last executing test programs: 2m58.204022575s ago: executing program 32 (id=117): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000002180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e20, 0x892, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, 0x8}, @in6={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffe}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xffffffff}, @in6={0xa, 0x4e20, 0x180000, @dev={0xfe, 0x80, '\x00', 0x31}, 0xaccb}, @in6={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, @in6={0xa, 0x4e24, 0x499a, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, 0x2}], 0xf4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) creat(&(0x7f00000011c0)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0xb5dafe67582d1972, &(0x7f0000000400)=ANY=[@ANYRES16=r0]) fcntl$setlease(r2, 0x400, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0xffffffff, 0x4, {0x0, 0x0, 0x0, 0x0, 0xd41, 0x18000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4004010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = msgget$private(0x0, 0x14) msgsnd(r6, &(0x7f0000000180)={0x3}, 0x8, 0x0) msgrcv(r6, 0x0, 0x0, 0x3, 0x800) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) io_uring_register$IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) epoll_create1(0x80000) 2m52.036340078s ago: executing program 33 (id=175): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = geteuid() syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2084ce, &(0x7f0000000700)={[{@data_err_abort}, {@debug}, {@lazytime}, {@quota}], [{@fowner_eq={'fowner', 0x3d, r0}}, {@context={'context', 0x3d, 'sysadm_u'}}]}, 0x3, 0x46e, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0xc88c4) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r4 = epoll_create1(0x80000) fgetxattr(r4, &(0x7f0000000040)=@random={'security.', '/dev/vhost-net\x00'}, 0x0, 0x0) close(0xffffffffffffffff) r5 = fsmount(r2, 0x1, 0x0) syz_clone3(&(0x7f0000000880)={0x308800000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x2, 0x80805, 0x926) 2m41.156515018s ago: executing program 34 (id=301): socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="e03f030039000b03d25a806c8c6394f90324fc60100000013856f71ab0bf291c75c3000a02f377e3428200e9309d025ce7b5807228baacd430fc222f32d3eb1ed256241a49cafc9a76d41bd8324d43a5f219b0e3e3ade8070604a1ef4539465b1eff26fd88f401df35c7850000000000000000000000008bdb", 0x79}, {&(0x7f0000000400)="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", 0xfd}], 0x2}, 0x100408c4) 2m38.853232536s ago: executing program 35 (id=332): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0xe885, 0x2, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m27.866055879s ago: executing program 36 (id=448): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001500)="08000001001f009e", 0x8}], 0x1}}], 0x2, 0x4000) 2m20.814592944s ago: executing program 37 (id=509): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000008, 0x8010, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000340)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb88a835008100ec000800451c00540000000000019078ac1e0001ac1414aa0c000000000500004d4b00080067000904320006ffffffffac1414bb00880eb72f9db72ce996e35b87435244081a3000000008010707a0ffcdffff007af2a2db970c73904258f55f3abf2c09eb6e040aef48224b352960c44c7ba30f01bffc255fc03682a9672e02fea06e532ba7957f8365afb9a950dc740c5446ed86a0eb44f6aa134b6bb449851b7e2d82fd96c087936c693753c97ce07fba5aa6"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) socket$kcm(0x2, 0x2, 0x73) r1 = socket$kcm(0x2, 0x2, 0x73) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee00, 0x1000) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100020062b2d8ab0400000000000000100006000000000020"], 0x24, 0x3) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0729bf609e8ed9c70000003e748d2728ada4cd6d96b7f1b8a8011657f00c270bdac64976e32330d67d4166c0782298e8de0be5ed2d55d46201882527c013d72c8b682c01db07d3ad03729c451d6cf3201769cef07c73376254e0a20befc394d4f8d44ccd90adacb1843a7c97aad2a792828c233c6af688b3542f83bc5f231548c50b896faa4c80b56d01dc028587703965dd04afb16e05bd67358a", @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf250100000008000b00", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4044850}, 0x40800) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x70bd26, 0x25dfdbfe, {}, [@typed={0x8, 0x3ffe, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000, 0x0, 0x800}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="49532abd7000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="040042806cf60c2cd780"], 0x20}}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x154, 0x24, 0xf0b, 0x70bd2c, 0x3, {0x0, 0x0, 0x12, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x5}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x58, 0x3, 0x2, 0xe, 0xc, 0x18, 0x7}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@can_newroute={0x14, 0x18, 0x100, 0x70bd2b, 0x9, {0x1d, 0x1, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20020814}, 0x40001) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaa91aabb72b40000005908060001080006"], 0x0) 2m12.011127262s ago: executing program 38 (id=590): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x700, 0x0, 0x80c9}, 0x20000000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000040), 0x3, 0x573, &(0x7f0000000ac0)="$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") r1 = open(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12a00, 0x50) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000017, 0x810, r1, 0x0) getdents(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = fsopen(&(0x7f0000000380)='configfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000680)='\xec\xd2=(L\x9f\x1c&\xb7\x98\f\x87\xcf\xdb\xb4\xdc.\xc1\xec\xa3\x04\xa2\xb8H\xdc#\x06\npr:\x95\xb9\xbf7\xe6Z\x8aX\xbc\x1d\xd5\x15\x93\xd1\xadC\x18V\xbaO~\xfc\xaf\xce\x88+t\xb0\xf1\x8d;\xbd8(\xca\xc6%\xfcB\xea\x04<\x10#,\x05\xd4\xc9;\x17.\xc3\x13*]\x1crij', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000003200)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG\x10L\xab5\xb3\x04(\b\xcd0H-i\x8d\f\xb5\x1f1=\x87$C\xc2\xbb\x92\x0e\x06\xcb\xd4\x83a-\x82\x90\x93\x95\x00Q4\xff!\xfc\xb7\xcaG@\x96\x04\xed\x9f\xe9\x9e\xf9\xfb\xe4)\xc5\xa4\xca\xc1`x\xf4\xf6zX\x1b\xb3\x13\xa4W[E\x8a\x7f\x06\n\xd2\x1b\xce\xe2\xbd4\x93\xff \xb06\"\xbf\x1d\xfda\x00Z\xfb\xfe_I\xb8\xfc1\xdf\x82a\x93tx3\xda\xdeY\xc1\xdd\xdd\x84D\x1dy:\x9a%<\xd3X\xd9s\xe5r\xbdA9\x7f\b\x8fL\xa6=nJ\x16\x82\xd8\xb4X`\x03vY\xe3}\xae\t=pX\xc4\xb3\x8aTdv\x1a\a\xa1\xaeP\x8f\xfd\x03\xc5b\x80\xae\xdc\x99\xa4z\xbc\xe3Pz\xf5\xcf\x99u#\"[\'\xa3G\xf1\x18ls\x89D\xce\xd5\xbc\xff\x8b\x05\x1f\x14\xcf\x96Vu\xb93\x9d\x8bX\x16o !\xb8\xc9I\x8f\x9ei\xf5\xc1\xed\x97x\x01?\xa6~\x9c\xb5u\xe0r1I\xa67Q\xc9\a\x84\xe6\x1b\xebo\x85\x98\x9cib\xa7\x80U\xc8%\xa7\x11=\xa3\x02\x15\xe6\x85\xbf\x03vQ\xfe&\xf3\xb7\xdc3\b\xc0\'\x03\x97\xf9\xbf1\x03\x93\xff\x16\xb0\xf6\x97\x97\x80JO\x81\x97\x0f\x96\x93n\x95!\xff\xa52\"\nf\xe0h\xf6+5\xb6\x12\x14\xce\xdb?\x1a\xa5\x93\xca\xa0b\'\x04\xac\xc9*-;-\t(\xfd\x9e\xd8J9\xfa\xf8\xe3\x1a\xe9\x8f\xe5\xda\xc8\xed\xc7\x88\xc2\xa0\x02]noRVv\xc8\x81\x94\xb3\x10\xa6\x8b\xd0q\xddZ\x95\x16\x94\x94@\x0f\"\xc7\xde\x87\x16;\xd0\xc1\x04=\t\xba\xe5', &(0x7f0000000a80)='\x1e\x04\x00\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000900)=0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000001600)=[{&(0x7f0000000180)={0x27, r8, 0x0, 0x5, 0x7, 0x9, "0395ed0f60f2e64baba9ae76fb4a837812edad7974574cbd694ba23030fe9bfc02ba309235955ec02fc5051afd98095ee7f79a4ba9160281134c57672db786", 0x20}, 0x60, &(0x7f00000007c0)=[{&(0x7f0000000340)="ed22e3316125e9289db0410195e0c4bda15a36145d02d18c9fe2ccb5b8ad1ca7adcf3fc86724e281998a13a2d875a322789fdcb45a2855ebb84cf7", 0x3b}, {&(0x7f0000000440)}, {&(0x7f0000000700)="7812c625c3655850f590969400c3e9cbcef35566aab1e82f70652c45293ec3bab0bb1a2b4bcb32e912ee535294245fdf5a57869f1240ae4ba93b9f2ca5f83513108156b8788f2975b733d84fa0bb3cc2c11859de5511e052678a74e0fde9d5f2fda78f36c67fe84b61f52759a20ad89884386596d403c1a8111bfa68472a53e230462cd2370214377163f2b8a3ac28670bfb10ff46f217d0170c3d406aed98cfb613b6842b81bd67c49b0bc98674bd3f91c544773424fa301da3", 0xba}], 0x3, &(0x7f0000000800)={0xd8, 0x104, 0x7, "a9017ea94c72da74c77852122210fbe642cc2038e35450b567cd5f1cc815fb633d731d6dd0fe4f5646d7cfe11632f2203379644d0e990977b490c4d72d5cfc3972dfe5f2ce0aa58d8f9baa8c87fce0eb627f9b88e57954d09245c610f4fb727238b2a891c82a4cb0a086c3a79b039494f9326f2160be7f850a5aa6cb001cd67c44e9211b5e3e542db10cb5e46fbe15f937848a9ac255fd008e5e5f083fae29166e5eef192a2403e1c38ea9436a408412d94fb12a90737bd77ca64c439cc91d271eae01a63c5d51"}, 0xd8, 0x20000000}, {&(0x7f0000000940)={0x27, r10, 0x0, 0x3, 0x8, 0x5, "3c463c18a655017b1a7be0873b4f3c29f7842be62795665be33767279be8c954f520506f12fcca2510be755a9918dda22ff781e566685b1f82468e99d2d1dd", 0x100000001}, 0x60, &(0x7f0000001440)=[{&(0x7f0000000f80)="605bf170a56b168555f5bd4696652cd13ef301e07bb17fdcedace6098812c19c1dc63d1271ed7bdb6ef7cdff121a7f5d4a7546f35d6fc68c0fbfe6162d844612f9d562a2fea9375a262971c23591e10d18700748e72a1e7c0a33246d492c14202fc319e7cc5d52b46ee9601145dec31c5e5363c69c7449c46fb60cb7fceb3d057c2497dab7d7fed2e2af09cb73c7e9a0d2e15586ffe8ed969a1714f55c1b1e7ab72d149604115d206a0f4dcc7a36d8cdbaa11929cc1d00a8287c7b22823a0e45fde2471fd49cdfbb984f1d3c89", 0xcd}, {0x0}, {&(0x7f00000010c0)="1fe04b0404f55e6ddca6230ac1a9e6a425a6fc32c86fe8ec139f83fdb853a1c464cfaebc6648140f78441868c859cdc4a2ede99328d5a84aa4f16e7ba5", 0x3d}, {&(0x7f0000001200)="1b82dd1d1302ad19ed602368ffe71f3f21ddba03bf25160a24aee3", 0x1b}, {&(0x7f0000001240)="1f470716e40130dd", 0x8}, {&(0x7f0000001280)="69d7db5598e9b2ab5eeec2ed86edd3e8ef610b482d29c638f7f4dd440c25e55f03206bac5b19ea8c40ab620b7832b09d73", 0x31}, {0x0}], 0x7, &(0x7f0000001500)={0xd8, 0x111, 0x3, "aa0a5b852a09c13cd06accd16fec8b431d7b6545bbbab67c5389e757aac2af000a402c8aa0693895c98d6d8fc969e2c869590b79ce585958d0806ce602d46cfa4ef94d4efddc6ef288ce3fc2e37b57dd3781e71c0a3983040f12af8f3a4335a875bc1c358c6ee8eb68a11c877005fb52ab7858fe5cc36e7b5428bb56fb633debb0387dca12794924d357a0c33f37e79948f093ecb1c0e525410af35bf1452e7789f67f8c3f3c96033ba15ab0aa17e886a443abb2c918e22c63aa8ab68429f7a8590155f83aa0aa14"}, 0xd8, 0x4008090}], 0x2, 0x20004000) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000580)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', &(0x7f0000000640)='y', 0x1) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000240)='(\xed\xef(.(\\-]\x00', &(0x7f0000000300)="0380d24c", 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}]}, 0x44}}, 0x6004) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r11, 0x400454d0, 0x10) 2m11.29033454s ago: executing program 39 (id=598): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0xb7}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x1}, 0x50) r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x1000000, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000400), &(0x7f00000004c0)=r2}, 0x20) close(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x0, 0x1}, 0x76e0}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0), 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x30, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000080)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x6, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x8, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@cipso={0x86, 0xa, 0x3, [{0x1, 0x4, "ffc7"}]}]}}, {{0x4e21, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x1, 0x4, 0x0, 0x1c, {[@timestamp={0x5, 0xa}]}}}}}}, 0x4e) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000108000240000000000800044000000002080003400000000008000540000000080900010073797a300000000009000200"], 0x98}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaa91aabb72b40000005908060001080006040001aaaaaaaaaa16ac1414bbaaaaaaaa1209ff"], 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m8.205156527s ago: executing program 2 (id=623): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x5, 0xd}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x401, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0xfffffffffffff148}, 0x0, 0x35, 0x6, 0x3, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) splice(r2, 0x0, r2, 0x0, 0x5, 0xa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021ec0700000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000c0070380bc0700800800034000000002b0070b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a00010071756f7461000000100002800c0001"], 0x870}}, 0x0) tkill(0x0, 0x16) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x401, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xf5}, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x3) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e030000000000000002000000000000040200000002000000000000110300000000000000005f5f"], 0x0, 0x54}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fb0200000000000000797a3100000000080041007278650014003300626f6e64300000002f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24008000) mmap$IORING_OFF_SQ_RING(0x0, 0xf, 0x4, 0x20010, 0xffffffffffffffff, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) sigaltstack(&(0x7f0000000140)={0x0, 0x80000002}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x80011, 0x1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @mcast2}}}, 0x108) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSYMLINK(r7, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x4, 0x0, 0x4}}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a4000000002b0000000060a010400000000000000000500000a0900010073797a30000000000900020073797a30000000008400048024000180090001006d6574610000000014000280080001400000000108000240000000012c00018008000100636d700020000280080001400000000108000240000000000c0003800500010000000000300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c00028008000180fffffffe"], 0x154}}, 0x8044) 2m8.176087528s ago: executing program 40 (id=623): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x5, 0xd}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x401, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0xfffffffffffff148}, 0x0, 0x35, 0x6, 0x3, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) splice(r2, 0x0, r2, 0x0, 0x5, 0xa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021ec0700000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000c0070380bc0700800800034000000002b0070b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a00010071756f7461000000100002800c0001"], 0x870}}, 0x0) tkill(0x0, 0x16) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x401, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xf5}, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x3) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e030000000000000002000000000000040200000002000000000000110300000000000000005f5f"], 0x0, 0x54}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fb0200000000000000797a3100000000080041007278650014003300626f6e64300000002f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24008000) mmap$IORING_OFF_SQ_RING(0x0, 0xf, 0x4, 0x20010, 0xffffffffffffffff, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) sigaltstack(&(0x7f0000000140)={0x0, 0x80000002}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x80011, 0x1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @mcast2}}}, 0x108) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSYMLINK(r7, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x4, 0x0, 0x4}}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x154}}, 0x8044) 2m6.340093463s ago: executing program 41 (id=636): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x75}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = open(&(0x7f0000000540)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x5b6, &(0x7f0000006200)="$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") fallocate(0xffffffffffffffff, 0x10, 0x0, 0x8800000) 2m1.766656627s ago: executing program 42 (id=664): setns(0xffffffffffffffff, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004081}, 0x20000000) 1m51.426141054s ago: executing program 43 (id=786): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x5, 0xd}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x401, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0xfffffffffffff148}, 0x0, 0x35, 0x6, 0x3, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) splice(r2, 0x0, r2, 0x0, 0x5, 0xa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021ec0700000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000c0070380bc0700800800034000000002b0070b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a00010071756f7461000000100002800c0001"], 0x870}}, 0x0) tkill(0x0, 0x16) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x401, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xf5}, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x3) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e030000000000000002000000000000040200000002000000000000110300000000000000005f5f"], 0x0, 0x54}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fb0200000000000000797a3100000000080041007278650014003300626f6e64300000002f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24008000) mmap$IORING_OFF_SQ_RING(0x0, 0xf, 0x4, 0x20010, 0xffffffffffffffff, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) sigaltstack(&(0x7f0000000140)={0x0, 0x80000002}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x80011, 0x1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @mcast2}}}, 0x108) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x154}}, 0x8044) 1m21.208245424s ago: executing program 44 (id=1184): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f00000007c0), &(0x7f0000000640)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r5, &(0x7f0000000300), 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x14, r10, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x40000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x200000, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0xc98, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc68, 0x2, [@TCA_BASIC_POLICE={0xc64, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x3, 0xf, 0x8, 0x5, 0x7, 0x29b3, 0xa, 0x8c, 0x4, 0xfff, 0x1, 0xffff1195, 0x7ff, 0x7, 0xdd01, 0xef2, 0x8001, 0x3, 0xcee, 0x5, 0x8, 0x2, 0x9, 0xa, 0x4099, 0xfffffff7, 0x0, 0x800, 0x6, 0xe, 0x101, 0x4, 0x9, 0x99e, 0x6, 0x3119, 0x3ce2, 0x1, 0x8, 0x0, 0x9, 0x4, 0x3, 0xbc, 0x8, 0x93, 0x7, 0x23200000, 0xd, 0x1ff, 0x8, 0x1000, 0x85580000, 0x8, 0x23, 0x5, 0xe7b, 0x4, 0x5, 0xffff, 0x1, 0x8, 0x8000, 0x8, 0x1, 0x94, 0x80000001, 0x3, 0x2, 0xf, 0x5, 0x6, 0x6, 0x80000000, 0x6, 0x200, 0x6, 0x8, 0x10, 0x3, 0x3, 0x3, 0x5, 0x6, 0x3, 0x10, 0x2367, 0x2, 0x1, 0x6, 0x100, 0x4, 0x6, 0x9, 0x0, 0x6, 0x8000, 0x6, 0x7f, 0x3ff, 0x8000, 0x4, 0x100, 0x400, 0x5, 0xe12d, 0x5, 0x8, 0xffff0000, 0x81, 0xfffffff8, 0xfffff800, 0xb0, 0x56, 0xffffffac, 0x6, 0x6, 0x5, 0x3ff, 0x3, 0x2, 0x6, 0x2, 0xa, 0x1c, 0x5, 0x81, 0xffffffff, 0x7fffffff, 0x1, 0xe00000, 0x9, 0xfffffffd, 0x7, 0x3, 0x3, 0x2, 0x7, 0x3, 0x80000000, 0x2, 0x5, 0x2, 0x4, 0x73, 0x3, 0x1, 0x4d64, 0x80, 0x80000000, 0x10, 0x9, 0x7, 0xd, 0x5, 0xff, 0xff77, 0x5, 0x3023, 0xffffff61, 0x0, 0x0, 0x4, 0x10, 0x4, 0x4, 0xe000, 0x3, 0x200, 0x4c, 0x7, 0x66, 0x5, 0x4, 0x200, 0x3, 0xffff, 0x7, 0x3, 0x88f, 0x8004, 0x9, 0x3, 0xa, 0x3ff, 0x2, 0x8, 0x800, 0x1ff, 0x10000, 0x9, 0x8, 0x754, 0x3, 0x0, 0x0, 0x2, 0x8, 0x1, 0x8, 0x7, 0x9, 0x5, 0x7, 0x7f, 0x0, 0x7, 0x7, 0x4, 0x5, 0x4, 0x0, 0x2, 0x3ff, 0x809, 0x200, 0xdf, 0x2, 0x7, 0xb6, 0x2, 0x6, 0x50, 0x4, 0xf, 0x0, 0xe, 0x8, 0x7, 0x0, 0x7, 0x1, 0xd, 0x1, 0xda23, 0x3, 0x8, 0x800, 0x0, 0xffff, 0xfffffff6, 0x7fffffff, 0x100, 0x400, 0x4, 0x101, 0x3, 0xd57, 0x7fff, 0x7, 0x7f, 0x3, 0x651a, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffff0ae, 0xce, 0xa, 0xfffffffb, 0x3, 0x8, 0x8, 0x8, 0x1, 0x200, 0x8, 0x3, 0x8, 0x2, 0x4, 0x76, 0xb4b00000, 0x5, 0x2, 0x4, 0x0, 0xd, 0x0, 0x6, 0x8, 0x5, 0x394, 0x80, 0x401, 0x6, 0xa, 0x5, 0x7, 0x100, 0x8, 0xa, 0xffffff7f, 0x8000, 0xe0000000, 0x7ff, 0x1, 0x8, 0x2, 0x7f, 0x6, 0x7, 0x8, 0x10, 0x0, 0x8, 0x9, 0x4, 0x0, 0x7fffffff, 0x7f, 0x9, 0x1, 0x3, 0x1000, 0x4, 0x1, 0xc, 0x401, 0x10001, 0x5, 0x2, 0x0, 0x8, 0xfffff2a9, 0x8, 0xc87f, 0x7f, 0x3, 0xf, 0x1000, 0x3, 0x11, 0x600, 0xffff7fff, 0xfffffffd, 0x4, 0x80, 0x9, 0x2, 0x4, 0x6, 0x8, 0xb, 0x0, 0x8, 0x9, 0x8, 0xffff, 0x5, 0x1ff, 0x3, 0x3, 0x8, 0xf10, 0x9, 0x2, 0x8, 0x7, 0x800, 0x8001, 0x6, 0x6, 0x0, 0x80000001, 0x207, 0x1, 0x80000000, 0x0, 0x1, 0xd, 0x7fff, 0x8, 0x4, 0x9, 0x5, 0xfc5f, 0xeb0, 0x7ff, 0x1, 0x9, 0x7f, 0x8000, 0x73, 0x0, 0x2, 0x3, 0xf, 0x400, 0xc, 0x2, 0x0, 0xb21c, 0x1, 0x1, 0x1, 0x1, 0x6, 0x7, 0x1, 0x1, 0x8, 0xe8, 0x9, 0x10, 0x2, 0x80000000, 0x6, 0x80000000, 0xc, 0x6f3, 0x2, 0x3, 0x3, 0x200, 0x10, 0x4, 0x8001, 0x5, 0xffffba9a, 0x0, 0xfffffffb, 0x8, 0x0, 0xfff, 0x200, 0x6, 0x3, 0x6, 0x2, 0xd, 0x0, 0x3, 0x81, 0x2, 0xff, 0x10000, 0x7, 0x7, 0x7, 0x101, 0x1, 0x6a, 0x6, 0x1, 0x9f, 0x0, 0x5, 0x2b0a, 0x2, 0x1, 0xaa59, 0x800, 0x6, 0x3, 0xbc, 0x7ff, 0xfffffffc, 0x28a, 0x7, 0x7b0, 0x4, 0x0, 0x9, 0x3ff, 0x5, 0x3, 0x5, 0x6, 0xe, 0x4, 0x3, 0xa, 0x5, 0x5, 0x68d7, 0x6, 0x5, 0x2, 0xc5a7, 0x800, 0x401, 0x7, 0x3, 0x8, 0x0, 0x1, 0x8, 0x32, 0x8, 0x6, 0xffff, 0x7, 0x2, 0xff, 0x4, 0xb, 0x5, 0x25, 0xc8c, 0x2, 0x4, 0x2, 0x8000, 0x3, 0x9, 0x8, 0xfffffffe, 0x4, 0x7, 0x401, 0x29a]}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0x9, 0x8, 0xff, 0x8, 0x0, 0xb, 0x2, 0x80000000, 0x9, 0x59, 0x2, 0xfffffff9, 0xfffffffa, 0x0, 0x0, 0x200, 0x2, 0x5a93, 0x8, 0x2, 0x79022268, 0x2, 0x4ec, 0x1, 0x2, 0x5, 0xffff550b, 0x8, 0x3b, 0x7ff, 0x2, 0x6f9, 0x1, 0x7ff, 0x0, 0x1000, 0x2, 0x5, 0x6, 0x6, 0x2, 0x5, 0x5c, 0x0, 0x1445, 0xfffff230, 0x5, 0x0, 0xf0ec, 0x80000001, 0x5, 0x5eb7, 0x81a, 0xd, 0xf, 0x7, 0x5, 0xfffffffc, 0x3, 0x10000, 0x1, 0xc, 0x3ff, 0x8001, 0xe, 0x4, 0x1000, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x1, 0x7, 0x5, 0x9, 0x2, 0xffffffff, 0x0, 0x9, 0xdf, 0x64e, 0xfffffff8, 0x928a, 0x80000000, 0x1000, 0x6, 0x0, 0x1, 0x7, 0xc, 0x3, 0x5, 0x7, 0xb4d, 0x8, 0x3, 0x7ff, 0x0, 0x0, 0x2, 0xff, 0x6, 0x6, 0x9, 0x8, 0x10, 0x7, 0x81, 0x7f0, 0x4df, 0xe, 0x8, 0x5, 0x3, 0x7, 0x0, 0x6, 0x10000, 0x7, 0x48a5, 0x0, 0x2, 0x1, 0x1, 0x10001, 0x0, 0x9, 0xf6c, 0x0, 0x4557c25f, 0xf, 0xe09, 0x101, 0x1, 0x6, 0x6, 0xfffffffd, 0x55, 0x2, 0x7fff, 0x6, 0xffffffff, 0xffffff01, 0xfff, 0xc45, 0x5, 0x2, 0x4, 0x6, 0x6, 0x5, 0xa5c, 0xc0d, 0x4, 0x0, 0xf, 0x1, 0x4, 0x9a7, 0x8, 0x40, 0x4, 0x2, 0x0, 0x1, 0x3ee0, 0x6, 0x7, 0x5, 0x101, 0x2fe5, 0x0, 0x9, 0x7fff, 0x7f, 0x1000, 0x4, 0x4, 0xfffffffe, 0xfffffff6, 0xe9, 0x8, 0x6, 0x9, 0x80, 0x8, 0x3, 0x9, 0x4, 0x6, 0xbb44, 0x4, 0x7, 0x3, 0x2ca1, 0x9f, 0xf, 0x3, 0xb570, 0x10, 0x0, 0xd3, 0x800, 0x3, 0x1, 0x5, 0x6295, 0x5, 0x3000, 0x3, 0x3d, 0x9, 0x9, 0x9, 0xd90, 0x10001, 0x3, 0x2, 0xffffff23, 0x9, 0x7, 0x0, 0xfffffffc, 0x4, 0x7, 0x400, 0x7, 0x7f, 0xc7, 0x8, 0x614, 0x1000, 0x2, 0x400, 0x6, 0x9, 0x5, 0xff, 0x1000, 0x0, 0xd11, 0x4, 0x3, 0x100, 0x4, 0x7, 0x0, 0x24, 0xfffffff8, 0x800, 0xe, 0x4, 0x81]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x1, 0x7, 0x6, {0x9, 0x2, 0xdbf, 0x483, 0x8}, {0xff, 0x1, 0x5, 0x3ff, 0x6, 0xc}, 0x19, 0x200, 0x9}}]}]}}]}, 0xc98}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) 1m14.403850253s ago: executing program 45 (id=1245): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m9.69876293s ago: executing program 2 (id=1246): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) capset(0x0, &(0x7f0000000000)={0xa, 0xe, 0x13e, 0x1ff, 0xffffffff, 0x8f400000}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x4090, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10acc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x200, 0xa401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xfffffffe, 0xe0, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x201}, 0x8, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0}) setns(0xc9, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000300)={'mangle\x00', 0xd1, "7c61ae6295bb75a070ccd367fb4905a59cf450f2f7340b48a863089d923d315a2a4b0ceb11679ef5ab05db133d38de6ab48f0c61f45304e78c4e450d09d8dc2ebc22f5a23625fa5e62856e02f22ae483a27f1936f48ed26caeccc3407fa7a421738c4842d4d88d6debf9916b3c569ad379b917791163a187fbdbe0faa383b21baf55d0d4c71d235296a17c307c53e2db7ba4937ead3c3f0827058f71faeb4e3d25477ecaa8dfd22129bce83b206c0583d0b2b03bc68e17fea56a9b32fe22f14e3a69ffd997101cbaf9f76c38cb5cf2b03d"}, &(0x7f00000002c0)=0xf5) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, "d1a2d6e7"}, &(0x7f0000000180)=0x2c) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x1234}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x34}}, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1234, 0x12, 0x0, @opaque="00010203040506070809"}}}}}, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) 1m9.512720294s ago: executing program 2 (id=1278): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x2, 0x0) r1 = memfd_create(0x0, 0x5) fallocate(r1, 0x3, 0x8, 0x10000200401) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="09031abd7000fcdbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x110) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x4, 0x0, &(0x7f0000000080)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000080)={0x7, 0x100, 0x58bb, 0x9, 0x4}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x42510}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x948, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9db}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000006c0)=ANY=[], 0x10) sendmmsg$inet6(r5, 0x0, 0x0, 0x4000001) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa0200000000000000001f00000000000000080003002e000a000d002e009ee517d34460bc24eab556a705252d4e5d6d74b6973c0a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) 1m8.282859705s ago: executing program 2 (id=1284): socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x13}, 0xc108, 0x1, 0xc, 0x6, 0x7, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000140), 0x3) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x48050) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m8.184378227s ago: executing program 2 (id=1287): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x44}}}]}, 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0x6, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000002400)={0xc, {"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", 0x1025}}, 0x1006) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r8, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r7, 0x0, r0, 0x0, 0x317e, 0x4) 1m7.469445405s ago: executing program 46 (id=1173): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000680)="fa61", 0x2}], 0x1}}], 0x1, 0x20040804) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000140)=0xffff0022, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe70a10a000600014002020c600e41b0000900ac000a0514000000040012000200ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71ee5667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x8000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x128, 0x128, 0x4, [@union={0x6, 0x7, 0x0, 0x5, 0x1, 0x9, [{0xc, 0x3, 0x1}, {0x5, 0x5}, {0x0, 0x0, 0x6}, {0x7, 0x2, 0x6}, {0x0, 0x4, 0x6}, {0xb, 0x3, 0x1}, {0xc, 0x5, 0x4}]}, @typedef={0x3}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x3, 0x9}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x5}, @float={0x10, 0x0, 0x0, 0x10, 0x2}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x7}, {0xd, 0x3}, {0x7, 0x3}]}, @const={0xa, 0x0, 0x0, 0xa, 0x2}, @union={0x6, 0x5, 0x0, 0x5, 0x0, 0x8, [{0xc, 0x4, 0x101}, {0x0, 0x3, 0x1}, {0x4, 0x1, 0x6}, {0x9, 0x2, 0x4}, {0xe, 0x5}]}, @ptr={0xd, 0x0, 0x0, 0x2, 0x3}, @func={0x6, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000300)=""/134, 0x144, 0x86, 0x1, 0x1, 0x10000, @value=r2}, 0x28) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000080)={0x4, 0x5}) 1m7.073546505s ago: executing program 2 (id=1303): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x4, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) syz_clone3(0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) socket(0x10, 0x3, 0x0) inotify_init1(0x0) socket$unix(0x1, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) 1m7.073371794s ago: executing program 47 (id=1303): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x4, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) syz_clone3(0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) socket(0x10, 0x3, 0x0) inotify_init1(0x0) socket$unix(0x1, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) 59.362795886s ago: executing program 4 (id=1377): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000180)="cf", 0x1}], 0x1) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) (async) sendmmsg$inet6(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000000000000029000000430000bf1fe30400000000000000"], 0x10}}], 0x1, 0x20002040) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1c7, 0x0, {}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "f01881a1deb9fbff"}}, 0x48}, 0x300}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88f7ffff4000630677fbac14142c88a8a0a688a89f4b4d2f87e56dca6aab84fe13f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000002280)="ed", 0x1}], 0x1}, 0x40000) (async) recvmmsg(r7, &(0x7f0000007e80)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/204, 0xcc}], 0x2, &(0x7f0000003480)=""/203, 0xcb}, 0x9}], 0x1, 0x40010110, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f00000008c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7fff, r8, &(0x7f00000000c0)='s', 0x1, 0x0, 0x0, 0x2}]) (async) readv(r4, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0x10e}], 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000440)) ftruncate(r0, 0x207) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) setsockopt(0xffffffffffffffff, 0x401, 0xfff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 59.245462579s ago: executing program 4 (id=1381): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000240012800ba79809269485d85a00010062726964676500001400028008000200800000008e26fb1cdbc31d18056ea7000000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) keyctl$setperm(0x5, r0, 0x80432) setreuid(0xee01, 0xee00) keyctl$describe(0x6, r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x13c, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000006c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000700)={0x2, 0x2, 0x9, 0x1, 0x5, 0x7ff, 0x6, 0x6}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480), 0xc325, 0x0) socket$kcm(0x2, 0x3, 0x2) listns(&(0x7f0000000500)={0x20, 0x0, 0x1, 0x4020000, 0x0, 0x3}, 0x0, 0xf4240, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001ff80000000"], 0x38}}, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast1, @empty, 0x0}, &(0x7f00000004c0)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r6, 0x0) setreuid(r6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@local, @in6=@mcast1, 0x4e24, 0x0, 0x4e24, 0x7, 0x0, 0x100, 0x0, 0x1, r4, r6}, {0x6, 0x3, 0x7, 0x7, 0xa17, 0x200, 0x59, 0x10000}, {0x2, 0x0, 0x9, 0x24e}, 0x9, 0x0, 0x0, 0x1, 0x2, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d4, 0x32}, 0xa, @in6=@remote, 0x3506, 0x0, 0x3, 0x28, 0xe9a, 0x7fff, 0x5}}, 0xe8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000140)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x1f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c603, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x74}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000edf000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ee0000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd25f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xe, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r7, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) syz_io_uring_setup(0x6c2e, &(0x7f0000000100)={0x0, 0xf00f, 0x200, 0x0, 0x155}, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000380)) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) accept4$unix(r3, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e, 0x0) 58.855241829s ago: executing program 4 (id=1386): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x10002}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x50) r0 = socket$inet(0x2, 0x80001, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) rt_sigpending(0x0, 0x0) acct(0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 58.790101631s ago: executing program 4 (id=1389): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000300), 0x3, 0x42f, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000080)={r2, @in6={{0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, 0x8, 0x806}, &(0x7f0000000040)=0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x1000007, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x5, 0x8}, 0x1200, 0x1224, 0x5b16, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) listxattr(&(0x7f0000000200)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', &(0x7f0000000240)=""/19, 0x13) 58.486434808s ago: executing program 4 (id=1393): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000200)='./file0\x00', 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x60005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7010040000ed91443773f07e740b38359900050000000600010005000000080009000200000008000b00000008000c00a80a000000007290defa31db56848b3121e33fecc5a1f3664a46ab73ece64f944ffb090bd8e4c410eee6e5868108a39a59f369a140472177af3e22b4017bf94816388bd42dca431ce3315ce83ff81121907e522d61e1c31d4845f341effa0808e9426bd12fbcffdc8a344b962a75b5427619e6a1733de16512beaf2423731892fb8327979ac119bc960664f7d2488a0b505bd447229af8b1e867cbe11d49f8c038bdd84751c59b892a9ad98d2aff"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) renameat2(r2, &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000240)='./file0\x00', 0x2) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x7, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f00000002c0)={0x38, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3c1adffd"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10}]}]}, 0x38}}, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000009c0)={0x0, @broadcast, @loopback}, &(0x7f0000000a00)=0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a40)={0x1c4, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x1}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xb9, 0x0, &(0x7f0000000180)="b461802305624431ed337301000000010000986919d5d5fe00c6fc6ef8eef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed60abbc6f6322cbfac4000000000000008163063239d18657d8f6f274d1347d38650608e39d2f8e61c96bbe67808cf339089d46844de51517a756705ab535c084ee3da160dffccc6ecbc132908c2d4588aec206fc5ae73940dfd53875423d82d19a374aa73c2bfcc1a8ac5e2f2a70f201ae1b28de0955752f1101807861e2", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4002}, 0x50) r11 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r11, 0x1, &(0x7f0000000040)=0x85) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r7, 0x8008f511, &(0x7f0000000280)) fcntl$lock(r7, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) fcntl$lock(r7, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010425bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03170000005f9a14236d975e000000140012800c0001006d6163767461700004342d4557590e54c6275dc6e5bab5f7e7c7d5b0ba1932aee074f6ce1517a0afa569243191621167ab3cc176586d6424118e0c8960a459b450c4036620b32c46f9c92e93a64193a0e206259507dbfa", @ANYRES32=r12, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 57.781941425s ago: executing program 4 (id=1401): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0), 0xf}, 0x100d59, 0x6, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) setitimer(0x2, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000000020000c0005000c0003800400040004000380180001801400020076657468305f746f5f626f6e64000000a91cd594c76fd33831d849e2de38657472bd89e1c886d1dc31a19298fe1478f102b08cfb68761bbabd461440efdd8d19edeb4b5c00239b47c86d6c45b0ed0eb60b9492a0f6ed5982b62553b3cf67dac561"], 0x38}, 0x1, 0x0, 0x0, 0x4004801}, 0x24000004) syz_emit_ethernet(0x89, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x5, 0x0, 0x2}}, {@mpls_mc={0x8848, {[], @ipv4=@udp={{0x7, 0x4, 0x0, 0x7, 0x73, 0x65, 0x0, 0x6, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_prespec={0x44, 0x4, 0x6, 0x3, 0x2}, @timestamp_addr={0x44, 0x4, 0x2e, 0x1, 0x9}]}}, {0x4e20, 0x4e22, 0x57, 0x0, @gue={{0x1, 0x1, 0x1, 0x1, 0x0, @void}, "c8410bdbaa13f9951e186203631487a99a24d365961e4ba8951d5ce89ae2b610fcef497cedc0532be75d08445b13a7fdc472f6be33fcb6d6dd5c7b83285f0fa609df9900c4116722c42a57"}}}}}}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) r3 = dup2(r2, r2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req={0x8000, 0x6, 0x300, 0xfc}, 0x10) mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x3, 0x11, r4, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r6, &(0x7f0000000210)="01", 0x1) read(r5, &(0x7f0000000000)=""/8, 0x8) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x1, 0x1, 0x0, 0x0}, 0x14) write$tun(r3, &(0x7f00000000c0)=ANY=[], 0x46) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') pidfd_getfd(r3, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000240)={@multicast1, @remote}, &(0x7f0000000380)=0xc) 57.729234387s ago: executing program 48 (id=1401): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0), 0xf}, 0x100d59, 0x6, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) setitimer(0x2, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000000020000c0005000c0003800400040004000380180001801400020076657468305f746f5f626f6e64000000a91cd594c76fd33831d849e2de38657472bd89e1c886d1dc31a19298fe1478f102b08cfb68761bbabd461440efdd8d19edeb4b5c00239b47c86d6c45b0ed0eb60b9492a0f6ed5982b62553b3cf67dac561"], 0x38}, 0x1, 0x0, 0x0, 0x4004801}, 0x24000004) syz_emit_ethernet(0x89, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x5, 0x0, 0x2}}, {@mpls_mc={0x8848, {[], @ipv4=@udp={{0x7, 0x4, 0x0, 0x7, 0x73, 0x65, 0x0, 0x6, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_prespec={0x44, 0x4, 0x6, 0x3, 0x2}, @timestamp_addr={0x44, 0x4, 0x2e, 0x1, 0x9}]}}, {0x4e20, 0x4e22, 0x57, 0x0, @gue={{0x1, 0x1, 0x1, 0x1, 0x0, @void}, "c8410bdbaa13f9951e186203631487a99a24d365961e4ba8951d5ce89ae2b610fcef497cedc0532be75d08445b13a7fdc472f6be33fcb6d6dd5c7b83285f0fa609df9900c4116722c42a57"}}}}}}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) r3 = dup2(r2, r2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req={0x8000, 0x6, 0x300, 0xfc}, 0x10) mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x3, 0x11, r4, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r6, &(0x7f0000000210)="01", 0x1) read(r5, &(0x7f0000000000)=""/8, 0x8) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x1, 0x1, 0x0, 0x0}, 0x14) write$tun(r3, &(0x7f00000000c0)=ANY=[], 0x46) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') pidfd_getfd(r3, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000240)={@multicast1, @remote}, &(0x7f0000000380)=0xc) 49.11976944s ago: executing program 0 (id=1519): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x10002}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x50) r0 = socket$inet(0x2, 0x80001, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0x7f, 0x44b, &(0x7f0000000dc0)="$eJzs3MtvG8UfAPDvrpP8+vwllPLoAwiUR8UjadICPXABgcQBJCQ4lGNI0qo0bVATJFpVEBAqR1SJO+KIxF/AiV4QcELiCgduqFKFemnhZLT2buMY202MnYX685HWmdkda+ab3bFndrIJYGCNZy9JxI6I+DkiRuvZtQXG6z9uXLsw+8e1C7NJVKuv/57Uyl2/dmG2KFq8b3ueOZhGpB8nsa9FvUvnzp+aWViYP5vnJ5dPvzO5dO78UydPz5yYPzF/Zvro0SOHp559ZvrpnsSZxXV97/uL+/e8/OalV2ePXXrr+6+SIv6mOHpkvNPBR6rVHldXrp0N6WSoxIawIZWIyE7XcK3/j0YlVk/eaLz0UamNA/qqmmtzeKUK3MaSKLsFQDmKL/ps/ltsmzf6KN/V5+sToCzuG/lWPzIUaV5muGl+20vjEXFs5c/Psy36cx8CAGCNb7Lxz5Otxn9p3N1Q7v9pfQ1lLCLuiIhdEXFnROyOiLsiamXviYh7N1h/8yLJ38c/6ZWuAlunbPz3XL62tXb8V4z+YqyS53bW4h9Ojp9cmD9UP7aSvWT5qQ51XH7xp0/bHWsc/2VbVn8xFszbcWXof2vfMzezPNNtvM2ufhixd6hV/MnNlYAkIvZExN4u6zj5+Jf72x27dfwd9GCdqfpFxGP1878STfEXks7rk5NbYmH+0GTDVdHkhx8vvtau/n8Ufw9k539by+v/ZvxjSeN67dLG67j4yydt5zTdXv8jyRu19Ei+772Z5eWzUxEjySv1Rjfun159b5EvymfxHzzQuv/vitXfxL6IyC7i+yLi/oh4IG/7gxHxUEQc6BD/dy88/Hb38fdXFv/chs7/amIkmve0TlROffv1mkrHNhJ/dv6P1FIH8z21z7+kc1zraVd3VzMAAAD896QRsSOSdOJmOk0nJup/w787tqULi0vLTxxffPfMXP0ZgbEYTos7XaMN90On8ml9kZ9uyh/O7xt/Vtlay0/MLi7MlR08DLjtbfp/5rdK2a0D+s7zWjC42vb/LZvbDmDz+f6HwaX/w+Bq0f+3ltEOYPO1+v7/ICIuP1pCY4BN1dT/LfvBADH/h8Gl/8PgWkf///X2+nfVQEQsbY1bPyTf30QlyqxdostEpP+KZkj0KVH2JxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBv/BUAAP//m5Hs/w==") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 48.505813266s ago: executing program 0 (id=1525): fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0xc, &(0x7f0000000340)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x10, 0xfffffffe}, 0x9b) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x58, &(0x7f0000000180)}, 0x10) write(0xffffffffffffffff, &(0x7f0000000800)='- 1 ', 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) 47.488819581s ago: executing program 0 (id=1540): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x1, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x9000, 0xffffdffd, @dev={0xfe, 0x80, '\x00', 0x16}, 0x7}, 0x1c) setgroups(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x20042, 0x40) fallocate(r0, 0x0, 0x4, 0x88ffff) 46.640711002s ago: executing program 0 (id=1550): add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=") openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x8080, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x2, 0x0, 0x3, 0x0, 0x8, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f00000002c0)}, 0x106cf9, 0x1224, 0x0, 0x0, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'macvlan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000000)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@dax_never}, {@bh}, {@init_itable}], [{@fsmagic={'fsmagic', 0x3d, 0x2}}, {@flag='ro'}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10000, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r8 = syz_open_dev$usbfs(0x0, 0x4, 0x149700) ioctl$USBDEVFS_CONNECTINFO(r8, 0xc00c5512, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) 44.866098106s ago: executing program 0 (id=1562): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x1000000000000, 0x884}, 0x40) 44.552683794s ago: executing program 0 (id=1567): prctl$PR_GET_CHILD_SUBREAPER(0x25) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") prctl$PR_GET_CHILD_SUBREAPER(0x25) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") (async) 44.552599924s ago: executing program 49 (id=1567): prctl$PR_GET_CHILD_SUBREAPER(0x25) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") prctl$PR_GET_CHILD_SUBREAPER(0x25) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") (async) 35.018848681s ago: executing program 9 (id=1684): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000400)={[{@noblock_validity}, {@sysvgroups}, {@dioread_nolock}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x4a2, &(0x7f0000001400)="$eJzs3M1vFOUfAPDvTLel5eVXfogvENAqGIkvLS0vcjAxGk04aDTqAeOptoUgBQzURAhR9IAxHgyJd/Vo4l/gSS9EPZnoEe+GhBguoKc1szPbN2bbLt12C/v5JMM+zzwzfZ7vPjuzzzwzSwAdayD7J4nYGBFXI6I/IirzNxjIX27duDD2z40LY0lUq2/+nWS7xc0bF8aKPxFJmu+yIV9RrRZ/Yl1JvZfeiRidnJw4U+SHpk6+P3T23Plnjp8cPTZxbOLUyKFD+/ft7Dk4cqAlcWZx3dz+0ekd2w6/ffnVsSOX3/3l+6zNG4vyehytNJC/u6Ueb3VlbbZpVjqptLEhNCXrt+5iuRrVrq7omy7rj5c/bWvjgJVWKft+LlysAvewbKDehP5obntgzap/0WfXv/VlsfFCC8cebXf9hTyiLO5bxZKXVKKYzqhdG21aofp7I+LIxX+/zpZYoXkIAIDZfszGP0+Xjf/SeGDWdv8r7qFsjoj/R8SWiLgvIrZGxP0RtW0fjIiHmqx//h2S28c/6bU52WpXkzUsLBv/PVfc25o7/quP/mJzV5HbVIu/Ozl6fHJib/Ge7InudVl+eM4uc/300u9fzl/3RTHNPjBr/JctWf1zI0yvzZ+gGx+dGl1+5Lnrn0Rsr5TFn0wP9JOI2BYR2++wjuNPfrejUVlZ/PWx8KJacCVS/Tbiibz/L8a8+OuShvcnh589OHJgqDcmJ/YO1T8Vt/v1t0uvN6p/WfG3QNb/60s//3n82TVi0htx9tz5E7X7tWfvoJI/PxtLGhRtLeLvbhj/7Z//sd0RPclbtXRPfavitSd5JXvpq6//cHRq6szIzL71fO11OI9/z66Z+Edj5vjfkl+eRfLHG9P774yIhyPikaLvHo2IxyJi1wLh//zi7vcalTXu/wVm5Vsoi398gf7PTnlZaqb/m090nbjyQ6P6q4t+/rP+319L7SnWLOX8t9QGLue9AwAAgLtFWnsGPkkHp9NpOjiYP8O/NdanlYh46ujpD06N58/Kb47utD7T1T9rPnS4mBuu50fm5fcV88ZfdfXV8oNjpyfH2x08dLgNDY7/zF+tvdUCrEXl99G+WfV2AKvvnnqiF2iK4x86l+MfOtfz7W4A0B495as/Xu12AG3R/Pi/d0XaAaw+1//QuRz/0Lkc/9CRGv42Pl3WT/7v1kRlbTSjNNHXntqzL4eyokgX3T1dK2/dkhKvfZ4fEm1sRlJWVFnyf2Zxh4l1pUWlp4vDG2fnrqzKKQoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBZ/gsAAP//c97X0Q==") r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000001000)=0x11) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1}, 0x0, 0x35, 0x6, 0x1, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r1}) add_key$keyring(&(0x7f0000000280), &(0x7f0000000240)={'syz', 0x1}, 0xfffff, 0x0, 0x0) 34.901464824s ago: executing program 9 (id=1686): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xe, 0x7a3a, 0x0, 'queue0\x00', 0x3}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="228292", 0xfff6}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000800), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000e30f000000000002000018100000", @ANYRES32=r3, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x8d03000) capget(&(0x7f0000feaff9)={0x19980330}, &(0x7f0000000000)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x53}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) 34.663144149s ago: executing program 9 (id=1692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r3, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77, 0x46000000}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) write$cgroup_pid(r2, &(0x7f0000000640), 0x15) sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0x68, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x101, 0x0, 0x0, {0xf, 0x0, 0x5}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8001}]}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xd9}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSET={0x1d4, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_DESC={0x120, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2517}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8ab}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x95ca}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffe73b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcf2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xac}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x84}]}, @NFTA_SET_USERDATA={0x74, 0xd, 0x1, 0x0, "b03cdef031f3d0871a7683935af3d9d86da74f5555f3092aba27e463472d7dfd422b1c14ebf4be28c69b29db14673774885e403ec06d03535cadc3b500f0acd0f765aeaba0d4ddc80c13dc81f275475c54799d9e8664e00ed9e714905eb7f0d401f42de41640c4618fece1143f54cffe"}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x3}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x203, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0xc4, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x7a, 0xc, "e7363ab7839549e739a9f036c06df7ac02441601d69f759193074d5a8cc6a5d984a0404b1224871aaa576ca26b99c410d45e8af20b601fcd47ebc8c338daedda8ed49d6c5ede205007603ed452375bb51532915d1be6335b40988f5fd54fc8927ed42ea9b0448f41912ddf2003d55401f565ec82723c"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3f8}, 0x1, 0x0, 0x0, 0x24000000}, 0x1d9da265cf1bffff) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x240408d1) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="9c000000010a03000000000000000000030000000900010073797a30000000000900010073797a31000000000c000440000200000000000222000600fe1ce51abc720f91f81c7f68ba4b"], 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 34.364119287s ago: executing program 9 (id=1693): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x6, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x33, 0x1, 0x0, 0x7, 0x0, 0x4000000007, 0x44c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x10ecc8, 0x1226, 0x0, 0x3, 0x4, 0x20002, 0x5, 0x0, 0x0, 0x0, 0x2020021020000001}, 0x0, 0xa, 0xffffffffffffffff, 0x8) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x3f, 0x4, @thr={&(0x7f0000001e00), 0x0}}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000001580)={[{@dioread_lock}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x579, &(0x7f0000001600)="$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") waitid(0x0, r1, &(0x7f00000000c0), 0xc6f029efedb98fa9, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r2 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000100000000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) getsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x28, r7, 0x201, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4041}, 0x84) r8 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240), 0xfe, 0x526, &(0x7f0000001100)="$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") wait4(r8, 0x0, 0x2, 0x0) 33.02959055s ago: executing program 9 (id=1710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}]}, 0x30}, 0x1, 0xc3, 0x0, 0x24040051}, 0x4000000) 31.981860946s ago: executing program 9 (id=1724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) tkill(0x0, 0x16) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x401, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xf5}, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e030000000000000002000000000000040200000002000000000000110300000000000000005f5f"], 0x0, 0x54}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fb0200000000000000797a3100000000080041007278650014003300626f6e64300000002f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24008000) mmap$IORING_OFF_SQ_RING(0x0, 0xf, 0x4, 0x20010, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x80011, 0x1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000000), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x154}}, 0x8044) 31.926690297s ago: executing program 50 (id=1724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) tkill(0x0, 0x16) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x401, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xf5}, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e030000000000000002000000000000040200000002000000000000110300000000000000005f5f"], 0x0, 0x54}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fb0200000000000000797a3100000000080041007278650014003300626f6e64300000002f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24008000) mmap$IORING_OFF_SQ_RING(0x0, 0xf, 0x4, 0x20010, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x80011, 0x1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000000), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a4000000002b0000000060a010400000000000000000500000a0900010073797a30000000000900020073797a30000000008400048024000180090001006d6574610000000014000280080001400000000108000240000000012c00018008000100636d700020000280080001400000000108000240000000000c0003800500010000000000300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c00028008000180fffffffe"], 0x154}}, 0x8044) 25.057364898s ago: executing program 7 (id=1812): r0 = fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x9) fchdir(r1) ptrace$setregset(0x4205, 0x0, 0x201, &(0x7f0000000200)={&(0x7f0000000100)="7e5040fb27250bd10491ca33e0f234a0f71c26545ea24e2e136f4757e8f71629a2d13de03e1e729879af87810105b21226ad1b6595aad1e52afb92e7079a56f1af63cf124a48e1b73559089d04e9990ffa5898301a3910cfc4d0ebf98c7c69c9e998fe66be3182c7f81663958f412a812e7c52584b06d19986abc69f7aacfd8945ddbe71976448e86f6c699d429653cbf3790a2cc3b3437545e8cb2843fdde6919c643e7c8d0ddf29ae0b98c963c0796b82c39f2d7f5d803789717755f3da53d05840f7730f2d49292", 0xc9}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7c, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="300000000000000029000000040000008402000400000c04040200030401"], 0x30}, 0x800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000200)={[{@acl}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x550, &(0x7f0000000500)="$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") setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r5, 0x0, 0xe, 0x0, &(0x7f0000002280)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) 24.906183652s ago: executing program 7 (id=1816): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x10002}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0x7f, 0x44b, &(0x7f0000000dc0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 24.542423071s ago: executing program 7 (id=1823): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="bfc66e60115b"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="55626bc3314c"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c1}, 0x80895) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @mcast2, 0x7}}, [0x3, 0x579, 0x1, 0x6, 0x1, 0x3, 0x1, 0x5, 0x5, 0x5, 0x9, 0x5, 0x2, 0x7, 0xcb]}, &(0x7f00000002c0)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0x2, 0x200, 0xffffff46, 0x81, 0x0}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000380)={r2, 0xb, 0x1, 0x4, 0x0, 0x5, 0x1, 0x4, {r3, @in6={{0xa, 0x4e20, 0x0, @remote, 0x3}}, 0x5, 0x4, 0xffffffff, 0x1ff, 0x6}}, &(0x7f0000000440)=0xb0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4008040) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x7800, 0x40, 0x1, 0x1000, {{0xb, 0x4, 0x2, 0x19, 0x2c, 0x66, 0x0, 0xe, 0x4, 0x0, @remote, @loopback, {[@lsrr={0x83, 0x17, 0xf, [@multicast1, @local, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xf}, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000780)={&(0x7f0000000580), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x74, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8800}, 0x20048084) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000000800)=0x1, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000840)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000008c0)={r7, 0x1, r0, 0x3}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000900)={r2, @in={{0x2, 0x4e21, @loopback}}, [0x8001, 0x2, 0x3, 0x8, 0xb6c, 0x6, 0x2, 0x3, 0x72, 0x7fffffff, 0x1, 0xffffffffffffffff, 0x5, 0x3, 0x47]}, &(0x7f0000000a00)=0x100) sendmsg$NFT_BATCH(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000008}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000002380)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002340)={&(0x7f0000000bc0)={0x175c, 0x0, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [{{0x254, 0x1, {{0x3}, 0x8, 0x0, 0x8, 0x18c, 0x1f, 'syz1\x00', "8f43e29f9038ab0263625257a8bac4d43a0cd3eefac33f88a9885ff3cfb74d6d", "ea008ea7d62a274e9e8108ee4635bd6f90f386dd6b40a2985f5fb2fbdf23b1bc", [{0x0, 0x6}, {0x0, 0x7, {0x1, 0x1}}, {0x269, 0x5, {0x2, 0x56}}, {0x1000, 0x800, {0x0, 0x7}}, {0x92c, 0x2, {0x3, 0x4}}, {0x9, 0x101, {0x2, 0x6}}, {0xab81, 0x9, {0x1, 0x9}}, {0x7, 0x3bf5, {0x2, 0x7}}, {0x2, 0x6, {0x1, 0x9}}, {0x7, 0x1, {0x3, 0x9}}, {0xb, 0x6, {0x2, 0x5}}, {0x197, 0x4d, {0x1, 0x1}}, {0x0, 0xfff8, {0x0, 0x7}}, {0x3, 0x6, {0x2, 0x6}}, {0x9, 0x8}, {0x1ff, 0x7, {0x1, 0x1}}, {0x7af2, 0x3ac, {0x1, 0x9}}, {0x6, 0x7790, {0x0, 0x9}}, {0xfff1, 0x8, {0x0, 0x40}}, {0x7a9, 0x3, {0x1, 0x4}}, {0x98, 0xa071, {0x2, 0x1}}, {0x8001, 0xe, {0x3, 0xffffffff}}, {0xcf5, 0x4, {0x0, 0x7ff}}, {0x100, 0x7, {0x1, 0x1000}}, {0x401, 0x71, {0x1, 0x28e0}}, {0x0, 0xdd, {0x3}}, {0x1, 0x3, {0x2, 0x7}}, {0x6, 0x3, {0x0, 0x101}}, {0x5, 0x4, {0x1, 0x7}}, {0x3, 0x8f, {0x2, 0x4}}, {0x29, 0x1, {0x3, 0x8}}, {0x1, 0x7, {0x0, 0x6}}, {0x1e, 0x3, {0x0, 0x5}}, {0x2, 0x8, {0x3, 0x1}}, {0x7, 0x9, {0x2, 0x1}}, {0x1, 0x6, {0x2, 0x1}}, {0x8, 0xd, {0x1, 0x3}}, {0xa, 0x200, {0x3, 0x7}}, {0x800, 0x7, {0x2, 0x7}}, {0x10, 0x0, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x6, 0x7, 0xff01, 0x7, 0x12, 'syz1\x00', "c35a84cbf52fb99fc5d04bac7c452be9291b94a56b980fcbfc80fde823a9e817", "21ecee854696978f865fadc09be953275a14b1c3e0dcf7f272651162a49226ca", [{0x7f, 0x1, {0x2, 0xb91}}, {0xf9ee, 0x9, {0x2, 0xb}}, {0x0, 0xaa5f, {0x3, 0x3}}, {0x10, 0xa50, {0x2, 0x1}}, {0x200, 0x8001, {0x1, 0x9}}, {0x9, 0x3, {0x0, 0x1}}, {0x2d8, 0x7f, {0x1, 0x7611}}, {0x5, 0x2, {0x2, 0x1}}, {0x80, 0x3b, {0x2, 0xa}}, {0x3c, 0x2, {0x3, 0x63}}, {0x7, 0x5, {0x1, 0x2}}, {0x7e34, 0x9, {0x1, 0x6}}, {0x3, 0x4, {0x1, 0x3}}, {0x1d23, 0x6, {0x2, 0x4}}, {0xe, 0x0, {0x1, 0x1}}, {0x5, 0x3, {0x3, 0x2}}, {0x9, 0x7fff, {0x3, 0x100}}, {0x9, 0x1, {0x0, 0x5}}, {0x9, 0x9, {0x0, 0x8}}, {0x6, 0x2, {0x1}}, {0xff33, 0x6, {0x0, 0x5}}, {0x7, 0x4, {0x0, 0x8}}, {0x1, 0xfff0, {0x3, 0x7}}, {0x4, 0x3, {0x2, 0x2}}, {0x2, 0x6, {0x3, 0x5}}, {0x1f, 0x40, {0x0, 0x8001}}, {0x5, 0x1, {0x3, 0x2}}, {0x7, 0xc04, {0x1, 0x4}}, {0x3, 0x4, {0x1, 0xffff}}, {0xffff, 0x400, {0x1, 0x34}}, {0x400, 0x5, {0x0, 0x3}}, {0x1, 0x3, {0x1}}, {0x37, 0x800, {0x2, 0xc}}, {0xff00, 0x8, {0x1, 0x3}}, {0x5, 0x31, {0x3, 0x3}}, {0xffff, 0xb, {0x1, 0x35}}, {0x5, 0x7ff, {0x3, 0x80000000}}, {0x4, 0x1313, {0x3, 0xe0f}}, {0xd7, 0x5, {0x0, 0x9}}, {0x3, 0x5, {0x3, 0xb}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0x4, 0x5, 0x7, 0x2, 0x14, 'syz1\x00', "3c0c3e388364f163c0b234eb79314f440d4ee8ec69aedfb591aad404d7c0dede", "b54398e94b68afc32297318a27f5551d3f0ccd85f0739c51ce78a573f0df2056", [{0x10, 0x7fff, {0x0, 0x2}}, {0xff01, 0x1, {0x1, 0x5}}, {0x7, 0xe6d, {0x2, 0x1}}, {0x1, 0xfff, {0x3, 0xb}}, {0x3, 0xfb77, {0x1, 0x9}}, {0x24f3, 0x1, {0x0, 0x6}}, {0x4c, 0x3, {0x0, 0x800}}, {0x27, 0x6d, {0x3, 0x5}}, {0x3, 0x6, {0x0, 0x1d}}, {0x5, 0x0, {0x0, 0x80}}, {0x2c, 0x3, {0x3, 0x6}}, {0xfb2, 0xff55, {0x3, 0x80000000}}, {0x1, 0x3ff, {0x2, 0x5}}, {0x6, 0x1, {0x1}}, {0x7ff, 0xfffa, {0x0, 0x1}}, {0x0, 0x0, {0x2, 0x6}}, {0xbe, 0x1, {0x1, 0x3b697736}}, {0x5, 0x3, {0x3, 0x7}}, {0xb, 0x2998, {0x1, 0x2}}, {0x1, 0x0, {0x1}}, {0x3, 0xf, {0x1, 0x16a5}}, {0xc, 0x3, {0x3, 0xe}}, {0x5, 0x3, {0x2}}, {0x0, 0x7ff, {0x3, 0x7}}, {0x401, 0x8001, {0x1, 0x80000001}}, {0x9, 0x4, {0x2, 0x7}}, {0xc, 0xf884, {0x0, 0x7}}, {0x3, 0x36, {0x3, 0x6}}, {0x9, 0x3, {0x1, 0x7}}, {0x7f, 0x5, {0xcbdd03c006d066cd, 0x1}}, {0x1, 0x3, {0x3, 0x6}}, {0x7, 0x9, {0x2, 0x9d8}}, {0x24, 0x81, {0x2, 0x6}}, {0xfffa, 0x1, {0x2, 0x1}}, {0x5, 0x1000, {0x0, 0x3}}, {0x4, 0x3, {0x2, 0x7}}, {0x87a1, 0x7, {0x2}}, {0x80, 0xc4, {0x0, 0xec15}}, {0x0, 0x2, {0x3, 0x3}}, {0xd7f7, 0x7a72, {0x3, 0xfffffff8}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x2, 0xf7, 0x7, 0x8, 0x6, 'syz0\x00', "71ff6c3dd3a5a091d705a4dbf492fbe89d19ecf783985bd6a53d41f631320ae0", "f213eb6e359a2868c31709469a619b0cd2caa7e692ebf1d73c53b62475e18871", [{0x1, 0x7, {0x3, 0xe}}, {0x7472, 0x4, {0x2, 0xd}}, {0x2, 0xd6, {0x3, 0xfffffffd}}, {0x3, 0x9, {0x0, 0x2}}, {0x1b2, 0x9, {0x2, 0x622}}, {0x3, 0x7, {0x3, 0x2}}, {0x2, 0x266, {0x0, 0x100}}, {0x5, 0x474, {0x1, 0xebdd}}, {0x7, 0x8000, {0x2, 0x286}}, {0x4, 0xa8, {0x3, 0x7}}, {0x9, 0x80, {0x0, 0x6}}, {0xf, 0x1ff, {0x0, 0x1}}, {0xffff, 0x1, {0x2, 0xfffffff8}}, {0x10, 0x4, {0x0, 0x10001}}, {0x7, 0x7, {0x1, 0x7}}, {0xe7e2, 0xb, {0x3, 0x6}}, {0xd, 0xfb3d, {0x2, 0x8200}}, {0x0, 0x3, {0x1, 0xf}}, {0x2, 0x6, {0x3, 0x5}}, {0x8, 0x4, {0x0, 0xfffffffe}}, {0x9, 0x9, {0x1, 0x8302}}, {0x1, 0xa8e, {0x0, 0xd}}, {0x1ff, 0x8, {0x2, 0x1}}, {0x80, 0x1, {0x1, 0x92c2}}, {0x4, 0x7b2, {0x1, 0x1}}, {0x80, 0x4, {0x2, 0x10000}}, {0x800, 0x1, {0x0, 0x1}}, {0xb224, 0xb2, {0x2, 0x7}}, {0x8, 0x4, {0x3, 0x8}}, {0x2, 0x1, {0x2, 0x40}}, {0x80, 0x5332, {0x0, 0x9}}, {0x2, 0x6, {0x3, 0xb}}, {0x1, 0xcf5, {0x3, 0x5}}, {0x8, 0x8, {0x2}}, {0x5, 0x3, {0x0, 0x1}}, {0x5, 0xa0a3, {0x2}}, {0x7, 0x0, {0x3, 0xfff}}, {0xa, 0x800, {0x2, 0x20000}}, {0x5, 0x1ff, {0x3, 0xae7}}, {0x3, 0x7, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x49f}, 0xa, 0x65, 0xff, 0x6, 0x17, 'syz1\x00', "d1c0b10f0b6a9b749bf82b4ac5fce166a44b15c1b8f68675fec6dad66fa35d04", "311e7fce357fb921860f5ca5cab257475ab8da48d4ac8695c87c673689011315", [{0x0, 0x0, {0x1, 0x80000001}}, {0x7, 0x80, {0x3, 0xfffffffc}}, {0x6, 0x2, {0x2, 0x6}}, {0x7, 0x5, {0x0, 0x1}}, {0x7, 0xf4, {0x1, 0x9}}, {0x7, 0x51ae, {0x0, 0x6}}, {0x3, 0x5, {0x0, 0x6c}}, {0xe, 0x5, {0x3, 0x8}}, {0x8000, 0x6, {0x3, 0x5330}}, {0x2, 0x3ff, {0x0, 0x10000}}, {0x37, 0x81, {0x1, 0xf6}}, {0x7ff, 0x7, {0x0, 0x5}}, {0x6, 0x2db7, {0x1, 0x5d2}}, {0x2, 0x1, {0x3, 0xffffb998}}, {0xfffe, 0x7, {0x3, 0x7}}, {0x1, 0x3, {0x1, 0x4}}, {0xd, 0xbd, {0x2, 0x5}}, {0x1, 0x393f, {0x1, 0xfffffff7}}, {0xbf9c, 0x7, {0x2, 0x7ff}}, {0x5, 0x4, {0x2, 0x3}}, {0x6, 0x1, {0x6, 0xebd2}}, {0x8, 0x4, {0x0, 0x4}}, {0x9, 0x3fc, {0x0, 0x2}}, {0x0, 0x1, {0x2, 0x231}}, {0x1000, 0x2, {0x1, 0x1}}, {0x4, 0xc, {0x0, 0x1}}, {0xfff, 0x5, {0xbc6030bf789b9916, 0x2}}, {0x4, 0x7, {0x1, 0xb}}, {0x922, 0xc2, {0x3, 0x6}}, {0xa, 0x2, {0x1, 0x5}}, {0x5418, 0x5, {0x3}}, {0x100, 0x0, {0x0, 0x8001}}, {0x0, 0x3, {0x1, 0xe}}, {0x6, 0x3, {0x1, 0x8}}, {0xfff, 0x0, {0x3, 0x491e}}, {0x7f, 0x100, {0x3, 0x9}}, {0x6, 0x3}, {0x4, 0x9, {0x2, 0x8}}, {0x97, 0x1, {0x1, 0x6}}, {0x0, 0x5, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x6, 0x4, 0x3, 0x5, 0x18, 'syz1\x00', "c5dfa8ef118f62875b0c994b8675a190c5dfd72710b9f0c50c2bb9888c6435c3", "8994b37ac8656494124c28a19408c5eb004592f741e954444d3194a10acb496a", [{0xe, 0x100, {0x0, 0x97}}, {0x9, 0x7, {0x2, 0x2}}, {0x1, 0x1, {0x2, 0xc1}}, {0x990e, 0x7ff}, {0x0, 0x200, {0x3, 0x81}}, {0x1, 0x4, {0x0, 0xfffff001}}, {0x35d8, 0x3, {0x3, 0x1}}, {0xa0, 0x2, {0x3, 0x4}}, {0x9, 0x1, {0x1, 0x6454}}, {0xf, 0x0, {0x0, 0x10}}, {0x4b78, 0x9, {0x1, 0x2b4}}, {0x6025, 0x200, {0x1, 0x60000000}}, {0x5f23, 0x1, {0x3, 0x9}}, {0x0, 0x600, {0x1, 0x80000000}}, {0x2, 0x1, {0x0, 0x8}}, {0x8000, 0x1, {0x3, 0x7}}, {0x2, 0xffff, {0x0, 0x400}}, {0x2, 0x5, {0x2, 0xf0}}, {0x7, 0xff, {0x3, 0x6}}, {0x81, 0x3, {0x1, 0x5}}, {0x3, 0x7, {0x1, 0x7}}, {0x2, 0x10, {0x0, 0x2}}, {0x40, 0x8, {0x3}}, {0x5, 0x47, {0x2, 0xfffffff0}}, {0x1, 0x0, {0x1, 0x7}}, {0xfffb, 0x3000, {0x0, 0x8}}, {0x3, 0x2, {0x1, 0x9}}, {0x0, 0x5, {0x1, 0x4}}, {0xfae7, 0xa, {0x2, 0x8001}}, {0x0, 0x400, {0x1, 0xb}}, {0x2, 0x9, {0x1, 0x4ed}}, {0xb65, 0x7, {0x1, 0xffffffff}}, {0x7, 0x6, {0x2, 0x46}}, {0x100, 0x7, {0x0, 0x3}}, {0x6, 0x3, {0x2, 0x2}}, {0x401, 0xb, {0x3, 0x7fffffff}}, {0x200, 0x2, {0x3, 0x8}}, {0x4, 0x6, {0x2, 0x8001}}, {0xe, 0x7}, {0x0, 0x4d, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x4, 0x0, 0x3, 0x6, 0x7, 'syz1\x00', "ae85c9743b1ae80f7d0805efb045c8dd3ef22adf3937d0a3ad00f18687c341d7", "569a580a9729b65dee77e46a022e8a51952137913b51d25d8a3e6afa240943c5", [{0x1, 0x2, {0x3, 0x7f}}, {0x100, 0x0, {0x2, 0x8}}, {0x7a, 0x9, {0x1, 0x81}}, {0x800, 0x4, {0x2, 0x2}}, {0x0, 0x6, {0x0, 0x5a}}, {0x8, 0x0, {0x0, 0x4}}, {0x7ff, 0x8, {0x3, 0x3}}, {0x7, 0x8, {0x3}}, {0x1, 0x8, {0x2, 0x9}}, {0x7, 0x7fff, {0x0, 0xffff}}, {0xf2eb, 0xffff, {0x2, 0x4}}, {0x1, 0x7407, {0x2, 0x33a}}, {0x2, 0x0, {0x0, 0x2}}, {0x2, 0x0, {0x0, 0x78}}, {0x401, 0x5, {0x3, 0x4}}, {0x5, 0x4, {0x3, 0x6}}, {0x8, 0x3, {0x3}}, {0x52, 0x401, {0x2, 0x25612a48}}, {0x3, 0x2, {0x3, 0x6}}, {0x0, 0x9, {0x1, 0x18000000}}, {0x1, 0x6, {0x1, 0x8}}, {0x1, 0x400, {0x1, 0x2}}, {0x6, 0x40, {0x2, 0x5}}, {0x3ff, 0x6d96, {0x2, 0x4}}, {0xffff, 0x0, {0x0, 0x81}}, {0xfe01, 0xb, {0x2, 0x7ff}}, {0xda00, 0xfff, {0x3, 0x8}}, {0x101, 0x437, {0x0, 0xc}}, {0x4, 0x5d3c, {0x1}}, {0xc39, 0xd, {0x3, 0x2}}, {0x5, 0x4, {0x0, 0x9}}, {0x4, 0x4, {0x0, 0x7}}, {0x4, 0x7, {0x2, 0x800}}, {0x5, 0x4, {0x2, 0x4}}, {0xff7e, 0x8, {0x2, 0x5}}, {0x8, 0x20b6, {0x3, 0x3}}, {0xfb9, 0x6, {0x3, 0x4}}, {0x0, 0x0, {0x3, 0x3}}, {0x7fff, 0x200, {0x0, 0xf0f}}, {0x8000, 0x1, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x3, 0xf0}, 0x6, 0x4, 0x6d, 0x8, 0x1f, 'syz0\x00', "c5619ca972a2929909a7c45c5f82b44b6fadd00b9579be913c9e839e544ed347", "6cb3b30290c56a393631be1da484a8669c582f62a81e93b769ef1c2a6b81680b", [{0xb, 0xdc2, {0x0, 0xffff}}, {0x6, 0x4, {0x6, 0x101}}, {0x1a2f, 0x101, {0x0, 0xc27}}, {0x3, 0x7, {0x1, 0x8}}, {0x5, 0x40, {0x3, 0x7fff}}, {0x3ff, 0x401, {0x3, 0x8}}, {0xfff, 0x7624, {0x0, 0x9}}, {0x7, 0x80, {0x2, 0x5}}, {0x2, 0x2, {0x3, 0x1}}, {0x4, 0x0, {0x1, 0xc66}}, {0x8001, 0x3, {0x2, 0xd8a}}, {0x0, 0x4, {0x0, 0xa}}, {0x391e, 0x8, {0x1, 0x6}}, {0xa0d, 0x8000, {0x3, 0x7a5}}, {0x1, 0x7, {0x0, 0x3}}, {0x4, 0x420, {0x2, 0x2}}, {0x7f, 0x4, {0x3, 0x3ff}}, {0x0, 0x200, {0x0, 0x47d}}, {0x8000, 0xe, {0x3, 0xa8}}, {0xfffb, 0x2, {0x1, 0x7}}, {0xc, 0x4a, {0x0, 0x1}}, {0x74, 0x4, {0x1, 0x3}}, {0x78b9, 0xffff, {0x3, 0x15}}, {0x0, 0x3, {0x3, 0x65}}, {0x5, 0xcb6, {0x1, 0x80000000}}, {0x52, 0xe8, {0x2, 0x1}}, {0x8000, 0x7, {0x3, 0x8}}, {0xea7f, 0x4, {0x1}}, {0xc, 0x4, {0x0, 0xf5}}, {0x0, 0x9, {0x0, 0xfffffffa}}, {0xd9, 0x7, {0x1, 0xee2}}, {0x9, 0x8, {0x2, 0x7ff}}, {0x6, 0xc, {0x0, 0xffff}}, {0xb, 0x6, {0x0, 0x30}}, {0x1, 0x4000, {0x2, 0x6d}}, {0x6, 0x5, {0x2, 0xa}}, {0x5, 0x9, {0x2, 0x9}}, {0x3ff, 0x7, {0x3, 0x6}}, {0x1, 0x0, {0x0, 0xfffffffa}}, {0x1, 0x40, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0x7, 0x8, 0xb, 0x5, 0xd, 'syz0\x00', "e4e45381a4b1fcebe6b3d778466d4babb393569818d2c374c2977f60e534e7b2", "b88691b203efc98195656e54a752c0adc3d40a9bd92480c297bace7889946226", [{0x7, 0x7fff, {0x1, 0x6}}, {0xb, 0x8f18, {0x2, 0xf}}, {0x6, 0x4, {0x2, 0x8}}, {0x8000, 0x1, {0x0, 0x4}}, {0x1ff, 0xdd9b, {0x1}}, {0x1, 0xf9, {0x3, 0x400}}, {0x9, 0x4, {0x2}}, {0xb34, 0x7, {0x2, 0x2132f0d3}}, {0xd270, 0xc07d, {0x2, 0xd}}, {0x5, 0x7, {0x1, 0x9}}, {0x101, 0x8, {0x1, 0x2}}, {0xff8f, 0x8, {0x3, 0x9}}, {0x5, 0x9, {0x1, 0x4070}}, {0xffff, 0x7, {0x1, 0x400}}, {0x9, 0x6, {0x0, 0x3}}, {0x0, 0x2, {0x1, 0x7a}}, {0x85d1, 0x3d8, {0x2, 0x6}}, {0x401, 0x101, {0x0, 0xffff}}, {0x7, 0x7, {0x1, 0x7}}, {0xfff7, 0x1395, {0x3, 0x9}}, {0x9, 0x5, {0x1, 0xfffffffb}}, {0xa8, 0x5, {0x1}}, {0x1, 0x2, {0x3, 0x93}}, {0x2, 0x9, {0x0, 0x5a13}}, {0xff88, 0x4, {0x0, 0x8}}, {0xc, 0x5, {0x0, 0x3}}, {0x6, 0x1, {0x2}}, {0xc, 0x1, {0x1, 0x4}}, {0x1000, 0x81, {0x0, 0x6}}, {0xb, 0x1f22, {0x2, 0x7}}, {0xff80, 0x7, {0x3, 0x39800000}}, {0x10, 0x5, {0x2, 0x62b7}}, {0x6, 0x9, {0x1, 0x9}}, {0x1, 0x8, {0x0, 0x64}}, {0x2, 0x7, {0x2, 0x2}}, {0xc, 0xfffe, {0x1, 0x2}}, {0x9, 0x796, {0x2, 0x3}}, {0xf439, 0x9, {0x2, 0xb89}}, {0x101, 0x7, {0x2, 0xfff}}, {0xa0, 0x4, {0x1, 0xa0c}}]}}}, {{0x254, 0x1, {{0x3, 0x200}, 0x4, 0x80, 0x2, 0x5, 0x4, 'syz0\x00', "eede6ad7d80dff348ee33c5a201449a7e9bd5d4170d391e90bf0927aae2c5a0f", "0db26000bda927835d3cb314ce35e01f847a7c74e727ce8432d328a8e17b04bc", [{0x8000, 0x5, {0x3, 0x3ff}}, {0x2, 0x1, {0x2, 0xfff}}, {0x4, 0x3ff, {0x0, 0x7fffffff}}, {0xff, 0xffff, {0x3, 0x1}}, {0x8, 0x4, {0x1, 0x9}}, {0x1, 0x0, {0x0, 0x10000}}, {0x6, 0x8, {0x3, 0x7}}, {0x29, 0x6, {0x1}}, {0x7, 0x3, {0x0, 0x4}}, {0x6, 0xd14d, {0x0, 0x10}}, {0x8, 0x3, {0x2, 0xec72}}, {0xd, 0x9e, {0x2, 0x7}}, {0x81, 0x7, {0x2, 0x800}}, {0x25, 0x101, {0x1, 0x10}}, {0x1, 0x8, {0x2, 0x5}}, {0xe9b6, 0x8, {0x592de3c68933933d, 0x1}}, {0x1, 0x1, {0x3, 0x5}}, {0xaa19, 0x3ff, {0x3, 0x2741}}, {0xfc2, 0x684, {0x1, 0x8001}}, {0x9, 0xf108, {0x0, 0x10001}}, {0x4, 0x0, {0x1, 0x2}}, {0xfffb, 0x2, {0x1, 0x95}}, {0xf, 0x5, {0x2, 0x1ff}}, {0x9, 0xd1c, {0x1, 0x5}}, {0x400, 0x1, {0x6, 0xc5}}, {0xd37, 0xc2, {0x2, 0x1}}, {0xe, 0x1, {0x2, 0x2}}, {0xff20, 0x6, {0x2, 0x2}}, {0x6, 0x4, {0x2, 0x4}}, {0x40, 0x7, {0x3, 0x10001}}, {0x49, 0x3, {0x2}}, {0xe, 0x6, {0x1, 0x2}}, {0x6, 0x6, {0x2, 0x7}}, {0x4, 0x5, {0x1, 0x10001}}, {0x8001, 0x3, {0x0, 0x6}}, {0x81, 0x2c08, {0x1, 0x6}}, {0x80, 0x7, {0x2, 0xe}}, {0x7f, 0xa}, {0x7fff, 0x1, {0x2, 0x7fff}}, {0x7, 0x1, {0x2, 0x5}}]}}}]}, 0x175c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r10 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000023c0)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r10, 0xc038586a, &(0x7f0000002500)={r6, &(0x7f0000002400)=']!&!*,\x00', 0x2000, &(0x7f0000002440)={@align=0x2958, {0x2, 0x100, 0x401, 0x8001}}, 0x0, &(0x7f0000002480), &(0x7f00000024c0)=0x8000}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002580), r11) sendmsg$TIPC_NL_PUBL_GET(r12, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x14, r13, 0x100, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10004060}, 0x40088d0) r14 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000002680)={'wlan0\x00'}) tgkill(0x0, r8, 0x3e) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x4040) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000027c0), &(0x7f0000002800)=0x4) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000002840), r15) 24.446113273s ago: executing program 7 (id=1825): socket$igmp(0x2, 0x3, 0x2) r0 = dup(0xffffffffffffffff) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000280)={0xffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x200, 0x129c80) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x8}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) socket$can_bcm(0x1d, 0x2, 0x2) r4 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@nombcache}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nobh}]}, 0xfc, 0x57d, &(0x7f0000000bc0)="$eJzs3d9rW1UcAPDvTX/sp66DMfRFBntwMpeurT8mCM5H0eFA32doszKaLqNJx1oHrg/uxRcZgogD8Q/w3cfhP+BfMdDBkFH0QYTITW+2tE2atkuXbPl84G7n5N6bc7+593t6Tm5CAhhYJ9J/chGvRsS3ScSRpnXDka08sbbd6qOb0+mSRK322V9JJNljje2T7P9DWeWViPjt64jTuc3tVpaW5wqlUnEhq49X56+NV5aWz1yZL8wWZ4tXJ6emzr09Nfneu+90LdY3Lv7zw6f3Pjr3zcnV7395cPROEufjcLauOY6ncKu5cqLwX1YaifMbNpzoQmP9JOn1AbArQ1mej0TaBxyJoSzrgRffVxFRAwZUIv9hQDXGAY25fZfmwc+Nhx+uTYDqsY82xz+89t5I7K/PjQ6uJutmRul8d6wL7adt/Prn3TvpElu/D3GgQx1gR26tRMTZ4eHN/X+S9X+7d7b+5vHWNrYxaH9/oJfupeOfN1uN/3KPxz/RYvxzqEXu7kbn/M896EIzbaXjv/dbjn8fd11jQ1ntpfqYbyS5fKVUPBsRL0fEqah1vPVxbvV+rd265vFfuqTtN8aC2XE8GN63fp+ZQrUQEaO7DHmdhyv14W2qTf+/vz7W3Xj+09fj4jbbOF68+1q7dZ3j31u1nyNeb3n+n5zWZOv7k+P162G8cVVs9vft47+3a7/X8T9ciTi4dfxjSfP92srO2/hp/7/Fdut2e/2PJp/Xy40kuFGoVhcmIkaTTzY/Pvlk30a9sX0a/6mTW/d/ra7/dPL1xTbjv33sdttN++H8z+zo/O+8cP/jL39s1/72zv9b9dKp7JGs/2stu1a2e4BP+/oBAAAAAABAP8lFxOFIcvnH5Vwun1/7fMexOJgrlSvV05fLi1dnov5d2bEYyTXudB9p+jzERPZ52EZ9ckN9KiKORsR3Qwfq9fx0uTTT6+ABAAAAAAAAAAAAAAAAAACgTxxq8/3/1B9DvT46YM/Vf9hgX6+PAuiFjj/5341fegL6Usf8B15Y8h8Gl/yHwSX/YXDJfxhc8h8Gl/yHwSX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKsuXriQLrXVRzen0/rM9aXFufL1MzPFylx+fnE6P11euJafLZdnS8X8dHm+0/OVyuVrE5OxeGO8WqxUxytLy5fmy4tXq5euzBdmi5eKI88kKgAAAAAAAAAAAAAAAAAAAHi+VJaW5wqlUnGhC4UkIrrxPP1W+CD64jD2MsA1u9p9uF+i2OvCyB6kzDMprGQHvrO9etQhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAL/wcAAP//eBcqGw==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0x2) r6 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x57) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r4) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x61, 0x66, 0x36, 0x39, 0x64, 0x122e50c9cecbd0b3, 0x65, 0x39, 0x32, 0x66, 0x30, 0x65, 0x66]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r4) keyctl$unlink(0x9, r7, r4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r9, @ANYBLOB="40008a090a000200aaaaaaaaaa1c0000aac851da8f3bf2c42cd582fcbc5c2490ea4446f4c906dcf351a3f84e030ea046ac32a60b2b54a9812978d89178e4dd9b4c022105930d748c540d86a4ae4dc71159a558630445813a9aa6eea2eeda75d7476979bd4b9f28a47b063886fed207dc5797ec093b18a0b02de365627439dc13fe24a6c2bd0a8a97"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 24.261592277s ago: executing program 7 (id=1828): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) (async) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(&(0x7f0000000640)='./file0\x00') writev(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42082, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x107400, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x107400, 0x0) close(r5) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000480)=ANY=[@ANYRES16=r5, @ANYRES32=r5]) (async) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000480)=ANY=[@ANYRES16=r5, @ANYRES32=r5]) socket$netlink(0x10, 0x3, 0x2) (async) socket$netlink(0x10, 0x3, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x14) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) io_setup(0x5, &(0x7f0000000080)) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x50040, &(0x7f0000000100)={0x11, 0x6, r7, 0x1, 0x7}, 0x14) (async) sendto$packet(r8, 0x0, 0x0, 0x50040, &(0x7f0000000100)={0x11, 0x6, r7, 0x1, 0x7}, 0x14) 23.889347637s ago: executing program 7 (id=1831): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23.883779277s ago: executing program 51 (id=1831): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 14.464437831s ago: executing program 5 (id=1910): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'pim6reg\x00'}) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x23, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x7, @perf_bp={0x0, 0x3}, 0x135eb, 0x1, 0x11000, 0x8, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newnexthop={0x2c, 0x68, 0x1, 0x100001, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="99", 0x1}], 0x1}, 0x844) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001e008d2affff0000fddbdf250a000000", @ANYRES32=0x0, @ANYBLOB="000004"], 0x24}}, 0x20000800) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000), 0x4) 14.338695724s ago: executing program 5 (id=1912): socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x25, 0x19, 0x8, 0xcd, 0x30, 0x10, 0xaa, 0x6, 0xfd, 0x8, 0x6, 0x40, 0x0, 0x79}, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xd, 0x1, 0x40], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x94}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff}) 14.247781126s ago: executing program 5 (id=1916): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x58be, 0x2, 0x2, 0xfb}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040005}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/fscaps', 0x4000, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000014}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x20000000) exit(0x7ffd) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x150e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000140)={0x0, "f95f497d32c4be3a5543070190b24d6938a0a35b2d913a9e644c6936a660db5fbc9b6273be683d60a987deef0dd9462257d8f8df67f381d90ca17e50073a4de6", 0x2f}, 0x48, 0xffffffffffffffff) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700)={[{@noinit_itable}, {@discard}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@nolazytime}, {@nobarrier}]}, 0x6, 0x62e, &(0x7f0000001140)="$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") connect$unix(r4, &(0x7f0000000100)=@abs={0x27}, 0x6e) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0xfffffffffffffe39) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x560c, 0xde79, 0x1e, 0x0, 0x0) 13.338288689s ago: executing program 5 (id=1925): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13.111305135s ago: executing program 5 (id=1928): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)="626173653d30783230303030158f304c23bdb86539307832b779ebb5bfca9570ef6dedb29512b9c59dcaa3f99c476974652d225561636b0a", 0x50) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x8001, &(0x7f00000009c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028d060000007d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c0300000000000000724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 12.961662818s ago: executing program 5 (id=1930): alarm(0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x10, 0x7800, 0x2, 0x5, {{0x26, 0x4, 0x0, 0x22, 0x98, 0x67, 0x0, 0x0, 0x29, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x24, 0xa0, 0x3, 0x0, [{@remote, 0x1}, {@local, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x73}, {@local, 0xfffffffe}]}, @rr={0x7, 0x13, 0x7, [@loopback, @remote, @broadcast, @private=0xa010101]}, @lsrr={0x83, 0x7, 0x92, [@rand_addr=0x64010100]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0x81, [@remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty, @local, @multicast2]}, @generic={0x94, 0x3, "be"}, @rr={0x7, 0x1f, 0x97, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @loopback, @remote, @loopback]}]}}}}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x4, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x3, 0x5}, {0x1, 0x1}, {0x2, 0x2}]}, @enum64={0x9, 0x1, 0x0, 0x13, 0x0, 0x5, [{0x10, 0x1, 0x2ec0}]}, @var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}, @restrict={0x8, 0x0, 0x0, 0xb, 0x2}, @enum64={0xe, 0x4, 0x0, 0x13, 0x1, 0x0, [{0x6, 0x40, 0x5}, {0x3, 0x9, 0x6}, {0xb, 0x1000, 0x9}, {0x5, 0xffffff08}]}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000400)=""/73, 0xb0, 0x49, 0x1, 0xd}, 0x28) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r3, 0x0, 0xfffffd56) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="916140000400000085100000faffffff9d7b0200f0ffffff18120000", @ANYRES32=r0, @ANYBLOB="101f46e400000000000000b7030000000000008500000000000000"], &(0x7f0000000100)='GPL\x00', 0xb04, 0xeb, &(0x7f0000000140)=""/235, 0x41000, 0x1e, '\x00', r1, 0x0, r2, 0x8, &(0x7f00000004c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x1, 0xffffffff, 0xd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r3], 0x0, 0x10, 0x3}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x10000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) alarm(0xe7c5) syz_emit_ethernet(0x46, &(0x7f0000000a80)=ANY=[@ANYBLOB="0180c20000000180c200000286dd600000000000000000000000000000000000000000000000ff0200000000000000000000000000018b009078000f"], 0x0) 3.052157964s ago: executing program 8 (id=2020): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x2235, &(0x7f0000000040)={0x0, 0x835c, 0xc000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x493c, 0x4) io_uring_enter(r0, 0x4c08, 0x57b7, 0x14, 0x0, 0x0) 2.885610748s ago: executing program 8 (id=2024): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000511000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r5, 0x25, 0x2, @void}, 0x10) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRES16=r6, @ANYBLOB="986003b6569ddfaa0f0b2f4a6dd19394d24d4f575db15688a548ab6eed5a29f8e0ec857fda3513ee646634ed119bf8e39f05ae64ef108aeaa461", @ANYRESOCT=r8], 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req={0x558, 0x130, 0x5, 0x16}, 0x10) connect$inet6(r0, &(0x7f0000002180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000080000009111b7000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r9, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r10, r11}}}], 0x20, 0x40044}}], 0x1, 0x4) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000140)=@md0, r11, &(0x7f0000000100)='./file0\x00') r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xc3b, 0x800080, 0x0, {0x0, 0x0, 0x0, r13, 0x0, 0x6b02}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0xce21}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) syz_open_procfs(0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 2.581116556s ago: executing program 8 (id=2028): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000300)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2008c051}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014080000001080008400000000114"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0220000004400800080000000100040080000000c0a0c5a0a65a02c44968af616ea57915e5d297e6ba17b692e4578040a7c23c51b5d998c9acbffc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0xfffffffffffffe0e, 0x0, 0x0, 0x7, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x6, 0xffffffff80000001}, 0xc4e8, 0x0, 0x2b, 0x4, 0x6, 0x10010, 0x7fff, 0x0, 0x80}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000001d000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x200c89f, 0xc000, 0x7, 0x20002f6}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)=0xf3b, 0x4) io_uring_enter(r5, 0x2219, 0xb, 0x16, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x122) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f0000000340)={0xfffffffffffffc1e, 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x20005}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r9, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000020}, 0x4824) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="18080068024e7137340000000000000000000000008018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020020007b9a00fe00000000b509000000000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000ce0000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 1.861791504s ago: executing program 1 (id=2039): setuid(0xee00) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x6a3e, 0x400, 0x2, 0x286}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000000)) read(r0, &(0x7f0000000080)=""/102, 0x66) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 1.760425336s ago: executing program 3 (id=2040): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x800000, &(0x7f0000000080)=ANY=[], 0x1, 0x2b1, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x3f5bc1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1000000d82, 0x800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 1.705895778s ago: executing program 8 (id=2041): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000100)="ac1ed550e97be5d01cfbc7c8a9e57fbc9672e5dba36515ca6a14889529deb25a9809f4721fa15a", &(0x7f00000002c0)=""/93, &(0x7f0000000340)="6eadd1c1a1008cd0151031d54988f6050073ad6614ac1f1b207926874db3871169047aa7fb4afbb466a994765ed656882354b0e32d3ab580ebe7a2", &(0x7f0000000380)="f6a6e1464ef3ecc0a86999e5503d8294b07cd79a996b732bf8b19957ac908479cebf9a4cc16fee6d600040b75c8fc4391f16cb024a80af08900bd3be", 0x101}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x101, 0x6, 0xc, 0x1, 0xfffb, 0x6, 0x40, 0x6, 0x1]) 1.653622099s ago: executing program 1 (id=2042): bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) syz_emit_ethernet(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0xffffffffffffffa7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) write(r0, &(0x7f0000000280)='prev_state.function ==x', 0x17) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') 1.547352081s ago: executing program 1 (id=2044): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 1.449591854s ago: executing program 1 (id=2045): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000240)='./file0\x00', 0x2004000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0], 0xfe, 0x1244, &(0x7f0000000b40)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) flistxattr(r0, 0x0, 0xffde) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x26, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = socket(0xa, 0x3, 0x87) sendto(r2, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESOCT=r1]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000007001000040000002500", @ANYBLOB], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r4}, 0x38) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0x8600072e) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000280)=""/59, 0x5e) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000ac0)=ANY=[@ANYBLOB='mpol=prefer,mpol=local']) syz_emit_ethernet(0x365, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x32f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0xa, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62a"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 1.321628587s ago: executing program 6 (id=2046): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="200000003800070166bd7000fedb9f25027c0000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000003b000100000000000000000003010000000000002600010000112233445566778899aabb0800dd0000140000000145b50000010203040506070800000c0002000600200008000000100003"], 0x68}}, 0x0) 1.21703373s ago: executing program 6 (id=2047): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003e000000", 0xfe60) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000f73bca9312d0d0d78e807d951362dce2742c90af3031a72803ca5dd335cefcee75bc1d7a7d17cae2feec84f7e91849c59381f81bc0843d9567200c1d2e9be966", @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.178948081s ago: executing program 6 (id=2048): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)}, {&(0x7f0000001740)="f65d2dd72ae2", 0x6}], 0x2, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffc00}}], 0x18}, 0x40010) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x7}, &(0x7f0000000080)=0x1) syz_clone(0x48000091, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/module/ueagle_atm/parameters/sync_wait\x00', 0x1, 0x0) write(r2, &(0x7f0000000000)='F', 0x1) ioprio_set$pid(0x0, 0x0, 0x6000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000000), 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x10428f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0xf5ff, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1.114595182s ago: executing program 6 (id=2049): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r0}, 0x38) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x0, 0x8000000000000001}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000e90600000000000050fc000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bf0000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000000000000b7000000000000009500"/104], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x27e}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r3, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001f4ff00850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r8, 0x1, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000500)='syzkaller\x00', 0x4}, 0x94) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000000100)=""/218}, 0x20) 970.880086ms ago: executing program 1 (id=2050): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x5, 0x6a, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 821.51951ms ago: executing program 3 (id=2051): bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="680000001800050602000000000000000a430000fe040001000000001400010120010db800a000000000000000000001080006000001000008000400010000000600150003000000200016800c000100123456789007000000000800200000000500090003000000", 0x68) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000003c0)=0x4) recvmsg$unix(r3, &(0x7f0000000400)={&(0x7f00000000c0), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000140)=""/23, 0x17}, {&(0x7f0000000200)=""/173, 0xad}, {&(0x7f00000002c0)=""/241, 0xf1}, {&(0x7f00000004c0)=""/174, 0xae}], 0x4, &(0x7f00000005c0)}, 0x1a062) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r5, &(0x7f0000000080)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, r5) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x2b, 0x1, 0x0, 0xfc, 0x0, 0x20000000009, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x8954, 0x6, 0x8, 0xa, 0x6, 0x6, 0x0, 0x4, 0x0, 0x44}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) 649.888744ms ago: executing program 1 (id=2052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dvmrp1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="14000000120001"], 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x40f00}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000019080)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r4, 0x27, 0x82, 0x0, &(0x7f0000000240)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$cgroup_int(r6, &(0x7f0000000480)=0xfe8e, 0x12) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000400)={0xf362, 0x0, "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"}) write$tun(r6, &(0x7f0000000000)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @empty, @mcast2, @local, @private2}}, 0x34) pread64(r0, &(0x7f00000002c0)=""/193, 0xc1, 0x1) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 476.121978ms ago: executing program 8 (id=2053): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x610003d5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/1000, 0x3e8) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='1', 0xfe) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 270.453913ms ago: executing program 3 (id=2054): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x2, 0x6, "0956d3", 0x81, 0x80}) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x306, 0x0, 0x0, 0x0, 0x42}, 0x10) 230.330554ms ago: executing program 6 (id=2055): bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) syz_emit_ethernet(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0xffffffffffffffa7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) write(r0, &(0x7f0000000280)='prev_state.function ==x', 0x17) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') 158.375546ms ago: executing program 3 (id=2056): bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) syz_emit_ethernet(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0xffffffffffffffa7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) write(r0, &(0x7f0000000280)='prev_state.function ==x', 0x17) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') sendfile(0xffffffffffffffff, r3, &(0x7f0000000100)=0xa5, 0xff) 129.423907ms ago: executing program 3 (id=2057): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = io_uring_setup(0x7f82, &(0x7f0000000340)={0x0, 0x58be, 0x0, 0x2, 0xfb}) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r1, @ANYRES8=r2], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x100000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$kcm(0x2, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r4) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x20, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040404}, 0x24004080) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) 44.909909ms ago: executing program 8 (id=2058): bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) syz_emit_ethernet(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0xffffffffffffffa7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) write(r0, &(0x7f0000000280)='prev_state.function ==x', 0x17) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') sendfile(0xffffffffffffffff, r3, &(0x7f0000000100)=0xa5, 0xff) 24.754239ms ago: executing program 6 (id=2059): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x100007, 0x0, 0x0, 0x20, 0xc, 0x3, 0xfc, 0x0, 0x1, 0x4, 0x8, 0x111, 0xff, 0x0, 0x0, [0x0, 0x9]}}) socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000006, 0x20010, r1, 0xd99d8000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x1, 0x54ea, 0xfffff5f6, 0x800, 0x3, 0xffffffffffffffff}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:03/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='00:03\x00', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x410003, 0x27) write(r4, &(0x7f0000000180)='disable\n', 0x8) write(r4, &(0x7f00000001c0)='set io 0-0\n', 0xb) write(r4, &(0x7f0000000200)='activate\n', 0x9) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r5 = socket$pptp(0x18, 0x1, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cb, &(0x7f0000000180)="$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") listen(0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, r5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r4, 0x8, &(0x7f0000000680)={0x5}, 0x49, 0x10, &(0x7f00000006c0)={0x0, 0x4}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000008c0)="d2ff03076003008cb29e08f088a8", 0x0, 0x200009, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@quota}]}, 0x3, 0x459, &(0x7f00000008c0)="$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") 0s ago: executing program 3 (id=2060): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000240)='./file0\x00', 0x2004000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0], 0xfe, 0x1244, &(0x7f0000000b40)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) flistxattr(r0, 0x0, 0xffde) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x26, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = socket(0xa, 0x3, 0x87) sendto(r2, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESOCT=r1]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000007001000040000002500", @ANYBLOB], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r4}, 0x38) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0x8600072e) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000280)=""/59, 0x5e) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000ac0)=ANY=[@ANYBLOB='mpol=prefer,mpol=local']) syz_emit_ethernet(0x365, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x32f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0xa, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62a"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) kernel console output (not intermixed with test programs): fffc9000105bdd0 R14: ffffc9000105bdc8 R15: 0000200000000040 [ 182.881439][T12836] _copy_from_user+0x6f/0xb0 [ 182.881527][T12836] io_query+0x8f/0x690 [ 182.881599][T12836] ? proc_fail_nth_write+0x13b/0x160 [ 182.881627][T12836] __se_sys_io_uring_register+0x30c/0x1330 [ 182.881661][T12836] ? mutex_unlock+0x4e/0x90 [ 182.881755][T12836] ? fput+0x8f/0xc0 [ 182.881781][T12836] ? ksys_write+0x194/0x1a0 [ 182.881804][T12836] __x64_sys_io_uring_register+0x55/0x70 [ 182.881872][T12836] x64_sys_call+0x2be0/0x3020 [ 182.881898][T12836] do_syscall_64+0x136/0x3c0 [ 182.881925][T12836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.881948][T12836] RIP: 0033:0x7f86270ae0d9 [ 182.882022][T12836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.882088][T12836] RSP: 002b:00007f8625b07028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 182.882109][T12836] RAX: ffffffffffffffda RBX: 00007f8627335fa0 RCX: 00007f86270ae0d9 [ 182.882124][T12836] RDX: 0000200000000040 RSI: 0000000000000023 RDI: ffffffffffffffff [ 182.882140][T12836] RBP: 00007f8625b07090 R08: 0000000000000000 R09: 0000000000000000 [ 182.882154][T12836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.882188][T12836] R13: 00007f8627336038 R14: 00007f8627335fa0 R15: 00007ffd99c34168 [ 182.882220][T12836] [ 182.884322][T12827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.968042][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1596'. [ 183.069259][T12825] FAULT_INJECTION: forcing a failure. [ 183.069259][T12825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.119633][T12845] loop5: detected capacity change from 0 to 512 [ 183.126603][T12825] CPU: 1 UID: 0 PID: 12825 Comm: syz.9.1594 Not tainted syzkaller #0 PREEMPT(lazy) [ 183.126677][T12825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.126691][T12825] Call Trace: [ 183.126698][T12825] [ 183.126706][T12825] __dump_stack+0x1d/0x30 [ 183.126799][T12825] dump_stack_lvl+0x95/0xd0 [ 183.126879][T12825] dump_stack+0x15/0x1b [ 183.126900][T12825] should_fail_ex+0x25e/0x270 [ 183.126931][T12825] should_fail+0xb/0x20 [ 183.127038][T12825] should_fail_usercopy+0x1a/0x20 [ 183.127071][T12825] _copy_from_iter+0xcc/0xe70 [ 183.127092][T12825] ? next_uptodate_folio+0x772/0x7f0 [ 183.127117][T12825] ? percpu_counter_add_batch+0xb5/0x120 [ 183.127179][T12825] ? mm_trace_rss_stat+0x1d/0xc0 [ 183.127269][T12825] ? __rcu_read_unlock+0x4e/0x70 [ 183.127297][T12825] copy_page_from_iter+0x15d/0x1f0 [ 183.127319][T12825] anon_pipe_write+0x728/0xe50 [ 183.127345][T12825] ? anon_pipe_write+0x171/0xe50 [ 183.127433][T12825] ? __pfx_anon_pipe_write+0x10/0x10 [ 183.127458][T12825] vfs_write+0x57d/0x990 [ 183.127482][T12825] ksys_write+0xdc/0x1a0 [ 183.127504][T12825] __x64_sys_write+0x40/0x50 [ 183.127526][T12825] x64_sys_call+0x27e1/0x3020 [ 183.127565][T12825] do_syscall_64+0x136/0x3c0 [ 183.127685][T12825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.127709][T12825] RIP: 0033:0x7faaa803e90e [ 183.127772][T12825] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 183.127792][T12825] RSP: 002b:00007faaa6ad6ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 183.127813][T12825] RAX: ffffffffffffffda RBX: 00007faaa6ad76c0 RCX: 00007faaa803e90e [ 183.127850][T12825] RDX: 0000000000000029 RSI: 00007faaa6ad6e90 RDI: 0000000000000002 [ 183.127870][T12825] RBP: 00007faaa6ad6e90 R08: 0000000000000000 R09: 0000000000000000 [ 183.127884][T12825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 183.127942][T12825] R13: 00007faaa82d27a0 R14: 00007faaa82c94a0 R15: 0000000000000001 [ 183.127961][T12825] [ 183.492164][T12845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.509359][ T8049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.510400][T12845] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.538303][ T3019] 8021q: adding VLAN 0 to HW filter on device eth20 [ 183.560213][ T7158] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.618485][T12690] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 183.640312][T12690] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 183.648258][T12690] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 183.651218][T12908] loop9: detected capacity change from 0 to 128 [ 183.667104][T12911] loop1: detected capacity change from 0 to 128 [ 183.667958][T12690] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 183.689015][T12911] syz.1.1602: attempt to access beyond end of device [ 183.689015][T12911] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 183.702529][T12690] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 183.724999][T12690] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 183.729496][T12911] syz.1.1602: attempt to access beyond end of device [ 183.729496][T12911] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 183.750556][T12690] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 183.760412][T12908] FAULT_INJECTION: forcing a failure. [ 183.760412][T12908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.776171][T12911] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 183.787938][T12908] CPU: 1 UID: 0 PID: 12908 Comm: syz.9.1601 Not tainted syzkaller #0 PREEMPT(lazy) [ 183.787963][T12908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.787975][T12908] Call Trace: [ 183.787980][T12908] [ 183.788058][T12908] __dump_stack+0x1d/0x30 [ 183.788082][T12908] dump_stack_lvl+0x95/0xd0 [ 183.788176][T12908] dump_stack+0x15/0x1b [ 183.788196][T12908] should_fail_ex+0x25e/0x270 [ 183.788295][T12908] should_fail+0xb/0x20 [ 183.788326][T12908] should_fail_usercopy+0x1a/0x20 [ 183.788429][T12908] copy_folio_from_iter_atomic+0x24b/0x10a0 [ 183.788458][T12908] ? fat_write_begin+0x56/0xe0 [ 183.788557][T12908] generic_perform_write+0x2c4/0x490 [ 183.788619][T12908] __generic_file_write_iter+0x9e/0x120 [ 183.788699][T12908] ? __pfx_generic_file_write_iter+0x10/0x10 [ 183.788730][T12908] generic_file_write_iter+0x77/0x1f0 [ 183.788754][T12908] ? __pfx_generic_file_write_iter+0x10/0x10 [ 183.788843][T12908] vfs_write+0x57d/0x990 [ 183.788881][T12908] ksys_write+0xdc/0x1a0 [ 183.788905][T12908] __x64_sys_write+0x40/0x50 [ 183.789020][T12908] x64_sys_call+0x27e1/0x3020 [ 183.789049][T12908] do_syscall_64+0x136/0x3c0 [ 183.789082][T12908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.789131][T12908] RIP: 0033:0x7faaa807e0d9 [ 183.789150][T12908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.789170][T12908] RSP: 002b:00007faaa6ad7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 183.789272][T12908] RAX: ffffffffffffffda RBX: 00007faaa8305fa0 RCX: 00007faaa807e0d9 [ 183.789289][T12908] RDX: 000000000208e24b RSI: 00002000000004c0 RDI: 0000000000000009 [ 183.789303][T12908] RBP: 00007faaa6ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 183.789318][T12908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.789332][T12908] R13: 00007faaa8306038 R14: 00007faaa8305fa0 R15: 00007ffc8ba05068 [ 183.789362][T12908] [ 183.793973][T12690] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 183.801024][T12911] syz.1.1602: attempt to access beyond end of device [ 183.801024][T12911] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 183.896267][T12906] loop3: detected capacity change from 0 to 512 [ 183.902616][T12908] syz.9.1601: attempt to access beyond end of device [ 183.902616][T12908] loop9: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 183.905514][T12911] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 183.912668][T12908] syz.9.1601: attempt to access beyond end of device [ 183.912668][T12908] loop9: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 183.928935][T12911] syz.1.1602: attempt to access beyond end of device [ 183.928935][T12911] loop1: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 183.934698][T12908] Buffer I/O error on dev loop9, logical block 79, lost async page write [ 183.977078][T12911] syz.1.1602: attempt to access beyond end of device [ 183.977078][T12911] loop1: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 183.990551][T12908] syz.9.1601: attempt to access beyond end of device [ 183.990551][T12908] loop9: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 184.029294][T12911] Buffer I/O error on dev loop1, logical block 83, lost async page write [ 184.049891][T12908] Buffer I/O error on dev loop9, logical block 80, lost async page write [ 184.079199][T12911] syz.1.1602: attempt to access beyond end of device [ 184.079199][T12911] loop1: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 184.120888][T12908] syz.9.1601: attempt to access beyond end of device [ 184.120888][T12908] loop9: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 184.132649][T12911] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 184.148064][T12908] Buffer I/O error on dev loop9, logical block 83, lost async page write [ 184.152519][ T3019] 8021q: adding VLAN 0 to HW filter on device eth21 [ 184.161434][T12908] Buffer I/O error on dev loop9, logical block 84, lost async page write [ 184.179194][T12908] Buffer I/O error on dev loop9, logical block 95, lost async page write [ 184.188093][T12908] Buffer I/O error on dev loop9, logical block 96, lost async page write [ 184.196966][T12906] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 184.210797][T12906] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 184.241937][T12690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.243386][T12906] System zones: 0-1, 15-15, 18-18, 34-34 [ 184.269711][T12690] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.280897][T11011] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.291476][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.292785][T12906] EXT4-fs (loop3): orphan cleanup on readonly fs [ 184.298526][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.302969][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.306018][T12906] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 184.312355][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.324150][T12906] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 184.349107][T12906] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1599: bad orphan inode 16 [ 184.359508][T12906] loop3: lost filesystem error report for type 5 error -117 [ 184.360944][T12906] ext4_test_bit(bit=15, block=18) = 1 [ 184.368363][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 184.368400][ C1] EXT4-fs (loop3): initial error at time 1787002610: ext4_orphan_get:1425 [ 184.368452][ C1] EXT4-fs (loop3): last error at time 1787002610: ext4_orphan_get:1425 [ 184.404662][T12906] is_bad_inode(inode)=0 [ 184.409036][T12906] NEXT_ORPHAN(inode)=0 [ 184.413553][T12906] max_ino=32 [ 184.420345][T12906] i_nlink=2 [ 184.428162][T12906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 184.431877][T12690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.555238][T12957] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 184.581247][ T8049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.627900][T12972] journal_path: Non-blockdev passed as './file0' [ 184.670484][T12972] EXT4-fs: error: could not find journal device path [ 184.791550][T12690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.815825][ T3019] 8021q: adding VLAN 0 to HW filter on device eth22 [ 184.827991][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1609'. [ 184.896024][T13000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.938843][T13018] SET target dimension over the limit! [ 185.045237][T12690] veth0_vlan: entered promiscuous mode [ 185.067135][T12690] veth1_vlan: entered promiscuous mode [ 185.079717][T13037] set_capacity_and_notify: 3 callbacks suppressed [ 185.079732][T13037] loop5: detected capacity change from 0 to 2048 [ 185.114992][T12690] veth0_macvtap: entered promiscuous mode [ 185.133566][T12690] veth1_macvtap: entered promiscuous mode [ 185.143356][T13037] loop5: p1 < > p2 < > p3 p4 < > [ 185.148760][T13037] loop5: partition table partially beyond EOD, truncated [ 185.173265][T12690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.180606][T13037] loop5: p1 start 2305 is beyond EOD, truncated [ 185.199769][T12690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.209918][T13037] loop5: p2 start 4294902784 is beyond EOD, truncated [ 185.222445][T13037] loop5: p3 start 3724543488 is beyond EOD, truncated [ 185.242399][ T310] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.253514][ T310] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.292453][ T310] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.314464][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 185.317538][T13062] loop5: detected capacity change from 0 to 512 [ 185.332982][ T310] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.365018][T13062] journal_path: Non-blockdev passed as './file0' [ 185.388993][T13062] EXT4-fs: error: could not find journal device path [ 185.418810][T13060] loop3: detected capacity change from 0 to 8192 [ 185.459499][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 185.459514][ T28] audit: type=1400 audit(1787002611.546:29561): avc: denied { write } for pid=13058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.526499][T13023] loop9: detected capacity change from 0 to 2048 [ 185.541928][T13079] loop6: detected capacity change from 0 to 512 [ 185.567361][ T28] audit: type=1400 audit(1787002611.645:29562): avc: denied { write } for pid=13083 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.598632][T13079] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 185.647890][T13079] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 185.664781][T11731] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.675639][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 185.682079][ C0] EXT4-fs (loop6): initial error at time 1787002611: ext4_mb_generate_buddy:1317 [ 185.691225][ C0] EXT4-fs (loop6): last error at time 1787002611: ext4_mb_generate_buddy:1317 [ 185.712791][T13023] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.729162][T13079] EXT4-fs (loop6): 1 truncate cleaned up [ 185.735251][T13079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.770798][ T28] audit: type=1400 audit(1787002611.844:29563): avc: denied { cpu } for pid=13096 comm="syz.5.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 185.823541][ T28] audit: type=1400 audit(1787002611.844:29564): avc: denied { write } for pid=13022 comm="syz.9.1614" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.846606][ T28] audit: type=1400 audit(1787002611.883:29565): avc: denied { write } for pid=13078 comm="syz.6.1623" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.926864][ T28] audit: type=1400 audit(1787002612.002:29566): avc: denied { write } for pid=13093 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.004751][ T28] audit: type=1400 audit(1787002612.072:29567): avc: denied { write } for pid=13122 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.041789][T13126] loop9: detected capacity change from 0 to 512 [ 186.053064][T13126] journal_path: Non-blockdev passed as './file0' [ 186.078576][T13126] EXT4-fs: error: could not find journal device path [ 186.149342][T13121] random: crng reseeded on system resumption [ 186.167831][ T28] audit: type=1400 audit(1787002612.250:29568): avc: denied { write } for pid=13124 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.200967][ T28] audit: type=1400 audit(1787002612.280:29569): avc: denied { ioctl } for pid=13118 comm="syz.5.1631" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 186.258275][ T28] audit: type=1400 audit(1787002612.340:29570): avc: denied { write } for pid=13143 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.329252][T13150] FAULT_INJECTION: forcing a failure. [ 186.329252][T13150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.347903][T13150] CPU: 0 UID: 0 PID: 13150 Comm: syz.1.1636 Not tainted syzkaller #0 PREEMPT(lazy) [ 186.347935][T13150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.347951][T13150] Call Trace: [ 186.347958][T13150] [ 186.348018][T13150] __dump_stack+0x1d/0x30 [ 186.348048][T13150] dump_stack_lvl+0x95/0xd0 [ 186.348074][T13150] dump_stack+0x15/0x1b [ 186.348096][T13150] should_fail_ex+0x25e/0x270 [ 186.348173][T13150] should_fail+0xb/0x20 [ 186.348204][T13150] should_fail_usercopy+0x1a/0x20 [ 186.348289][T13150] _copy_to_user+0x20/0xa0 [ 186.348315][T13150] simple_read_from_buffer+0xb5/0x130 [ 186.348398][T13150] proc_fail_nth_read+0x10e/0x150 [ 186.348422][T13150] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.348456][T13150] vfs_read+0x18e/0x7c0 [ 186.348473][T13150] ? __rcu_read_unlock+0x4e/0x70 [ 186.348496][T13150] ? __fget_files+0x184/0x1c0 [ 186.348518][T13150] ? mutex_lock+0x57/0x90 [ 186.348548][T13150] ksys_read+0xdc/0x1a0 [ 186.348622][T13150] __x64_sys_read+0x40/0x50 [ 186.348639][T13150] x64_sys_call+0x2886/0x3020 [ 186.348660][T13150] do_syscall_64+0x136/0x3c0 [ 186.348682][T13150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.348714][T13150] RIP: 0033:0x7f13957fe90e [ 186.348728][T13150] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.348745][T13150] RSP: 002b:00007f1394296fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.348766][T13150] RAX: ffffffffffffffda RBX: 00007f13942976c0 RCX: 00007f13957fe90e [ 186.348779][T13150] RDX: 000000000000000f RSI: 00007f13942970a0 RDI: 0000000000000003 [ 186.348790][T13150] RBP: 00007f1394297090 R08: 0000000000000000 R09: 0000000000000000 [ 186.348859][T13150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.348934][T13150] R13: 00007f1395ac6038 R14: 00007f1395ac5fa0 R15: 00007ffc9f043f78 [ 186.348950][T13150] [ 186.602933][T13158] loop9: detected capacity change from 0 to 2048 [ 186.669097][T13158] loop9: p3 p4 < > [ 186.677367][T13158] loop9: p3 size 201326592 extends beyond EOD, truncated [ 186.692661][T13170] netlink: 'syz.3.1640': attribute type 5 has an invalid length. [ 186.753209][T13175] loop5: detected capacity change from 0 to 2048 [ 186.765170][T13173] vhci_hcd vhci_hcd.2: invalid port number 236 [ 186.777819][T13173] loop6: detected capacity change from 0 to 512 [ 186.815502][T13180] loop3: detected capacity change from 0 to 1024 [ 186.819550][T13173] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.839053][T13180] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.868320][T13173] vlan0: entered promiscuous mode [ 187.384841][T13219] journal_path: Non-blockdev passed as './file0' [ 187.423001][T13219] EXT4-fs: error: could not find journal device path [ 187.659250][T13231] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.687008][T13231] netlink: 'syz.5.1646': attribute type 2 has an invalid length. [ 187.749705][T13243] __nla_validate_parse: 6 callbacks suppressed [ 187.749727][T13243] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1647'. [ 187.886328][T13267] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.943901][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811afc5600: rx timeout, send abort [ 187.953511][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811afc5600: 0x1f000: (3) A timeout occurred and this is the connection abort to close the session. [ 187.957278][T13278] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 187.990441][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1655'. [ 187.999974][T13278] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 188.019956][T13278] EXT4-fs (loop5): 1 truncate cleaned up [ 188.025678][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 188.025696][ C0] EXT4-fs (loop5): initial error at time 1787002614: ext4_mb_generate_buddy:1317 [ 188.025717][ C0] EXT4-fs (loop5): last error at time 1787002614: ext4_mb_generate_buddy:1317 [ 188.211995][T13313] netlink: 'syz.1.1661': attribute type 21 has an invalid length. [ 188.224888][T13308] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1659'. [ 188.255246][T13313] IPv6: NLM_F_CREATE should be specified when creating new route [ 188.258429][T13313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1661'. [ 188.258451][T13313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1661'. [ 188.258536][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1661'. [ 188.288245][ T5129] hid-generic 0000:FFFFFFEA:0000.0003: item fetching failed at offset 0/1 [ 188.338270][ T5129] hid-generic 0000:FFFFFFEA:0000.0003: probe with driver hid-generic failed with error -22 [ 188.369961][T13326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1662'. [ 188.470325][T13328] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 188.492067][T13340] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1667'. [ 188.503723][T13342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.511711][T13340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1667'. [ 188.512616][T13342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.528305][T13340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1667'. [ 188.610471][T13351] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 188.617024][T13351] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 188.617391][T13351] vhci_hcd vhci_hcd.0: Device attached [ 188.639987][T13352] vhci_hcd: cannot find the pending unlink 4096 [ 188.775664][T13351] EXT4-fs mount: 15 callbacks suppressed [ 188.775718][T13351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.776415][T13351] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.810607][ T3411] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 188.822900][T13351] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1672: corrupted xattr block 33: invalid header [ 188.829485][T13351] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 188.829777][T13351] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1672: corrupted xattr block 33: invalid header [ 188.855264][T13351] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 188.856231][T13351] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1672: corrupted xattr block 33: invalid header [ 188.893118][ T3411] usb 3-1: new full-speed USB device number 3 using vhci_hcd [ 188.901819][T13351] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 188.903634][ T8049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.919485][T13352] vhci_hcd: connection reset by peer [ 188.927977][T12643] vhci_hcd vhci_hcd.1: stop threads [ 188.927995][T12643] vhci_hcd vhci_hcd.1: release socket [ 188.928018][T12643] vhci_hcd vhci_hcd.1: disconnect device [ 189.115291][T13377] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 189.137996][T13379] EXT4-fs: Ignoring removed i_version option [ 189.157455][T13379] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 189.174262][T13379] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042c118, mo2=0002] [ 189.183083][T13379] System zones: 0-2, 18-18, 34-34 [ 189.197100][T13379] EXT4-fs (loop6): orphan cleanup on readonly fs [ 189.205203][T13379] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 189.220733][T13391] journal_path: Non-blockdev passed as './file0' [ 189.220752][T13391] EXT4-fs: error: could not find journal device path [ 189.237413][T13379] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 189.253040][T13379] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #14: comm syz.6.1682: invalid orphan symlink nlink 1 [ 189.265735][T13379] loop6: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 189.266681][T13379] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1682: couldn't read orphan inode 14 (err -117) [ 189.276013][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 189.276102][ C0] EXT4-fs (loop6): last error at time 1787002615: ext4_orphan_get:1399: inode 14 [ 189.304399][T13379] loop6: lost filesystem error report for type 5 error -117 [ 189.304891][T13379] EXT4-fs (loop6): 1 truncate cleaned up [ 189.321877][T13379] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.350554][T13397] capability: warning: `syz.9.1686' uses 32-bit capabilities (legacy support in use) [ 189.409529][T13397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.430796][T13397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.447885][T13397] bond0 (unregistering): Released all slaves [ 189.465274][T11731] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.479306][T13404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.495541][T13404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.516943][T13406] FAULT_INJECTION: forcing a failure. [ 189.516943][T13406] name failslab, interval 1, probability 0, space 0, times 0 [ 189.530072][T12690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.531338][T13406] CPU: 1 UID: 0 PID: 13406 Comm: syz.1.1690 Not tainted syzkaller #0 PREEMPT(lazy) [ 189.531365][T13406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.531378][T13406] Call Trace: [ 189.531385][T13406] [ 189.531393][T13406] __dump_stack+0x1d/0x30 [ 189.531418][T13406] dump_stack_lvl+0x95/0xd0 [ 189.531510][T13406] dump_stack+0x15/0x1b [ 189.531575][T13406] should_fail_ex+0x25e/0x270 [ 189.531608][T13406] ? __get_vm_area_node+0x106/0x1d0 [ 189.531634][T13406] should_failslab+0x8c/0xb0 [ 189.531706][T13406] __kmalloc_cache_node_noprof+0x81/0x3e0 [ 189.531836][T13406] ? __get_vm_area_node+0x106/0x1d0 [ 189.531863][T13406] __get_vm_area_node+0x106/0x1d0 [ 189.531925][T13406] __vmalloc_node_range_noprof+0x266/0x11e0 [ 189.531954][T13406] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 189.532094][T13406] ? avc_has_perm_noaudit+0xa3/0x120 [ 189.532124][T13406] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 189.532154][T13406] __vmalloc_noprof+0xa4/0xf0 [ 189.532218][T13406] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 189.532249][T13406] bpf_prog_alloc_no_stats+0x47/0x390 [ 189.532278][T13406] ? bpf_prog_alloc+0x2a/0x150 [ 189.532308][T13406] bpf_prog_alloc+0x3c/0x150 [ 189.532398][T13406] bpf_prog_load+0x54b/0x1100 [ 189.532430][T13406] ? avc_has_perm_noaudit+0xa3/0x120 [ 189.532462][T13406] ? vfs_write+0x7f0/0x990 [ 189.532534][T13406] __sys_bpf+0xbae/0xc30 [ 189.532566][T13406] ? vfs_write+0x7f0/0x990 [ 189.532611][T13406] ? vfs_write+0x7f0/0x990 [ 189.532669][T13406] __x64_sys_bpf+0x69/0x80 [ 189.532740][T13406] x64_sys_call+0x10cb/0x3020 [ 189.532866][T13406] do_syscall_64+0x136/0x3c0 [ 189.532894][T13406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.532917][T13406] RIP: 0033:0x7f139583e0d9 [ 189.532934][T13406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.533030][T13406] RSP: 002b:00007f1394297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.533052][T13406] RAX: ffffffffffffffda RBX: 00007f1395ac5fa0 RCX: 00007f139583e0d9 [ 189.533067][T13406] RDX: 0000000000000094 RSI: 0000200000000900 RDI: 0000000000000005 [ 189.533081][T13406] RBP: 00007f1394297090 R08: 0000000000000000 R09: 0000000000000000 [ 189.533096][T13406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.533109][T13406] R13: 00007f1395ac6038 R14: 00007f1395ac5fa0 R15: 00007ffc9f043f78 [ 189.533132][T13406] [ 189.533351][T13406] syz.1.1690: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 189.798115][T13406] CPU: 1 UID: 0 PID: 13406 Comm: syz.1.1690 Not tainted syzkaller #0 PREEMPT(lazy) [ 189.798141][T13406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.798159][T13406] Call Trace: [ 189.798166][T13406] [ 189.798174][T13406] __dump_stack+0x1d/0x30 [ 189.798274][T13406] dump_stack_lvl+0x95/0xd0 [ 189.798297][T13406] dump_stack+0x15/0x1b [ 189.798351][T13406] warn_alloc+0x145/0x1c0 [ 189.798383][T13406] __vmalloc_node_range_noprof+0x28b/0x11e0 [ 189.798419][T13406] ? avc_has_perm_noaudit+0xa3/0x120 [ 189.798527][T13406] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 189.798555][T13406] __vmalloc_noprof+0xa4/0xf0 [ 189.798583][T13406] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 189.798750][T13406] bpf_prog_alloc_no_stats+0x47/0x390 [ 189.798781][T13406] ? bpf_prog_alloc+0x2a/0x150 [ 189.798808][T13406] bpf_prog_alloc+0x3c/0x150 [ 189.798887][T13406] bpf_prog_load+0x54b/0x1100 [ 189.798916][T13406] ? avc_has_perm_noaudit+0xa3/0x120 [ 189.798944][T13406] ? vfs_write+0x7f0/0x990 [ 189.798962][T13406] __sys_bpf+0xbae/0xc30 [ 189.799019][T13406] ? vfs_write+0x7f0/0x990 [ 189.799061][T13406] ? vfs_write+0x7f0/0x990 [ 189.799088][T13406] __x64_sys_bpf+0x69/0x80 [ 189.799200][T13406] x64_sys_call+0x10cb/0x3020 [ 189.799254][T13406] do_syscall_64+0x136/0x3c0 [ 189.799323][T13406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.799420][T13406] RIP: 0033:0x7f139583e0d9 [ 189.799437][T13406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.799455][T13406] RSP: 002b:00007f1394297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.799474][T13406] RAX: ffffffffffffffda RBX: 00007f1395ac5fa0 RCX: 00007f139583e0d9 [ 189.799488][T13406] RDX: 0000000000000094 RSI: 0000200000000900 RDI: 0000000000000005 [ 189.799557][T13406] RBP: 00007f1394297090 R08: 0000000000000000 R09: 0000000000000000 [ 189.799570][T13406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.799624][T13406] R13: 00007f1395ac6038 R14: 00007f1395ac5fa0 R15: 00007ffc9f043f78 [ 189.799643][T13406] [ 189.799670][T13406] Mem-Info: [ 190.010433][T13406] active_anon:64312 inactive_anon:0 isolated_anon:0 [ 190.010433][T13406] active_file:1345 inactive_file:30425 isolated_file:0 [ 190.010433][T13406] unevictable:0 dirty:753 writeback:0 [ 190.010433][T13406] slab_reclaimable:3888 slab_unreclaimable:19204 [ 190.010433][T13406] mapped:32269 shmem:53555 pagetables:3768 [ 190.010433][T13406] sec_pagetables:0 bounce:0 [ 190.010433][T13406] kernel_misc_reclaimable:0 [ 190.010433][T13406] free:1538288 free_pcp:12247 free_cma:0 [ 190.056253][T13406] Node 0 active_anon:257248kB inactive_anon:0kB active_file:5380kB inactive_file:121700kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129076kB dirty:3012kB writeback:0kB shmem:214220kB kernel_stack:4304kB pagetables:15072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 190.087584][T13406] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 190.134430][T13406] lowmem_reserve[]: 0 2878 7857 7857 [ 190.160182][T13406] Node 0 DMA32 free:2943896kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947524kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 190.213569][T13440] set_capacity_and_notify: 8 callbacks suppressed [ 190.213587][T13440] loop3: detected capacity change from 0 to 512 [ 190.226950][T13406] lowmem_reserve[]: 0 0 4978 4978 [ 190.235760][T13440] journal_path: Non-blockdev passed as './file0' [ 190.247965][T13440] EXT4-fs: error: could not find journal device path [ 190.266602][T13406] Node 0 Normal free:3193664kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:257596kB inactive_anon:0kB active_file:5380kB inactive_file:121700kB unevictable:0kB writepending:3012kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:46276kB local_pcp:21148kB free_cma:0kB [ 190.266706][T13442] loop5: detected capacity change from 0 to 512 [ 190.313580][T13406] lowmem_reserve[]: 0 0 0 0 [ 190.318264][T13406] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 190.331598][T13418] loop9: detected capacity change from 0 to 1024 [ 190.332089][T13406] Node 0 DMA32: 2*4kB (M) 0*8kB 3*16kB (M) 1*32kB (M) 3*64kB (M) 3*128kB (M) 1*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2943896kB [ 190.356085][T13442] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 190.373573][T13446] loop6: detected capacity change from 0 to 1024 [ 190.375785][T13406] Node 0 Normal: 809*4kB (UME) 545*8kB (ME) 343*16kB (ME) 198*32kB (M) 139*64kB (M) 67*128kB (ME) 32*256kB (UM) 21*512kB (UM) 14*1024kB (UM) 1*2048kB (U) 762*4096kB (UM) = 3193372kB [ 190.396089][T13442] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 190.408613][T13442] EXT4-fs (loop5): orphan cleanup on readonly fs [ 190.420672][T13406] Node 0 hugepages_total=512 hugepages_free=512 hugepages_surp=0 hugepages_size=2048kB [ 190.430497][T13442] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 190.445218][T13406] 85610 total pagecache pages [ 190.449928][T13442] EXT4-fs (loop5): Remounting filesystem read-only [ 190.456471][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 190.456506][ C0] EXT4-fs (loop5): initial error at time 1787002616: mb_free_blocks:2049: inode 12: block 14 [ 190.456546][ C0] EXT4-fs (loop5): last error at time 1787002616: mb_free_blocks:2049: inode 12: block 14 [ 190.458705][T13446] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 190.483344][T13406] 0 pages in swap cache [ 190.495315][T13442] EXT4-fs (loop5): 1 truncate cleaned up [ 190.499378][T13446] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.519198][T12643] __quota_error: 51 callbacks suppressed [ 190.519238][T12643] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 190.519295][T13406] Free swap = 124996kB [ 190.544915][T13406] Total swap = 124996kB [ 190.549087][T13406] 2097051 pages RAM [ 190.550690][T13418] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.552933][T13406] 0 pages HighMem/MovableOnly [ 190.552943][T13406] 81771 pages reserved [ 190.575996][T13457] netlink: 'syz.1.1701': attribute type 2 has an invalid length. [ 190.585877][T12643] EXT4-fs (loop5): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 190.585901][T12643] Quota error (device loop5): write_blk: dquota write failed [ 190.612008][T12643] Quota error (device loop5): remove_free_dqentry: Can't write block (8) with free entries [ 190.647882][T13457] 0: entered promiscuous mode [ 190.649698][ T28] audit: type=1400 audit(1787002616.698:29621): avc: denied { ioctl } for pid=13417 comm="syz.9.1693" path="socket:[37903]" dev="sockfs" ino=37903 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.685519][T12643] EXT4-fs (loop5): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 190.714324][T12643] Quota error (device loop5): write_blk: dquota write failed [ 190.721846][T12643] Quota error (device loop5): free_dqentry: Can't move quota data block (8) to free list [ 190.731988][ T28] audit: type=1400 audit(1787002616.718:29622): avc: denied { write } for pid=13454 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.755306][T12643] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 190.766845][T12643] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 190.776171][ T28] audit: type=1400 audit(1787002616.768:29623): avc: denied { create } for pid=13462 comm="syz.3.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 190.806340][T13471] loop1: detected capacity change from 0 to 128 [ 190.806698][T12643] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 190.837622][T12690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 190.849284][T13442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.923902][T13490] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 190.944617][T13471] bio_check_eod: 69 callbacks suppressed [ 190.944664][T13471] syz.1.1703: attempt to access beyond end of device [ 190.944664][T13471] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 190.971646][T13471] syz.1.1703: attempt to access beyond end of device [ 190.971646][T13471] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 190.995333][T13471] buffer_io_error: 42 callbacks suppressed [ 190.995389][T13471] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 191.029394][T11011] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.057298][T13471] syz.1.1703: attempt to access beyond end of device [ 191.057298][T13471] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 191.098276][T13471] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 191.105559][T13511] loop5: detected capacity change from 0 to 512 [ 191.120175][T13471] syz.1.1703: attempt to access beyond end of device [ 191.120175][T13471] loop1: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 191.131033][T13511] EXT4-fs: Ignoring removed bh option [ 191.176440][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.187456][T13511] EXT4-fs (loop5): 1 truncate cleaned up [ 191.196814][T13511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.210657][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.220087][ T7158] EXT4-fs error (device loop9): ext4_readdir:265: inode #11: block 32: comm syz-executor: path /241/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 191.257335][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.283093][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.292008][ T7158] EXT4-fs (loop9): Remounting filesystem read-only [ 191.294028][T11011] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.486029][T13545] loop5: detected capacity change from 0 to 2048 [ 191.503971][T13551] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 191.527463][T13551] 0ªî{X¹¦: entered allmulticast mode [ 191.549881][T13551] net_ratelimit: 3 callbacks suppressed [ 191.549895][T13551] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 191.580555][T13545] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 191.657399][ T12] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 191.700973][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 906 with error 28 [ 191.736907][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 191.736907][ T12] [ 191.754912][T13565] loop6: detected capacity change from 0 to 2048 [ 191.766128][T13570] loop3: detected capacity change from 0 to 512 [ 191.773967][ T12] EXT4-fs (loop5): Total free blocks count 0 [ 191.787167][ T12] EXT4-fs (loop5): Free/Dirty block details [ 191.795051][T13570] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 191.805306][T13565] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.824745][ T12] EXT4-fs (loop5): free_blocks=2415919104 [ 191.830714][ T12] EXT4-fs (loop5): dirty_blocks=1312 [ 191.836301][ T12] EXT4-fs (loop5): Block reservation details [ 191.842565][ T12] EXT4-fs (loop5): i_reserved_data_blocks=82 [ 191.850623][T13570] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 191.867795][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 906 with max blocks 402 with error 28 [ 191.880342][T13570] EXT4-fs (loop3): 1 truncate cleaned up [ 191.880411][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 191.892419][ C0] EXT4-fs (loop3): initial error at time 1787002617: ext4_mb_generate_buddy:1317 [ 191.896786][T13570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.902088][ C0] EXT4-fs (loop3): last error at time 1787002617: ext4_mb_generate_buddy:1317 [ 192.000418][ T8049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.242158][T13517] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.285649][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.312938][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.383783][T13613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.404819][T13624] loop1: detected capacity change from 0 to 512 [ 192.416336][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.445384][T13624] journal_path: Non-blockdev passed as './file0' [ 192.465760][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.476503][T12690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.498933][T13624] EXT4-fs: error: could not find journal device path [ 192.537494][ T3397] IPVS: starting estimator thread 0... [ 192.553450][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.583019][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.633389][T13633] IPVS: using max 2400 ests per chain, 120000 per kthread [ 192.644186][T13635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.680461][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.718209][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.820177][ T8049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.868294][T13621] lo speed is unknown, defaulting to 1000 [ 192.910253][ T12] bridge_slave_1: left allmulticast mode [ 192.919678][ T12] bridge_slave_1: left promiscuous mode [ 192.944413][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.966681][ T12] bridge_slave_0: left allmulticast mode [ 192.979232][ T12] bridge_slave_0: left promiscuous mode [ 192.992759][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.999261][T13538] syz.5.1713 (13538) used greatest stack depth: 8920 bytes left [ 193.008478][T13653] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 193.023122][T11011] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 193.087254][T13655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 193.099926][ T12] geneve0 (unregistering): left promiscuous mode [ 193.117940][T13655] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.196890][T11011] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 193.296800][ T12] hsr_slave_0: left promiscuous mode [ 193.302937][ T12] hsr_slave_1: left promiscuous mode [ 193.309804][T13673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.311340][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.329463][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.337087][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.346200][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.360743][ T12] veth1_macvtap: left promiscuous mode [ 193.366505][ T12] veth0_macvtap: left promiscuous mode [ 193.372963][ T12] veth1_vlan: left promiscuous mode [ 193.378326][ T12] veth0_vlan: left promiscuous mode [ 193.403397][T13681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.492203][ T12] team0 (unregistering): Port device team_slave_1 removed [ 193.502212][ T12] team0 (unregistering): Port device team_slave_0 removed [ 193.504214][T13690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.561974][T11731] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.574266][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 193.582567][T13694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.653559][T13621] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.664467][T13621] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.671815][T13621] bridge_slave_0: entered allmulticast mode [ 193.678247][T13621] bridge_slave_0: entered promiscuous mode [ 193.686743][T13621] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.693815][T13621] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.701183][T13621] bridge_slave_1: entered allmulticast mode [ 193.710247][T13621] bridge_slave_1: entered promiscuous mode [ 193.728685][T13621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.739923][T13621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.763034][T13621] team0: Port device team_slave_0 added [ 193.774116][T13621] team0: Port device team_slave_1 added [ 193.788924][T13621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.796112][T13621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.822259][T13621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.833940][T13621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.841051][T13621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.873524][T13621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.903803][ T12] IPVS: stop unused estimator thread 0... [ 193.906028][T13621] hsr_slave_0: entered promiscuous mode [ 193.915925][T13621] hsr_slave_1: entered promiscuous mode [ 193.922996][T13621] debugfs: 'hsr0' already exists in 'hsr' [ 193.928988][T13621] Cannot create hsr debugfs directory [ 193.959711][T13721] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 193.973468][T13721] EXT4-fs (loop1): orphan cleanup on readonly fs [ 193.980244][ T3411] usb 3-1: enqueue for inactive port 0 [ 193.985161][T13721] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1745: Failed to acquire dquot type 1 [ 193.985876][ T3411] usb 3-1: enqueue for inactive port 0 [ 194.004348][T13721] loop1: lost filesystem error report for type 5 error -5 [ 194.006411][T13721] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1745: bg 0: block 40: padding at end of block bitmap is not set [ 194.013966][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 194.014027][ C0] EXT4-fs (loop1): initial error at time 1787002620: ext4_acquire_dquot:7041 [ 194.014150][ C0] EXT4-fs (loop1): last error at time 1787002620: ext4_acquire_dquot:7041 [ 194.050973][ T3411] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 194.056655][T13721] loop1: lost filesystem error report for type 5 error -117 [ 194.060684][T13721] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 194.078253][ T8049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.078275][T13721] loop1: lost filesystem error report for type 5 error -117 [ 194.091878][T13721] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.1745: data will be lost [ 194.112685][T13721] EXT4-fs (loop1): 1 truncate cleaned up [ 194.121829][T13721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.155611][T11011] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.167554][T11731] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.180299][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 194.220487][T13743] __nla_validate_parse: 24 callbacks suppressed [ 194.220512][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1748'. [ 194.246530][T13738] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 194.258825][T13743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1748'. [ 194.364501][T13756] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.380486][T13621] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 194.398482][T13621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 194.422889][T12690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.428651][T13621] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 194.463923][T13621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.485607][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 194.492855][T13621] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 194.524909][T13621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 194.545978][T13621] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 194.559400][T13621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 194.646131][T13621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.678945][T13621] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.706862][T12643] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.713951][T12643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.739040][T13621] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.750135][T13621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.762717][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.769784][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.806689][ T3019] 8021q: adding VLAN 0 to HW filter on device eth23 [ 194.841007][T13798] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.851998][T13805] SET target dimension over the limit! [ 194.930574][T12690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.109967][T13621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.231285][T13864] journal_path: Non-blockdev passed as './file0' [ 195.267929][T13864] EXT4-fs: error: could not find journal device path [ 195.407810][T13621] veth0_vlan: entered promiscuous mode [ 195.439059][T13621] veth1_vlan: entered promiscuous mode [ 195.489579][T13621] veth0_macvtap: entered promiscuous mode [ 195.504307][T13888] set_capacity_and_notify: 11 callbacks suppressed [ 195.504323][T13888] loop3: detected capacity change from 0 to 2048 [ 195.521087][T13621] veth1_macvtap: entered promiscuous mode [ 195.536918][T13621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.550801][T13888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.572302][T13621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.605622][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1770'. [ 195.627300][ T28] kauditd_printk_skb: 379 callbacks suppressed [ 195.627314][ T28] audit: type=1400 audit(1787002621.652:30000): avc: denied { write } for pid=13890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.676539][T13913] netlink: 'syz.1.1772': attribute type 1 has an invalid length. [ 195.678273][ T8049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.694563][ T28] audit: type=1400 audit(1787002621.722:30001): avc: denied { write } for pid=13912 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.783542][ T28] audit: type=1326 audit(1787002621.812:30002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.3.1773" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981b37e0d9 code=0x7ffc0000 [ 195.809317][ T28] audit: type=1326 audit(1787002621.821:30003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.3.1773" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981b37e0d9 code=0x7ffc0000 [ 195.818467][T13913] bond1: option mode: invalid value (66) [ 195.835148][ T28] audit: type=1326 audit(1787002621.821:30004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.3.1773" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981b37e0d9 code=0x7ffc0000 [ 195.835183][ T28] audit: type=1326 audit(1787002621.821:30005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.3.1773" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f981b37e0d9 code=0x7ffc0000 [ 195.835212][ T28] audit: type=1326 audit(1787002621.821:30006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.3.1773" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f981b37de42 code=0x7ffc0000 [ 195.835249][ T28] audit: type=1326 audit(1787002621.821:30007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.3.1773" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f981b33e90e code=0x7ffc0000 [ 195.835290][ T28] audit: type=1326 audit(1787002621.821:30008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.3.1773" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f981b37df07 code=0x7ffc0000 [ 195.835717][T13924] loop3: detected capacity change from 0 to 512 [ 195.848534][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1725'. [ 195.867072][ T28] audit: type=1326 audit(1787002621.861:30009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.3.1773" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f981b33e90e code=0x7ffc0000 [ 195.896643][T13924] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 196.020554][T13924] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 196.034142][T13913] bond1 (unregistering): Released all slaves [ 196.035695][T13924] EXT4-fs (loop3): 1 truncate cleaned up [ 196.047266][T13924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.098845][ T8049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.110609][ T68] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.123507][T13935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1777'. [ 196.129518][ T68] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.170386][T12643] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.187049][T12643] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.349836][T13948] loop1: detected capacity change from 0 to 8192 [ 196.390140][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1783'. [ 196.417455][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1783'. [ 196.484153][T13977] lo speed is unknown, defaulting to 1000 [ 196.519452][T13984] program syz.7.1782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.638995][T13980] loop3: detected capacity change from 0 to 8192 [ 196.795518][T13994] loop5: detected capacity change from 0 to 4096 [ 196.833396][T14013] loop1: detected capacity change from 0 to 512 [ 196.847456][T13994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.861664][T14013] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 196.887108][T14013] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 196.903318][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 196.909764][ C0] EXT4-fs (loop1): initial error at time 1787002622: ext4_mb_generate_buddy:1317 [ 196.918930][ C0] EXT4-fs (loop1): last error at time 1787002622: ext4_mb_generate_buddy:1317 [ 196.921729][T14013] EXT4-fs (loop1): 1 truncate cleaned up [ 196.936773][T14013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.981455][T11731] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.174287][T14052] FAULT_INJECTION: forcing a failure. [ 197.174287][T14052] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 197.227832][T14052] CPU: 0 UID: 0 PID: 14052 Comm: syz.6.1791 Not tainted syzkaller #0 PREEMPT(lazy) [ 197.227860][T14052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.227874][T14052] Call Trace: [ 197.227881][T14052] [ 197.227890][T14052] __dump_stack+0x1d/0x30 [ 197.227946][T14052] dump_stack_lvl+0x95/0xd0 [ 197.227967][T14052] dump_stack+0x15/0x1b [ 197.227985][T14052] should_fail_ex+0x25e/0x270 [ 197.228013][T14052] should_fail_alloc_page+0xf2/0x100 [ 197.228074][T14052] __alloc_frozen_pages_noprof+0x108/0x350 [ 197.228103][T14052] alloc_pages_mpol+0xa9/0x1d0 [ 197.228133][T14052] folio_alloc_mpol_noprof+0x39/0x80 [ 197.228194][T14052] shmem_get_folio_gfp+0x3ff/0xd90 [ 197.228304][T14052] shmem_write_begin+0xfc/0x1f0 [ 197.228334][T14052] generic_perform_write+0x186/0x490 [ 197.228358][T14052] ? current_time+0x18d/0x250 [ 197.228389][T14052] shmem_file_write_iter+0xc5/0xf0 [ 197.228561][T14052] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 197.228593][T14052] vfs_write+0x57d/0x990 [ 197.228618][T14052] ksys_write+0xdc/0x1a0 [ 197.228659][T14052] __x64_sys_write+0x40/0x50 [ 197.228734][T14052] x64_sys_call+0x27e1/0x3020 [ 197.228760][T14052] do_syscall_64+0x136/0x3c0 [ 197.228863][T14052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.228884][T14052] RIP: 0033:0x7fe75b54e0d9 [ 197.228898][T14052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.228916][T14052] RSP: 002b:00007fe759fa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.228935][T14052] RAX: ffffffffffffffda RBX: 00007fe75b7d5fa0 RCX: 00007fe75b54e0d9 [ 197.229003][T14052] RDX: 000000000208e24b RSI: 00002000000004c0 RDI: 0000000000000009 [ 197.229019][T14052] RBP: 00007fe759fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 197.229032][T14052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.229044][T14052] R13: 00007fe75b7d6038 R14: 00007fe75b7d5fa0 R15: 00007ffc0886c2c8 [ 197.229061][T14052] [ 197.468882][T14058] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 197.626903][T11011] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.754044][T14083] rdma_rxe: rxe_newlink: failed to add lo [ 197.794088][T14083] loop5: detected capacity change from 0 to 2048 [ 197.869312][T14083] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #2: comm syz.5.1795: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2727(2727) [ 197.887375][T14083] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 197.887745][T14083] EXT4-fs (loop5): get root inode failed [ 197.902480][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 197.902517][ C1] EXT4-fs (loop5): initial error at time 1787002623: ext4_ext_check_inode:521: inode 2 [ 197.902611][ C1] EXT4-fs (loop5): last error at time 1787002623: ext4_ext_check_inode:521: inode 2 [ 197.928778][T14083] EXT4-fs (loop5): mount failed [ 197.945683][T14068] loop7: detected capacity change from 0 to 1024 [ 198.031073][T14095] loop3: detected capacity change from 0 to 128 [ 198.065072][T14068] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8840c028, mo2=0002] [ 198.081422][T14095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1799'. [ 198.132311][T14068] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.147360][T14101] ip_tables: iptables: counters copy to user failed while replacing table [ 198.162069][T14100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1800'. [ 198.177431][T14093] loop6: detected capacity change from 0 to 8192 [ 198.185000][T14100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1800'. [ 198.234834][T14102] veth3: entered allmulticast mode [ 198.262938][T13621] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.422195][T14121] FAULT_INJECTION: forcing a failure. [ 198.422195][T14121] name failslab, interval 1, probability 0, space 0, times 0 [ 198.434841][T14121] CPU: 1 UID: 0 PID: 14121 Comm: syz.3.1805 Not tainted syzkaller #0 PREEMPT(lazy) [ 198.434871][T14121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.434886][T14121] Call Trace: [ 198.434893][T14121] [ 198.434901][T14121] __dump_stack+0x1d/0x30 [ 198.434981][T14121] dump_stack_lvl+0x95/0xd0 [ 198.435005][T14121] dump_stack+0x15/0x1b [ 198.435027][T14121] should_fail_ex+0x25e/0x270 [ 198.435074][T14121] should_failslab+0x8c/0xb0 [ 198.435163][T14121] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 198.435188][T14121] ? xfrm_state_alloc+0x2c/0x190 [ 198.435209][T14121] ? xfrm_state_alloc+0x2c/0x190 [ 198.435276][T14121] xfrm_state_alloc+0x2c/0x190 [ 198.435293][T14121] __find_acq_core+0x732/0x1170 [ 198.435319][T14121] ? __rcu_read_unlock+0x4e/0x70 [ 198.435350][T14121] xfrm_find_acq+0x78/0xa0 [ 198.435380][T14121] xfrm_alloc_userspi+0x442/0x730 [ 198.435465][T14121] ? __nla_parse+0x40/0x60 [ 198.435502][T14121] xfrm_user_rcv_msg+0x4e9/0x970 [ 198.435557][T14121] ? kmem_cache_free+0xca/0x380 [ 198.435594][T14121] netlink_rcv_skb+0x11e/0x220 [ 198.435620][T14121] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 198.435649][T14121] xfrm_netlink_rcv+0x48/0x60 [ 198.435709][T14121] netlink_unicast+0x5a7/0x680 [ 198.435739][T14121] netlink_sendmsg+0x5be/0x6f0 [ 198.435843][T14121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.435871][T14121] ____sys_sendmsg+0x532/0x580 [ 198.435894][T14121] ___sys_sendmsg+0x195/0x1e0 [ 198.436002][T14121] __x64_sys_sendmsg+0xd4/0x160 [ 198.436030][T14121] x64_sys_call+0x194c/0x3020 [ 198.436058][T14121] do_syscall_64+0x136/0x3c0 [ 198.436153][T14121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.436217][T14121] RIP: 0033:0x7f981b37e0d9 [ 198.436234][T14121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.436255][T14121] RSP: 002b:00007f9819dd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.436276][T14121] RAX: ffffffffffffffda RBX: 00007f981b605fa0 RCX: 00007f981b37e0d9 [ 198.436292][T14121] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 198.436308][T14121] RBP: 00007f9819dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 198.436353][T14121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.436368][T14121] R13: 00007f981b606038 R14: 00007f981b605fa0 R15: 00007fff5405c628 [ 198.436391][T14121] [ 198.833899][T14155] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 198.836320][T14155] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 198.836574][T14155] EXT4-fs (loop5): 1 truncate cleaned up [ 198.837016][T14155] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.863142][T14144] netlink: 'syz.3.1807': attribute type 1 has an invalid length. [ 198.989060][T11011] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.050002][T14166] lo speed is unknown, defaulting to 1000 [ 199.104349][T14168] EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (256 blocks) [ 199.311916][T14173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.375835][T14173] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.406616][T14184] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 199.471074][T14184] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 199.503147][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 199.509595][ C0] EXT4-fs (loop7): initial error at time 1787002625: ext4_mb_generate_buddy:1317 [ 199.518717][ C0] EXT4-fs (loop7): last error at time 1787002625: ext4_mb_generate_buddy:1317 [ 199.542852][T14184] EXT4-fs (loop7): 1 truncate cleaned up [ 199.550601][T14184] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.626644][T11011] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.646207][T14205] __nla_validate_parse: 1 callbacks suppressed [ 199.646220][T14205] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1820'. [ 199.698807][T13621] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.784640][T14211] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 199.803416][T14211] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 199.803721][T14211] EXT4-fs (loop5): 1 truncate cleaned up [ 199.804303][T14211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.848931][T11011] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.849465][T14223] EXT4-fs: Ignoring removed nobh option [ 199.849660][T14223] EXT4-fs: Ignoring removed bh option [ 199.849775][T14223] EXT4-fs: Ignoring removed nobh option [ 199.850749][T14223] EXT4-fs (loop7): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 199.874378][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1826'. [ 199.881469][T14223] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.919886][T14223] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 199.984803][T13621] EXT4-fs error (device loop7): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /9/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 199.985496][T13621] EXT4-fs (loop7): Remounting filesystem read-only [ 200.078492][T13955] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.116207][T14236] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 200.120702][T14236] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1829'. [ 200.360489][T12643] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.436545][T12643] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.479365][T14246] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 200.506652][T12643] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.532146][T14246] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 200.556697][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 200.556715][ C1] EXT4-fs (loop5): initial error at time 1787002626: ext4_mb_generate_buddy:1317 [ 200.556738][ C1] EXT4-fs (loop5): last error at time 1787002626: ext4_mb_generate_buddy:1317 [ 200.559843][T14246] EXT4-fs (loop5): 1 truncate cleaned up [ 200.560322][T14246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.618688][T11011] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.655955][ T28] kauditd_printk_skb: 6075 callbacks suppressed [ 200.655971][ T28] audit: type=1326 audit(1787002626.623:36085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14167 comm="syz.3.1811" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981b37e0d9 code=0x50000 [ 200.656010][ T28] audit: type=1326 audit(1787002626.653:36086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14167 comm="syz.3.1811" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981b37e0d9 code=0x50000 [ 200.656160][ T28] audit: type=1326 audit(1787002626.653:36087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14167 comm="syz.3.1811" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981b37e0d9 code=0x50000 [ 200.656186][ T28] audit: type=1326 audit(1787002626.653:36088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14167 comm="syz.3.1811" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981b37e0d9 code=0x50000 [ 200.656213][ T28] audit: type=1326 audit(1787002626.653:36089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14167 comm="syz.3.1811" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981b37e0d9 code=0x50000 [ 200.656288][ T28] audit: type=1326 audit(1787002626.653:36090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14167 comm="syz.3.1811" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981b37e0d9 code=0x50000 [ 200.656395][ T28] audit: type=1326 audit(1787002626.653:36091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14167 comm="syz.3.1811" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981b37e0d9 code=0x50000 [ 200.656481][ T28] audit: type=1326 audit(1787002626.653:36092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14167 comm="syz.3.1811" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981b37e0d9 code=0x50000 [ 200.656505][ T28] audit: type=1326 audit(1787002626.653:36093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14167 comm="syz.3.1811" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981b37e0d9 code=0x50000 [ 200.656563][ T28] audit: type=1326 audit(1787002626.653:36094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14167 comm="syz.3.1811" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981b37e0d9 code=0x50000 [ 200.677810][T12643] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.694136][T14260] set_capacity_and_notify: 8 callbacks suppressed [ 200.694152][T14260] loop5: detected capacity change from 0 to 512 [ 200.696077][T14260] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 200.699501][T14260] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1835: iget: bad i_size value: 38620345925642 [ 200.699528][T14260] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 200.699685][T14260] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1835: couldn't read orphan inode 15 (err -117) [ 200.699709][T14260] loop5: lost filesystem error report for type 5 error -117 [ 200.700367][T14260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.791747][T11011] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.845578][T14267] loop5: detected capacity change from 0 to 512 [ 200.897221][T14267] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 200.907157][T14267] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 200.908032][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 200.908054][ C0] EXT4-fs (loop5): initial error at time 1787002626: ext4_mb_generate_buddy:1317 [ 200.908082][ C0] EXT4-fs (loop5): last error at time 1787002626: ext4_mb_generate_buddy:1317 [ 200.908228][T14267] EXT4-fs (loop5): 1 truncate cleaned up [ 200.908670][T14267] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.998550][T11011] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.058716][T14244] lo speed is unknown, defaulting to 1000 [ 201.070302][T12643] bridge_slave_1: left allmulticast mode [ 201.070320][T12643] bridge_slave_1: left promiscuous mode [ 201.070476][T12643] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.071134][T12643] bridge_slave_0: left allmulticast mode [ 201.071152][T12643] bridge_slave_0: left promiscuous mode [ 201.071285][T12643] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.186407][T14286] loop5: detected capacity change from 0 to 128 [ 201.193855][T14286] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.194119][T14286] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.368904][T12643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.546435][T12643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.548396][T12643] bond0 (unregistering): Released all slaves [ 201.766265][T14309] loop1: detected capacity change from 0 to 256 [ 201.776079][T14306] rdma_rxe: rxe_newlink: failed to add lo [ 201.815902][T14306] loop6: detected capacity change from 0 to 2048 [ 201.839998][T14309] vfat: Unknown parameter './file2' [ 202.223554][T11011] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.257034][T14306] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #2: comm syz.6.1840: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2727(2727) [ 202.275292][T14306] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 202.276117][T14306] EXT4-fs (loop6): get root inode failed [ 202.285272][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 202.285299][ C0] EXT4-fs (loop6): initial error at time 1787002628: ext4_ext_check_inode:521: inode 2 [ 202.285404][ C0] EXT4-fs (loop6): last error at time 1787002628: ext4_ext_check_inode:521: inode 2 [ 202.316778][T14306] EXT4-fs (loop6): mount failed [ 202.399274][T14313] loop1: detected capacity change from 0 to 2048 [ 202.409945][T12643] hsr_slave_0: left promiscuous mode [ 202.427202][T12643] hsr_slave_1: left promiscuous mode [ 202.435851][T12643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.452577][T12643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.464061][T12643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.472422][T14313] loop1: p2 < > p3 p4 [ 202.478923][T14313] loop1: p3 start 65535 is beyond EOD, truncated [ 202.485352][T12643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.492649][T14313] loop1: p4 size 8192 extends beyond EOD, truncated [ 202.519063][T12643] veth1_macvtap: left promiscuous mode [ 202.527551][T12643] veth0_macvtap: left promiscuous mode [ 202.534267][T12643] veth1_vlan: left promiscuous mode [ 202.539584][T12643] veth0_vlan: left promiscuous mode [ 202.643616][T12643] team0 (unregistering): Port device team_slave_1 removed [ 202.656165][T12643] team0 (unregistering): Port device team_slave_0 removed [ 202.727942][T14339] loop6: detected capacity change from 0 to 1024 [ 202.757714][T14339] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 202.757839][T14339] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.763840][T14339] netlink: 'syz.6.1843': attribute type 1 has an invalid length. [ 202.789287][T14339] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1843'. [ 202.823242][T14339] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.1843: Freeing blocks not in datazone - block = 0, count = 16 [ 202.872011][T14339] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1843: bg 0: block 112: padding at end of block bitmap is not set [ 202.889822][T14339] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 202.928875][T14244] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.928911][T14244] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.929040][T14244] bridge_slave_0: entered allmulticast mode [ 202.929634][T14244] bridge_slave_0: entered promiscuous mode [ 202.956386][T14244] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.956419][T14244] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.956562][T14244] bridge_slave_1: entered allmulticast mode [ 202.957069][T14244] bridge_slave_1: entered promiscuous mode [ 202.969086][T14244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.970231][T14244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.994285][T14244] team0: Port device team_slave_0 added [ 203.002968][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1849'. [ 203.013982][T14244] team0: Port device team_slave_1 added [ 203.066204][T14244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.066219][T14244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.066302][T14244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.066914][T14244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.066926][T14244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.067004][T14244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.087740][T14244] hsr_slave_0: entered promiscuous mode [ 203.088351][T14244] hsr_slave_1: entered promiscuous mode [ 203.179581][T14244] debugfs: 'hsr0' already exists in 'hsr' [ 203.179596][T14244] Cannot create hsr debugfs directory [ 203.190586][T14376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1850'. [ 203.230623][T14376] macvtap1: entered allmulticast mode [ 203.230663][T14376] bridge0: entered allmulticast mode [ 203.230994][T14376] bridge0: entered promiscuous mode [ 203.247727][T14376] bridge0: port 3(macvtap1) entered blocking state [ 203.256375][T14376] bridge0: port 3(macvtap1) entered disabled state [ 203.281705][T14376] bridge0: left allmulticast mode [ 203.351137][ T9] bridge0: left promiscuous mode [ 203.394169][T14383] rdma_rxe: rxe_newlink: failed to add lo [ 203.432912][T14383] loop1: detected capacity change from 0 to 2048 [ 203.523347][T14383] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.1852: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2727(2727) [ 203.541750][T14383] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 203.545544][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 203.560987][ C1] EXT4-fs (loop1): initial error at time 1787002629: ext4_ext_check_inode:521: inode 2 [ 203.570651][ C1] EXT4-fs (loop1): last error at time 1787002629: ext4_ext_check_inode:521: inode 2 [ 203.586546][T14383] EXT4-fs (loop1): get root inode failed [ 203.592321][T14383] EXT4-fs (loop1): mount failed [ 203.643196][T14395] loop5: detected capacity change from 0 to 512 [ 203.811897][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 203.958406][T14414] loop3: detected capacity change from 0 to 128 [ 204.065840][T14244] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 204.092802][T14244] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 204.106205][T14244] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 204.124150][T14244] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 204.141892][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 204.156644][T14244] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 204.172795][T14244] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 204.182116][T14244] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 204.203868][T14244] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 204.229959][T14431] netlink: 'syz.6.1858': attribute type 4 has an invalid length. [ 204.272213][T14431] netlink: 'syz.6.1858': attribute type 11 has an invalid length. [ 204.303005][T14244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.313108][T14431] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1858'. [ 204.337160][T14244] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.357314][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.364399][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.411736][T12643] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.418827][T12643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.465437][T14451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1860'. [ 204.513850][T14467] vfat: Unknown parameter './file2' [ 204.575859][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 204.653596][T14477] netlink: 'syz.1.1862': attribute type 10 has an invalid length. [ 205.259607][T14491] rdma_rxe: rxe_newlink: failed to add lo [ 205.414143][T14477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.465608][T14477] team0: Port device bond0 added [ 205.495762][T14477] syz.1.1862 (14477) used greatest stack depth: 8896 bytes left [ 205.513198][T14490] loop6: p2 < > p3 p4 [ 205.520754][T14490] loop6: p3 start 65535 is beyond EOD, truncated [ 205.527185][T14490] loop6: p4 size 8192 extends beyond EOD, truncated [ 205.544181][T14491] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #2: comm syz.5.1863: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2727(2727) [ 205.546747][T14504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'. [ 205.562710][T14491] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 205.572225][T14491] EXT4-fs (loop5): get root inode failed [ 205.581326][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 205.581357][ C0] EXT4-fs (loop5): initial error at time 1787002631: ext4_ext_check_inode:521: inode 2 [ 205.581425][ C0] EXT4-fs (loop5): last error at time 1787002631: ext4_ext_check_inode:521: inode 2 [ 205.613593][T14491] EXT4-fs (loop5): mount failed [ 205.672368][T14244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.691628][ T28] kauditd_printk_skb: 3480 callbacks suppressed [ 205.691642][ T28] audit: type=1400 audit(1787002631.689:39575): avc: denied { write } for pid=14508 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.772021][T14507] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 205.793638][ T28] audit: type=1326 audit(1787002631.779:39576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14478 comm="syz.5.1863" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f862704f459 code=0x7ffc0000 [ 205.851029][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 205.912662][T14507] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 205.929198][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 205.938999][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 205.939015][ C0] EXT4-fs (loop3): initial error at time 1787002631: ext4_mb_generate_buddy:1317 [ 205.939045][ C0] EXT4-fs (loop3): last error at time 1787002631: ext4_mb_generate_buddy:1317 [ 205.966530][ T4227] udevd[4227]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 206.019407][T14520] lo speed is unknown, defaulting to 1000 [ 206.051440][T14507] EXT4-fs (loop3): 1 truncate cleaned up [ 206.130706][ T28] audit: type=1326 audit(1787002631.779:39577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14478 comm="syz.5.1863" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f862706e90e code=0x7ffc0000 [ 206.156522][ T28] audit: type=1326 audit(1787002631.779:39578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14478 comm="syz.5.1863" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f86270add6b code=0x7ffc0000 [ 206.196562][ T28] audit: type=1326 audit(1787002631.779:39579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14478 comm="syz.5.1863" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f862706e90e code=0x7ffc0000 [ 206.232419][ T28] audit: type=1326 audit(1787002631.779:39580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14478 comm="syz.5.1863" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86270ae0d9 code=0x7ffc0000 [ 206.299142][T14244] veth0_vlan: entered promiscuous mode [ 206.315145][ T28] audit: type=1326 audit(1787002631.779:39581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14478 comm="syz.5.1863" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86270ae0d9 code=0x7ffc0000 [ 206.343358][T14244] veth1_vlan: entered promiscuous mode [ 206.361179][T14244] veth0_macvtap: entered promiscuous mode [ 206.376049][T14244] veth1_macvtap: entered promiscuous mode [ 206.394941][ T28] audit: type=1326 audit(1787002631.789:39582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14478 comm="syz.5.1863" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f86270ae0d9 code=0x7ffc0000 [ 206.427334][T14244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.438153][T14244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.463760][ T28] audit: type=1326 audit(1787002631.819:39583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14478 comm="syz.5.1863" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f86270ae0d9 code=0x7ffc0000 [ 206.504924][ T28] audit: type=1400 audit(1787002632.088:39584): avc: denied { write } for pid=14505 comm="syz.3.1865" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.624178][T14559] set_capacity_and_notify: 4 callbacks suppressed [ 206.624193][T14559] loop8: detected capacity change from 0 to 512 [ 206.663896][T12643] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.674129][T14564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1871'. [ 206.681371][T12643] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.695063][T14559] EXT4-fs: Ignoring removed oldalloc option [ 206.726862][T14564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1871'. [ 206.737537][T14559] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.1832: bad orphan inode 15 [ 206.758333][T14559] loop8: lost filesystem error report for type 5 error -117 [ 206.758485][T14559] ext4_test_bit(bit=14, block=5) = 0 [ 206.765800][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 206.765835][ C0] EXT4-fs (loop8): initial error at time 1787002632: ext4_orphan_get:1425 [ 206.765860][ C0] EXT4-fs (loop8): last error at time 1787002632: ext4_orphan_get:1425 [ 206.795285][ T68] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.804420][ T68] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.817234][T14559] netlink: 'syz.8.1832': attribute type 1 has an invalid length. [ 206.884775][T14580] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 207.061099][T14607] netlink: 'syz.6.1878': attribute type 4 has an invalid length. [ 207.075075][T14606] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1876'. [ 207.102700][T14611] loop5: detected capacity change from 0 to 512 [ 207.113436][T14607] netlink: 'syz.6.1878': attribute type 11 has an invalid length. [ 207.148132][T14607] netlink: 'syz.6.1878': attribute type 1 has an invalid length. [ 207.162699][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1880'. [ 207.181254][T14611] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 207.191273][T14607] netlink: 3553 bytes leftover after parsing attributes in process `syz.6.1878'. [ 207.216766][T14595] loop3: detected capacity change from 0 to 512 [ 207.233302][T14611] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 207.254400][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 207.260852][ C1] EXT4-fs (loop5): initial error at time 1787002633: ext4_mb_generate_buddy:1317 [ 207.270017][ C1] EXT4-fs (loop5): last error at time 1787002633: ext4_mb_generate_buddy:1317 [ 207.314271][T14611] EXT4-fs (loop5): 1 truncate cleaned up [ 207.370629][T14595] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.492862][T14595] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #2: comm syz.3.1874: corrupted inode contents [ 207.519230][T14638] loop8: detected capacity change from 0 to 512 [ 207.529034][T14595] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #2: comm syz.3.1874: mark_inode_dirty error [ 207.529868][T14595] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #2: comm syz.3.1874: corrupted inode contents [ 207.530247][T14595] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.1874: mark_inode_dirty error [ 207.563894][T14638] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.567954][T14638] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1882: corrupted xattr block 6: invalid header [ 207.572564][T14638] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 207.572603][T14638] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1882: corrupted xattr block 6: invalid header [ 207.587289][T14638] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 207.595790][T14638] EXT4-fs error (device loop8): ext4_xattr_block_find:1881: inode #12: comm syz.8.1882: corrupted xattr block 6: invalid header [ 207.597719][T14638] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1882: corrupted xattr block 6: invalid header [ 207.602235][T14638] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 207.602280][T14638] EXT4-fs error (device loop8): ext4_xattr_block_list:766: inode #12: comm syz.8.1882: corrupted xattr block 6: invalid header [ 207.722475][T14653] loop1: detected capacity change from 0 to 1164 [ 207.742660][T14657] netlink: 'syz.8.1885': attribute type 6 has an invalid length. [ 207.859318][T14662] loop1: detected capacity change from 0 to 512 [ 207.976540][T14674] SELinux: invalid class [ 208.003784][T14674] SELinux: failed to load policy [ 208.286892][T14720] EXT4-fs (loop1): shut down requested (2) [ 208.289175][T14720] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 208.289280][T14720] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 208.881867][T14774] loop8: detected capacity change from 0 to 2048 [ 208.889922][T14771] rdma_rxe: rxe_newlink: failed to add lo [ 208.910074][T14774] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #2: comm syz.8.1898: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2727(2727) [ 208.928020][T14774] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 208.928347][T14774] EXT4-fs (loop8): get root inode failed [ 208.943053][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 208.943073][ C0] EXT4-fs (loop8): initial error at time 1787002634: ext4_ext_check_inode:521: inode 2 [ 208.943105][ C0] EXT4-fs (loop8): last error at time 1787002634: ext4_ext_check_inode:521: inode 2 [ 208.968623][T14774] EXT4-fs (loop8): mount failed [ 209.375068][T14782] For dev_enable ops, only valid value is "1" [ 209.422072][T14793] loop5: detected capacity change from 0 to 512 [ 209.456209][T14793] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 209.499586][T14793] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 209.518850][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 209.525304][ C1] EXT4-fs (loop5): initial error at time 1787002635: ext4_mb_generate_buddy:1317 [ 209.534471][ C1] EXT4-fs (loop5): last error at time 1787002635: ext4_mb_generate_buddy:1317 [ 209.587164][T14793] EXT4-fs (loop5): 1 truncate cleaned up [ 209.836072][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1910'. [ 209.836606][T14812] loop1: detected capacity change from 0 to 164 [ 209.908745][ T8049] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #2: comm syz-executor: corrupted inode contents [ 209.924228][T14828] netlink: 'syz.8.1914': attribute type 8 has an invalid length. [ 209.938634][T14831] loop1: detected capacity change from 0 to 1024 [ 209.942401][ T8049] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #2: comm syz-executor: mark_inode_dirty error [ 210.017366][T14839] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.167389][T14853] EXT4-fs: Ignoring removed orlov option [ 210.195640][T14866] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 210.206890][T14866] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 210.222291][T14866] EXT4-fs (loop6): 1 truncate cleaned up [ 210.240162][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 210.246617][ C0] EXT4-fs (loop6): initial error at time 1787002636: ext4_mb_generate_buddy:1317 [ 210.255778][ C0] EXT4-fs (loop6): last error at time 1787002636: ext4_mb_generate_buddy:1317 [ 210.386789][T14873] syz0: rxe_newlink: already configured on lo [ 210.455736][T14873] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #2: comm syz.3.1913: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2727(2727) [ 210.474497][T14873] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 210.474901][T14873] EXT4-fs (loop3): get root inode failed [ 210.484108][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 210.484142][ C0] EXT4-fs (loop3): initial error at time 1787002636: ext4_ext_check_inode:521: inode 2 [ 210.484209][ C0] EXT4-fs (loop3): last error at time 1787002636: ext4_ext_check_inode:521: inode 2 [ 210.516847][T14873] EXT4-fs (loop3): mount failed [ 210.607188][T14885] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1922'. [ 210.623536][T14885] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1922'. [ 210.635239][T14885] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1922'. [ 210.644538][T14885] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1922'. [ 210.653841][T14885] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1922'. [ 210.663057][T14885] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1922'. [ 210.676460][T14885] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1922'. [ 210.685681][T14885] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1922'. [ 210.694872][T14885] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1922'. [ 210.704148][T14885] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1922'. [ 210.854326][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 210.854341][ T28] audit: type=1400 audit(1787002636.839:39686): avc: denied { write } for pid=14880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.917816][ T28] audit: type=1326 audit(1787002636.869:39687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.3.1913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f981b33e90e code=0x7ffc0000 [ 210.962160][ T28] audit: type=1326 audit(1787002636.869:39688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.3.1913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f981b37dd6b code=0x7ffc0000 [ 210.989707][ T28] audit: type=1326 audit(1787002636.869:39689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.3.1913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f981b33e90e code=0x7ffc0000 [ 211.015365][ T28] audit: type=1326 audit(1787002636.869:39690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.3.1913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981b37e0d9 code=0x7ffc0000 [ 211.074356][ T28] audit: type=1326 audit(1787002636.869:39691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.3.1913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981b37e0d9 code=0x7ffc0000 [ 211.100596][ T28] audit: type=1326 audit(1787002636.879:39692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.3.1913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f981b37e0d9 code=0x7ffc0000 [ 211.126817][ T28] audit: type=1400 audit(1787002636.899:39693): avc: denied { write } for pid=14902 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.150288][ T28] audit: type=1326 audit(1787002636.999:39694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.3.1913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f981b37e0d9 code=0x7ffc0000 [ 211.177459][ T28] audit: type=1400 audit(1787002637.058:39695): avc: denied { map_read map_write } for pid=14909 comm="syz.5.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 211.272465][T14919] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 211.381463][T14913] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 211.410243][T14913] syzkaller1: linktype set to 825 [ 212.121952][T14951] set_capacity_and_notify: 5 callbacks suppressed [ 212.121974][T14951] loop6: detected capacity change from 0 to 2048 [ 212.492891][T14978] For dev_enable ops, only valid value is "1" [ 212.553539][T14979] lo speed is unknown, defaulting to 1000 [ 212.566848][T14982] bond0: (slave veth1_to_hsr): Error: Device can not be enslaved while up [ 212.767395][T14991] loop1: detected capacity change from 0 to 1764 [ 212.795795][T14993] FAULT_INJECTION: forcing a failure. [ 212.795795][T14993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.842209][T14993] CPU: 1 UID: 0 PID: 14993 Comm: syz.6.1944 Not tainted syzkaller #0 PREEMPT(lazy) [ 212.842241][T14993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.842254][T14993] Call Trace: [ 212.842261][T14993] [ 212.842269][T14993] __dump_stack+0x1d/0x30 [ 212.842298][T14993] dump_stack_lvl+0x95/0xd0 [ 212.842324][T14993] dump_stack+0x15/0x1b [ 212.842370][T14993] should_fail_ex+0x25e/0x270 [ 212.842403][T14993] should_fail+0xb/0x20 [ 212.842428][T14993] should_fail_usercopy+0x1a/0x20 [ 212.842528][T14993] _copy_from_user+0x1c/0xb0 [ 212.842551][T14993] snd_seq_ioctl+0x127/0x2d0 [ 212.842582][T14993] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 212.842604][T14993] __se_sys_ioctl+0xce/0x140 [ 212.842627][T14993] __x64_sys_ioctl+0x43/0x50 [ 212.842645][T14993] x64_sys_call+0x1563/0x3020 [ 212.842700][T14993] do_syscall_64+0x136/0x3c0 [ 212.842724][T14993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.842778][T14993] RIP: 0033:0x7fe75b54e0d9 [ 212.842797][T14993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.842819][T14993] RSP: 002b:00007fe759fa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.842920][T14993] RAX: ffffffffffffffda RBX: 00007fe75b7d5fa0 RCX: 00007fe75b54e0d9 [ 212.842948][T14993] RDX: 0000200000000040 RSI: 000000004040534e RDI: 0000000000000003 [ 212.842962][T14993] RBP: 00007fe759fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 212.843032][T14993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.843048][T14993] R13: 00007fe75b7d6038 R14: 00007fe75b7d5fa0 R15: 00007ffc0886c2c8 [ 212.843069][T14993] [ 213.979494][T15023] erspan0: entered promiscuous mode [ 213.995379][T15023] erspan0: entered allmulticast mode [ 214.278028][T15049] loop6: detected capacity change from 0 to 4096 [ 214.421214][T15056] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 214.452456][T15051] loop3: detected capacity change from 0 to 164 [ 214.485971][T15051] iso9660: Unknown parameter 'nockmpress' [ 214.553155][T15061] rdma_rxe: rxe_newlink: failed to add lo [ 214.569204][T15061] loop1: detected capacity change from 0 to 2048 [ 214.613502][T15066] loop3: detected capacity change from 0 to 512 [ 214.627653][T15061] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.1955: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2727(2727) [ 214.645692][T15061] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 214.645929][T15061] EXT4-fs (loop1): get root inode failed [ 214.654973][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 214.654996][ C1] EXT4-fs (loop1): initial error at time 1787002640: ext4_ext_check_inode:521: inode 2 [ 214.655033][ C1] EXT4-fs (loop1): last error at time 1787002640: ext4_ext_check_inode:521: inode 2 [ 214.686138][T15061] EXT4-fs (loop1): mount failed [ 214.714215][T15066] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 214.763823][T15066] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 214.787018][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 214.793497][ C1] EXT4-fs (loop3): initial error at time 1787002640: ext4_mb_generate_buddy:1317 [ 214.802672][ C1] EXT4-fs (loop3): last error at time 1787002640: ext4_mb_generate_buddy:1317 [ 214.826763][T15066] EXT4-fs (loop3): 1 truncate cleaned up [ 215.507205][T15093] loop1: detected capacity change from 0 to 2048 [ 215.630070][T15098] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 215.671623][T15106] syz0: rxe_newlink: already configured on lo [ 215.687868][T15106] loop3: detected capacity change from 0 to 2048 [ 216.151482][T15106] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #2: comm syz.3.1967: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2727(2727) [ 216.169507][T15106] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 216.170654][T15106] EXT4-fs (loop3): get root inode failed [ 216.179715][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 216.179740][ C1] EXT4-fs (loop3): initial error at time 1787002642: ext4_ext_check_inode:521: inode 2 [ 216.179773][ C1] EXT4-fs (loop3): last error at time 1787002642: ext4_ext_check_inode:521: inode 2 [ 216.210967][T15106] EXT4-fs (loop3): mount failed [ 216.218492][ T28] kauditd_printk_skb: 163 callbacks suppressed [ 216.218506][ T28] audit: type=1326 audit(1787002642.191:39859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.3.1967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f981b33e90e code=0x7ffc0000 [ 216.290080][T15113] loop6: detected capacity change from 0 to 128 [ 216.301947][ T28] audit: type=1326 audit(1787002642.191:39860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.3.1967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f981b37dd6b code=0x7ffc0000 [ 216.354854][ T28] audit: type=1326 audit(1787002642.191:39861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.3.1967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f981b33e90e code=0x7ffc0000 [ 216.424275][ T28] audit: type=1326 audit(1787002642.191:39862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.3.1967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981b37e0d9 code=0x7ffc0000 [ 216.463655][ T28] audit: type=1326 audit(1787002642.191:39863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.3.1967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981b37e0d9 code=0x7ffc0000 [ 216.489588][ T28] audit: type=1326 audit(1787002642.191:39864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.3.1967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f981b37e0d9 code=0x7ffc0000 [ 216.515655][ T28] audit: type=1326 audit(1787002642.231:39865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.3.1967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f981b37e0d9 code=0x7ffc0000 [ 216.541421][ T28] audit: type=1400 audit(1787002642.431:39866): avc: denied { getopt } for pid=15112 comm="syz.6.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.657416][T15123] __nla_validate_parse: 35 callbacks suppressed [ 216.657449][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'. [ 216.746588][T15127] loop1: detected capacity change from 0 to 512 [ 216.769847][T15127] EXT4-fs: Ignoring removed bh option [ 216.793486][T15127] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.816490][ T28] audit: type=1326 audit(1787002642.791:39867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15130 comm="syz.3.1968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981b37e0d9 code=0x7ffc0000 [ 216.839167][T15127] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 3: comm syz.1.1973: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=2048, size=2048 fake=0 [ 216.880255][ T28] audit: type=1326 audit(1787002642.840:39868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15130 comm="syz.3.1968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981b37e0d9 code=0x7ffc0000 [ 216.914479][T15131] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 216.934144][T15127] EXT4-fs (loop1): Remounting filesystem read-only [ 216.952050][T15131] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 216.969666][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 216.976092][ C1] EXT4-fs (loop3): initial error at time 1787002642: ext4_mb_generate_buddy:1317 [ 216.985264][ C1] EXT4-fs (loop3): last error at time 1787002642: ext4_mb_generate_buddy:1317 [ 217.007665][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1974'. [ 217.021094][T15131] EXT4-fs (loop3): 1 truncate cleaned up [ 217.144988][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'. [ 217.315713][T15153] lo speed is unknown, defaulting to 1000 [ 217.470512][T15162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1982'. [ 217.549960][T15171] set_capacity_and_notify: 1 callbacks suppressed [ 217.550033][T15171] loop8: detected capacity change from 0 to 512 [ 217.619183][T15171] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 217.665443][T15171] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 217.680442][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 217.686874][ C1] EXT4-fs (loop8): initial error at time 1787002643: ext4_mb_generate_buddy:1317 [ 217.696022][ C1] EXT4-fs (loop8): last error at time 1787002643: ext4_mb_generate_buddy:1317 [ 217.741232][T15171] EXT4-fs (loop8): 1 truncate cleaned up [ 218.520906][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1987'. [ 218.650705][T15189] For dev_enable ops, only valid value is "1" [ 218.866352][T15192] loop6: detected capacity change from 0 to 512 [ 218.875300][T15198] lo speed is unknown, defaulting to 1000 [ 218.894643][T15192] EXT4-fs: inline encryption not supported [ 218.910353][T15192] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.920336][T15192] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 218.940932][T15192] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1992: Failed to acquire dquot type 1 [ 218.959642][T15192] loop6: lost filesystem error report for type 5 error -5 [ 218.960761][T15192] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, [ 218.968050][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 218.968079][ C0] EXT4-fs (loop6): initial error at time 1787002644: ext4_acquire_dquot:7041 [ 218.968188][ C0] EXT4-fs (loop6): last error at time 1787002644: ext4_acquire_dquot:7041 [ 219.001133][T15192] block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 219.079703][T15192] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #12: comm syz.6.1992: corrupted inode contents [ 219.092528][T15192] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 219.094828][T15192] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #12: comm syz.6.1992: mark_inode_dirty error [ 219.123268][T15192] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 219.124330][T15192] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #12: comm syz.6.1992: corrupted inode contents [ 219.169164][T15192] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 219.172118][T15192] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #12: comm syz.6.1992: mark_inode_dirty error [ 219.206189][T15192] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 219.207715][T15192] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #12: comm syz.6.1992: corrupted inode contents [ 219.244688][T15192] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 219.246344][T15192] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 219.273585][T15192] loop6: lost filesystem error report for type 5 error -117 [ 219.274991][T15192] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #12: comm syz.6.1992: corrupted inode contents [ 219.300288][T15192] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 219.301719][T15192] EXT4-fs error (device loop6): ext4_truncate:4691: inode #12: comm syz.6.1992: mark_inode_dirty error [ 219.324004][T15192] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 219.325458][T15192] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 219.362333][T15192] loop6: lost filesystem error report for type 5 error -117 [ 219.365678][T15192] EXT4-fs (loop6): 1 truncate cleaned up [ 219.409710][T15192] EXT4-fs mount: 39 callbacks suppressed [ 219.409820][T15192] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.446344][T15224] 9pnet_virtio: no channels available for device  [ 219.498485][T12690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.937340][T15235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2001'. [ 219.964986][T15242] For dev_enable ops, only valid value is "1" [ 219.973373][T15239] lo speed is unknown, defaulting to 1000 [ 220.205594][T15264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 220.505368][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2011'. [ 220.557623][T15271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2011'. [ 220.658776][ T5191] kernel read not supported for file /syz3 (pid: 5191 comm: kworker/0:8) [ 220.694969][T15302] lo speed is unknown, defaulting to 1000 [ 221.079236][T15339] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2016'. [ 221.348810][T15332] loop3: detected capacity change from 0 to 512 [ 221.361488][ T28] kauditd_printk_skb: 123 callbacks suppressed [ 221.361504][ T28] audit: type=1400 audit(1787002647.326:39990): avc: denied { write } for pid=15349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.441552][ T28] audit: type=1400 audit(1787002647.406:39991): avc: denied { write } for pid=15373 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.593223][T15332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.631698][ T28] audit: type=1400 audit(1787002647.596:39992): avc: denied { write } for pid=15379 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.648410][T15332] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.674213][ T28] audit: type=1400 audit(1787002647.636:39993): avc: denied { write } for pid=15330 comm="syz.3.2017" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.721411][T15332] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #2: comm syz.3.2017: corrupted inode contents [ 221.739870][ T28] audit: type=1400 audit(1787002647.706:39994): avc: denied { write } for pid=15400 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.792515][T15332] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #2: comm syz.3.2017: mark_inode_dirty error [ 221.843667][T15332] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #2: comm syz.3.2017: corrupted inode contents [ 221.878920][T15422] __nla_validate_parse: 1 callbacks suppressed [ 221.878936][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2033'. [ 221.900224][T15332] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.2017: mark_inode_dirty error [ 221.921329][T15427] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2034'. [ 221.938543][ T28] audit: type=1400 audit(1787002647.906:39995): avc: denied { write } for pid=15410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.045720][ T28] audit: type=1400 audit(1787002648.005:39996): avc: denied { write } for pid=15434 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.072649][T15433] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2036'. [ 222.221619][ T28] audit: type=1400 audit(1787002648.185:39997): avc: denied { write } for pid=15438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.258944][ T8049] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #2: comm syz-executor: corrupted inode contents [ 222.286141][ T28] audit: type=1400 audit(1787002648.215:39998): avc: denied { write } for pid=15452 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.320064][ T8049] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #2: comm syz-executor: mark_inode_dirty error [ 222.352117][T15455] @0Ù: renamed from bond_slave_1 (while UP) [ 222.369829][ T8049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.497124][T15462] loop3: detected capacity change from 0 to 256 [ 222.556634][T15462] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 222.571117][T15462] FAT-fs (loop3): Filesystem has been set read-only [ 222.590099][T15464] lo speed is unknown, defaulting to 1000 [ 222.858156][T15476] loop1: detected capacity change from 0 to 8192 [ 222.951781][T15479] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2046'. [ 223.038108][ T28] audit: type=1400 audit(1787002649.005:39999): avc: denied { write } for pid=15481 comm="syz.6.2047" path="socket:[43659]" dev="sockfs" ino=43659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.433747][T15492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2051'. [ 223.704965][T15498] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 223.838163][T15500] loop8: detected capacity change from 0 to 512 [ 223.864433][T15500] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 223.885752][T15498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2052'. [ 223.911279][T15500] EXT4-fs (loop8): 1 truncate cleaned up [ 223.940515][T15500] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.194266][T14244] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 224.214861][T14244] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 224.279661][T14773] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.324192][T15519] loop3: detected capacity change from 0 to 8192 [ 224.382355][T15521] loop6: detected capacity change from 0 to 512 [ 224.411534][ T3289] ================================================================== [ 224.419637][ T3289] BUG: KCSAN: data-race in set_nlink / set_nlink [ 224.425986][ T3289] [ 224.428308][ T3289] read to 0xffff888107256928 of 4 bytes by task 2980 on cpu 1: [ 224.435853][ T3289] set_nlink+0x29/0xb0 [ 224.439932][ T3289] kernfs_iop_permission+0x1e5/0x220 [ 224.445231][ T3289] inode_permission+0x2a5/0x3b0 [ 224.450092][ T3289] link_path_walk+0x875/0xdd0 [ 224.454781][ T3289] path_lookupat+0x53/0x4c0 [ 224.459301][ T3289] filename_lookup+0x18f/0x390 [ 224.464080][ T3289] vfs_statx+0x96/0x170 [ 224.467642][T15521] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 224.468241][ T3289] vfs_fstatat+0x118/0x170 [ 224.468266][ T3289] __se_sys_newfstatat+0x55/0x3e0 [ 224.468290][ T3289] __x64_sys_newfstatat+0x55/0x70 [ 224.490810][ T3289] x64_sys_call+0x2c64/0x3020 [ 224.495498][ T3289] do_syscall_64+0x136/0x3c0 [ 224.500106][ T3289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.505997][ T3289] [ 224.508319][ T3289] write to 0xffff888107256928 of 4 bytes by task 3289 on cpu 0: [ 224.515943][ T3289] set_nlink+0x99/0xb0 [ 224.520020][ T3289] kernfs_iop_permission+0x1e5/0x220 [ 224.525319][ T3289] inode_permission+0x2a5/0x3b0 [ 224.530182][ T3289] link_path_walk+0x875/0xdd0 [ 224.534869][ T3289] path_openat+0x1ac/0x2000 [ 224.539376][ T3289] do_file_open+0x16c/0x290 [ 224.543876][ T3289] do_sys_openat2+0xa0/0x130 [ 224.548479][ T3289] __x64_sys_openat+0xf2/0x120 [ 224.553259][ T3289] x64_sys_call+0x1e39/0x3020 [ 224.557944][ T3289] do_syscall_64+0x136/0x3c0 [ 224.562540][ T3289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.568441][ T3289] [ 224.570752][ T3289] value changed: 0x00000008 -> 0x00000009 [ 224.576454][ T3289] [ 224.578775][ T3289] Reported by Kernel Concurrency Sanitizer on: [ 224.584914][ T3289] CPU: 0 UID: 0 PID: 3289 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 224.593765][ T3289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.603815][ T3289] ================================================================== [ 224.638341][T15521] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2059: bg 0: block 4: invalid block bitmap [ 224.651148][T15521] loop6: lost filesystem error report for type 5 error -117 [ 224.652866][T15521] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 224.660182][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 224.660202][ C0] EXT4-fs (loop6): initial error at time 1787002650: ext4_validate_block_bitmap:432 [ 224.660225][ C0] EXT4-fs (loop6): last error at time 1787002650: ext4_validate_block_bitmap:432 [ 224.705794][T15521] loop6: lost filesystem error report for type 5 error -117 [ 224.736322][T15521] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2059: invalid indirect mapped block 1 (level 1) [ 224.776424][ T68] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.792411][T15521] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 224.792731][T15521] EXT4-fs (loop6): 1 truncate cleaned up [ 224.828827][T15521] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.872431][ T68] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.944583][ T68] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.024275][ T68] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.142266][ T68] bridge_slave_1: left allmulticast mode [ 225.148065][ T68] bridge_slave_1: left promiscuous mode [ 225.169022][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.191762][ T68] bridge_slave_0: left allmulticast mode [ 225.198151][ T68] bridge_slave_0: left promiscuous mode [ 225.208625][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.216608][T12690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.310451][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.327361][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.339777][ T68] bond0 (unregistering): Released all slaves [ 225.366017][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 225.418878][ T68] hsr_slave_0: left promiscuous mode [ 225.424751][ T68] hsr_slave_1: left promiscuous mode [ 225.432204][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.446106][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.455216][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.464973][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.475266][ T68] veth1_macvtap: left promiscuous mode [ 225.482144][ T68] veth0_macvtap: left promiscuous mode [ 225.488046][ T68] veth1_vlan: left promiscuous mode [ 225.493297][ T68] veth0_vlan: left promiscuous mode [ 225.578754][ T68] team0 (unregistering): Port device team_slave_1 removed [ 225.601407][ T68] team0 (unregistering): Port device team_slave_0 removed [ 225.641787][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 225.766774][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 225.898563][ T3019] 8021q: adding VLAN 0 to HW filter on device eth24