsg+0x195/0x1e0 [ 757.528566][T26837] __x64_sys_sendmsg+0xd4/0x160 [ 757.528592][T26837] x64_sys_call+0x194c/0x3020 [ 757.528616][T26837] do_syscall_64+0x12c/0x370 [ 757.528637][T26837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.528657][T26837] RIP: 0033:0x7f59c115c799 [ 757.528689][T26837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.528706][T26837] RSP: 002b:00007f59bfbb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.528726][T26837] RAX: ffffffffffffffda RBX: 00007f59c13d5fa0 RCX: 00007f59c115c799 [ 757.528739][T26837] RDX: 0000000000008000 RSI: 0000200000000080 RDI: 0000000000000003 [ 757.528751][T26837] RBP: 00007f59bfbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 757.528826][T26837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.528838][T26837] R13: 00007f59c13d6038 R14: 00007f59c13d5fa0 R15: 00007ffef16b8df8 [ 757.528856][T26837] [ 757.851902][T26808] syz.6.5838 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 757.887072][T26808] CPU: 0 UID: 0 PID: 26808 Comm: syz.6.5838 Tainted: G W syzkaller #0 PREEMPT(full) [ 757.887158][T26808] Tainted: [W]=WARN [ 757.887165][T26808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 757.887177][T26808] Call Trace: [ 757.887183][T26808] [ 757.887191][T26808] __dump_stack+0x1d/0x30 [ 757.887225][T26808] dump_stack_lvl+0x95/0xd0 [ 757.887314][T26808] dump_stack+0x15/0x1b [ 757.887336][T26808] dump_header+0x80/0x240 [ 757.887365][T26808] oom_kill_process+0x295/0x350 [ 757.887405][T26808] out_of_memory+0x97d/0xb80 [ 757.887426][T26808] try_charge_memcg+0x62e/0xa10 [ 757.887510][T26808] obj_cgroup_charge_pages+0x23/0xc0 [ 757.887543][T26808] __memcg_kmem_charge_page+0x9e/0x170 [ 757.887627][T26808] __alloc_frozen_pages_noprof+0x18a/0x360 [ 757.887655][T26808] alloc_pages_mpol+0xb3/0x260 [ 757.887745][T26808] alloc_pages_noprof+0x8f/0x130 [ 757.887778][T26808] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 757.887824][T26808] __kvmalloc_node_noprof+0x3d4/0x650 [ 757.887850][T26808] ? ip_set_alloc+0x24/0x30 [ 757.887875][T26808] ? ip_set_alloc+0x24/0x30 [ 757.887972][T26808] ? __kmalloc_cache_noprof+0x18a/0x410 [ 757.887999][T26808] ip_set_alloc+0x24/0x30 [ 757.888026][T26808] hash_netiface_create+0x282/0x740 [ 757.888056][T26808] ? __pfx_hash_netiface_create+0x10/0x10 [ 757.888119][T26808] ip_set_create+0x3cf/0x970 [ 757.888159][T26808] ? __nla_parse+0x40/0x60 [ 757.888204][T26808] nfnetlink_rcv_msg+0x509/0x5d0 [ 757.888248][T26808] netlink_rcv_skb+0x123/0x220 [ 757.888272][T26808] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 757.888367][T26808] nfnetlink_rcv+0x167/0x1720 [ 757.888400][T26808] ? __list_del_entry_valid_or_report+0x65/0x130 [ 757.888483][T26808] ? __rmqueue_pcplist+0x9b0/0xb70 [ 757.888513][T26808] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 757.888540][T26808] ? __list_add_valid_or_report+0x38/0xe0 [ 757.888584][T26808] ? selinux_nlmsg_lookup+0x99/0x890 [ 757.888623][T26808] ? __rcu_read_unlock+0x33/0x70 [ 757.888647][T26808] ? __netlink_lookup+0x276/0x2b0 [ 757.888779][T26808] netlink_unicast+0x5c0/0x690 [ 757.888808][T26808] netlink_sendmsg+0x5c8/0x6f0 [ 757.888840][T26808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.888867][T26808] ____sys_sendmsg+0x5af/0x600 [ 757.888936][T26808] ___sys_sendmsg+0x195/0x1e0 [ 757.888976][T26808] __x64_sys_sendmsg+0xd4/0x160 [ 757.889010][T26808] x64_sys_call+0x194c/0x3020 [ 757.889118][T26808] do_syscall_64+0x12c/0x370 [ 757.889140][T26808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.889224][T26808] RIP: 0033:0x7ff05395c799 [ 757.889245][T26808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.889328][T26808] RSP: 002b:00007ff0523af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.889426][T26808] RAX: ffffffffffffffda RBX: 00007ff053bd5fa0 RCX: 00007ff05395c799 [ 757.889499][T26808] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 757.889564][T26808] RBP: 00007ff0539f2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 757.889580][T26808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.889596][T26808] R13: 00007ff053bd6038 R14: 00007ff053bd5fa0 R15: 00007ffd9fab7998 [ 757.889668][T26808] [ 758.252889][T26808] memory: usage 307200kB, limit 307200kB, failcnt 432 [ 758.271979][T26808] memory+swap: usage 307660kB, limit 9007199254740988kB, failcnt 0 [ 758.286995][T26808] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 758.304077][T26808] Memory cgroup stats for /syz6: [ 758.304300][T26808] cache 8192 [ 758.318478][T26808] rss 4096 [ 758.325523][T26808] shmem 0 [ 758.332048][T26808] mapped_file 0 [ 758.384574][T26866] loop3: detected capacity change from 0 to 512 [ 758.399412][T26808] dirty 0 [ 758.402474][T26808] writeback 0 [ 758.405847][T26808] workingset_refault_anon 172 [ 758.409000][T26866] EXT4-fs: Ignoring removed mblk_io_submit option [ 758.410721][T26808] workingset_refault_file 2 [ 758.421695][T26808] swap 471040 [ 758.425133][T26808] swapcached 2686976 [ 758.429322][T26808] pgpgin 255206 [ 758.432853][T26808] pgpgout 255198 [ 758.436524][T26808] pgfault 266399 [ 758.440130][T26808] pgmajfault 103 [ 758.443738][T26808] inactive_anon 4096 [ 758.447679][T26808] active_anon 12288 [ 758.451663][T26808] inactive_file 0 [ 758.455454][T26808] active_file 16384 [ 758.459670][T26808] unevictable 0 [ 758.463185][T26808] hierarchical_memory_limit 314572800 [ 758.470895][T26866] EXT4-fs: quotafile must be on filesystem root [ 758.500400][T26808] hierarchical_memsw_limit 9223372036854771712 [ 758.527618][T26808] total_cache 8192 [ 758.545995][T26808] total_rss 4096 [ 758.572082][T26808] total_shmem 0 [ 758.585045][T26808] total_mapped_file 0 [ 758.606340][T26808] total_dirty 0 [ 758.620444][T26808] total_writeback 0 [ 758.627875][T26872] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5854'. [ 758.637397][T26808] total_workingset_refault_anon 172 [ 758.643031][T26808] total_workingset_refault_file 2 [ 758.652456][T26808] total_swap 471040 [ 758.675009][T26872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.686035][T26808] total_swapcached 2686976 [ 758.695613][T26808] total_pgpgin 255206 [ 758.705522][T26808] total_pgpgout 255198 [ 758.715190][T26808] total_pgfault 266399 [ 758.738051][T26872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.766757][T26872] bond0 (unregistering): Released all slaves [ 758.768048][T26808] total_pgmajfault 103 [ 758.789295][T26808] total_inactive_anon 4096 [ 758.798105][T26808] total_active_anon 12288 [ 758.826960][T26808] total_inactive_file 0 [ 758.878297][T26808] total_active_file 16384 [ 758.882931][T26808] total_unevictable 0 [ 758.887104][T26808] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.5838,pid=26807,uid=0 [ 758.968326][T26808] Memory cgroup out of memory: Killed process 26807 (syz.6.5838) total-vm:94292kB, anon-rss:1228kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 759.088701][T26808] syz.6.5838 (26808) used greatest stack depth: 7008 bytes left [ 759.098986][T18789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.281449][T26887] loop2: detected capacity change from 0 to 164 [ 759.322121][T26889] netlink: 'syz.5.5857': attribute type 10 has an invalid length. [ 759.383067][T26892] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.5858'. [ 759.397538][T26892] netlink: zone id is out of range [ 759.431443][T26889] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 759.461439][T26897] loop9: detected capacity change from 0 to 512 [ 759.467919][T26889] team0: Failed to send options change via netlink (err -105) [ 759.499313][T19812] ================================================================== [ 759.507548][T19812] BUG: KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event [ 759.511693][T26889] team0: Port device netdevsim1 added [ 759.516328][T19812] [ 759.516339][T19812] write to 0xffff8881059ca954 of 4 bytes by task 3800 on cpu 0: [ 759.528661][T26892] netlink: zone id is out of range [ 759.531669][T19812] fsnotify_detach_mark+0xb9/0x160 [ 759.531704][T19812] fsnotify_destroy_mark+0x6f/0x150 [ 759.531729][T19812] __se_sys_inotify_rm_watch+0xe8/0x170 [ 759.531757][T19812] __x64_sys_inotify_rm_watch+0x31/0x40 [ 759.531785][T19812] x64_sys_call+0xc88/0x3020 [ 759.531814][T19812] do_syscall_64+0x12c/0x370 [ 759.531833][T19812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.531861][T19812] [ 759.531870][T19812] read to 0xffff8881059ca954 of 4 bytes by task 19812 on cpu 1: [ 759.531890][T19812] inotify_handle_inode_event+0x34c/0x3d0 [ 759.531919][T19812] fsnotify_handle_inode_event+0x1c0/0x220 [ 759.531955][T19812] fsnotify+0x15d0/0x1730 [ 759.531987][T19812] __fsnotify_parent+0x2f8/0x3a0 [ 759.532017][T19812] __fput+0x1de/0x650 [ 759.532041][T19812] fput_close_sync+0xad/0x190 [ 759.532066][T19812] __x64_sys_close+0x55/0xf0 [ 759.532094][T19812] x64_sys_call+0x275d/0x3020 [ 759.622665][T19812] do_syscall_64+0x12c/0x370 [ 759.627348][T19812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.633248][T19812] [ 759.635577][T19812] value changed: 0x00000003 -> 0x00000000 [ 759.641554][T19812] [ 759.643878][T19812] Reported by Kernel Concurrency Sanitizer on: [ 759.650027][T19812] CPU: 1 UID: 0 PID: 19812 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 759.661230][T19812] Tainted: [W]=WARN [ 759.665036][T19812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 759.675194][T19812] ================================================================== [ 759.705917][T26892] netlink: zone id is out of range [ 759.890902][T26897] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 759.937096][T26897] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 760.276957][T21892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.294793][T26892] netlink: set zone limit has 8 unknown bytes