last executing test programs: 2m3.939178098s ago: executing program 3 (id=4): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0x2a, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xdd11}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @call={0x85, 0x0, 0x0, 0xbf}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0x5}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='syzkaller\x00', 0x5bb6, 0xc8, &(0x7f00000008c0)=""/200, 0x40f00, 0x30, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0x1, 0x1ff, 0xfffffff8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) fcntl$dupfd(r1, 0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000)={0x0, 0x400000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, r0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f00000007c0)={[{@noload}, {@acl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x9}}, {@init_itable, 0x0}, {}, {@journal_dev={'journal_dev', 0x3d, 0x10}}, {@i_version}, {@grpjquota}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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") 2m3.856428295s ago: executing program 3 (id=6): io_setup(0x8001, &(0x7f0000000340)=0x0) io_submit(r0, 0x20000000000000ee, &(0x7f0000000340)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @remote, @remote}}}}, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2m3.855062116s ago: executing program 2 (id=3): r0 = epoll_create1(0x80000) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x800) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4) (async) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x97, @empty}, 0x1c, 0x0}}], 0x1, 0x20004800) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) (async) close(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={'ipvlan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}}) 2m3.753801064s ago: executing program 2 (id=7): openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x88880, 0x0) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 2m3.048541687s ago: executing program 2 (id=11): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x6c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb0}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8001}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xeb5}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000580)={0xfb, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0x2e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f00000007c0)={0x2d, 0x2, 0x3de}) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_delete(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x101) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r3, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e25, 0x68, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0xfffefffd}}], 0x18}, 0x4000000) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000000400)={0x240042480, &(0x7f0000000000), &(0x7f0000000240), &(0x7f0000000280)=0x0, {0x4}, &(0x7f00000002c0)=""/141, 0x8d, &(0x7f0000000380)=""/20, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1}, 0x58) ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000540)={&(0x7f0000000480)=""/71, 0x47}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r6, 0xfe0cef4d0db3b49, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000001700)={0xfffffff7, 0xfffffffc, 0x9, 0x1ff}, 0x10) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000016c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001680)={&(0x7f0000001240)={0x424, 0x3f3, 0x200, 0x70bd2d, 0x25dfdbfb, {0x5, 0x2, 0xc, [0xfffff47f, 0x20000000, 0x6, 0x6, 0x9, 0xafc, 0x3, 0xffff4200, 0xa959, 0x7ba464bf, 0x7, 0x8, 0x101, 0x7, 0x2, 0x325, 0x9, 0x3ff, 0x7, 0xfffffff9, 0x6, 0x7, 0x5, 0x81, 0x3, 0x8001, 0xa7, 0x4, 0x401, 0x8, 0x2, 0x4, 0x9, 0x1, 0xb7, 0x10001, 0x1, 0x5, 0xa5, 0x2, 0x6, 0x0, 0x1, 0x0, 0x800, 0xf2, 0x7d280d1f, 0xffffffff, 0x8, 0xc1, 0x6, 0x400, 0xfffffffa, 0x7, 0x28, 0x5, 0x0, 0x4, 0x8d, 0x60, 0x7, 0x1ff, 0x3, 0x7], [0x1, 0x2, 0x0, 0x5, 0xf73, 0x2, 0xd0, 0x2, 0x7, 0x7, 0x0, 0x7fff, 0x3, 0x7, 0x6, 0xe, 0x7, 0x8, 0x0, 0x10001, 0xa890fc39, 0x81, 0x0, 0x2, 0x1, 0x8fbd, 0x81, 0x7, 0x3, 0x4, 0x7ff, 0x3, 0x7, 0xcb, 0xfff, 0x5, 0xf7, 0x48f4, 0x4, 0x6, 0x5, 0x4, 0x100, 0xe56de14, 0x4, 0x1000, 0x6, 0x9, 0x4, 0x1, 0x80, 0x75a, 0xfffffffc, 0x2, 0x6, 0x4, 0x8, 0x4, 0x2, 0x7ff, 0x8, 0x0, 0x0, 0x16ccb3ed], [0x5, 0x9a, 0x200, 0x8, 0x5, 0x2, 0x7fffffff, 0x2, 0x8, 0x0, 0x5, 0x80, 0xc, 0x10001, 0x3, 0x2, 0x1000, 0x8001, 0x7, 0x1, 0xffffffff, 0x2, 0x1b, 0x8, 0xfaf2, 0x3, 0xc2da, 0x3, 0x9, 0x8, 0x175d1586, 0x5, 0x8, 0xb, 0xf1, 0x1, 0xffff, 0x2, 0x0, 0x6, 0xf, 0x70, 0x7fffffff, 0x4, 0xb, 0xfff, 0x5, 0x200, 0x3, 0x7, 0xffffff85, 0xffffff80, 0x8, 0x4, 0x4, 0x80000001, 0xfffffffc, 0x5, 0x82a, 0x5, 0x8, 0x7, 0x3, 0x4], [0x5, 0x6, 0xd, 0x1ff, 0x9, 0x200, 0xe, 0x1, 0x400, 0xff, 0x6, 0x8, 0xad, 0x6, 0x3b, 0x844, 0x2, 0x6, 0xd6a, 0x1, 0xffff0000, 0x2, 0x7ff, 0x8000, 0x3, 0x3, 0x3, 0x7, 0x9, 0xfff, 0x7, 0x6f, 0x401, 0x7, 0xfffffffe, 0x9, 0x5, 0x1, 0x0, 0x9, 0xa3bf, 0xb, 0x2, 0xffff, 0x8000, 0xf, 0x1, 0x8, 0x200, 0x1, 0x3, 0xffffffff, 0xee, 0x3, 0x8001, 0x80, 0x7, 0x2, 0x4b20, 0x7, 0x6, 0x292, 0x8e5b, 0x7], 0x3, ['.:\x00']}, ["", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffa}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) syz_clone3(&(0x7f00000006c0)={0x20040080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0], 0x1}, 0x58) 2m2.857235784s ago: executing program 3 (id=14): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="2c06"], 0x40) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, 0x0, 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) unshare(0x2c020400) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000003940)=[{r8}], 0x1, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) 2m2.617213485s ago: executing program 3 (id=16): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x88880, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x80042, 0x81) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_clone(0x80820000, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000280)="d58a44ecc95034cc05c963e47b6974ae4a9b53d8a8b064bbecf0fe") r3 = open(&(0x7f00000001c0)='./file1\x00', 0x2c102, 0x6e) sendfile(r3, r3, 0x0, 0x800000009) 2m1.887309791s ago: executing program 2 (id=20): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x88880, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x80042, 0x81) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_clone(0x80820000, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000280)="d58a44ecc95034cc05c963e47b6974ae4a9b53d8a8b064bbecf0fe") r3 = open(&(0x7f00000001c0)='./file1\x00', 0x2c102, 0x6e) sendfile(r3, r3, 0x0, 0x800000009) 2m1.474995737s ago: executing program 3 (id=23): socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0x4, @loopback, 0x784}}, 0x81, 0x6}, 0x90) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) mount$cgroup(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000001100), 0x40, &(0x7f0000001280)={[{@cpuset_v2_mode}, {@favordynmods}]}) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000d042dbd7000fcffff1f00000000", @ANYRES32=r3, @ANYBLOB="46000600000000001c00128009000100626f6e6400040000000000000000010002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x7906399c, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000001) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000700)={{}, {0x78, 0x27}, 0x3, 0x0, 0x80}) syz_emit_ethernet(0x86, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fe500000000000008000000000000000000000000000bbfe8000000000000000000000000000aa0802907800000000600000000000110100000000000000000000000000000000fc0200000000000000000000000000002b00000000000000053a000100000000fb36eeca6fad50b375a22a584d16ca55"], 0x0) 2m0.531537521s ago: executing program 2 (id=28): set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)='*', 0x1}], 0x1}}], 0x1, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r4, r4, 0x0, 0xe3aa6ea) 2m0.111485978s ago: executing program 3 (id=31): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x18, 0x20081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xd, 0x2}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in6=@empty, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in6=@private0, 0x20, 0x6c}, @in=@multicast1, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x70bd28, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x3, 0x1, {@ip4=@empty=0xe0000000, 0x86dd}}}]}, 0x38}}, 0x0) 2m0.08497072s ago: executing program 32 (id=31): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x18, 0x20081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xd, 0x2}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in6=@empty, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in6=@private0, 0x20, 0x6c}, @in=@multicast1, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x70bd28, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x3, 0x1, {@ip4=@empty=0xe0000000, 0x86dd}}}]}, 0x38}}, 0x0) 1m59.986729599s ago: executing program 2 (id=33): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x48, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xa}, {0xb}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0x400a, 0x0, 0xfffffffd, 0x1000007b}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000700)="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", 0xec0, r0}, 0x68) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) sendmsg$inet6(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x4}}, [@tmpl={0x184, 0x5, [{{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@dev}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in=@local, 0xfffffffe}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x50}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x100000}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{@in=@remote, 0x4d5, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x3d01, 0x5, 0x2, 0x0, 0x0, 0x9}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000440)='\f7', 0x2}, {&(0x7f00000004c0)="6b0abe2a", 0x4}], 0x2) connect$qrtr(r4, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000000c0)=0x9, 0x4) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000019000000040000000800000195"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m59.936744124s ago: executing program 33 (id=33): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x48, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xa}, {0xb}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0x400a, 0x0, 0xfffffffd, 0x1000007b}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000700)="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", 0xec0, r0}, 0x68) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) sendmsg$inet6(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x4}}, [@tmpl={0x184, 0x5, [{{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@dev}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in=@local, 0xfffffffe}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x50}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x100000}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{@in=@remote, 0x4d5, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x3d01, 0x5, 0x2, 0x0, 0x0, 0x9}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000440)='\f7', 0x2}, {&(0x7f00000004c0)="6b0abe2a", 0x4}], 0x2) connect$qrtr(r4, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000000c0)=0x9, 0x4) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000019000000040000000800000195"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m55.901301962s ago: executing program 0 (id=47): mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x4000010, 0xffffffffffffffff, 0xf331000) io_uring_enter(0xffffffffffffffff, 0x4643, 0x5ec2, 0x25, &(0x7f0000000000)={[0x9]}, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f00000000c0), 0x2c8, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2e, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="380100001800010027bd700000010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x007'], 0x24}}, 0x0) 1m55.011108121s ago: executing program 0 (id=50): rename(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4110}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x40718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) geteuid() sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) 1m54.703722769s ago: executing program 0 (id=53): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x6c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb0}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8001}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xeb5}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000580)={0xfb, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0x2e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f00000007c0)={0x2d, 0x2, 0x3de}) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_delete(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x101) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r2, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e25, 0x68, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0xfffefffd}}], 0x18}, 0x4000000) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000000400)={0x240042480, &(0x7f0000000000), &(0x7f0000000240), &(0x7f0000000280)=0x0, {0x4}, &(0x7f00000002c0)=""/141, 0x8d, &(0x7f0000000380)=""/20, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1}, 0x58) ptrace$getregset(0x4204, r4, 0x201, &(0x7f0000000540)={&(0x7f0000000480)=""/71, 0x47}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r5, 0xfe0cef4d0db3b49, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x10) 1m53.813851368s ago: executing program 0 (id=54): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x88880, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x80042, 0x81) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_clone(0x80820000, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000280)="d58a44ecc95034cc05c963e47b6974ae4a9b53d8a8b064bbecf0fe") open(&(0x7f00000001c0)='./file1\x00', 0x2c102, 0x6e) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) 1m52.899131919s ago: executing program 0 (id=59): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x2, 0x6, 0xb00, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = memfd_create(&(0x7f0000000d40)='[\v\xdbX\xae[\x1a\x02\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91\x05||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbduu\xc3\xf8\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDf\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\xa0 \xadA\xe3\xee\x8f$\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%iC}n\rSF\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe28\xc0\xf4\xee\x19\xce\xedX\x8d\rmq\t\xb5$\xef\xa6N\x9e\x0f@\xdfo\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82~\xb7\xb1<\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xb69\xd3\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb92Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83D\x99\xf3j\xaf\xd0Fd\x81\xbe\xbf\by\x7f\xd8X?\n\xf8P&!\x9d0F\x8dp\xf9:?1\xe8T\x13\xfb\x89\xac\\\xd4\xa9\xa3\xac\x80\xddd\xed\xb1I\xfcz\x9aQ\x03\xcdO\xdfn^\xb4\x97\xd1\x8a%\x8d\xce\xafg\xa2W|v\xc2\x99\x97X\xd7\x8b\x82Z\xa7\xac\xa4\xb1P\x8c\xfd^\xb8=\xd6Q\xdb\x05\x8a\xe2\xed\xaaR\xd9\x1a\xd8\x92\xc8\x1b\xe6f\xd6\xb7rp\x8e\xd7I\xd0lN\xbd\x89\xac&)<\x9d\x8b\xcb\x93p\x90a\xef\xd0?\x02\x93\x83\xb9\xe4b\xfc1@\xde\xd8&\xd0\x8f\xa6G\xe0\xc9\xe9Z\xb4PG\xcf\xed\xf5\x94\x89\x9a\xa8\xd7\x02\xac\x9d\x1b\x9am\x82L\a,;\xcd\x11,\xf9\xe6\xe1\fa\xfe\xdc\xc0A\xc3\xda\x8f$\x87<\xef\xe2\xc2xP\xfc\xd4\xefX\x8doK\x8aa\x98.\x82!\xf9\rS\x04\xd2\xb4I\x1d=\xf9<\xb0?l\xa5\t\xd1j\"\x1e\xe5\xe0\xad\x14\x97\xde\xa3\x97\x9a\x9bq\'\xd4\xbc4\xf2\x9a\xa9\xa5\xb5\x8f\xdfD\xdf\xf9\xdc\xc3\xce\x90\f\xd9_y_\xda\x13p0\x02I\\~aT\xd4\x91\xa2\xb3\xb4\xa9\xdc\x90)\xac\xc6\x01\xf3\x98\x8e\xe2\xc2\f\xa0Yv\xb4\xa9\x99\x85\xd9t\xb9\x9ax@11\b\xba\xc0\xf1/\x1b\xfc\x93\xd8y\x89\xc6bO=w\xd5?C\x01e\x02z\xed[\x12\xd0{\xbc9\xd2Xm\xbe3h\x10\x00\xdfP\xfc\x01\xa19\xea\xae+c\xea\x1a.\x9ap\x0f<+t\x81\x84\xc3r\xcd\xdb\xa6\x84\x8a;l\x018\xda?\x90\xdd#\xaaM\xdcEV(u\xe1\x15\x8b\x88>\x06\x03\xb0\x18\xf6\x86\x88\xf7b\xc1C\xd4\xb3/\tf1\xdbr\xe4\xef\xe9\xa0\xdfht\xa7?\xc1\x13\xee\xa8d=@dN\x83\xbal\xc5\xb9\xbe\x80+y\xf5\xf3WH\x8fg\x00'/1641, 0x7) fallocate(r2, 0x0, 0x8001, 0x6) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m52.090865721s ago: executing program 0 (id=65): r0 = getpid() perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x3, &(0x7f0000000b00)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a50500000000f69b4126f6cb305ac9cec9963af5132bbecca0da0492c24a9f8461b442f830050711785b5d33d95a94d70cbfc869e801269fe049c5b7667679af3c7c01aae9c58eb166622003bea06dcb5e67c95a2ef06f60b312ae8c8e9e89c237b04d25e9c35dafe88ca14e4567a845b73b9e31c3f38a5c83ed4151d36ebaf867bd4712e06b5be8bf4212c630fcc4821591c969"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r2, &(0x7f0000000280)={&(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x0, 0x3, 0x7f, 0x9, "ff3f1c8652f4ae99addde8ce54b68f07f9e30ca59209ae3eaae0de5bd69404465731440e3763b09e4cccbd8fe79fb7798e24c58d0e9b1d15b941f11333e02f", 0x26}, 0x80, 0x0}, 0x20004801) setuid(0xee00) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16=r1], 0x64}, 0x1, 0x0, 0x0, 0xc040}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = inotify_init() r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, 0x0, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x4e21, 0xadd0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4, 0x0, @local, 0x1000}}}, 0x108) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="200008000107010100000000000000000a00000a0900010073797a31000a0000"], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x24000000) close_range(r5, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f0b"], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 1m52.090661701s ago: executing program 34 (id=65): r0 = getpid() perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x3, &(0x7f0000000b00)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a50500000000f69b4126f6cb305ac9cec9963af5132bbecca0da0492c24a9f8461b442f830050711785b5d33d95a94d70cbfc869e801269fe049c5b7667679af3c7c01aae9c58eb166622003bea06dcb5e67c95a2ef06f60b312ae8c8e9e89c237b04d25e9c35dafe88ca14e4567a845b73b9e31c3f38a5c83ed4151d36ebaf867bd4712e06b5be8bf4212c630fcc4821591c969"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r2, &(0x7f0000000280)={&(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x0, 0x3, 0x7f, 0x9, "ff3f1c8652f4ae99addde8ce54b68f07f9e30ca59209ae3eaae0de5bd69404465731440e3763b09e4cccbd8fe79fb7798e24c58d0e9b1d15b941f11333e02f", 0x26}, 0x80, 0x0}, 0x20004801) setuid(0xee00) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16=r1], 0x64}, 0x1, 0x0, 0x0, 0xc040}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = inotify_init() r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, 0x0, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x4e21, 0xadd0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4, 0x0, @local, 0x1000}}}, 0x108) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="200008000107010100000000000000000a00000a0900010073797a31000a0000"], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x24000000) close_range(r5, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f0b"], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 5.690542335s ago: executing program 1 (id=1075): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000040)='.\x00', 0x386a078, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@user_xattr}, {@quota}, {@delalloc}]}, 0x1, 0x553, &(0x7f0000001080)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) 4.908070085s ago: executing program 4 (id=1078): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) clock_gettime(0x0, &(0x7f0000000040)) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r4, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x10002, 0x0) 4.687284814s ago: executing program 1 (id=1081): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@user_xattr}, {@quota}, {@delalloc}]}, 0x1, 0x553, &(0x7f0000001080)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) 3.340231724s ago: executing program 5 (id=1085): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x6c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb0}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8001}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xeb5}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000580)={0xfb, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0x2e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f00000007c0)={0x2d, 0x2, 0x3de}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r2, 0xfe0cef4d0db3b49, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x10) 3.224782974s ago: executing program 4 (id=1087): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$eJzs3c1rHGUYAPBnNps0bapJoRT1IIUerNRuvvyoILQeRYsFvdcl2YaQTbdkN6WJBduDvXgrgogF8Sp491j8B/wrClooUoIeRIjMZjZN0t3NR5Numv39YJL33ZnZd56ded59Z2aXDaBrnUz/5CJejehPi4Nr5uUjm3lyZbmlxzcn0imJ5eXP/koiyR5rLJ9k/weyyisR8dvXEWdyT7dbXVicKZbLpbmsPlybvTZcXVg8Oz1bnCpNla6OjY+fe2d87P333t21WN+89M/3n97/6Nw3p5a+++XhsbtJXIij2by1cTyDW2srJ4v/ZaXeuLBhwdFdaGw/STq9AexIT5bnvZH2AYPRk2U9cPB9FRHLQJdK5D90qcY4oHFuv0vnwS+MRx+unADVY+9bG39+5dpI9NfPjY4sJevOjNLz3aFdaD9t49c/791Np2h/HeLwJnWAbbl1OyJG8vmn+/8k6/92bqR+8bi9jW102/sPdNL9dPzzVrPxX251/BNNxj8DTXJ3JzbP/9zDXWimpXT890HT8e9q1zXUk9Veqo/5epMrA+XSSES8HBGnI+LKdLk02r9yDb2Zc0sPllu1v3b8l05p+42xYLYdD/OH1q8zWawVI6LvWWNPPbod8Vq+WfzJ6v5Pmuz/9PW4tMU2TpTuvd5q3ubx763lnyLeaLr/n9zRStrfnxxO9//Iyt+mbfx958TvrdrvdPzp/j/SPv6hZO392ur22/ix/99Sq3kt41892Jof/33J5/VyIwluFGu1udGIvuSTpx8fe7Juo95YPo3/9Kn2/V+z4z89+fpii/HfOX6n5aL7Yf9Pbmv/byykr0SLWVnhwcdf/tCq/a31f2/XS6ezR7L+r7nsWGmzOesKz/r6AQAAAAAAwH6Si4ijkeQKq+VcrlBY+XzH8TiSK1eqtTNXKvNXJ6P+Xdmh6M017nQPNj4PMV0ujWafh23UxzbUxyPiWER823O4Xi9MVMqTnQ4eAAAAAAAAAAAAAAAAAAAA9omBFt//T/3R0+mtA/Zc/YcNDnV6K4BO2PQn/3fjl56AfWnT/AcOrHX5n3RuO4Dnz/s/dC/5D91L/kP3kv/QveQ/dK+t5P+F57AdAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEBcungxnZaXHt+cSOuT1xfmZyrXz06WqjOF2fmJwkRl7lphqlKZKpcKE5XZiBhs93zlSuXa6FjM3xiulaq14erC4uXZyvzV2uXp2eJU6XKp97lFBgAAAAAAAAAAAAAAAAAAAC+O6sLiTLFcLs0diMLP+b145vPR6bj2uHA+4lZ6MOxo9fx+iUKhReF2luvbW6uz/RIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArPV/AAAA///HtTBf") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'ipvlan1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x5, 0x80000000, 0x1, 0x7, 0x9, 0xa4, 0x100, 0x7, 0x80b69, 0xc1, 0x4, 0x1, 0x6, 0xe416faf4, 0x101, 0x1002, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x65, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x0, 0x40, 0xd, 0xe, 0x1, 0x4100, 0x4, 0x1c00, 0xb, 0x47, 0xbed4, 0x9, 0x8, 0x3, 0x0, 0x11000, 0x7, 0x5, 0x79b, 0x112, 0x1, 0x87, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x101, 0x2, 0x2, 0xf, 0x4, 0x4, 0x2af, 0x6, 0x5, 0x2, 0x6, 0x9, 0x4, 0x6, 0x4009, 0xfffffffe, 0x0, 0x100002, 0x8, 0x752, 0x0, 0x403, 0x0, 0x10001, 0xe, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdfffffc, 0x2, 0x2, 0x84, 0x100, 0x1000, 0x252, 0x81, 0x3, 0x1, 0x20006, 0x5, 0x1, 0xf, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x0, 0x5, 0x8, 0x4000000, 0x4, 0x2, 0x40, 0x8, 0x2, 0x6, 0x100, 0x66cd, 0xc, 0x8, 0x1, 0x1fc, 0xc5c, 0x3ff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan1\x00') getdents(r4, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="2314d75e75b760d1fd2eea6ec22ccc6ebef5f7a5085a14b34645bab449527ca1a7d75e5d4e65478e32cb8dcecd91042240a9423182b1859525de0a54b350e6"], 0x60}}, 0x8000) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) getdents64(0xffffffffffffffff, 0x0, 0x0) 3.111566344s ago: executing program 4 (id=1089): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) socket$kcm(0x10, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa9630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x9, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x0, 0x2}, 0x10) r6 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f0000000180)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRES32=r1, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) io_submit(0x0, 0x2, &(0x7f00000003c0)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xe, r4, &(0x7f0000000340), 0x0, 0xc}]) openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x3c, &(0x7f0000000080)=0x1, 0x4) 3.029677571s ago: executing program 1 (id=1090): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/59, 0x3b}], 0x1}, 0x4075}], 0x1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000018", @ANYRES32=0x0, @ANYBLOB="0c0099000100000050000000"], 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x5607, 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000001c000180060001bf0200000009000300ac3e03fd4d3b1cf71414aa08ca3635bfaa083badea929cb3b0b531f474005ec16d74db0fe74bc624afd726082187346e442ea1316f0fde10f56c4a1f326350d7802b78256310dbd8deca94eeb9b13912"], 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8085) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="28000000020000fb41e4bc38fa96c39e61bab70f94839f6a0209000000050000002231ff1b73d7d6f1edfb2a58278400"], &(0x7f0000000240), 0x600) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.988608205s ago: executing program 5 (id=1091): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) clock_gettime(0x0, &(0x7f0000000040)) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r4, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x10002, 0x0) 2.93274025s ago: executing program 6 (id=1092): r0 = socket$inet6(0xa, 0x0, 0x7ff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x4, 0x2, 0x6, 0x0, 0x10, 0x1a00385, r1}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f00000001c0)={&(0x7f00000000c0)=""/219, 0xdb, 0x5, 0x3}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x408, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3d, &(0x7f0000000340)=0x4, 0x4) r3 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r3, &(0x7f0000000380)=@data_c2h={{0x7, 0x6, 0x18, 0x9, 0x1}, 0x80d, 0x1ff, 0x1ff, 0x1000, "c5f0cb17"}, 0x80, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x2, 0x796}) r5 = openat$cgroup_ro(r4, &(0x7f0000000440)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@getneightbl={0x14, 0x42, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc040) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x8, r1, 0x200}, 0xc) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000005c0)=0x0) r8 = syz_open_procfs(r7, &(0x7f0000000600)='mountinfo\x00') ptrace$peeksig(0x4209, r7, &(0x7f0000000640)={0x2062, 0x1, 0x2}, &(0x7f0000000680)=[{}, {}]) socket$pppl2tp(0x18, 0x1, 0x1) getpid() mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000780)={0x2, 0x4}) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f00000007c0)=0x9) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x11) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000800)=0x2, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r4, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x1d, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x67}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe25}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x2, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x696}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='GPL\x00', 0x8, 0x13, &(0x7f0000000980)=""/19, 0x0, 0x21, '\x00', r1, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a80)=[r5, r9], &(0x7f0000000ac0)=[{0x4, 0x2, 0xe, 0x5}, {0x1, 0x5, 0x6}, {0x4, 0x3, 0x8, 0x7}, {0x0, 0x1, 0xd, 0xc}, {0x0, 0x3, 0x4, 0x4}, {0x4, 0x1, 0xd, 0x4}, {0x2, 0x3, 0x10, 0x7}], 0x10, 0x800}, 0x94) syz_usbip_server_init(0x5) sendmsg$nl_route(r8, &(0x7f0000000cc0)={&(0x7f0000000c00), 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)=@ipv4_newnexthop={0x34, 0x68, 0x0, 0x70bd28, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x11}, [@NHA_GROUP_TYPE={0x6}, @NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x34}, 0x1, 0x0, 0x0, 0x4042800}, 0x8800) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000d00)=@IORING_OP_FALLOCATE={0x11, 0x40, 0x0, @fd_index=0x4, 0x800, 0x0, 0x3f}) 2.160003408s ago: executing program 7 (id=1093): r0 = syz_io_uring_setup(0x10f, &(0x7f0000000580)={0x0, 0xd736, 0x10, 0x1, 0x2bf}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x6000}) io_uring_enter(r0, 0x1b96, 0x106a, 0x22, 0x0, 0x0) 2.100634754s ago: executing program 5 (id=1094): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x6c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb0}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8001}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xeb5}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000580)={0xfb, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0x2e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f00000007c0)={0x2d, 0x2, 0x3de}) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r2, 0xfe0cef4d0db3b49, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x10) 2.019649601s ago: executing program 1 (id=1095): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x80042, 0x81) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x2c102, 0x6e) sendfile(r3, r3, 0x0, 0x800000009) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 2.003618072s ago: executing program 7 (id=1096): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x1, {0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0x6}}}, 0x32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x7, 'vlan1\x00', {0x8}, 0x401}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x2004c015}, 0x40) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000000100)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0}, 0x38) 1.974959425s ago: executing program 7 (id=1097): timer_create(0x7, 0x0, 0xfffffffffffffffe) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) fcntl$setown(r2, 0x8, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000000)={r4, r5}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.814404129s ago: executing program 6 (id=1098): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000001dc0)) pread64(r2, &(0x7f000001a240)=""/102385, 0x18ff1, 0x100008) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0000e3}, 0x4054) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) listen(0xffffffffffffffff, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)="df487b49224027e5d06fa67c8b0795125ed1c8e6fb53bb420053b92c6d92b399df94eb090eed4af4d0909a05ad2e21792f5e16e71c8b7bc35870cb8fbafeeb117f32db7a78bfc6db129462c8db8a1e37b0ad765d9bf4b3bdea870a0dc9c6f7d29ffd69af1c77c8ce8567324542bc05e733410a7c0c3757c150404c3d497b88ad3de5bf8383e7434d1d49ea259ec0996a40c61b9e5ce5579b2fdbfaaf8ca7aafd8448fc92120a308e1b2a513c513e333311939eb7c9aa2deb3c9380f328aa76e98b3569ea6859b71b3c7c44c23c4944bf2d36f6d23691d7bed8f2894b37592684dcc3ec6f0a01391898f06f935e84f8224e4a169e2ee2ed", 0xf7) splice(r1, 0x0, r10, 0x0, 0x38f9, 0x0) splice(r9, 0x0, r4, 0x0, 0x7fffffffffffffff, 0x0) write(r0, &(0x7f0000000040), 0xffffff4a) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) 1.236253161s ago: executing program 5 (id=1099): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r9, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1.090187933s ago: executing program 4 (id=1100): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'ipvlan1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x5, 0x80000000, 0x1, 0x7, 0x9, 0xa4, 0x100, 0x7, 0x80b69, 0xc1, 0x4, 0x1, 0x6, 0xe416faf4, 0x101, 0x1002, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x65, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x0, 0x40, 0xd, 0xe, 0x1, 0x4100, 0x4, 0x1c00, 0xb, 0x47, 0xbed4, 0x9, 0x8, 0x3, 0x0, 0x11000, 0x7, 0x5, 0x79b, 0x112, 0x1, 0x87, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x101, 0x2, 0x2, 0xf, 0x4, 0x4, 0x2af, 0x6, 0x5, 0x2, 0x6, 0x9, 0x4, 0x6, 0x4009, 0xfffffffe, 0x0, 0x100002, 0x8, 0x752, 0x0, 0x403, 0x0, 0x10001, 0xe, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdfffffc, 0x2, 0x2, 0x84, 0x100, 0x1000, 0x252, 0x81, 0x3, 0x1, 0x20006, 0x5, 0x1, 0xf, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x0, 0x5, 0x8, 0x4000000, 0x4, 0x2, 0x40, 0x8, 0x2, 0x6, 0x100, 0x66cd, 0xc, 0x8, 0x1, 0x1fc, 0xc5c, 0x3ff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan1\x00') getdents(r4, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="2314d75e75b760d1fd2eea6ec22ccc6ebef5f7a5085a14b34645bab449527ca1a7d75e5d4e65478e32cb8dcecd91042240a9423182b1859525de0a54b350e6"], 0x60}}, 0x8000) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) getdents64(0xffffffffffffffff, 0x0, 0x0) 1.023676009s ago: executing program 4 (id=1101): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@user_xattr}, {@quota}, {@delalloc}]}, 0x1, 0x553, &(0x7f0000001080)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) 1.01922633s ago: executing program 7 (id=1102): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 963.934025ms ago: executing program 7 (id=1103): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8905, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 939.883157ms ago: executing program 6 (id=1104): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000001000370429bd7000fcdbdf250000", @ANYRES32=r1, @ANYBLOB="890c020000000000440012800b00010069703667726500003400028008000100", @ANYRES32=r1, @ANYBLOB="140007000002"], 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 772.141812ms ago: executing program 7 (id=1105): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/59, 0x3b}], 0x1}, 0x4075}], 0x1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000018", @ANYRES32=0x0, @ANYBLOB="0c0099000100000050000000"], 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x5607, 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000001c000180060001bf0200000009000300ac3e03fd4d3b1cf71414aa08ca3635bfaa083badea929cb3b0b531f474005ec16d74db0fe74bc624afd726082187346e442ea1316f0fde10f56c4a1f326350d7802b78256310dbd8deca94eeb9b13912"], 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8085) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="28000000020000fb41e4bc38fa96c39e61bab70f94839f6a0209000000050000002231ff1b73d7d6f1edfb2a58278400"], &(0x7f0000000240), 0x600) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 768.354542ms ago: executing program 6 (id=1106): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x30, 0x1, @in6={0x1b, 0x4e22, 0xfffffff9, @remote, 0x9}}}, 0xa0) 749.755844ms ago: executing program 6 (id=1107): r0 = syz_io_uring_setup(0x10f, &(0x7f0000000580)={0x0, 0xd736, 0x10, 0x1, 0x2bf}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x6000}) io_uring_enter(r0, 0x1b96, 0x106a, 0x22, 0x0, 0x0) 699.754288ms ago: executing program 6 (id=1108): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) clock_gettime(0x0, &(0x7f0000000040)) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r4, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x10002, 0x0) 577.159489ms ago: executing program 1 (id=1109): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x80042, 0x81) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x2c102, 0x6e) sendfile(r3, r3, 0x0, 0x800000009) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 316.247662ms ago: executing program 5 (id=1110): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x6c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb0}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8001}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xeb5}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000580)={0xfb, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0x2e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f00000007c0)={0x2d, 0x2, 0x3de}) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) syz_clone3(&(0x7f0000000400)={0x240042480, &(0x7f0000000000), &(0x7f0000000240), &(0x7f0000000280)=0x0, {0x4}, &(0x7f00000002c0)=""/141, 0x8d, &(0x7f0000000380)=""/20, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1}, 0x58) ptrace$getregset(0x4204, r2, 0x201, &(0x7f0000000540)={&(0x7f0000000480)=""/71, 0x47}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0xfe0cef4d0db3b49, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x10) 243.722879ms ago: executing program 5 (id=1111): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x19206, 0x20, 0x11000, 0x0, 0x202, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdffffffffffffffc, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x200000, 0x0, 0xff, 0x0, 0x3ff, 0x72}, 0x20) close(r5) 178.583175ms ago: executing program 4 (id=1112): syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000018dfde1035121000822953050a010902"], 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000100)) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x1e9) syz_clone3(&(0x7f0000000340)={0x200103000, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 0s ago: executing program 1 (id=1113): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020db1af8ffa1000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) kernel console output (not intermixed with test programs): 2135] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.547440][ T30] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.765524][ T5510] netlink: 60 bytes leftover after parsing attributes in process `syz.1.470'. [ 82.825379][ T5512] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.471'. [ 82.855189][ T5512] netlink: zone id is out of range [ 82.865907][ T5512] netlink: zone id is out of range [ 82.881267][ T5512] netlink: zone id is out of range [ 82.947522][ T5513] lo speed is unknown, defaulting to 1000 [ 83.003633][ T5512] netlink: set zone limit has 8 unknown bytes [ 83.075797][ T3567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.163080][ T5512] loop1: detected capacity change from 0 to 512 [ 83.213538][ T5512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.421504][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.640516][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 83.647800][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 83.655078][ T5524] netlink: 44 bytes leftover after parsing attributes in process `syz.5.474'. [ 84.041162][ T5538] loop7: detected capacity change from 0 to 128 [ 84.174293][ T5538] vfat: Unknown parameter '00000000000000000000003' [ 84.395060][ T5542] loop5: detected capacity change from 0 to 1024 [ 84.412886][ T5542] EXT4-fs: Ignoring removed orlov option [ 84.441539][ T5542] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 84.492829][ T5542] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.508735][ T5550] loop7: detected capacity change from 0 to 1024 [ 84.572123][ T5561] netlink: 'syz.4.484': attribute type 10 has an invalid length. [ 84.624697][ T5561] team0: Failed to send options change via netlink (err -105) [ 84.655153][ T5561] team0: Port device dummy0 added [ 84.673951][ T5561] netlink: 'syz.4.484': attribute type 10 has an invalid length. [ 84.675715][ T5550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.684869][ T5561] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 84.698602][ T5550] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.718449][ T5561] team0: Failed to send options change via netlink (err -105) [ 84.726986][ T5561] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 84.738544][ T5561] team0: Port device dummy0 removed [ 84.746479][ T5561] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 84.797475][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 84.797493][ T28] audit: type=1326 audit(1771584884.786:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d30fc629 code=0x7ffc0000 [ 84.797646][ T5570] netlink: 'syz.4.485': attribute type 21 has an invalid length. [ 84.804066][ T28] audit: type=1326 audit(1771584884.786:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d30fc629 code=0x7ffc0000 [ 84.827260][ T5570] netlink: 164 bytes leftover after parsing attributes in process `syz.4.485'. [ 84.879025][ T28] audit: type=1326 audit(1771584884.786:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d30fc629 code=0x7ffc0000 [ 84.880172][ T3567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.913857][ T28] audit: type=1326 audit(1771584884.796:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d30fc629 code=0x7ffc0000 [ 84.938362][ T28] audit: type=1326 audit(1771584884.796:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f01d30fc629 code=0x7ffc0000 [ 84.963293][ T28] audit: type=1326 audit(1771584884.796:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d30fc629 code=0x7ffc0000 [ 84.973296][ T5550] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 3: comm syz.7.482: lblock 3 mapped to illegal pblock 3 (length 3) [ 85.003912][ T5550] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 85.017387][ T5550] EXT4-fs (loop7): This should not happen!! Data will be lost [ 85.017387][ T5550] [ 85.032092][ T5571] EXT4-fs error (device loop7): ext4_ext_remove_space:2956: inode #15: comm syz.7.482: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 85.051002][ T28] audit: type=1326 audit(1771584884.796:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d30fc629 code=0x7ffc0000 [ 85.055781][ T5571] EXT4-fs error (device loop7) in ext4_setattr:5983: Corrupt filesystem [ 85.114259][ T28] audit: type=1326 audit(1771584884.796:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d30fc629 code=0x7ffc0000 [ 85.141213][ T28] audit: type=1326 audit(1771584884.796:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d30fc629 code=0x7ffc0000 [ 85.214292][ T28] audit: type=1326 audit(1771584884.796:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f01d30fc629 code=0x7ffc0000 [ 85.258477][ T5580] loop1: detected capacity change from 0 to 2048 [ 85.273114][ T30] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 1) [ 85.287314][ T30] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 85.300585][ T30] EXT4-fs (loop7): This should not happen!! Data will be lost [ 85.300585][ T30] [ 85.313681][ T3896] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.335912][ T3545] loop1: p2 p3 p7 [ 85.442802][ T5580] loop1: p2 p3 p7 [ 85.463770][ T5580] netlink: 14 bytes leftover after parsing attributes in process `syz.1.488'. [ 85.519887][ T5592] loop1: detected capacity change from 0 to 2048 [ 85.586133][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 85.598053][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 85.602664][ T3545] udevd[3545]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 85.647334][ T5596] veth0: entered promiscuous mode [ 85.706344][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 85.722597][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 86.427957][ T5595] veth0: left promiscuous mode [ 86.478338][ T5622] batadv_slave_0: entered promiscuous mode [ 86.495621][ T5627] loop1: detected capacity change from 0 to 1024 [ 86.503678][ T5622] batman_adv: batadv0: Adding interface: macsec1 [ 86.510452][ T5627] EXT4-fs: inline encryption not supported [ 86.519907][ T5622] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.561172][ T5627] EXT4-fs: Ignoring removed bh option [ 86.572532][ T5622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.584232][ T5627] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.594793][ T5622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.594810][ T5622] batman_adv: batadv0: Interface activated: macsec1 [ 86.596003][ T5627] EXT4-fs (loop1): orphan cleanup on readonly fs [ 86.609009][ T5627] EXT4-fs error (device loop1): ext4_quota_enable:7194: comm syz.1.500: inode #2304: comm syz.1.500: iget: illegal inode # [ 86.634295][ T5627] loop1: lost filesystem error report for type 5 error -117 [ 86.634644][ T5627] EXT4-fs (loop1): Remounting filesystem read-only [ 86.641981][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 86.642004][ C0] EXT4-fs (loop1): initial error at time 1771584886: ext4_quota_enable:7194 [ 86.642025][ C0] EXT4-fs (loop1): last error at time 1771584886: ext4_quota_enable:7194 [ 86.676112][ T5627] EXT4-fs warning (device loop1): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 86.691634][ T5627] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 86.698817][ T5627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.712159][ T5627] FAULT_INJECTION: forcing a failure. [ 86.712159][ T5627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.725363][ T5627] CPU: 0 UID: 0 PID: 5627 Comm: syz.1.500 Tainted: G W syzkaller #0 PREEMPT(full) [ 86.725397][ T5627] Tainted: [W]=WARN [ 86.725404][ T5627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 86.725445][ T5627] Call Trace: [ 86.725452][ T5627] [ 86.725488][ T5627] __dump_stack+0x1d/0x30 [ 86.725516][ T5627] dump_stack_lvl+0x95/0xd0 [ 86.725541][ T5627] dump_stack+0x15/0x1b [ 86.725565][ T5627] should_fail_ex+0x263/0x280 [ 86.725589][ T5627] should_fail+0xb/0x20 [ 86.725683][ T5627] should_fail_usercopy+0x1a/0x20 [ 86.725709][ T5627] _copy_from_user+0x1c/0xb0 [ 86.725737][ T5627] kstrtouint_from_user+0x69/0xf0 [ 86.725816][ T5627] proc_fail_nth_write+0x50/0x160 [ 86.725846][ T5627] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 86.725910][ T5627] vfs_write+0x269/0x9f0 [ 86.725940][ T5627] ? __rcu_read_unlock+0x4e/0x70 [ 86.725962][ T5627] ? __fget_files+0x184/0x1c0 [ 86.725988][ T5627] ? mutex_lock+0x57/0x90 [ 86.726069][ T5627] ksys_write+0xdc/0x1a0 [ 86.726136][ T5627] __x64_sys_write+0x40/0x50 [ 86.726168][ T5627] x64_sys_call+0x27e1/0x3020 [ 86.726196][ T5627] do_syscall_64+0x12c/0x370 [ 86.726291][ T5627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.726315][ T5627] RIP: 0033:0x7f984f9bcece [ 86.726408][ T5627] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 86.726427][ T5627] RSP: 002b:00007f984e456fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.726451][ T5627] RAX: ffffffffffffffda RBX: 00007f984e4576c0 RCX: 00007f984f9bcece [ 86.726466][ T5627] RDX: 0000000000000001 RSI: 00007f984e4570a0 RDI: 0000000000000004 [ 86.726505][ T5627] RBP: 00007f984e457090 R08: 0000000000000000 R09: 0000000000000000 [ 86.726519][ T5627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.726533][ T5627] R13: 00007f984fc76038 R14: 00007f984fc75fa0 R15: 00007ffcade26c38 [ 86.726554][ T5627] [ 86.929027][ T5622] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 86.950876][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.195085][ T5644] netlink: 64 bytes leftover after parsing attributes in process `syz.5.503'. [ 87.208140][ T5645] FAULT_INJECTION: forcing a failure. [ 87.208140][ T5645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.269217][ T5645] CPU: 1 UID: 0 PID: 5645 Comm: syz.6.506 Tainted: G W syzkaller #0 PREEMPT(full) [ 87.269250][ T5645] Tainted: [W]=WARN [ 87.269257][ T5645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.269296][ T5645] Call Trace: [ 87.269304][ T5645] [ 87.269312][ T5645] __dump_stack+0x1d/0x30 [ 87.269343][ T5645] dump_stack_lvl+0x95/0xd0 [ 87.269367][ T5645] dump_stack+0x15/0x1b [ 87.269387][ T5645] should_fail_ex+0x263/0x280 [ 87.269417][ T5645] should_fail+0xb/0x20 [ 87.269479][ T5645] should_fail_usercopy+0x1a/0x20 [ 87.269514][ T5645] _copy_from_user+0x1c/0xb0 [ 87.269566][ T5645] kstrtouint_from_user+0x69/0xf0 [ 87.269597][ T5645] proc_fail_nth_write+0x50/0x160 [ 87.269624][ T5645] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 87.269727][ T5645] vfs_write+0x269/0x9f0 [ 87.269758][ T5645] ? __schedule+0x85a/0xd40 [ 87.269861][ T5645] ? __rcu_read_unlock+0x4e/0x70 [ 87.269880][ T5645] ? __fget_files+0x184/0x1c0 [ 87.269931][ T5645] ? mutex_lock+0x57/0x90 [ 87.270038][ T5645] ksys_write+0xdc/0x1a0 [ 87.270067][ T5645] __x64_sys_write+0x40/0x50 [ 87.270173][ T5645] x64_sys_call+0x27e1/0x3020 [ 87.270204][ T5645] do_syscall_64+0x12c/0x370 [ 87.270234][ T5645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.270303][ T5645] RIP: 0033:0x7f0d6eb2cece [ 87.270328][ T5645] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 87.270404][ T5645] RSP: 002b:00007f0d6d59dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.270439][ T5645] RAX: ffffffffffffffda RBX: 00007f0d6d59e6c0 RCX: 00007f0d6eb2cece [ 87.270456][ T5645] RDX: 0000000000000001 RSI: 00007f0d6d59e0a0 RDI: 0000000000000003 [ 87.270508][ T5645] RBP: 00007f0d6d59e090 R08: 0000000000000000 R09: 0000000000000000 [ 87.270520][ T5645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.270532][ T5645] R13: 00007f0d6ede6128 R14: 00007f0d6ede6090 R15: 00007ffc59e1a1c8 [ 87.270550][ T5645] [ 87.613917][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.6.507'. [ 87.629592][ T5639] loop1: detected capacity change from 0 to 1024 [ 87.645657][ T5639] EXT4-fs: Ignoring removed orlov option [ 87.678923][ T5639] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 87.748060][ T5639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.911668][ T5665] veth0: entered promiscuous mode [ 88.018117][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.788867][ T5678] loop1: detected capacity change from 0 to 1024 [ 88.830362][ T5678] EXT4-fs: Ignoring removed orlov option [ 88.900290][ T5678] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 89.019947][ T5661] veth0: left promiscuous mode [ 89.060670][ T5678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.497501][ T5706] netlink: 'syz.6.522': attribute type 10 has an invalid length. [ 89.552281][ T5706] team0: Failed to send options change via netlink (err -105) [ 89.556073][ T5709] netlink: 'syz.6.522': attribute type 10 has an invalid length. [ 89.614911][ T5706] team0: Port device dummy0 added [ 89.633067][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.673304][ T5709] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 89.688612][ T5709] team0: Failed to send options change via netlink (err -105) [ 89.722331][ T5709] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 89.791339][ T5709] team0: Port device dummy0 removed [ 89.798711][ T5709] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 90.109350][ T28] kauditd_printk_skb: 249 callbacks suppressed [ 90.109371][ T28] audit: type=1400 audit(1771584890.076:868): avc: denied { bind } for pid=5729 comm="syz.6.530" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.319359][ T5715] loop1: detected capacity change from 0 to 128 [ 90.366402][ T5741] loop6: detected capacity change from 0 to 1024 [ 90.367421][ T5715] vfat: Unknown parameter '00000000000000000000003' [ 90.395072][ T5741] EXT4-fs: Ignoring removed orlov option [ 90.408701][ T5741] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 90.497179][ T5741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.768797][ T5737] loop5: detected capacity change from 0 to 1024 [ 90.932339][ T5737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 90.949617][ T5737] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.050675][ T3582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.074542][ T5754] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.531: lblock 3 mapped to illegal pblock 3 (length 3) [ 91.074967][ T5754] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 91.075047][ T5754] EXT4-fs (loop5): This should not happen!! Data will be lost [ 91.075047][ T5754] [ 91.138812][ T40] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 91.139171][ T40] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 91.166117][ T40] EXT4-fs (loop5): This should not happen!! Data will be lost [ 91.166117][ T40] [ 91.177432][ T3567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 91.182369][ T5757] loop6: detected capacity change from 0 to 512 [ 91.221423][ T5757] EXT4-fs (loop6): orphan cleanup on readonly fs [ 91.221597][ T5757] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 91.221851][ T5757] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 1024: comm syz.6.538: invalid block [ 91.221918][ T5757] fserror_report: 1 callbacks suppressed [ 91.221930][ T5757] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 91.222028][ T5757] EXT4-fs (loop6): Remounting filesystem read-only [ 91.222123][ T5757] EXT4-fs (loop6): 1 truncate cleaned up [ 91.222675][ T5757] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.365217][ T5757] netlink: 28 bytes leftover after parsing attributes in process `syz.6.538'. [ 91.365248][ T5757] netlink: 'syz.6.538': attribute type 7 has an invalid length. [ 91.365259][ T5757] netlink: 'syz.6.538': attribute type 8 has an invalid length. [ 91.365279][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.6.538'. [ 91.395860][ T3582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.656662][ T5751] loop1: detected capacity change from 0 to 1024 [ 91.718883][ T5769] loop6: detected capacity change from 0 to 128 [ 91.753133][ T5769] vfat: Unknown parameter '00000000000000000000003' [ 91.780978][ T5751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 91.782306][ T5751] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.887031][ T5773] loop6: detected capacity change from 0 to 1024 [ 91.904516][ T28] audit: type=1400 audit(1771584891.906:869): avc: denied { mounton } for pid=5772 comm="syz.6.543" path="/112/file0" dev="tmpfs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 91.904624][ T5773] EXT4-fs: inline encryption not supported [ 91.904658][ T5773] EXT4-fs: Ignoring removed bh option [ 91.905023][ T5773] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.911526][ T5773] EXT4-fs (loop6): orphan cleanup on readonly fs [ 91.911842][ T5773] EXT4-fs error (device loop6): ext4_quota_enable:7194: comm syz.6.543: inode #2304: comm syz.6.543: iget: illegal inode # [ 91.911924][ T5773] loop6: lost filesystem error report for type 5 error -117 [ 91.912122][ T5773] EXT4-fs (loop6): Remounting filesystem read-only [ 91.912156][ T5773] EXT4-fs warning (device loop6): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 91.912205][ T5773] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 91.912630][ T5773] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.913098][ T5773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.968709][ T5751] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.537: lblock 3 mapped to illegal pblock 3 (length 3) [ 91.970136][ T5751] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 91.970284][ T5751] EXT4-fs (loop1): This should not happen!! Data will be lost [ 91.970284][ T5751] [ 91.979408][ T28] audit: type=1400 audit(1771584891.976:870): avc: denied { relabelfrom } for pid=5776 comm="syz.6.544" name="NETLINK" dev="sockfs" ino=12062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.979442][ T28] audit: type=1400 audit(1771584891.976:871): avc: denied { relabelto } for pid=5776 comm="syz.6.544" name="NETLINK" dev="sockfs" ino=12062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 92.006659][ T40] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 92.007023][ T40] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 92.196094][ T40] EXT4-fs (loop1): This should not happen!! Data will be lost [ 92.196094][ T40] [ 92.197905][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 92.228777][ T5781] loop1: detected capacity change from 0 to 128 [ 92.237271][ T5783] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.252919][ T5783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.546'. [ 92.307713][ T5783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.546'. [ 92.308078][ T5783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.546'. [ 92.308363][ T5783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.546'. [ 92.355568][ T28] audit: type=1400 audit(1771584892.346:872): avc: denied { write } for pid=5780 comm="syz.1.545" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 92.355603][ T28] audit: type=1400 audit(1771584892.346:873): avc: denied { mounton } for pid=5780 comm="syz.1.545" path="/125/bus" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 92.355691][ T28] audit: type=1326 audit(1771584892.346:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984f9fc629 code=0x7ffc0000 [ 92.355715][ T28] audit: type=1326 audit(1771584892.346:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984f9fc629 code=0x7ffc0000 [ 92.355784][ T28] audit: type=1326 audit(1771584892.346:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984f9fc629 code=0x7ffc0000 [ 92.355811][ T28] audit: type=1326 audit(1771584892.346:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984f9fc629 code=0x7ffc0000 [ 92.442446][ T5788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.545'. [ 92.692049][ T5790] set_capacity_and_notify: 1 callbacks suppressed [ 92.692170][ T5790] loop5: detected capacity change from 0 to 1024 [ 92.707858][ T5790] EXT4-fs: Ignoring removed orlov option [ 92.735365][ T5790] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 92.768772][ T5790] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.769158][ T5717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.802740][ T5798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.550'. [ 92.872754][ T5803] netlink: 16 bytes leftover after parsing attributes in process `syz.7.552'. [ 92.934620][ T5813] 9p: Could not find request transport: io [ 92.992128][ T5820] tipc: Enabling of bearer rejected, failed to enable media [ 93.339628][ T3567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.608684][ T5864] netlink: 16 bytes leftover after parsing attributes in process `syz.5.564'. [ 93.632202][ T5862] loop1: detected capacity change from 0 to 8192 [ 93.931459][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 93.931684][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.950652][ C1] bridge0: topology change detected, propagating [ 93.957072][ C1] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 93.963599][ C1] bridge0: topology change detected, propagating [ 94.103098][ T5875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.194325][ T5881] netlink: 'syz.5.568': attribute type 10 has an invalid length. [ 94.225462][ T5881] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 94.697961][ T5894] 9p: Bad value for 'rfdno' [ 94.830379][ T5901] netlink: 20 bytes leftover after parsing attributes in process `syz.5.577'. [ 94.883498][ T5905] netlink: 20 bytes leftover after parsing attributes in process `syz.5.577'. [ 94.884275][ T5904] loop1: detected capacity change from 0 to 2048 [ 95.393252][ T5907] loop5: detected capacity change from 0 to 128 [ 95.512674][ T5907] vfat: Unknown parameter '00000000000000000000003' [ 95.582104][ T5911] loop6: detected capacity change from 0 to 512 [ 95.616187][ T5911] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.714304][ T5917] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 95.735394][ T5919] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 95.744587][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 95.744601][ T28] audit: type=1400 audit(1771584895.736:889): avc: denied { mac_admin } for pid=5915 comm="syz.5.583" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.807507][ T5917] SELinux: failed to load policy [ 95.828761][ T28] audit: type=1400 audit(1771584895.776:890): avc: denied { relabelto } for pid=5915 comm="syz.5.583" name="113" dev="tmpfs" ino=607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 95.904530][ T5933] lo speed is unknown, defaulting to 1000 [ 95.912694][ T28] audit: type=1400 audit(1771584895.776:891): avc: denied { associate } for pid=5915 comm="syz.5.583" name="113" dev="tmpfs" ino=607 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsa" [ 95.986489][ T28] audit: type=1400 audit(1771584895.806:892): avc: denied { remove_name } for pid=3567 comm="syz-executor" name="memory.swap.events" dev="tmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 96.074587][ T5940] loop5: detected capacity change from 0 to 512 [ 96.111687][ T5940] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 96.183323][ T28] audit: type=1400 audit(1771584895.806:893): avc: denied { rmdir } for pid=3567 comm="syz-executor" name="113" dev="tmpfs" ino=607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 96.184551][ T5940] EXT4-fs (loop5): 1 truncate cleaned up [ 96.248703][ T5940] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.347872][ T5951] loop7: detected capacity change from 0 to 512 [ 96.365948][ T5951] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.540661][ T5960] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 96.572039][ T5960] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.635748][ T28] audit: type=1400 audit(1771584896.636:894): avc: denied { bind } for pid=5959 comm="syz.7.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 96.716524][ T28] audit: type=1326 audit(1771584896.716:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.7.601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe83747c629 code=0x0 [ 97.067325][ T5989] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 97.078730][ T5989] bridge1: entered promiscuous mode [ 97.083986][ T5989] bridge1: entered allmulticast mode [ 97.680131][ T6009] lo speed is unknown, defaulting to 1000 [ 98.103317][ T6030] loop1: detected capacity change from 0 to 128 [ 98.207359][ T6034] 9p: Bad value for 'rfdno' [ 98.732327][ T6039] loop1: detected capacity change from 0 to 1024 [ 98.839508][ T6039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 98.867875][ T6039] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.913364][ T3567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.944046][ T6046] netlink: 'syz.7.632': attribute type 10 has an invalid length. [ 99.002431][ T6051] netlink: 'syz.7.632': attribute type 10 has an invalid length. [ 99.073572][ T6046] team0: Port device dummy0 added [ 99.120156][ T6051] team0: Port device dummy0 removed [ 99.207243][ T6039] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.630: lblock 3 mapped to illegal pblock 3 (length 3) [ 99.230300][ T6051] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 99.271731][ T6039] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 99.317263][ T6039] EXT4-fs (loop1): This should not happen!! Data will be lost [ 99.317263][ T6039] [ 99.422847][ T40] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 99.479009][ T40] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 99.497914][ T6066] 9p: Bad value for 'rfdno' [ 99.523488][ T40] EXT4-fs (loop1): This should not happen!! Data will be lost [ 99.523488][ T40] [ 99.795964][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 100.107184][ T6071] loop5: detected capacity change from 0 to 1024 [ 100.119904][ T6071] EXT4-fs: Ignoring removed orlov option [ 100.147862][ T6071] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 100.310802][ T6071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.613656][ T6092] loop1: detected capacity change from 0 to 512 [ 100.714945][ T6092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.727696][ T6092] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.755777][ T6092] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 101.003339][ T3567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.061368][ T6097] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 101.341829][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.811663][ T28] audit: type=1326 audit(1771584901.796:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.5.655" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effd3afc629 code=0x0 [ 101.974014][ T6110] loop1: detected capacity change from 0 to 1024 [ 102.047243][ T6123] loop6: detected capacity change from 0 to 1024 [ 102.113558][ T6110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.126518][ T6123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.129392][ T6123] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.140365][ T6110] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.297517][ T6110] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.652: lblock 3 mapped to illegal pblock 3 (length 3) [ 102.313869][ T6110] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 102.327691][ T6110] EXT4-fs (loop1): This should not happen!! Data will be lost [ 102.327691][ T6110] [ 102.357910][ T5614] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 102.373010][ T5614] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 102.383248][ T6123] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 3: comm syz.6.656: lblock 3 mapped to illegal pblock 3 (length 3) [ 102.385940][ T5614] EXT4-fs (loop1): This should not happen!! Data will be lost [ 102.385940][ T5614] [ 102.409624][ T6123] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 102.410778][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 102.434154][ T6123] EXT4-fs (loop6): This should not happen!! Data will be lost [ 102.434154][ T6123] [ 102.502670][ T40] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 102.517562][ T40] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 102.530739][ T40] EXT4-fs (loop6): This should not happen!! Data will be lost [ 102.530739][ T40] [ 102.542269][ T3582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 102.561716][ T6139] loop1: detected capacity change from 0 to 128 [ 102.583302][ T6139] vfat: Unknown parameter '00000000000000000000003' [ 102.675149][ T6145] __nla_validate_parse: 6 callbacks suppressed [ 102.675169][ T6145] netlink: 40 bytes leftover after parsing attributes in process `syz.5.663'. [ 102.703270][ T6145] netlink: 40 bytes leftover after parsing attributes in process `syz.5.663'. [ 102.746751][ T6147] 9p: Bad value for 'rfdno' [ 102.833062][ T6141] loop6: detected capacity change from 0 to 1024 [ 102.846185][ T6141] EXT4-fs: Ignoring removed orlov option [ 102.870968][ T6141] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 102.993348][ T6141] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.397019][ T3582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.488782][ T6169] netlink: 40 bytes leftover after parsing attributes in process `syz.6.670'. [ 103.513641][ T6169] netlink: 40 bytes leftover after parsing attributes in process `syz.6.670'. [ 103.554321][ T6170] loop5: detected capacity change from 0 to 128 [ 103.578946][ T6170] vfat: Unknown parameter '00000000000000000000003' [ 103.798808][ T6172] loop6: detected capacity change from 0 to 1024 [ 103.833164][ T6172] EXT4-fs: Ignoring removed orlov option [ 103.883830][ T6172] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 103.963580][ T6168] netlink: 60 bytes leftover after parsing attributes in process `syz.1.671'. [ 103.974305][ T6172] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.175157][ T6183] loop5: detected capacity change from 0 to 512 [ 104.192011][ T6183] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.217183][ T6158] loop7: detected capacity change from 0 to 1024 [ 104.402000][ T3582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.426752][ T6158] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 104.473157][ T6188] loop1: detected capacity change from 0 to 1024 [ 104.485412][ T6188] EXT4-fs: Ignoring removed orlov option [ 104.505603][ T6158] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.577088][ T6188] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 104.601646][ T2514] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.620699][ T2514] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.654465][ T2514] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.682034][ T6188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.684335][ T2514] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.705352][ T6198] loop5: detected capacity change from 0 to 128 [ 104.712162][ T6198] msdos: Bad value for 'gid' [ 104.716838][ T6198] msdos: Bad value for 'gid' [ 104.857223][ T28] audit: type=1326 audit(1771584904.856:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.4.680" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01d30fc629 code=0x0 [ 104.903072][ T6158] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 3: comm syz.7.668: lblock 3 mapped to illegal pblock 3 (length 3) [ 104.922791][ T6158] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 104.948959][ T6158] EXT4-fs (loop7): This should not happen!! Data will be lost [ 104.948959][ T6158] [ 104.976797][ T2514] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 105.016976][ T2514] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 105.030026][ T2514] EXT4-fs (loop7): This should not happen!! Data will be lost [ 105.030026][ T2514] [ 105.042027][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.052749][ T3896] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 105.094063][ T6213] netlink: 'syz.7.681': attribute type 10 has an invalid length. [ 105.109358][ T6213] bond0: (slave dummy0): Releasing backup interface [ 105.120621][ T6213] team0: Port device dummy0 added [ 105.133873][ T6213] netlink: 'syz.7.681': attribute type 10 has an invalid length. [ 105.157201][ T6213] team0: Port device dummy0 removed [ 105.165346][ T6213] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 105.824142][ T6222] loop6: detected capacity change from 0 to 1024 [ 105.949757][ T6229] loop5: detected capacity change from 0 to 512 [ 105.998228][ T6222] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 106.022554][ T6229] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.083960][ T6222] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.296376][ T6231] loop5: detected capacity change from 0 to 1764 [ 106.351252][ T6222] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 3: comm syz.6.686: lblock 3 mapped to illegal pblock 3 (length 3) [ 106.381266][ T6222] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 106.461061][ T6222] EXT4-fs (loop6): This should not happen!! Data will be lost [ 106.461061][ T6222] [ 106.594488][ T6242] loop7: detected capacity change from 0 to 128 [ 106.601155][ T6242] msdos: Bad value for 'gid' [ 106.605755][ T6242] msdos: Bad value for 'gid' [ 106.650095][ T2135] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 106.685950][ T2135] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 106.707348][ T6244] 9p: Bad value for 'rfdno' [ 106.744043][ T2135] EXT4-fs (loop6): This should not happen!! Data will be lost [ 106.744043][ T2135] [ 106.784445][ T3582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 106.859125][ T6238] EXT4-fs: Ignoring removed orlov option [ 106.866069][ T28] audit: type=1326 audit(1771584906.846:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6246 comm="syz.4.697" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01d30fc629 code=0x0 [ 106.906324][ T6238] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 107.049830][ T6252] FAULT_INJECTION: forcing a failure. [ 107.049830][ T6252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.109996][ T6252] CPU: 0 UID: 0 PID: 6252 Comm: syz.7.698 Tainted: G W syzkaller #0 PREEMPT(full) [ 107.110036][ T6252] Tainted: [W]=WARN [ 107.110045][ T6252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.110108][ T6252] Call Trace: [ 107.110114][ T6252] [ 107.110123][ T6252] __dump_stack+0x1d/0x30 [ 107.110151][ T6252] dump_stack_lvl+0x95/0xd0 [ 107.110256][ T6252] dump_stack+0x15/0x1b [ 107.110275][ T6252] should_fail_ex+0x263/0x280 [ 107.110296][ T6252] should_fail+0xb/0x20 [ 107.110328][ T6252] should_fail_usercopy+0x1a/0x20 [ 107.110362][ T6252] _copy_to_user+0x20/0xa0 [ 107.110392][ T6252] simple_read_from_buffer+0xb5/0x130 [ 107.110417][ T6252] proc_fail_nth_read+0x10e/0x150 [ 107.110528][ T6252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.110559][ T6252] vfs_read+0x1ab/0x7f0 [ 107.110650][ T6252] ? __rcu_read_unlock+0x4e/0x70 [ 107.110675][ T6252] ? __fget_files+0x184/0x1c0 [ 107.110743][ T6252] ? mutex_lock+0x57/0x90 [ 107.110774][ T6252] ksys_read+0xdc/0x1a0 [ 107.110879][ T6252] __x64_sys_read+0x40/0x50 [ 107.110929][ T6252] x64_sys_call+0x2886/0x3020 [ 107.110956][ T6252] do_syscall_64+0x12c/0x370 [ 107.111103][ T6252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.111137][ T6252] RIP: 0033:0x7fe83743cece [ 107.111156][ T6252] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.111178][ T6252] RSP: 002b:00007fe835ed6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.111204][ T6252] RAX: ffffffffffffffda RBX: 00007fe835ed76c0 RCX: 00007fe83743cece [ 107.111221][ T6252] RDX: 000000000000000f RSI: 00007fe835ed70a0 RDI: 0000000000000005 [ 107.111235][ T6252] RBP: 00007fe835ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.111325][ T6252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.111341][ T6252] R13: 00007fe8376f6038 R14: 00007fe8376f5fa0 R15: 00007fffb601bdc8 [ 107.111369][ T6252] [ 107.326103][ T6238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.464037][ T6256] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.477316][ T6256] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.843050][ T6256] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 107.915562][ T3582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.978425][ T6274] FAULT_INJECTION: forcing a failure. [ 107.978425][ T6274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.994021][ T6274] CPU: 0 UID: 0 PID: 6274 Comm: syz.6.704 Tainted: G W syzkaller #0 PREEMPT(full) [ 107.994079][ T6274] Tainted: [W]=WARN [ 107.994087][ T6274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.994098][ T6274] Call Trace: [ 107.994104][ T6274] [ 107.994112][ T6274] __dump_stack+0x1d/0x30 [ 107.994142][ T6274] dump_stack_lvl+0x95/0xd0 [ 107.994198][ T6274] dump_stack+0x15/0x1b [ 107.994224][ T6274] should_fail_ex+0x263/0x280 [ 107.994251][ T6274] should_fail+0xb/0x20 [ 107.994274][ T6274] should_fail_usercopy+0x1a/0x20 [ 107.994300][ T6274] _copy_from_iter+0xcf/0xea0 [ 107.994365][ T6274] ? __alloc_skb+0x4f6/0x690 [ 107.994396][ T6274] ? __alloc_skb+0x200/0x690 [ 107.994421][ T6274] netlink_sendmsg+0x4ae/0x6f0 [ 107.994497][ T6274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.994528][ T6274] ____sys_sendmsg+0x5af/0x600 [ 107.994561][ T6274] ___sys_sendmsg+0x195/0x1e0 [ 107.994621][ T6274] __x64_sys_sendmsg+0xd4/0x160 [ 107.994656][ T6274] x64_sys_call+0x194c/0x3020 [ 107.994712][ T6274] do_syscall_64+0x12c/0x370 [ 107.994747][ T6274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.994767][ T6274] RIP: 0033:0x7f0d6eb6c629 [ 107.994782][ T6274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.994835][ T6274] RSP: 002b:00007f0d6d5bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.994861][ T6274] RAX: ffffffffffffffda RBX: 00007f0d6ede5fa0 RCX: 00007f0d6eb6c629 [ 107.994877][ T6274] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 107.994889][ T6274] RBP: 00007f0d6d5bf090 R08: 0000000000000000 R09: 0000000000000000 [ 107.994904][ T6274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.994999][ T6274] R13: 00007f0d6ede6038 R14: 00007f0d6ede5fa0 R15: 00007ffc59e1a1c8 [ 107.995073][ T6274] [ 108.274818][ T3567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.735768][ T6295] set_capacity_and_notify: 2 callbacks suppressed [ 108.735786][ T6295] loop6: detected capacity change from 0 to 512 [ 108.779637][ T6295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.801137][ T6295] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.818615][ T6295] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.713: corrupted xattr block 33: invalid ea_ino [ 108.832171][ T6295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 108.841536][ T6295] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.713: corrupted xattr block 33: invalid ea_ino [ 108.855894][ T6295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 108.876412][ T28] audit: type=1400 audit(1771584908.876:899): avc: denied { link } for pid=6294 comm="syz.6.713" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 108.901187][ T6295] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.713: corrupted xattr block 33: invalid ea_ino [ 108.914613][ T6295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 108.923927][ T6298] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.713: corrupted xattr block 33: invalid ea_ino [ 108.972898][ T6298] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 108.998663][ T6298] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.713: corrupted xattr block 33: invalid ea_ino [ 108.998685][ T28] audit: type=1400 audit(1771584908.996:900): avc: denied { read write } for pid=6294 comm="syz.6.713" name="bus" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.038909][ T6298] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 109.048270][ T6298] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.713: corrupted xattr block 33: invalid ea_ino [ 109.051125][ T28] audit: type=1400 audit(1771584909.046:901): avc: denied { open } for pid=6294 comm="syz.6.713" path="/149/file1/bus" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.084519][ T6298] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.713: corrupted xattr block 33: invalid ea_ino [ 109.109026][ T6298] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 109.129782][ T28] audit: type=1400 audit(1771584909.126:902): avc: denied { getopt } for pid=6299 comm="syz.7.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.155658][ T6298] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 109.173773][ T28] audit: type=1400 audit(1771584909.126:903): avc: denied { create } for pid=6299 comm="syz.7.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 109.178027][ T6305] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.394453][ T3582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.490346][ T6320] loop7: detected capacity change from 0 to 512 [ 109.597840][ T6320] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.610542][ T6320] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.658340][ T6320] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 110.595359][ T6328] loop6: detected capacity change from 0 to 512 [ 110.608902][ T3896] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.666214][ T6328] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.679364][ T6328] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.745357][ T6327] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 110.944426][ T3582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.952637][ T6344] netlink: 'syz.4.729': attribute type 10 has an invalid length. [ 111.022045][ T6344] bond0: (slave dummy0): Releasing backup interface [ 111.044520][ T6347] netlink: 'syz.4.729': attribute type 10 has an invalid length. [ 111.063268][ T6344] team0: Port device dummy0 added [ 111.193064][ T6347] team0: Port device dummy0 removed [ 111.221944][ T6347] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 111.418148][ T6335] loop7: detected capacity change from 0 to 1024 [ 111.597652][ T6335] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 111.632753][ T6335] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.687598][ T6363] bond2: option mode: unable to set because the bond device is up [ 112.040454][ T6362] loop1: detected capacity change from 0 to 1024 [ 112.068229][ T6362] EXT4-fs: Ignoring removed orlov option [ 112.163195][ T3896] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 112.174467][ T6362] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 112.214064][ T6362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.239141][ T6350] loop5: detected capacity change from 0 to 1024 [ 112.317016][ T6372] loop6: detected capacity change from 0 to 512 [ 112.355242][ T6372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.367891][ T6372] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.727077][ T6350] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 112.752427][ T6385] loop7: detected capacity change from 0 to 256 [ 112.784078][ T6350] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.789931][ T6372] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 112.812512][ T6376] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 112.830458][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.852615][ T28] audit: type=1400 audit(1771584912.856:904): avc: denied { read } for pid=6388 comm="syz.4.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 113.032163][ T6395] tmpfs: Bad value for 'mpol' [ 113.033071][ T28] audit: type=1400 audit(1771584913.036:905): avc: denied { mounton } for pid=6384 comm="syz.7.740" path="/110/file0/file0" dev="loop7" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 113.039448][ T6350] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.731: lblock 3 mapped to illegal pblock 3 (length 3) [ 113.082720][ T3582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.120866][ T28] audit: type=1326 audit(1771584913.116:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.1.745" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f984f9fc629 code=0x0 [ 113.123463][ T6350] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 113.161100][ T6350] EXT4-fs (loop5): This should not happen!! Data will be lost [ 113.161100][ T6350] [ 113.192038][ T40] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 113.217373][ T40] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 113.233623][ T40] EXT4-fs (loop5): This should not happen!! Data will be lost [ 113.233623][ T40] [ 113.405856][ T3567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 113.662449][ T6413] 8021q: adding VLAN 0 to HW filter on device bond3 [ 114.128707][ T6417] netlink: 'syz.7.749': attribute type 10 has an invalid length. [ 114.158991][ T6417] bond0: (slave dummy0): Releasing backup interface [ 114.188663][ T6421] netlink: 'syz.7.749': attribute type 10 has an invalid length. [ 114.211761][ T28] audit: type=1400 audit(1771584914.216:907): avc: denied { create } for pid=6423 comm="syz.6.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 114.233411][ T6417] team0: Port device dummy0 added [ 114.260277][ T6421] team0: Port device dummy0 removed [ 114.272823][ T6428] netlink: 2 bytes leftover after parsing attributes in process `syz.1.753'. [ 114.284561][ T6421] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 114.293306][ T28] audit: type=1400 audit(1771584914.276:908): avc: denied { write } for pid=6423 comm="syz.6.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 114.367046][ T6436] loop7: detected capacity change from 0 to 1024 [ 114.385161][ T6434] netlink: 'syz.1.756': attribute type 10 has an invalid length. [ 114.404205][ T6436] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.439558][ T6443] netlink: 'syz.1.756': attribute type 10 has an invalid length. [ 114.482603][ T6434] team0: Port device dummy0 added [ 114.537666][ T6443] team0: Port device dummy0 removed [ 114.584258][ T6443] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 114.620301][ T28] audit: type=1326 audit(1771584914.616:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6453 comm="syz.4.761" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01d30fc629 code=0x0 [ 114.678957][ T6458] netlink: 'syz.6.772': attribute type 10 has an invalid length. [ 114.696567][ T6458] bond0: (slave dummy0): Releasing backup interface [ 114.708647][ T6458] team0: Port device dummy0 added [ 114.714081][ T6448] loop5: detected capacity change from 0 to 128 [ 114.825796][ T6463] netlink: 'syz.6.772': attribute type 10 has an invalid length. [ 114.871419][ T28] audit: type=1400 audit(1771584914.876:910): avc: denied { write } for pid=6447 comm="syz.5.759" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 114.897603][ T6463] team0: Port device dummy0 removed [ 114.906542][ T6463] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 114.916103][ T3896] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.078814][ T6471] bond1: option mode: unable to set because the bond device is up [ 115.493259][ T6477] netlink: 'syz.5.766': attribute type 10 has an invalid length. [ 115.522320][ T6477] bond0: (slave dummy0): Releasing backup interface [ 115.581978][ T6485] netlink: 'syz.5.766': attribute type 10 has an invalid length. [ 115.592178][ T6477] team0: Port device dummy0 added [ 115.624986][ T6485] team0: Port device dummy0 removed [ 115.653364][ T6485] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 115.834262][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.773'. [ 115.843179][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.773'. [ 116.065944][ T6502] lo speed is unknown, defaulting to 1000 [ 116.219063][ T28] audit: type=1400 audit(1771584916.216:911): avc: denied { relabelfrom } for pid=6500 comm="syz.4.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 116.276619][ T28] audit: type=1400 audit(1771584916.216:912): avc: denied { relabelto } for pid=6500 comm="syz.4.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 116.381042][ T28] audit: type=1326 audit(1771584916.376:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6510 comm="syz.6.780" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d6eb6c629 code=0x0 [ 116.474831][ T6520] netlink: 60 bytes leftover after parsing attributes in process `syz.4.782'. [ 116.669766][ T6536] loop1: detected capacity change from 0 to 128 [ 117.123015][ T2135] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.132760][ T2135] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.147233][ T2135] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.156184][ T2135] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.376117][ T6572] veth3: entered promiscuous mode [ 117.381430][ T6572] veth3: entered allmulticast mode [ 117.618442][ T6577] loop6: detected capacity change from 0 to 128 [ 117.641288][ T6577] msdos: Bad value for 'gid' [ 117.650207][ T6577] msdos: Bad value for 'gid' [ 117.803865][ T6579] loop1: detected capacity change from 0 to 128 [ 117.860772][ T6579] msdos: Bad value for 'gid' [ 117.907700][ T6579] msdos: Bad value for 'gid' [ 118.064905][ T6593] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 118.078009][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 118.078026][ T28] audit: type=1400 audit(1771584918.076:915): avc: denied { mounton } for pid=6594 comm="syz.5.813" path="/" dev="tmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 118.208892][ T28] audit: type=1400 audit(1771584918.116:916): avc: denied { connect } for pid=6592 comm="syz.7.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 118.245683][ T28] audit: type=1326 audit(1771584918.246:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="syz.5.814" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effd3afc629 code=0x0 [ 118.349654][ T28] audit: type=1400 audit(1771584918.316:918): avc: denied { write } for pid=6592 comm="syz.7.812" path="socket:[15020]" dev="sockfs" ino=15020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 118.756877][ T6603] FAULT_INJECTION: forcing a failure. [ 118.756877][ T6603] name failslab, interval 1, probability 0, space 0, times 0 [ 118.779884][ T6603] CPU: 0 UID: 0 PID: 6603 Comm: syz.4.816 Tainted: G W syzkaller #0 PREEMPT(full) [ 118.779996][ T6603] Tainted: [W]=WARN [ 118.780011][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.780022][ T6603] Call Trace: [ 118.780029][ T6603] [ 118.780035][ T6603] __dump_stack+0x1d/0x30 [ 118.780132][ T6603] dump_stack_lvl+0x95/0xd0 [ 118.780157][ T6603] dump_stack+0x15/0x1b [ 118.780202][ T6603] should_fail_ex+0x263/0x280 [ 118.780237][ T6603] should_failslab+0x8c/0xb0 [ 118.780259][ T6603] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 118.780336][ T6603] ? __alloc_skb+0x2d6/0x690 [ 118.780373][ T6603] __alloc_skb+0x2d6/0x690 [ 118.780398][ T6603] ? __alloc_skb+0x200/0x690 [ 118.780423][ T6603] netlink_alloc_large_skb+0xbf/0xf0 [ 118.780479][ T6603] netlink_sendmsg+0x40c/0x6f0 [ 118.780554][ T6603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.780583][ T6603] ____sys_sendmsg+0x5af/0x600 [ 118.780619][ T6603] ___sys_sendmsg+0x195/0x1e0 [ 118.780646][ T6603] ? path_openat+0x1b01/0x2050 [ 118.780693][ T6603] __sys_sendmmsg+0x185/0x320 [ 118.780726][ T6603] __x64_sys_sendmmsg+0x57/0x70 [ 118.780754][ T6603] x64_sys_call+0x27aa/0x3020 [ 118.780777][ T6603] do_syscall_64+0x12c/0x370 [ 118.780864][ T6603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.780889][ T6603] RIP: 0033:0x7f01d30fc629 [ 118.780909][ T6603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.781025][ T6603] RSP: 002b:00007f01d1b4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 118.781049][ T6603] RAX: ffffffffffffffda RBX: 00007f01d3375fa0 RCX: 00007f01d30fc629 [ 118.781066][ T6603] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 118.781081][ T6603] RBP: 00007f01d1b4f090 R08: 0000000000000000 R09: 0000000000000000 [ 118.781140][ T6603] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 118.781155][ T6603] R13: 00007f01d3376038 R14: 00007f01d3375fa0 R15: 00007ffe5a9ea358 [ 118.781250][ T6603] [ 119.078594][ T6608] netlink: 'syz.7.817': attribute type 10 has an invalid length. [ 119.185732][ T6610] netlink: 'syz.7.817': attribute type 10 has an invalid length. [ 119.224670][ T6608] bond0: (slave dummy0): Releasing backup interface [ 119.238330][ T6608] team0: Port device dummy0 added [ 119.260209][ T6610] team0: Port device dummy0 removed [ 119.270095][ T6610] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 119.851749][ T6624] loop7: detected capacity change from 0 to 1024 [ 120.003989][ T6624] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.033936][ T116] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.385657][ T3896] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.530050][ T116] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.576522][ T116] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.586420][ T116] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.646332][ T6629] loop6: detected capacity change from 0 to 1024 [ 120.753511][ T6640] netlink: 48 bytes leftover after parsing attributes in process `syz.5.830'. [ 120.767919][ T6629] EXT4-fs: Ignoring removed orlov option [ 120.783766][ T6640] netlink: 48 bytes leftover after parsing attributes in process `syz.5.830'. [ 120.785033][ T6643] netlink: 48 bytes leftover after parsing attributes in process `syz.4.831'. [ 120.818120][ T6629] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 120.848455][ T6643] netlink: 48 bytes leftover after parsing attributes in process `syz.4.831'. [ 120.887039][ T6629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.916913][ T6644] loop7: detected capacity change from 0 to 128 [ 120.976892][ T6644] msdos: Bad value for 'gid' [ 120.998618][ T28] audit: type=1400 audit(1771584920.996:919): avc: denied { read write } for pid=6627 comm="syz.6.826" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.022226][ T6644] msdos: Bad value for 'gid' [ 121.071018][ T28] audit: type=1400 audit(1771584921.016:920): avc: denied { open } for pid=6627 comm="syz.6.826" path="/167/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.099775][ T3582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.373545][ T6661] bond2: option mode: unable to set because the bond device is up [ 122.422755][ T6663] bond3: option mode: unable to set because the bond device is up [ 122.571848][ T28] audit: type=1400 audit(1771584922.526:921): avc: denied { write } for pid=6666 comm="syz.1.834" path="socket:[15136]" dev="sockfs" ino=15136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 122.595728][ T28] audit: type=1400 audit(1771584922.576:922): avc: denied { read } for pid=6666 comm="syz.1.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 122.626037][ T6657] loop5: detected capacity change from 0 to 1024 [ 122.645219][ T6657] EXT4-fs: Ignoring removed orlov option [ 122.700039][ T6657] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 122.782462][ T6657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.911394][ T28] audit: type=1400 audit(1771587501.911:923): avc: denied { read append } for pid=6677 comm="syz.6.842" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 122.937569][ T6679] netlink: 68 bytes leftover after parsing attributes in process `syz.6.842'. [ 122.952170][ T6679] tipc: Enabling of bearer rejected, failed to enable media [ 123.031040][ T28] audit: type=1400 audit(1771587501.911:924): avc: denied { open } for pid=6677 comm="syz.6.842" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 123.245044][ T3567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.305440][ T6685] loop6: detected capacity change from 0 to 512 [ 123.458333][ T6685] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.471592][ T6685] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.845192][ T6685] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 123.894297][ T6690] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 124.038662][ T6699] netlink: 'syz.1.845': attribute type 10 has an invalid length. [ 124.083316][ T6699] bond0: (slave dummy0): Releasing backup interface [ 124.107896][ T6700] netlink: 'syz.1.845': attribute type 10 has an invalid length. [ 124.160317][ T6699] team0: Port device dummy0 added [ 124.168677][ T3582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.191116][ T6700] team0: Port device dummy0 removed [ 124.213329][ T6700] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 124.352883][ T28] audit: type=1326 audit(1771587503.351:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.7.853" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe83747c629 code=0x0 [ 124.935756][ T6731] loop6: detected capacity change from 0 to 128 [ 125.128860][ T6734] netlink: 'syz.5.859': attribute type 10 has an invalid length. [ 125.145282][ T6734] bond0: (slave dummy0): Releasing backup interface [ 125.157519][ T6734] team0: Port device dummy0 added [ 125.170961][ T6734] netlink: 'syz.5.859': attribute type 10 has an invalid length. [ 125.191185][ T6734] team0: Port device dummy0 removed [ 125.207809][ T6734] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 125.245307][ T6736] loop7: detected capacity change from 0 to 512 [ 125.286215][ T6736] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 125.332828][ T6736] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 125.357780][ T6736] EXT4-fs (loop7): The Hurd can't support 64-bit file systems [ 125.431794][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.7.860'. [ 125.440802][ T6736] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 125.610460][ T6753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.887542][ T6757] loop7: detected capacity change from 0 to 512 [ 125.969220][ T6757] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.991151][ T6738] loop1: detected capacity change from 0 to 1024 [ 126.005257][ T6757] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.084450][ T28] audit: type=1326 audit(1771587505.071:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.7.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83747c629 code=0x7ffc0000 [ 126.109636][ T6757] netlink: 40 bytes leftover after parsing attributes in process `syz.7.867'. [ 126.147896][ T28] audit: type=1326 audit(1771587505.071:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.7.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83747c629 code=0x7ffc0000 [ 126.182421][ T28] audit: type=1326 audit(1771587505.071:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.7.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83747c629 code=0x7ffc0000 [ 126.213225][ T28] audit: type=1326 audit(1771587505.071:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.7.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83747c629 code=0x7ffc0000 [ 126.236963][ T28] audit: type=1326 audit(1771587505.071:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.7.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe83747c629 code=0x7ffc0000 [ 126.248474][ T6738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 126.261323][ T28] audit: type=1326 audit(1771587505.071:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.7.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83747c629 code=0x7ffc0000 [ 126.261354][ T28] audit: type=1326 audit(1771587505.071:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.7.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83747c629 code=0x7ffc0000 [ 126.261447][ T28] audit: type=1326 audit(1771587505.071:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.7.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83747c629 code=0x7ffc0000 [ 126.261475][ T28] audit: type=1326 audit(1771587505.071:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.7.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83747c629 code=0x7ffc0000 [ 126.377640][ T6738] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.472027][ T3896] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.507944][ T6738] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.861: lblock 3 mapped to illegal pblock 3 (length 3) [ 126.525918][ T6738] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 126.543624][ T6738] EXT4-fs (loop1): This should not happen!! Data will be lost [ 126.543624][ T6738] [ 126.608671][ T50] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 126.632063][ T50] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 126.658249][ T50] EXT4-fs (loop1): This should not happen!! Data will be lost [ 126.658249][ T50] [ 126.680365][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 126.754883][ T6775] netlink: 'syz.1.873': attribute type 10 has an invalid length. [ 126.774571][ T6775] bond0: (slave dummy0): Releasing backup interface [ 126.788123][ T6775] team0: Port device dummy0 added [ 126.806847][ T6775] netlink: 'syz.1.873': attribute type 10 has an invalid length. [ 126.836889][ T6775] team0: Port device dummy0 removed [ 126.844576][ T6775] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 126.924603][ T6784] loop7: detected capacity change from 0 to 8192 [ 126.948576][ T6784] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.965716][ T6784] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 126.974361][ T6784] FAT-fs (loop7): Filesystem has been set read-only [ 127.152192][ T6796] bond3: option mode: unable to set because the bond device is up [ 127.536095][ T6801] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.677489][ T6805] loop5: detected capacity change from 0 to 2048 [ 127.685801][ T6805] /dev/loop5: Can't open blockdev [ 128.003041][ T6812] loop1: detected capacity change from 0 to 1024 [ 128.062999][ T6812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.087088][ T6820] loop6: detected capacity change from 0 to 512 [ 128.115735][ T6820] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.128678][ T6820] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.509913][ T6820] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 128.528834][ T6825] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 128.641285][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.676069][ T6829] netlink: 'syz.1.889': attribute type 10 has an invalid length. [ 128.687252][ T6829] bond0: (slave dummy0): Releasing backup interface [ 128.699389][ T6829] team0: Port device dummy0 added [ 128.706366][ T6829] netlink: 'syz.1.889': attribute type 10 has an invalid length. [ 128.796479][ T3582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.805894][ T6829] team0: Port device dummy0 removed [ 128.814337][ T6829] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 129.936561][ T6858] loop7: detected capacity change from 0 to 1024 [ 129.968934][ T6858] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.177823][ T3896] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.653715][ T6856] loop6: detected capacity change from 0 to 1024 [ 130.766569][ T6864] loop7: detected capacity change from 0 to 1024 [ 130.891309][ T6856] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 130.907294][ T6856] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.921147][ T6872] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 130.988143][ T6856] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 3: comm syz.6.899: lblock 3 mapped to illegal pblock 3 (length 3) [ 131.007892][ T6856] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 131.028306][ T6856] EXT4-fs (loop6): This should not happen!! Data will be lost [ 131.028306][ T6856] [ 131.105650][ T6864] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 131.134514][ T12] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 131.150565][ T6864] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.173519][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 131.187601][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 131.187618][ T28] audit: type=1326 audit(1771587510.192:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.5.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd3afc629 code=0x7ffc0000 [ 131.190571][ T12] EXT4-fs (loop6): This should not happen!! Data will be lost [ 131.190571][ T12] [ 131.217235][ T28] audit: type=1326 audit(1771587510.202:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.5.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd3afc629 code=0x7ffc0000 [ 131.217269][ T28] audit: type=1326 audit(1771587510.202:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.5.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7effd3afc629 code=0x7ffc0000 [ 131.274683][ T28] audit: type=1326 audit(1771587510.202:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.5.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd3afc629 code=0x7ffc0000 [ 131.279533][ T3582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 131.340296][ T6885] netlink: 'syz.6.906': attribute type 10 has an invalid length. [ 131.359494][ T28] audit: type=1326 audit(1771587510.202:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.5.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd3afc629 code=0x7ffc0000 [ 131.386329][ T28] audit: type=1326 audit(1771587510.202:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.5.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7effd3afc629 code=0x7ffc0000 [ 131.409877][ T28] audit: type=1326 audit(1771587510.202:1007): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.5.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd3afc629 code=0x7ffc0000 [ 131.410116][ T6885] bond0: (slave dummy0): Releasing backup interface [ 131.433758][ T28] audit: type=1326 audit(1771587510.202:1008): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.5.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7effd3afc629 code=0x7ffc0000 [ 131.433865][ T28] audit: type=1326 audit(1771587510.202:1009): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.5.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd3afc629 code=0x7ffc0000 [ 131.433894][ T28] audit: type=1326 audit(1771587510.202:1010): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.5.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7effd3afdec7 code=0x7ffc0000 [ 131.470339][ T6864] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 3: comm syz.7.901: lblock 3 mapped to illegal pblock 3 (length 3) [ 131.509281][ T6887] netlink: 'syz.6.906': attribute type 10 has an invalid length. [ 131.551409][ T6885] team0: Port device dummy0 added [ 131.567538][ T6889] loop1: detected capacity change from 0 to 1024 [ 131.580945][ T6887] team0: Port device dummy0 removed [ 131.587374][ T6864] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 131.608558][ T6887] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 131.630777][ T6889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.637418][ T6864] EXT4-fs (loop7): This should not happen!! Data will be lost [ 131.637418][ T6864] [ 131.663493][ T6889] EXT4-fs error (device loop1): ext4_check_all_de:660: inode #12: block 7: comm syz.1.908: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=108 fake=0 [ 131.758894][ T6886] loop5: detected capacity change from 0 to 1024 [ 131.771411][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.787481][ T6895] loop6: detected capacity change from 0 to 1024 [ 131.797292][ T6886] EXT4-fs: Ignoring removed orlov option [ 131.803620][ T116] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 131.805212][ T116] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 131.805246][ T116] EXT4-fs (loop7): This should not happen!! Data will be lost [ 131.805246][ T116] [ 131.814206][ T3896] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 131.871314][ T6886] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 131.911385][ T6895] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.965619][ T6886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.032575][ T3582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.471828][ T3567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.605331][ T6924] netlink: 'syz.6.920': attribute type 10 has an invalid length. [ 132.656030][ T6924] bond0: (slave dummy0): Releasing backup interface [ 132.682327][ T6928] netlink: 'syz.6.920': attribute type 10 has an invalid length. [ 132.696597][ T6924] team0: Port device dummy0 added [ 132.717427][ T6928] team0: Port device dummy0 removed [ 132.730812][ T6928] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 133.042671][ T6939] loop6: detected capacity change from 0 to 512 [ 133.184098][ T6939] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.197457][ T6939] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.372696][ T6946] loop5: detected capacity change from 0 to 1024 [ 133.446307][ T6946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.460563][ T6939] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 133.501537][ T6944] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 133.522681][ T3567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.746477][ T3582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.843566][ T6952] loop5: detected capacity change from 0 to 1024 [ 134.064212][ T6981] loop1: detected capacity change from 0 to 1024 [ 134.082958][ T6952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 134.101287][ T6952] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.124519][ T6981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.306655][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.405763][ T3567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 135.216752][ T7013] FAULT_INJECTION: forcing a failure. [ 135.216752][ T7013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.309835][ T7013] CPU: 0 UID: 0 PID: 7013 Comm: syz.4.948 Tainted: G W syzkaller #0 PREEMPT(full) [ 135.309868][ T7013] Tainted: [W]=WARN [ 135.309875][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 135.309887][ T7013] Call Trace: [ 135.309932][ T7013] [ 135.309940][ T7013] __dump_stack+0x1d/0x30 [ 135.309966][ T7013] dump_stack_lvl+0x95/0xd0 [ 135.309999][ T7013] dump_stack+0x15/0x1b [ 135.310084][ T7013] should_fail_ex+0x263/0x280 [ 135.310110][ T7013] should_fail+0xb/0x20 [ 135.310131][ T7013] should_fail_usercopy+0x1a/0x20 [ 135.310155][ T7013] _copy_to_user+0x20/0xa0 [ 135.310220][ T7013] simple_read_from_buffer+0xb5/0x130 [ 135.310243][ T7013] proc_fail_nth_read+0x10e/0x150 [ 135.310347][ T7013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.310378][ T7013] vfs_read+0x1ab/0x7f0 [ 135.310424][ T7013] ? __rcu_read_unlock+0x4e/0x70 [ 135.310444][ T7013] ? __fget_files+0x184/0x1c0 [ 135.310466][ T7013] ? mutex_lock+0x57/0x90 [ 135.310547][ T7013] ksys_read+0xdc/0x1a0 [ 135.310576][ T7013] __x64_sys_read+0x40/0x50 [ 135.310608][ T7013] x64_sys_call+0x2886/0x3020 [ 135.310697][ T7013] do_syscall_64+0x12c/0x370 [ 135.310727][ T7013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.310747][ T7013] RIP: 0033:0x7f01d30bcece [ 135.310763][ T7013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 135.310784][ T7013] RSP: 002b:00007f01d1b2dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 135.310874][ T7013] RAX: ffffffffffffffda RBX: 00007f01d1b2e6c0 RCX: 00007f01d30bcece [ 135.310891][ T7013] RDX: 000000000000000f RSI: 00007f01d1b2e0a0 RDI: 0000000000000003 [ 135.310906][ T7013] RBP: 00007f01d1b2e090 R08: 0000000000000000 R09: 0000000000000000 [ 135.310992][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.311007][ T7013] R13: 00007f01d3376128 R14: 00007f01d3376090 R15: 00007ffe5a9ea358 [ 135.311027][ T7013] [ 135.528460][ T7017] loop1: detected capacity change from 0 to 1024 [ 135.594392][ T7017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.690697][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.857154][ T7048] netlink: 'syz.5.967': attribute type 10 has an invalid length. [ 136.000021][ T7049] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.053906][ T7034] set_capacity_and_notify: 1 callbacks suppressed [ 136.054530][ T7034] loop1: detected capacity change from 0 to 1024 [ 136.141153][ T7072] loop7: detected capacity change from 0 to 512 [ 136.258402][ T7034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.296910][ T7034] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.524530][ T7083] loop6: detected capacity change from 0 to 1024 [ 136.573535][ T7083] EXT4-fs: Ignoring removed orlov option [ 136.606621][ T7034] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.954: lblock 3 mapped to illegal pblock 3 (length 3) [ 136.630421][ T7034] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 136.643397][ T7034] EXT4-fs (loop1): This should not happen!! Data will be lost [ 136.643397][ T7034] [ 136.656497][ T7083] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.671495][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 136.671511][ T28] audit: type=1400 audit(1771590094.676:1034): avc: denied { map } for pid=7082 comm="syz.6.961" path="/201/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.716916][ T28] audit: type=1400 audit(1771590094.676:1035): avc: denied { execute } for pid=7082 comm="syz.6.961" path="/201/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.787809][ T2514] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 136.824905][ T3582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.850455][ T2514] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 136.896432][ T2514] EXT4-fs (loop1): This should not happen!! Data will be lost [ 136.896432][ T2514] [ 136.988104][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 137.173031][ T7120] loop1: detected capacity change from 0 to 1024 [ 137.185866][ T7123] netlink: 'syz.4.968': attribute type 10 has an invalid length. [ 137.248245][ T7120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.308858][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.351984][ T7131] netlink: 'syz.4.971': attribute type 1 has an invalid length. [ 137.361941][ T7090] loop7: detected capacity change from 0 to 1024 [ 137.383824][ T7131] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.524878][ T7146] FAULT_INJECTION: forcing a failure. [ 137.524878][ T7146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.538101][ T7146] CPU: 0 UID: 0 PID: 7146 Comm: syz.1.972 Tainted: G W syzkaller #0 PREEMPT(full) [ 137.538136][ T7146] Tainted: [W]=WARN [ 137.538149][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.538164][ T7146] Call Trace: [ 137.538173][ T7146] [ 137.538233][ T7146] __dump_stack+0x1d/0x30 [ 137.538274][ T7146] dump_stack_lvl+0x95/0xd0 [ 137.538297][ T7146] dump_stack+0x15/0x1b [ 137.538389][ T7146] should_fail_ex+0x263/0x280 [ 137.538414][ T7146] should_fail+0xb/0x20 [ 137.538436][ T7146] should_fail_usercopy+0x1a/0x20 [ 137.538461][ T7146] _copy_to_user+0x20/0xa0 [ 137.538549][ T7146] simple_read_from_buffer+0xb5/0x130 [ 137.538573][ T7146] proc_fail_nth_read+0x10e/0x150 [ 137.538605][ T7146] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 137.538695][ T7146] vfs_read+0x1ab/0x7f0 [ 137.538730][ T7146] ? __rcu_read_unlock+0x4e/0x70 [ 137.538753][ T7146] ? __fget_files+0x184/0x1c0 [ 137.538779][ T7146] ? mutex_lock+0x57/0x90 [ 137.538838][ T7146] ksys_read+0xdc/0x1a0 [ 137.538872][ T7146] __x64_sys_read+0x40/0x50 [ 137.538905][ T7146] x64_sys_call+0x2886/0x3020 [ 137.538972][ T7146] do_syscall_64+0x12c/0x370 [ 137.539004][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.539053][ T7146] RIP: 0033:0x7f984f9bcece [ 137.539074][ T7146] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 137.539095][ T7146] RSP: 002b:00007f984e435fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 137.539120][ T7146] RAX: ffffffffffffffda RBX: 00007f984e4366c0 RCX: 00007f984f9bcece [ 137.539136][ T7146] RDX: 000000000000000f RSI: 00007f984e4360a0 RDI: 000000000000000d [ 137.539151][ T7146] RBP: 00007f984e436090 R08: 0000000000000000 R09: 0000000000000000 [ 137.539170][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.539182][ T7146] R13: 00007f984fc76128 R14: 00007f984fc76090 R15: 00007ffcade26c38 [ 137.539202][ T7146] [ 137.822410][ T7090] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 137.837119][ T7090] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.859052][ T7156] loop1: detected capacity change from 0 to 128 [ 137.942378][ T7156] loop1: detected capacity change from 0 to 512 [ 137.967263][ T7156] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 138.067281][ T7090] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 3: comm syz.7.962: lblock 3 mapped to illegal pblock 3 (length 3) [ 138.149691][ T7167] loop5: detected capacity change from 0 to 1024 [ 138.166885][ T7090] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 138.182130][ T7167] EXT4-fs: Ignoring removed orlov option [ 138.196916][ T7090] EXT4-fs (loop7): This should not happen!! Data will be lost [ 138.196916][ T7090] [ 138.242523][ T12] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 138.293436][ T7167] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 138.321814][ T12] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 138.334808][ T12] EXT4-fs (loop7): This should not happen!! Data will be lost [ 138.334808][ T12] [ 138.355654][ T3896] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.395747][ T7184] netlink: 256 bytes leftover after parsing attributes in process `syz.7.980'. [ 138.397048][ T28] audit: type=1400 audit(1771590096.396:1036): avc: denied { ioctl } for pid=7185 comm="syz.1.983" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 138.442882][ T7167] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.448461][ T7184] netlink: 72 bytes leftover after parsing attributes in process `syz.7.980'. [ 138.500773][ T7188] loop1: detected capacity change from 0 to 1024 [ 138.514174][ T7188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 138.526599][ T7188] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.542261][ T7188] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.984: lblock 3 mapped to illegal pblock 3 (length 3) [ 138.557129][ T7188] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 138.570090][ T7188] EXT4-fs (loop1): This should not happen!! Data will be lost [ 138.570090][ T7188] [ 138.600722][ T116] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 138.615370][ T116] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 138.628091][ T116] EXT4-fs (loop1): This should not happen!! Data will be lost [ 138.628091][ T116] [ 138.639324][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.678437][ T7196] loop1: detected capacity change from 0 to 2048 [ 138.721069][ T7196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.805611][ T3567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.849605][ T7202] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 138.884026][ T7202] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 384 with error 28 [ 138.896895][ T7202] EXT4-fs (loop1): This should not happen!! Data will be lost [ 138.896895][ T7202] [ 138.919024][ T7202] EXT4-fs (loop1): Total free blocks count 0 [ 138.931559][ T7202] EXT4-fs (loop1): Free/Dirty block details [ 138.938390][ T7202] EXT4-fs (loop1): free_blocks=2415919504 [ 138.964922][ T7202] EXT4-fs (loop1): dirty_blocks=944 [ 138.978979][ T7202] EXT4-fs (loop1): Block reservation details [ 138.993963][ T7202] EXT4-fs (loop1): i_reserved_data_blocks=80 [ 139.047052][ T7206] EXT4-fs: Ignoring removed orlov option [ 139.071731][ T7206] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 139.224741][ T7206] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.212531][ T7196] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 140.584689][ T3582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.679579][ T7228] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 140.691970][ T7228] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.770887][ T7228] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 3: comm syz.7.995: lblock 3 mapped to illegal pblock 3 (length 3) [ 140.838984][ T7228] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 140.851981][ T7228] EXT4-fs (loop7): This should not happen!! Data will be lost [ 140.851981][ T7228] [ 140.885624][ T70] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 140.901489][ T70] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 140.917159][ T70] EXT4-fs (loop7): This should not happen!! Data will be lost [ 140.917159][ T70] [ 140.931802][ T3896] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 141.152787][ T7257] SELinux: Context system_u:object_r:usb_device_t:s0 is not valid (left unmapped). [ 141.255544][ T7258] set_capacity_and_notify: 4 callbacks suppressed [ 141.255645][ T7258] loop7: detected capacity change from 0 to 512 [ 141.274501][ T28] audit: type=1400 audit(1771590099.157:1037): avc: denied { relabelfrom } for pid=7256 comm="syz.5.1005" name="NETLINK" dev="sockfs" ino=19273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.439593][ T7259] loop1: detected capacity change from 0 to 128 [ 141.447122][ T7259] msdos: Bad value for 'gid' [ 141.451858][ T7259] msdos: Bad value for 'gid' [ 141.646400][ T7258] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.659190][ T7258] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.711486][ T28] audit: type=1400 audit(1771590099.167:1038): avc: denied { relabelto } for pid=7256 comm="syz.5.1005" name="NETLINK" dev="sockfs" ino=19273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="system_u:object_r:usb_device_t:s0" [ 141.750416][ T7254] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 141.758093][ T7266] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1007'. [ 141.812437][ T7254] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 141.831315][ T7276] veth0_vlan: entered allmulticast mode [ 141.854429][ T7276] veth0_vlan: left promiscuous mode [ 141.860241][ T7276] veth0_vlan: entered promiscuous mode [ 141.983248][ T28] audit: type=1326 audit(1771590099.987:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.5.1012" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effd3afc629 code=0x0 [ 142.022629][ T3896] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.114956][ T7292] netlink: 'syz.7.1015': attribute type 10 has an invalid length. [ 142.363141][ T7304] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1019'. [ 142.604286][ T7311] FAULT_INJECTION: forcing a failure. [ 142.604286][ T7311] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 142.617684][ T7311] CPU: 0 UID: 0 PID: 7311 Comm: syz.6.1018 Tainted: G W syzkaller #0 PREEMPT(full) [ 142.617714][ T7311] Tainted: [W]=WARN [ 142.617729][ T7311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 142.617742][ T7311] Call Trace: [ 142.617773][ T7311] [ 142.617783][ T7311] __dump_stack+0x1d/0x30 [ 142.617862][ T7311] dump_stack_lvl+0x95/0xd0 [ 142.617890][ T7311] dump_stack+0x15/0x1b [ 142.617915][ T7311] should_fail_ex+0x263/0x280 [ 142.617968][ T7311] should_fail_alloc_page+0xf2/0x100 [ 142.617988][ T7311] __alloc_frozen_pages_noprof+0x108/0x360 [ 142.618015][ T7311] alloc_pages_mpol+0xb3/0x260 [ 142.618047][ T7311] vma_alloc_folio_noprof+0x1a9/0x300 [ 142.618159][ T7311] handle_mm_fault+0x111f/0x3020 [ 142.618209][ T7311] ? vma_start_read+0x1c7/0x2c0 [ 142.618239][ T7311] do_user_addr_fault+0x62f/0x1050 [ 142.618276][ T7311] ? trace_page_fault_user+0x1f/0xe0 [ 142.618347][ T7311] exc_page_fault+0x62/0xa0 [ 142.618379][ T7311] asm_exc_page_fault+0x26/0x30 [ 142.618406][ T7311] RIP: 0033:0x7f0d6ea340c6 [ 142.618422][ T7311] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d 3d f5 1c 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 fc d0 fe ff 4d 85 ed 0f 84 2b 0a 00 [ 142.618448][ T7311] RSP: 002b:00007f0d6d57af60 EFLAGS: 00010206 [ 142.618468][ T7311] RAX: 0000000000000000 RBX: 00007f0d6ede6180 RCX: 0000200000001500 [ 142.618484][ T7311] RDX: 00002000000012c0 RSI: 00002000000012c0 RDI: 00007f0d6ec035ed [ 142.618500][ T7311] RBP: 00007f0d6d57d090 R08: 00007f0d6ea21560 R09: 0000000000000000 [ 142.618513][ T7311] R10: 0000000000000003 R11: 00002000000012c0 R12: 000000000000006e [ 142.618564][ T7311] R13: 00002000000012c0 R14: 0000000000000003 R15: 00007ffc59e1a1c8 [ 142.618586][ T7311] [ 142.791066][ T7311] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 142.799540][ T7311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.808098][ T7311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.253613][ T7314] loop5: detected capacity change from 0 to 2048 [ 143.412597][ T7314] EXT4-fs: Ignoring removed i_version option [ 143.674403][ T7314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.333372][ T7337] netlink: 'syz.1.1031': attribute type 10 has an invalid length. [ 144.513257][ T12] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 144.571483][ T7345] loop1: detected capacity change from 0 to 128 [ 144.578987][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 108 with error 28 [ 144.583007][ T28] audit: type=1400 audit(1771590102.587:1040): avc: denied { mounton } for pid=7344 comm="syz.1.1036" path="/223/file0" dev="tmpfs" ino=1217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 144.591421][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 144.591421][ T12] [ 144.632973][ T12] EXT4-fs (loop5): Total free blocks count 0 [ 144.633981][ T7345] netlink: 'syz.1.1036': attribute type 1 has an invalid length. [ 144.639330][ T12] EXT4-fs (loop5): Free/Dirty block details [ 144.653148][ T12] EXT4-fs (loop5): free_blocks=2415919504 [ 144.659215][ T12] EXT4-fs (loop5): dirty_blocks=224 [ 144.664490][ T12] EXT4-fs (loop5): Block reservation details [ 144.669479][ T7345] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1036'. [ 144.670787][ T12] EXT4-fs (loop5): i_reserved_data_blocks=7 [ 144.686434][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 108 with error 28 [ 144.970290][ T28] audit: type=1326 audit(1771590102.977:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d30fc629 code=0x7ffc0000 [ 145.047927][ T28] audit: type=1326 audit(1771590102.977:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d30fc629 code=0x7ffc0000 [ 145.097793][ T28] audit: type=1326 audit(1771590102.977:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f01d30fc629 code=0x7ffc0000 [ 145.147955][ T28] audit: type=1326 audit(1771590102.977:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f01d30fc392 code=0x7ffc0000 [ 145.191608][ T28] audit: type=1326 audit(1771590102.977:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f01d30bcece code=0x7ffc0000 [ 145.247799][ T28] audit: type=1326 audit(1771590102.977:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f01d30fc457 code=0x7ffc0000 [ 145.287762][ T28] audit: type=1326 audit(1771590102.977:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01d30bcece code=0x7ffc0000 [ 145.592688][ T7366] loop1: detected capacity change from 0 to 512 [ 145.626697][ T7372] netlink: 'syz.6.1044': attribute type 10 has an invalid length. [ 145.659110][ T7366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.717251][ T7366] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.932954][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.602158][ T7397] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.622263][ T7395] loop1: detected capacity change from 0 to 128 [ 146.679405][ T7397] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.686675][ T7397] IPv6: NLM_F_CREATE should be set when creating new route [ 146.986720][ T7408] FAULT_INJECTION: forcing a failure. [ 146.986720][ T7408] name failslab, interval 1, probability 0, space 0, times 0 [ 147.022297][ T7411] netlink: 'syz.5.1059': attribute type 10 has an invalid length. [ 147.026826][ T7408] CPU: 1 UID: 0 PID: 7408 Comm: syz.7.1057 Tainted: G W syzkaller #0 PREEMPT(full) [ 147.026917][ T7408] Tainted: [W]=WARN [ 147.026925][ T7408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 147.026937][ T7408] Call Trace: [ 147.026943][ T7408] [ 147.026951][ T7408] __dump_stack+0x1d/0x30 [ 147.026986][ T7408] dump_stack_lvl+0x95/0xd0 [ 147.027088][ T7408] dump_stack+0x15/0x1b [ 147.027179][ T7408] should_fail_ex+0x263/0x280 [ 147.027201][ T7408] should_failslab+0x8c/0xb0 [ 147.027281][ T7408] kmem_cache_alloc_noprof+0x66/0x400 [ 147.027301][ T7408] ? security_file_alloc+0x32/0xf0 [ 147.027381][ T7408] security_file_alloc+0x32/0xf0 [ 147.027413][ T7408] init_file+0x5b/0x1b0 [ 147.027436][ T7408] alloc_empty_file+0x8b/0x200 [ 147.027460][ T7408] alloc_file_pseudo+0xf6/0x190 [ 147.027526][ T7408] anon_inode_getfile+0xa0/0x120 [ 147.027557][ T7408] bpf_link_prime+0xfc/0x1d0 [ 147.027586][ T7408] tcx_link_attach+0xf4/0x550 [ 147.027687][ T7408] ? __fget_files+0x184/0x1c0 [ 147.027779][ T7408] link_create+0x512/0x690 [ 147.027803][ T7408] __sys_bpf+0x35d/0x7e0 [ 147.027829][ T7408] __x64_sys_bpf+0x41/0x50 [ 147.027859][ T7408] x64_sys_call+0x10cb/0x3020 [ 147.028014][ T7408] do_syscall_64+0x12c/0x370 [ 147.028067][ T7408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.028089][ T7408] RIP: 0033:0x7fe83747c629 [ 147.028105][ T7408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.028124][ T7408] RSP: 002b:00007fe835ed7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.028146][ T7408] RAX: ffffffffffffffda RBX: 00007fe8376f5fa0 RCX: 00007fe83747c629 [ 147.028204][ T7408] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 000000000000001c [ 147.028236][ T7408] RBP: 00007fe835ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 147.028249][ T7408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.028262][ T7408] R13: 00007fe8376f6038 R14: 00007fe8376f5fa0 R15: 00007fffb601bdc8 [ 147.028282][ T7408] [ 147.334322][ T7422] loop7: detected capacity change from 0 to 512 [ 147.343956][ T7422] EXT4-fs: Ignoring removed bh option [ 147.362221][ T7422] EXT4-fs: inline encryption not supported [ 147.455035][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1058'. [ 148.421073][ T7422] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 148.501976][ T7422] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 148.537590][ T7422] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1063: bg 0: block 248: padding at end of block bitmap is not set [ 148.674585][ T7422] loop7: lost filesystem error report for type 5 error -117 [ 148.687165][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 148.700956][ C0] EXT4-fs (loop7): last error at time 1771590106: ext4_validate_block_bitmap:441 [ 148.704780][ T7446] FAULT_INJECTION: forcing a failure. [ 148.704780][ T7446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.764420][ T7446] CPU: 1 UID: 0 PID: 7446 Comm: syz.6.1069 Tainted: G W syzkaller #0 PREEMPT(full) [ 148.764455][ T7446] Tainted: [W]=WARN [ 148.764464][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 148.764481][ T7446] Call Trace: [ 148.764489][ T7446] [ 148.764497][ T7446] __dump_stack+0x1d/0x30 [ 148.764526][ T7446] dump_stack_lvl+0x95/0xd0 [ 148.764558][ T7446] dump_stack+0x15/0x1b [ 148.764583][ T7446] should_fail_ex+0x263/0x280 [ 148.764608][ T7446] should_fail+0xb/0x20 [ 148.764624][ T7446] should_fail_usercopy+0x1a/0x20 [ 148.764660][ T7446] _copy_from_user+0x1c/0xb0 [ 148.764736][ T7446] copy_from_sockptr+0x5e/0x90 [ 148.764771][ T7446] packet_setsockopt+0x7c1/0xfd0 [ 148.764793][ T7446] ? __pfx_packet_setsockopt+0x10/0x10 [ 148.764844][ T7446] __sys_setsockopt+0x184/0x200 [ 148.764876][ T7446] __x64_sys_setsockopt+0x64/0x80 [ 148.764964][ T7446] x64_sys_call+0x2327/0x3020 [ 148.764987][ T7446] do_syscall_64+0x12c/0x370 [ 148.765017][ T7446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.765039][ T7446] RIP: 0033:0x7f0d6eb6c629 [ 148.765061][ T7446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.765150][ T7446] RSP: 002b:00007f0d6d5bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 148.765170][ T7446] RAX: ffffffffffffffda RBX: 00007f0d6ede5fa0 RCX: 00007f0d6eb6c629 [ 148.765183][ T7446] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 148.765197][ T7446] RBP: 00007f0d6d5bf090 R08: 000000000000001c R09: 0000000000000000 [ 148.765211][ T7446] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 148.765222][ T7446] R13: 00007f0d6ede6038 R14: 00007f0d6ede5fa0 R15: 00007ffc59e1a1c8 [ 148.765303][ T7446] [ 148.781809][ T7422] __quota_error: 15 callbacks suppressed [ 148.781825][ T7422] Quota error (device loop7): write_blk: dquota write failed [ 148.956580][ T7453] hub 9-0:1.0: USB hub found [ 148.964341][ T7453] hub 9-0:1.0: 8 ports detected [ 148.997400][ T7422] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 149.014050][ T7455] loop6: detected capacity change from 0 to 128 [ 149.041909][ T7422] EXT4-fs error (device loop7): ext4_acquire_dquot:7003: comm syz.7.1063: Failed to acquire dquot type 1 [ 149.053866][ T28] audit: type=1400 audit(1771590107.058:1062): avc: denied { connect } for pid=7454 comm="syz.6.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 149.091829][ T7457] netlink: 'syz.6.1073': attribute type 10 has an invalid length. [ 149.118235][ T7422] loop7: lost filesystem error report for type 5 error -117 [ 149.133659][ T7422] EXT4-fs (loop7): 1 truncate cleaned up [ 149.154387][ T7422] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 149.288472][ T28] audit: type=1400 audit(1771590107.278:1063): avc: denied { create } for pid=7420 comm="syz.7.1063" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 149.330850][ T28] audit: type=1400 audit(1771590107.308:1064): avc: denied { open } for pid=7462 comm="syz.6.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 149.354085][ T7422] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.364789][ T7422] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.394033][ T28] audit: type=1400 audit(1771590107.308:1065): avc: denied { kernel } for pid=7462 comm="syz.6.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 149.413775][ T28] audit: type=1400 audit(1771590107.308:1066): avc: denied { write } for pid=7462 comm="syz.6.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 149.527108][ T7468] loop1: detected capacity change from 0 to 512 [ 149.623839][ T7468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.636593][ T7468] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.682912][ T7468] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 149.705755][ T7422] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.785998][ T7422] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.908854][ T7471] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 149.976716][ T7422] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.997884][ T7422] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.074747][ T7422] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.090306][ T7422] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.139592][ T7481] FAULT_INJECTION: forcing a failure. [ 150.139592][ T7481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.154423][ T7481] CPU: 1 UID: 0 PID: 7481 Comm: syz.5.1080 Tainted: G W syzkaller #0 PREEMPT(full) [ 150.154480][ T7481] Tainted: [W]=WARN [ 150.154486][ T7481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 150.154502][ T7481] Call Trace: [ 150.154508][ T7481] [ 150.154515][ T7481] __dump_stack+0x1d/0x30 [ 150.154545][ T7481] dump_stack_lvl+0x95/0xd0 [ 150.154572][ T7481] dump_stack+0x15/0x1b [ 150.154596][ T7481] should_fail_ex+0x263/0x280 [ 150.154701][ T7481] should_fail+0xb/0x20 [ 150.154722][ T7481] should_fail_usercopy+0x1a/0x20 [ 150.154745][ T7481] _copy_from_user+0x1c/0xb0 [ 150.154821][ T7481] proc_ioctl_default+0x43/0xa0 [ 150.154901][ T7481] usbdev_ioctl+0xe8d/0x1750 [ 150.155005][ T7481] ? __pfx_usbdev_ioctl+0x10/0x10 [ 150.155139][ T7481] __se_sys_ioctl+0xce/0x140 [ 150.155176][ T7481] __x64_sys_ioctl+0x43/0x50 [ 150.155220][ T7481] x64_sys_call+0x1563/0x3020 [ 150.155347][ T7481] do_syscall_64+0x12c/0x370 [ 150.155378][ T7481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.155399][ T7481] RIP: 0033:0x7effd3afc629 [ 150.155418][ T7481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.155439][ T7481] RSP: 002b:00007effd254f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.155528][ T7481] RAX: ffffffffffffffda RBX: 00007effd3d75fa0 RCX: 00007effd3afc629 [ 150.155545][ T7481] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000003 [ 150.155561][ T7481] RBP: 00007effd254f090 R08: 0000000000000000 R09: 0000000000000000 [ 150.155574][ T7481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.155586][ T7481] R13: 00007effd3d76038 R14: 00007effd3d75fa0 R15: 00007ffce426c388 [ 150.155683][ T7481] [ 150.339786][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.367027][ T12] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.391604][ T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.520411][ T40] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.528871][ T40] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.566848][ T3896] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 151.302841][ T7490] loop1: detected capacity change from 0 to 512 [ 151.509861][ T40] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.559483][ T40] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.560602][ T7490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.580287][ T7490] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.590886][ T5614] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.631309][ T5614] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.642314][ T2135] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-5 [ 151.656743][ T2135] EXT4-fs error (device loop7): ext4_release_dquot:7039: comm kworker/u8:7: Failed to release dquot type 1 [ 151.668460][ T2135] loop7: lost filesystem error report for type 5 error -117 [ 151.678840][ T7486] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 151.723651][ T7503] netlink: 'syz.6.1088': attribute type 10 has an invalid length. [ 151.879300][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.177335][ T7509] loop5: detected capacity change from 0 to 128 [ 152.206192][ T7514] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 152.212754][ T7514] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 152.381234][ T7514] vhci_hcd vhci_hcd.0: Device attached [ 152.472722][ T7517] vhci_hcd: connection closed [ 152.473073][ T5614] vhci_hcd vhci_hcd.6: stop threads [ 152.494719][ T5614] vhci_hcd vhci_hcd.6: release socket [ 152.500229][ T5614] vhci_hcd vhci_hcd.6: disconnect device [ 152.716113][ T28] audit: type=1400 audit(1771590110.719:1067): avc: denied { tracepoint } for pid=7524 comm="syz.7.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 153.472731][ T28] audit: type=1400 audit(1771590111.469:1068): avc: denied { create } for pid=7536 comm="syz.6.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 153.640580][ T7535] loop1: detected capacity change from 0 to 1024 [ 153.652522][ T7535] EXT4-fs: Ignoring removed orlov option [ 153.662671][ T7535] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 153.830719][ T7545] bond1: option mode: unable to set because the bond device is up [ 153.861339][ T7535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.874762][ T7554] netlink: 'syz.7.1102': attribute type 10 has an invalid length. [ 153.927438][ T7557] veth0_vlan: entered allmulticast mode [ 153.941701][ T7559] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1104'. [ 154.014141][ T7560] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1104'. [ 154.245106][ T7574] loop6: detected capacity change from 0 to 128 [ 154.337030][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.454524][ T7578] loop1: detected capacity change from 0 to 1024 [ 154.466863][ T7578] EXT4-fs: Ignoring removed orlov option [ 154.491656][ T7578] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 154.581345][ T7578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.651653][ T7584] loop5: detected capacity change from 0 to 1024 [ 154.699070][ T7588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.707498][ T7584] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 154.715595][ T7584] System zones: 0-1, 3-36 [ 154.734592][ T7588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.744957][ T7584] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1111: bad orphan inode 134217728 [ 154.768777][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 154.768795][ T28] audit: type=1400 audit(1771590112.769:1070): avc: denied { ioctl } for pid=7587 comm="syz.4.1112" path="socket:[20749]" dev="sockfs" ino=20749 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.804139][ T7584] loop5: lost filesystem error report for type 5 error -117 [ 154.806097][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 154.819963][ C1] EXT4-fs (loop5): initial error at time 1771590112: ext4_orphan_get:1417 [ 154.828523][ C1] EXT4-fs (loop5): last error at time 1771590112: ext4_orphan_get:1417 [ 154.840404][ T7584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.867974][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.923426][ T7593] ================================================================== [ 154.931547][ T7593] BUG: KCSAN: data-race in filemap_read / filemap_read [ 154.938679][ T7593] [ 154.941018][ T7593] read to 0xffff8881042d7d68 of 8 bytes by task 7584 on cpu 1: [ 154.948578][ T7593] filemap_read+0x6f/0xa10 [ 154.953038][ T7593] generic_file_read_iter+0x79/0x330 [ 154.958345][ T7593] ext4_file_read_iter+0x1cc/0x290 [ 154.963491][ T7593] copy_splice_read+0x471/0x6c0 [ 154.968365][ T7593] splice_direct_to_actor+0x28f/0x670 [ 154.973763][ T7593] do_splice_direct+0x119/0x1a0 [ 154.978633][ T7593] do_sendfile+0x382/0x650 [ 154.983067][ T7593] __x64_sys_sendfile64+0x105/0x150 [ 154.988281][ T7593] x64_sys_call+0x2dc4/0x3020 [ 154.992983][ T7593] do_syscall_64+0x12c/0x370 [ 154.997595][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.003593][ T7593] [ 155.005932][ T7593] write to 0xffff8881042d7d68 of 8 bytes by task 7593 on cpu 0: [ 155.013575][ T7593] filemap_read+0x98d/0xa10 [ 155.018091][ T7593] generic_file_read_iter+0x79/0x330 [ 155.023404][ T7593] ext4_file_read_iter+0x1cc/0x290 [ 155.028525][ T7593] copy_splice_read+0x471/0x6c0 [ 155.033376][ T7593] splice_direct_to_actor+0x28f/0x670 [ 155.038738][ T7593] do_splice_direct+0x119/0x1a0 [ 155.043578][ T7593] do_sendfile+0x382/0x650 [ 155.047988][ T7593] __x64_sys_sendfile64+0x105/0x150 [ 155.053178][ T7593] x64_sys_call+0x2dc4/0x3020 [ 155.057850][ T7593] do_syscall_64+0x12c/0x370 [ 155.062438][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.068416][ T7593] [ 155.070743][ T7593] value changed: 0x0000000000000112 -> 0x0000000000000113 [ 155.077846][ T7593] [ 155.080173][ T7593] Reported by Kernel Concurrency Sanitizer on: [ 155.086314][ T7593] CPU: 0 UID: 0 PID: 7593 Comm: syz.5.1111 Tainted: G W syzkaller #0 PREEMPT(full) [ 155.097176][ T7593] Tainted: [W]=WARN [ 155.100970][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 155.111025][ T7593] ================================================================== [ 155.213159][ T3567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.287060][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)