last executing test programs: 11m11.014648116s ago: executing program 0 (id=1212): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket(0x40000000015, 0x5, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140001, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) open$dir(&(0x7f0000000100)='./file0\x00', 0x80002, 0x100) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x10000000000001dd) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000000440)=""/102390, &(0x7f0000000040)=0x18ff6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@delchain={0x34, 0x2e, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xe, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x1, 0x0, 0x0, 'queue0\x00'}) close_range(0xffffffffffffffff, r1, 0x0) 11m10.906258726s ago: executing program 0 (id=1215): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x4000, 0x61, 0x10, 0xa1}, [@ldst={0x6, 0x0, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000000c0)={'caif0\x00', {0x2, 0x4e24, @empty}}) 11m10.814721059s ago: executing program 0 (id=1217): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x81, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xa}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x2, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r0 = gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x5}) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73f5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 11m9.823012098s ago: executing program 0 (id=1228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0xa, 0x2, 0x0) unshare(0x6a040000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x7, 0x4a4, &(0x7f0000000a40)="$eJzs3M9vFOUbAPBnpt1Cv8C3VfEHP9QqGhvUlhZUDh7UaOIBExM9aDw1bSFIoYbWRAhRMAZPxph4Nx79FzzpxRi9mHjVuyEhpomhcHHN7M603WV3oe22W9jPJ1l4333f6TzPzry778zbbQBdayj7J4nYGRF/RMRAtVrbYaj63+LChcnrCxcmkyiX3/o7qfS7tnBhsuhabLcjrwynEelnSexrsN+5c+dPTczMTJ/tqdZH509/MDp37vyzJ09PnJg+MX1m/OjRI4fHXnh+/LnGgfetLs8spmt7P57dv+f1d79649gXNfnX5dEmQ60anyyX27y7ztq1opz0djAQViUbftnhKlXG/0D0xPLBG4jXPu1ocMCGKpfL5R3Nmy+W66T1TwB3sCRq6zcNeeAuVXzQZ9e/xaN+EvDSxk0/Ou7qy9ULoCzvxfxRbemNNO9Tqru+baehiHjn4o1vskdszH0IAIAaP2Tzn2cazf/SeGBFv//na0ODEXFPRNwbEfdFxO6IuD+i0vfBiHiosmUszZ1upX6RpG7+sy0ivbLeHFvJ5n8v5mtb/dn8r1S0LGUw2JPXdlXyLyXHT85MH8pfk+EobcvqYy328eOrv3/ZrG3l/C97ZHEUc8E8jiu922q3mZqYn1h7xrWuXorY21vkunL+myytBCQRsSci9q5xHycPfre/Wdut82+hDetM5W8jnqoe/4uxUJt/IWm9Pjm6PWamD40WZ8XNfvnt8pvN9l/J/+Aa82+D7Pj/Lz//FxvnP5isXK+dW/0+Lv/5edNrmrWe/33J25VysQz80cT8/NmxiL7kWDXoYuuIODu+vG2l3/hy/yz/4QON8k8r73HFK7EvIrKT+OGIeCQiHs1jfywiHo+IAy3y//mVJ95v2JCu8/xvgyz/qVUd/+VCX9Q/07jQc+qn72t2OrhczPO/3vr4H6mUhvNnbuf9r1E4fXFzgOt9/QAAAOBOkEbEzkjSkaVymo6MVH9ffndEOjM7N//08dkPz0xVvyMwGKW0uNM1sOJ+6Fh+WV+tX4qI6q8WFO2H8/vGX/f0V+ojk7MzU51OHrrcjibjP/NXT6ejAzac72tB9zL+oXs1Gv/bOxAHsPl8/kP3ajD++zsRB7D5Gn3+f9J6k383KhZgc9WNf8t+0EVWf/3/63sbEgiw6ZqO/7v5L/8AFe7/Q1ea64/WX96/ZaH4SWvcfKsUkojICov5H0Zc9w+M0pbIa/2FctLw4EaaFUpbIcLbLNwob4kwtkrhn9Z9Ovu+BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0C7/BQAA//9wJ9s3") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x2000000009, 0x8, 0x3) mbind(&(0x7f000057f000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x3) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x51) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) setxattr$system_posix_acl(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000500)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYRES8=r1], 0x24, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4000055}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000280)={0x1, 0x9}) r4 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x298, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) sendmmsg$inet(r2, &(0x7f00000056c0)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000000000000000000000700000018000000000000000000000007000000860600000003000099d864871a6a95d922f4eae2bc3e5e9fd9158db7ba3b5077cdf155b1ed24a54f719ee6ae54ed8f1f4f6fda084e91797ffa8dd82cd141e7927b2a02e55d55b9e79c45bbad7841211f6222f720929f8a8022d8941e0a6179dc8eed931f366ecff2f6532f0025d598792b6108f62bb46b914bc14878bb2c393cf2bb0073653084e09be04459ad9312d3885c9d27019da816c05c67b113"], 0x28}}], 0x1, 0x400c840) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000012002d03000000000000000000800000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x804, 0x0) 11m9.232056451s ago: executing program 0 (id=1232): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') syz_read_part_table(0x60d, &(0x7f0000002200)="$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") 11m8.320103295s ago: executing program 0 (id=1240): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) socket(0x40000000015, 0x5, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140001, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140)) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80002, 0x100) openat2(r2, &(0x7f0000000400)='./file0\x00', &(0x7f0000019440)={0x48000, 0x104, 0x1}, 0x18) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2000, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x10000000000001dd) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x28, 0x1, 0x0) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xe, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x200140) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000000040), &(0x7f0000000080)=0x4) close_range(0xffffffffffffffff, r0, 0x0) 11m8.319138895s ago: executing program 32 (id=1240): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) socket(0x40000000015, 0x5, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140001, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140)) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80002, 0x100) openat2(r2, &(0x7f0000000400)='./file0\x00', &(0x7f0000019440)={0x48000, 0x104, 0x1}, 0x18) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2000, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x10000000000001dd) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x28, 0x1, 0x0) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xe, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x200140) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000000040), &(0x7f0000000080)=0x4) close_range(0xffffffffffffffff, r0, 0x0) 7m39.602041007s ago: executing program 5 (id=2564): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x47ba, 0x100, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x1, {0x7, 0xa44}, 0x80}, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080)=0x5, 0x4) open(&(0x7f0000000300)='./cgroup\x00', 0x8000, 0xb2) socket$caif_stream(0x25, 0x1, 0x1) 7m38.485217674s ago: executing program 5 (id=2572): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x92242, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) syz_socket_connect_nvme_tcp() perf_event_open(0x0, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200000002000000001700000000000d0000000000005f00"], 0x0, 0x34}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$VT_DISALLOCATE(r4, 0x5608) 7m36.455124583s ago: executing program 5 (id=2579): creat(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x22, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x5, 0x9, 0x0, 0x10, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 7m35.137774263s ago: executing program 5 (id=2586): creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x5, 0x9, 0x0, 0x10, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r5, 0xfe, 0x6, 0x10001) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000180)=0x1d5e, 0x4) open$dir(&(0x7f0000000080)='./file0\x00', 0x4000, 0x0) 7m32.92642207s ago: executing program 5 (id=2597): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x1, @time={0x5, 0xffffff5b}, 0x8, {0x68, 0xfd}, 0x81, 0x0, 0xb}) 7m32.384192961s ago: executing program 5 (id=2602): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) io_setup(0x239f, &(0x7f0000000380)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40043, 0x132) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1ff, 0x0, 0x5, 0xb, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="6d9311000000f8dbdf25010000000c0003000300000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = eventfd2(0x5, 0x1) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r6, 0x0, 0x0, 0x800002, 0x0, 0x0, r6}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r6, &(0x7f0000000080)="e2", 0x36, 0x5, 0x0, 0x1, r6}]) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r9, 0x0) write$cgroup_subtree(r9, &(0x7f00000000c0)={[{0x7a916e971c0e550f, 'blkio'}]}, 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x88661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000300)=r8, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00D\x00\a'], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r10 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x1, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x2, 0x1, 0x8, 0x4, 0xb, 0x0, 0x8000, 0x0, 0x20000002}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="0a010100ac1414bbcaaa9ebe03000000ac141426ffffffffac141437"], 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES8=r10, @ANYRES16=0x0, @ANYRESOCT, @ANYRES8, @ANYBLOB="ec8837f74ef50e1a1ecfdf9ba4e57ece21997b74d00b95ed252a9fbe262d0687b9ac58756af5d075546edc0aec4e", @ANYRES16=r6, @ANYRES32, @ANYBLOB="98263438b3e95f4c07837233d78620204dbd6629fbffec62ef03682081f36d8d50a52ea567882bde02acaa677747279da93356848106a0606ccff378b12a006d26e10f44a1c30a792f5b6a3398bd842119538bce3f378b6b5da4c705b739829a4f8957006be700"/116, @ANYRESDEC=0x0], 0x1b0) unshare(0x2040400) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x20600) getsockopt$inet_mptcp_buf(r12, 0x11c, 0x4, 0x0, &(0x7f0000000400)) 7m32.383963151s ago: executing program 33 (id=2602): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) io_setup(0x239f, &(0x7f0000000380)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40043, 0x132) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1ff, 0x0, 0x5, 0xb, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="6d9311000000f8dbdf25010000000c0003000300000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = eventfd2(0x5, 0x1) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r6, 0x0, 0x0, 0x800002, 0x0, 0x0, r6}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r6, &(0x7f0000000080)="e2", 0x36, 0x5, 0x0, 0x1, r6}]) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r9, 0x0) write$cgroup_subtree(r9, &(0x7f00000000c0)={[{0x7a916e971c0e550f, 'blkio'}]}, 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x88661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000300)=r8, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00D\x00\a'], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r10 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x1, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x2, 0x1, 0x8, 0x4, 0xb, 0x0, 0x8000, 0x0, 0x20000002}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="0a010100ac1414bbcaaa9ebe03000000ac141426ffffffffac141437"], 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES8=r10, @ANYRES16=0x0, @ANYRESOCT, @ANYRES8, @ANYBLOB="ec8837f74ef50e1a1ecfdf9ba4e57ece21997b74d00b95ed252a9fbe262d0687b9ac58756af5d075546edc0aec4e", @ANYRES16=r6, @ANYRES32, @ANYBLOB="98263438b3e95f4c07837233d78620204dbd6629fbffec62ef03682081f36d8d50a52ea567882bde02acaa677747279da93356848106a0606ccff378b12a006d26e10f44a1c30a792f5b6a3398bd842119538bce3f378b6b5da4c705b739829a4f8957006be700"/116, @ANYRESDEC=0x0], 0x1b0) unshare(0x2040400) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x20600) getsockopt$inet_mptcp_buf(r12, 0x11c, 0x4, 0x0, &(0x7f0000000400)) 4m18.440624829s ago: executing program 1 (id=3843): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x2c, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=0x0, @ANYBLOB="eaff9800f707000070000000"], 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0x14, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x9, 0x1, "261fbabd4e"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x80, 0x0) getdents(r7, 0x0, 0x58) syz_emit_ethernet(0x7d, &(0x7f0000000100)={@empty, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0xc, 0xff, 0x1, 0x0, [{@private=0xa010101, 0x4e210000}]}, @timestamp_addr={0x44, 0x2c, 0xbc, 0x1, 0x0, [{@multicast1}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev}, {@private=0xffffffff, 0x8}, {@empty}]}]}}, '\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c010704009000000000000800"}, 0x6) 4m18.328468808s ago: executing program 1 (id=3846): r0 = socket(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x3, 0x7d7, &(0x7f00000008c0)="$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") (async) pivot_root(&(0x7f00000000c0)='./file1\x00', 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}}, 0x2000000c) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000040)={0x7, 'veth0_vlan\x00', {0x399}, 0x2}) 4m18.115626529s ago: executing program 1 (id=3847): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x0, @val=@tracing={0x0, 0xff}}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[], 0x0) 4m17.817254155s ago: executing program 1 (id=3850): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@auto_da_alloc}, {@barrier}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@delalloc}, {@auto_da_alloc}]}, 0x1, 0x490, &(0x7f0000000580)="$eJzs3UFrXNUeAPD/nSR9aZu+pO+9RV/BWmwlLdqZpLFtcFEriK4Kat3HmExCyCQTMpO2CUVS/ACCiAquXLkR/ACC9COIUNC9iCiirS5cqCMzudPWOJMETHNx5veD03vOPTPzP6eTOXPPPZe5AXSt4xFxKSJ6IuJ0RAym+3NpivWNVH/c3Ts3puopiVrtyg9JJOm+5msl6fZg+rT+iHj5hYjXkr/GrayuzU+WSsXltFyoLiwVKqtrZ+YWJmeLs8XFsbHR8+MXxs+Nj+xaXy8+9807b374/MVPn7z21cR3p16vN2sgrXuwH7tpo+t9jf+Lpt6IWH4YwTLQk/anL+uGAACwI/Vj/P9ExGON4//B6GkczQEAAACdpPbMQPyaRNQAAACAjpVrXAOb5PLptQADkcvl8xvX8P4vDuRK5Ur1iZnyyuL0xrWyQ9GXm5krFUfSa4WHoi+pl0cb+fvls5vKYxFxOCLeHtzfKOenyqXprE9+AAAAQJc4uGn+//PgxvwfAAAA6DBDWTcAAAAAeOjM/wEAAKDzmf8DAABAR3vx8uV6qjXvfz19dXVlvnz1zHSxMp9fWJnKT5WXl/Kz5fJs4zf7FrZ7vVK5vPRULK5cL1SLlWqhsro2sVBeWaxONO7rPVF0n2gAAADYe4cfvfVlEhHrT+9vpLp9aZ25OnS2XNYNADLTk3UDgMz0Zt0AIDPm+ECyTX1/u4rPdr8tAADAwzH8f+v/0K2s/0P3sv4P3cv6P3Qvc3zA+j8AAHS+gUZKcvl0LXAgcrl8PuJQ47YAfcnMXKk4EhH/jogvBvv+VS+PZt1oAAAAAAAAAAAAAAAAAAAAAAAAAPiHqdWSqAEAAAAdLSL3bZLe/2t48OTA5vMD+5JfBhvbiLj2/pV3r09Wq8uj9f0/3ttffS/dfzaLMxgAAADAZs15enMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC76e6dG1PNtJdxv382IoZaxe+N/sa2P/oi4sBPSfQ+8LwkInp2If76zYg40ip+Um9WDKWt2Bw/FxH7M45/cBfiQze7VR9/LrX6/OXieGPb+vPXm6a/q/34l7s3/vW0Gf8O7TDG0dsfF9rGvxlxtLf1+NOMn7SJf2KH8V99ZW2tXV3tg4jhlt8/yZ9iFaoLS4XK6tqZuYXJ2eJscXFsbPT8+IXxc+MjhZm5UjH9t2WMtx755Pet+n+gTfyhbfp/cof9/+329Tv/3SL+qROt3/8jW8Sv/008nn4P1OuHm/n1jfyDjn30+bGt+j/dpv/bvf+ndtj/0y+98fUOHwoA7IHK6tr8ZKlUXJaRkZG5l8l6ZAIAAHbb/YP+rFsCAAAAAAAAAAAAAAAAAAAA3Wsvfk4s6z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzEHwEAAP//0wfUAw==") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000fb67d89d"], 0x18}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x50, 0x4, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xe}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0xa4}, 0x4000) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]}) r6 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r8, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m16.488484953s ago: executing program 1 (id=3865): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff22}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2525, &(0x7f0000000040)={0x0, 0x36d, 0xd800, 0x2c, 0x216}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0xfdef) 4m15.881818882s ago: executing program 1 (id=3872): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x92242, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) syz_socket_connect_nvme_tcp() perf_event_open(0x0, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200000002000000001700000000000d0000000000"], 0x0, 0x34}, 0x28) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$VT_DISALLOCATE(r4, 0x5608) 4m15.881565842s ago: executing program 34 (id=3872): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x92242, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) syz_socket_connect_nvme_tcp() perf_event_open(0x0, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200000002000000001700000000000d0000000000"], 0x0, 0x34}, 0x28) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$VT_DISALLOCATE(r4, 0x5608) 3m39.860196785s ago: executing program 2 (id=4071): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x48d4, 0xc000, 0x5, 0x40c1}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m37.840420276s ago: executing program 2 (id=4077): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0xc00) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) 3m37.837706515s ago: executing program 2 (id=4078): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x6, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0x2}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0x9, 0x10, 0xe, 0x8, 0x0, 0x4, 0x7, 0xa, 0x7, 0xe, 0x2, 0x1, 0x3, 0x10, 0x6, 0x9], 0x1, [0x36a, 0x4, 0x3, 0x6, 0x2, 0xffff, 0x0, 0x3, 0x888c, 0x6, 0x5, 0x2, 0xcbc0, 0x4, 0x9, 0xfff9], [0x6, 0x4, 0x6, 0x2, 0x4, 0x8973, 0xfff7, 0x5, 0x3, 0x6ff2, 0x6, 0x9, 0x80, 0xe3, 0x6, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000400)=""/224, &(0x7f0000000140)=0xe0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) syz_emit_ethernet(0xa6, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000cd0400703afffe8000000000000000000000000000bbffe6ffffffffffffff0000000000000186009078005a01000800000004000000050aa78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e00000000000000dac15084dbaf736b41e5af05020e01000005000000000026000400"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7a0a0500212b0000440012800b000100697036746e6c000034000280140003000000000000000000000082620000003f14000200fe80"], 0x64}}, 0x24000000) fremovexattr(r4, &(0x7f0000000680)=@known='security.apparmor\x00') ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) 3m37.670097215s ago: executing program 2 (id=4081): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000180)={[{@block_validity}, {@max_dir_size_kb}]}, 0x1, 0x247, &(0x7f0000002600)="$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") creat(0x0, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x1}, 0x400, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r2, 0x325, 0xfffffffe}, 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, 0x0, 0xc800) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000), 0x4) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) r6 = syz_clone(0xc008000, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r6, r6, 0x13) ptrace(0x10, r6) getdents64(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000002240)={@random="bb622ac1eb87", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, '\x00', 0x10, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x1, 0xc, 0x9, 0xc}}}}}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 3m37.220983773s ago: executing program 2 (id=4094): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) (fail_nth: 3) 3m36.760909929s ago: executing program 2 (id=4101): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unshare(0x20040600) write$binfmt_script(r1, &(0x7f0000000180), 0x4) copy_file_range(r1, &(0x7f00000008c0)=0x4, r0, &(0x7f0000000100), 0x8, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES16=r2], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) pidfd_send_signal(r4, 0x14, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_TIMERSLACK(0x1d, 0x7) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x6a040000) 3m36.760689659s ago: executing program 35 (id=4101): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unshare(0x20040600) write$binfmt_script(r1, &(0x7f0000000180), 0x4) copy_file_range(r1, &(0x7f00000008c0)=0x4, r0, &(0x7f0000000100), 0x8, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES16=r2], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) pidfd_send_signal(r4, 0x14, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_TIMERSLACK(0x1d, 0x7) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x6a040000) 5.174481093s ago: executing program 4 (id=7402): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x48d4, 0xc000, 0x5, 0x40c1}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.09796087s ago: executing program 7 (id=7403): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$inet6(0xa, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$eJzs3M1vG0UbAPBn7aR9+5m8VfloWiBQEBEfSZOW0gMXEEgcQEKCQzmGJK1C3QY1RqJVBAGhckSVuCOOSPwFnOCCgBMSV7ijShXKpYWT0drexHbsNHGdLNS/n7TtzO44M493x57ZySaAvjWa/pNE7I+I3yJiqJZtLjBa++/2ytLMXytLM0lUKm/+mVTL3VpZmsmKZq/bl2UGIgqfJnG0Tb2LV65emC6V5i7X8xPli+9NLF65+uz8xenzc+fnLk2dOXPq5OTzp6ee60mcaVy3Rj5cOHbk1bevvz5z9vo7P32TZPG3xNEjoxsdfKJS6XF1+TrQkE4GcmwIW1KsddMYrPb/oSjG2skbilc+aShaPphLC4HtUqlUKvd3PrxcAe5hSeTdAiAf2Rd9Ov/Ntogo7NDwI3c3X6xNgNK4b9e32pGB1TdhsGV+20ujEXF2+e8v0y225z4EAECT79LxzzPrxn/VIWDjfaGD9TWU4Yj4f0QciojTEXE4Iu6LqJZ9ICIe3GL9rYsk68c/hRtdBbZJ6fjvhfraVvP4b3UIPFys5w5U4x9Mzs2X5k7U35OxGNyd5ic3qOP7l3/9vNOxxvFfuqX1Z2PBejtuDOxufs3sdHn6bmJudPPjiJGBdvEnqysBSUQciYiRLuuYf+rrY52O3Tn+DfRgnanyVcSTtfO/HC3xZ5KN1ycn/heluRMT2VWx3s+/XHujU/13FX8PpOd/b9vrfzX+4aRxvXZx63Vc+/2zjnOabq//XclbTfs+mC6XL09G7EpeqzW6cf9US7mptfJp/GPH2/f/Q7H2ThyNiPQifigiHo6IR+ptfzQiHouI4xvE/+NLj7/bffzbK41/dkvnfy2xK1r3tE8UL/zwbVOlw1uJPz3/p6qpsfqezXz+baZd3V3NAAAA8N9TiIj9kRTGV9OFwvh47Xf4D8feQmlhsfz0uYX3L83WnhEYjsFCdqdrqOF+6GR9Wp/lp1ryJ+v3jb8o7qnmx2cWSrN5Bw99bl+H/p/6o5h364Bt53kt6F/6P/Qv/R/6l/4P/atN/9+TRzuAndfu+/+jHNoB7LyW/m/ZD/qI+T/0r276f9/8hSC4x/n+h760uCfu/JC8hMS6RBT+Fc2QSBPZcLyHPznvTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDe+CcAAP//Fmvj5w==") r3 = openat(0xffffffffffffff9c, 0x0, 0x48042, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x2000) umount2(&(0x7f0000000200)='./file1\x00', 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) sendto$inet6(r4, &(0x7f00000002c0)="ed", 0x1, 0x8c9d0, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x6}, 0x1c) syz_io_uring_setup(0x4179, &(0x7f0000000180)={0x0, 0xac25, 0x1, 0x2, 0x136}, &(0x7f0000000440), &(0x7f0000000400)) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)=0x9, 0x7fd) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x4000000000000af9}, &(0x7f00000010c0)=0x18) 4.402007711s ago: executing program 7 (id=7409): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xd, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x5, 0x0, 0xf439}) 2.63896973s ago: executing program 7 (id=7424): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$inet6(0xa, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x2000) umount2(0x0, 0x4) shutdown(0xffffffffffffffff, 0x1) r4 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r4, &(0x7f0000000380)="3413c3adf0fea539d4d76ff03995eddbad3d2f", 0x13, 0xe4a4) syz_io_uring_setup(0x4179, &(0x7f0000000180)={0x0, 0xac25, 0x1, 0x2, 0x136}, &(0x7f0000000440), &(0x7f0000000400)) sendfile(r4, r4, &(0x7f00000001c0)=0x9, 0x7fd) 2.371396905s ago: executing program 3 (id=7426): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmmsg(r2, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000004c0)={@val={0x0, 0x6004}, @void, @eth={@random="1648087d069f", @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x8, 0x54, 0x65, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}}, {{0x4e23, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x40, 0xff8b, 0x0, 0x2, {[@nop, @fastopen={0x22, 0x3, "ce"}, @fastopen={0x22, 0xd, "5e3f86f04c053c8d6ef98c"}, @sack={0x5, 0xe, [0x4f, 0x4, 0x3]}, @exp_fastopen={0xfe, 0xa, 0xf989, "a5714473fbe7"}]}}}}}}}}, 0x66) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r8, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) bind$x25(r1, &(0x7f0000000080), 0x12) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 2.235352742s ago: executing program 3 (id=7428): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.211939477s ago: executing program 6 (id=7429): socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000002c0), 0x3}, 0x205, 0x5, 0x800000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000008}) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x80c, &(0x7f0000000300)="$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") acct(0x0) 2.05199519s ago: executing program 8 (id=7430): socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x7, 0x7f, 0x10}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64039, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1f, 0x445}, 0x10, 0x5, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd46", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.904048365s ago: executing program 8 (id=7431): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$inet6(0xa, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x2000) umount2(&(0x7f0000000200)='./file1\x00', 0x4) shutdown(0xffffffffffffffff, 0x1) r4 = memfd_create(0x0, 0x0) pwrite64(r4, &(0x7f0000000380)="3413c3adf0fea539d4d76ff03995eddbad3d2f", 0x13, 0xe4a4) syz_io_uring_setup(0x4179, &(0x7f0000000180)={0x0, 0xac25, 0x1, 0x2, 0x136}, &(0x7f0000000440), &(0x7f0000000400)) sendfile(r4, r4, &(0x7f00000001c0)=0x9, 0x7fd) 1.750939869s ago: executing program 3 (id=7432): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64239, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_config_ext={0x8, 0x7ff}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000000000200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000400000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.704767681s ago: executing program 7 (id=7433): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.618011326s ago: executing program 7 (id=7434): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xd, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x5, 0x0, 0xf439}) 1.617863526s ago: executing program 3 (id=7435): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd09"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000000c0)={0x0, &(0x7f00000012c0)=""/54, &(0x7f0000001380), &(0x7f0000000100), 0x3, r0}, 0x38) 1.58228223s ago: executing program 3 (id=7436): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$inet6(0xa, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r3 = openat(0xffffffffffffff9c, 0x0, 0x48042, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x2000) umount2(&(0x7f0000000200)='./file1\x00', 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) sendto$inet6(r4, &(0x7f00000002c0)="ed", 0x1, 0x8c9d0, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x6}, 0x1c) syz_io_uring_setup(0x4179, &(0x7f0000000180)={0x0, 0xac25, 0x1, 0x2, 0x136}, &(0x7f0000000440), &(0x7f0000000400)) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)=0x9, 0x7fd) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x4000000000000af9}, &(0x7f00000010c0)=0x18) 1.433813895s ago: executing program 4 (id=7437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101a00, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0xeb, 0x3, 0x6361, 0x0, 0xffffffff, 0x3}, [@TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x4, 0x7f}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000000c0)="80", 0x1, 0x48d4, &(0x7f00000001c0)={0x11, 0x8, 0x0, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.266773076s ago: executing program 4 (id=7438): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmmsg(r2, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000004c0)={@val={0x0, 0x6004}, @void, @eth={@random="1648087d069f", @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x8, 0x54, 0x65, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}}, {{0x4e23, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x40, 0xff8b, 0x0, 0x2, {[@nop, @fastopen={0x22, 0x3, "ce"}, @fastopen={0x22, 0xd, "5e3f86f04c053c8d6ef98c"}, @sack={0x5, 0xe, [0x4f, 0x4, 0x3]}, @exp_fastopen={0xfe, 0xa, 0xf989, "a5714473fbe7"}]}}}}}}}}, 0x66) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r8, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) bind$x25(r1, &(0x7f0000000080), 0x12) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 1.265949886s ago: executing program 6 (id=7439): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext={0x8000000000000000, 0xf794}, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x4) r1 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x400c000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x50000048) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) perf_event_open(&(0x7f0000000ac0)={0x0, 0x80, 0x4, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x84908, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x395e, 0xc000, 0x3, 0xa0002f5}) add_key(&(0x7f0000000380)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000580)=""/112) pwrite64(r8, &(0x7f0000000000)='2', 0x1, 0x4fed0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xff, 0x20000, 0xfffffffffffffffc, 0x1b}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000140)=0x10) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x569, &(0x7f0000001f80)="$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") 1.087532586s ago: executing program 4 (id=7440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x22}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) 1.047312519s ago: executing program 4 (id=7441): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xe2e, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) process_vm_writev(0x0, &(0x7f0000001c80), 0x0, &(0x7f0000001d80), 0x0, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) timer_create(0x5, 0x0, &(0x7f0000000040)) write$cgroup_pid(r6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001800dd8d000000000000000002000000000000060000000006001500040000001400168004000880"], 0x38}, 0x1, 0x0, 0x0, 0x20040894}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000040)=[{r7, 0x2030}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 913.825026ms ago: executing program 8 (id=7442): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x2, 0x9, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000500)=@qipcrtr={0x2a, 0xffffffff, 0x7ffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000980)="b359aa1d91ae9d10e1f3cae1c4637e287943b468c65df19524577902e9098eb17bc8e54c88bbd349498574dadaeb9ec1cd808f3a7197c0592fa48e121cc45040ff4200ed0a32d19bf2a82dca5e64cef7c14b8ba5e0beb73354996d799a7c82ac9d256b37908b054b0394ec3ec37c2c09cf4120a0440d984f4ac769843c65182a26dc0ffc2c7d248e2ada45d7c7a88e2bd97d82d4b8a98410a743fc392f7e5135e7503831c8ee5ddbb95f22d1ff04ca2156137bf7f3e2114bc6d48af10b63fae5fb0f44565ce7d21b39d141c1eba19c81331a426f51d382", 0xd7}, {&(0x7f0000000040)}], 0x2, &(0x7f0000001340)=[{0xfb8, 0x10f, 0x7, "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"}], 0xfb8}, 0x2004085) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x10400, 0x0) sendmsg$inet(r0, 0x0, 0x40488c4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000270600000ee60000bf2500000000000073350000000000006507000002001000070700004c0000001f75000000000000bf54000000000000070400004400f9f0ad32010000000000950000000000000005000000000000009500000000000000debfa255e44e4cc39f211fb04d7f202e6a53bd86bde99b679b4e6d24b8125690361eec3b181dcfd7c2fb2d1f8975b579a085bee32d414c1f3ab987a9de6385ae8021f4ca33b9b35fe817e98beb9cefe7f40fd6f0ea3affbdaaa897c70fb01d270a7b00d36fb5ab8fa92ac014a106e3e4decc68652503ca54fcef437d96c8a05d59ddcc8abf09cd77e93e940207b03189c5d4661e43df6f1f036c8d85a2ad7615a021f8cbe507ef94fb9f33315366e9ae080000001b532226b63b460d68808a67529637bf7f6731ad0cf1718bae3c8b9d2f89050cb496fe791381af6fab290900000000000000d640a5fde1f7d5eaa97cd25523fbd77300000000000000d67559b0c848aa3e7091f33e2dfc351e903ce85488fb25691249545bcf877011847df184bae6d3f5d0c016ec7d581d5b2fcb494d8c2df1929398ec5c3675ed16c27fff46a695eed7f50c531a612d5677b5e949ee4f16d10e41074702c4e89ee401ec2ec65f38f64189f1fa2cc0a42add3119025764759de2f093c26fe51d2f7635bb06bdf0b97d4a96cb0813e084232421c6026629fbf4c81954d11e154659b54fcf3468577295"], 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5}, 0x38) sendmsg$kcm(r4, 0x0, 0x0) 378.734405ms ago: executing program 3 (id=7443): gettid() r0 = socket(0xa, 0x3, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@remote, 0x18, r2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x18, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000002c0)={[{@grpquota}, {@nogrpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@abort}]}, 0x1, 0x4fd, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnV9Omt10lz0Agt2yu6Kgqk7i7karHqCcEEKVED2C1IbEjaLYcRQ7pQk9pGeuSFTiBEf+AM49ceeCyo1LOSDxIwI1SByMZmynTmq3gSSeEH8+0mjmzZv6+32u5736ufYLYGhdiYjdiBg/cj7X3uJWa0uue7H3aGl/79FSLprNO3/LpfUvRg//mcSl9mMWIuL73474Ue7VuPXtnbXFSqW82S7PNqobs/Xtneur1cWV8kp5vVRamF+Y++zGp6VTa+sH1U4rv/z8d7tf/0mS1nT7TNK2UwvUpdX0sYM4ieQp++5ZBMvASLs9R18//H/IR8S7EfFhRNyLmRiJ0axTAgDOWLM5E82Z7jIAcNHl0zmwXL7YnguYjny+WGzN4b0XU/lKrd64dr+2tb7cmiu7HGP5+6uV8lxEzLTKuaQ8nx6/LJeOlG9ExDsR8bOJybRcXKpVlrP8hw8ADLFLR8b/f060xn8A4IIrZJ0AADBwxn8AGD7GfwAYPsZ/ABg+rfF/Mus0AIAB8v4fAIaP8R8Ahsr3bt9OtuZ++/evlx9sb63VHlxfLtfXitWtpeJSbXOjuFKrraS/2VN90+NVarWN+U9i6+Hlb2zUG7P17Z271drWeuNu+rved8tj6VW7A2gZANDPOx88/UMuGZFvTqZbdK3lMJZpZsBZy2edAJCZkawTADJjtS8YXid4j296AC6IHkv0HlLo9QWhZrPZPLuUgDN29Qvm/2FYdc3/+1/AMGTM/8PwMv8Pw6vZzB13zf847oUAwPlmjh/o8/n/u+39r9sfDvxw+egVT84yKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjfOuv/FttrgU9HPl8sRrwVEZdjLHd/tVKei4i3I+LZxNhEUp7POGcA4KTyf8611/+6OvPx9KGq9y8dHI5HxI9/cefnDxcbjc3fR4zn/j7ROd940j5fGnz2AMCbdcbpdN/1Rv7F3qOlzjbIfP7yrYgotOLv743H/kH80RhN94UYi4ipf+Ta5ZZc19zFSew+jojP92p/LqbTOZDWyqdH4yex3xpo/Pyh+Pm0rrVPnovPnUIuMGyeJv3PrV73Xz6upPve938h7aFOrt3/JQ+1tJ/2gS/jd/q/kT7935Xjxvjkt99pHU2+Wvc44oujEZ3Y+139Tyd+rk/8j48Z/49fev/DfnXNX0Zcjd7xu2PNNqobs/Xtneur1cWV8kp5vVRamF+Y++zGp6XZdI56tv9o8Neb197uV5e0f6pP/MIb2n9cv/r3vR985TXxv/ZRr/j5eO818ZMx8avHjL849ZtCv7ok/nKn/c/+u7//a8eM//xPO68sGw4AZKe+vbO2WKmUNzM8mGjnknEaDs7/QfIyOQdp9Dz45qBijfe5U376Ues+OlLVbP5Psfr1GKcx6wacBwc3fUT8K+tkAAAAAAAAAAAAAACAngbxjaWs2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF9Z8AAAD//+jsyTw=") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800"/16], 0x0}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB='H\x00\x00'], 0x44}}, 0x4) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001a0001e1b5000000fedbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0) epoll_create1(0x80000) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r3) 363.180572ms ago: executing program 6 (id=7444): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 330.817737ms ago: executing program 8 (id=7445): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xeb6, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 228.268999ms ago: executing program 6 (id=7446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd090000"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000000c0)={0x0, &(0x7f00000012c0)=""/54, &(0x7f0000001380), &(0x7f0000000100), 0x3, r0}, 0x38) 227.883179ms ago: executing program 8 (id=7447): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000081"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee00"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 225.892049ms ago: executing program 6 (id=7448): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmmsg(r2, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000004c0)={@val={0x0, 0x6004}, @void, @eth={@random="1648087d069f", @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x8, 0x54, 0x65, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}}, {{0x4e23, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x40, 0xff8b, 0x0, 0x2, {[@nop, @fastopen={0x22, 0x3, "ce"}, @fastopen={0x22, 0xd, "5e3f86f04c053c8d6ef98c"}, @sack={0x5, 0xe, [0x4f, 0x4, 0x3]}, @exp_fastopen={0xfe, 0xa, 0xf989, "a5714473fbe7"}]}}}}}}}}, 0x66) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r8, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) bind$x25(r1, &(0x7f0000000080), 0x12) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 197.915634ms ago: executing program 8 (id=7449): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$inet6(0xa, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x2000) umount2(&(0x7f0000000200)='./file1\x00', 0x4) shutdown(0xffffffffffffffff, 0x1) r4 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r4, 0x0, 0x0, 0xe4a4) syz_io_uring_setup(0x4179, &(0x7f0000000180)={0x0, 0xac25, 0x1, 0x2, 0x136}, &(0x7f0000000440), &(0x7f0000000400)) sendfile(r4, r4, &(0x7f00000001c0)=0x9, 0x7fd) 68.656272ms ago: executing program 4 (id=7450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000740)={0x14, r1, 0xc730c779156eaf0f, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x4004010) pipe(&(0x7f00000008c0)={0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x80000001) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = getpgrp(0xffffffffffffffff) timer_create(0x5, &(0x7f0000001280)={0x0, 0x3c, 0x1, @tid=r4}, &(0x7f00000012c0)) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x9, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xcb9, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000003, 0x5cb5, 0xfffffffa, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xbe, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x1ff, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x10002, 0x6, 0x80000000, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x7180000, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x805, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0x10001, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfa, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0x24, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x10005, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000101, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x7fffffff, 0x35, 0x8, 0x1, 0x6, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8003, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0xe2, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x3, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x0, 0x9, 0xe4fd, 0x7, 0x4, 0x4, 0x1, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x4, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0x19, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8c2b01) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x38) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) r7 = socket$kcm(0x10, 0x2, 0x4) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r8, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x4}}, 0x18) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0xffffff5e, &(0x7f00000002c0)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c050010ffff0af30000000075f800250003000f600000251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000340000000001f00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) connect$bt_sco(r3, &(0x7f0000000100), 0x8) pselect6(0x40, &(0x7f0000000240)={0x8, 0x7, 0x4, 0x0, 0x4cd6, 0x5982, 0xfffffffffffffffc, 0xbbde}, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r9, &(0x7f0000000180), 0x4000190, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') fstat(r11, &(0x7f0000000080)) sendmsg$AUDIT_SIGNAL_INFO(r11, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f2, 0x20, 0x70bd26, 0x25dfdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000840}, 0x50) 48.058289ms ago: executing program 7 (id=7451): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmmsg(r2, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000004c0)={@val={0x0, 0x6004}, @void, @eth={@random="1648087d069f", @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x8, 0x54, 0x65, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}}, {{0x4e23, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x40, 0xff8b, 0x0, 0x2, {[@nop, @fastopen={0x22, 0x3, "ce"}, @fastopen={0x22, 0xd, "5e3f86f04c053c8d6ef98c"}, @sack={0x5, 0xe, [0x4f, 0x4, 0x3]}, @exp_fastopen={0xfe, 0xa, 0xf989, "a5714473fbe7"}]}}}}}}}}, 0x66) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r8, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) bind$x25(r1, &(0x7f0000000080), 0x12) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 0s ago: executing program 6 (id=7452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x200000010000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffff8, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) kernel console output (not intermixed with test programs): . Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.323291][T22653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.334530][T22653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.341753][T22653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.367811][T22653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.406489][T22653] hsr_slave_0: entered promiscuous mode [ 786.422934][T22653] hsr_slave_1: entered promiscuous mode [ 786.438129][T22653] debugfs: 'hsr0' already exists in 'hsr' [ 786.452929][T22653] Cannot create hsr debugfs directory [ 786.610798][T22653] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.644798][T22653] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 35170 - 0 [ 786.710806][T22653] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.721714][T22653] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 35170 - 0 [ 786.774208][T22653] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.785556][T22653] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 35170 - 0 [ 786.817953][T22653] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.834052][T22653] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 35170 - 0 [ 787.026371][T22653] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 787.100162][T22653] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 787.121602][T22653] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 787.132114][T22653] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 787.259372][T22733] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 787.295781][T22733] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 787.341876][T22733] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 787.374529][T22653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.394533][T22733] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 787.420533][T22653] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.430484][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.437776][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.441418][T22733] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 787.492009][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.498047][T22733] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 787.499260][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.559682][T22733] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 787.626515][T22733] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 787.674159][T22733] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 787.716639][T22733] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 787.725684][T22653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.047388][T22653] veth0_vlan: entered promiscuous mode [ 788.064694][T22653] veth1_vlan: entered promiscuous mode [ 788.104826][T22653] veth0_macvtap: entered promiscuous mode [ 788.122882][T22653] veth1_macvtap: entered promiscuous mode [ 788.145488][T22653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.158225][T22653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.170209][ T886] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.179976][ T886] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.212214][ T886] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.230085][ T886] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.281059][T22781] syzkaller0: entered promiscuous mode [ 788.306357][T22781] syzkaller0: entered allmulticast mode [ 789.072958][T22812] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5670'. [ 790.210288][T22842] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5681'. [ 790.314229][T22848] infiniband syz2: set down [ 790.323499][T22848] infiniband syz2: added ipvlan0 [ 790.343860][T22848] RDS/IB: syz2: added [ 790.350295][T22848] smc: adding ib device syz2 with port count 1 [ 790.356700][T22848] smc: ib device syz2 port 1 has pnetid S (user defined) [ 790.790302][T22869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5694'. [ 791.194923][T22892] TCP: TCP_TX_DELAY enabled [ 791.574448][T22900] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 791.684867][T22903] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5705'. [ 791.987467][T22939] syzkaller0: entered promiscuous mode [ 791.993023][T22939] syzkaller0: entered allmulticast mode [ 792.129309][T22944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5720'. [ 792.834304][T22961] net_ratelimit: 241 callbacks suppressed [ 792.834324][T22961] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 792.867839][T22961] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 792.898316][T22961] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 792.913167][T22961] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 792.971196][T22961] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 792.989431][T22961] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 793.004920][T22961] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 793.019633][T22961] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 793.034669][T22961] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 793.049293][T22961] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 793.224694][T22977] netlink: 'syz.8.5734': attribute type 1 has an invalid length. [ 793.232771][T22977] netlink: 'syz.8.5734': attribute type 2 has an invalid length. [ 796.542410][T23038] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.549661][T23038] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.839842][T23038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.857727][T23038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.199764][T19133] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.238751][T19133] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.275207][T19133] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.544249][T19133] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.113942][T23129] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5783'. [ 798.340878][T23146] net_ratelimit: 241 callbacks suppressed [ 798.340899][T23146] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 798.361389][T23146] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 798.376106][T23146] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 798.390837][T23146] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 798.405532][T23146] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 798.420231][T23146] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 798.434701][T23146] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 798.462861][T23146] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 798.491606][T23146] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 798.506161][T23146] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0 [ 798.535626][T23153] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5794'. [ 798.573798][T23157] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5796'. [ 798.803218][T23183] netlink: 84 bytes leftover after parsing attributes in process `syz.7.5807'. [ 799.971286][T23222] syzkaller1: entered promiscuous mode [ 799.983450][T23222] syzkaller1: entered allmulticast mode [ 800.159460][T23234] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.166855][T23234] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.218035][T23234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.228830][T23234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.298848][T20102] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.320437][T20102] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.335902][T20102] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.389125][T20102] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.551872][T23228] chnl_net:caif_netlink_parms(): no params data found [ 800.591465][T23228] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.598642][T23228] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.605833][T23228] bridge_slave_0: entered allmulticast mode [ 800.612646][T23228] bridge_slave_0: entered promiscuous mode [ 800.619517][T23228] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.626738][T23228] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.633960][T23228] bridge_slave_1: entered allmulticast mode [ 800.640670][T23228] bridge_slave_1: entered promiscuous mode [ 800.658661][T23228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.669606][T23228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.690081][T23228] team0: Port device team_slave_0 added [ 800.696795][T23228] team0: Port device team_slave_1 added [ 800.712609][T23228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.719638][T23228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.745710][T23228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.757123][T23228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.764126][T23228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.790195][T23228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.822491][T23228] hsr_slave_0: entered promiscuous mode [ 800.829601][T23228] hsr_slave_1: entered promiscuous mode [ 800.836105][T23228] debugfs: 'hsr0' already exists in 'hsr' [ 800.841878][T23228] Cannot create hsr debugfs directory [ 801.249798][T23306] netlink: 'syz.3.5850': attribute type 1 has an invalid length. [ 801.263743][T23306] 8021q: adding VLAN 0 to HW filter on device bond2 [ 801.330628][T23317] netlink: 'syz.8.5855': attribute type 1 has an invalid length. [ 801.338892][T23317] netlink: 'syz.8.5855': attribute type 2 has an invalid length. [ 801.434653][T23330] netlink: 'syz.7.5861': attribute type 1 has an invalid length. [ 801.452749][T23330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 801.931941][T23228] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 801.940959][T23228] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 801.950537][T23228] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 801.960500][T23228] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 801.999126][T23228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.014568][T23228] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.022768][T20104] vlan2: left promiscuous mode [ 802.027765][T20104] bridge0: port 3(vlan2) entered disabled state [ 802.037775][T20104] bridge_slave_1: left allmulticast mode [ 802.043566][T20104] bridge_slave_1: left promiscuous mode [ 802.049414][T20104] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.057745][T20104] bridge_slave_0: left promiscuous mode [ 802.064114][T20104] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.215383][T20104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.224709][T20104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.234887][T20104] bond0 (unregistering): (slave team0): Releasing backup interface [ 802.243328][T20104] bond0 (unregistering): Released all slaves [ 802.251085][T20104] bond1 (unregistering): Released all slaves [ 802.262108][T19133] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.269315][T19133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.285620][T19133] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.292826][T19133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.318967][T23364] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.335429][T23364] bridge_slave_1: left allmulticast mode [ 802.347577][T23364] bridge_slave_1: left promiscuous mode [ 802.353495][T23364] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.371177][T20104] hsr_slave_0: left promiscuous mode [ 802.384648][T20104] hsr_slave_1: left promiscuous mode [ 802.390563][T20104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.400974][T20104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.426651][T19137] smc: removing ib device syz2 [ 802.454454][T20104] team0 (unregistering): Port device team_slave_1 removed [ 802.667341][T23228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.744680][ T28] audit: type=1400 audit(1771983848.478:7690): avc: denied { map } for pid=23414 comm="syz.8.5893" path="socket:[75395]" dev="sockfs" ino=75395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 803.030456][T23228] veth0_vlan: entered promiscuous mode [ 803.039004][T23228] veth1_vlan: entered promiscuous mode [ 803.086549][T23228] veth0_macvtap: entered promiscuous mode [ 803.116688][T23228] veth1_macvtap: entered promiscuous mode [ 803.167317][T23228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.178316][T23228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.219204][T20104] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.261668][T20104] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.275107][T20104] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.284082][T20104] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.601114][T23496] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5917'. [ 804.668349][ T28] audit: type=1400 audit(1771983850.275:7691): avc: denied { getopt } for pid=23498 comm="syz.7.5921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 804.700743][T23502] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5923'. [ 805.984216][T23548] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5936'. [ 805.997686][T23548] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5936'. [ 806.015636][T23548] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5936'. [ 806.032279][ T28] audit: type=1400 audit(1771983851.557:7692): avc: denied { name_bind } for pid=23541 comm="syz.3.5939" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 806.056019][ T28] audit: type=1400 audit(1771983851.576:7693): avc: denied { name_connect } for pid=23541 comm="syz.3.5939" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 806.574493][T23566] netlink: 'syz.3.5948': attribute type 1 has an invalid length. [ 806.595679][T23566] 8021q: adding VLAN 0 to HW filter on device bond3 [ 806.606284][T23569] netlink: 'syz.4.5949': attribute type 10 has an invalid length. [ 806.621937][T23569] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5949'. [ 806.651881][T23573] netlink: 'syz.7.5951': attribute type 3 has an invalid length. [ 806.666156][T23573] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.5951'. [ 806.867261][T23594] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5960'. [ 806.898749][T23599] netlink: 'syz.7.5962': attribute type 1 has an invalid length. [ 806.914910][T23599] 8021q: adding VLAN 0 to HW filter on device bond2 [ 806.925092][T23602] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5963'. [ 806.934709][T23602] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5963'. [ 807.945282][T23654] vlan2: entered allmulticast mode [ 807.950467][T23654] veth0_to_bond: entered allmulticast mode [ 808.022946][T23663] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 808.030247][T23663] IPv6: NLM_F_CREATE should be set when creating new route [ 808.037478][T23663] IPv6: NLM_F_CREATE should be set when creating new route [ 808.044695][T23663] IPv6: NLM_F_CREATE should be set when creating new route [ 808.800305][T23704] vlan0: entered allmulticast mode [ 808.805509][T23704] veth0_to_bond: entered allmulticast mode [ 808.872834][T23711] netlink: 'syz.4.6010': attribute type 29 has an invalid length. [ 808.907049][T23708] netlink: 'syz.8.6009': attribute type 4 has an invalid length. [ 808.918188][T23711] netlink: 'syz.4.6010': attribute type 29 has an invalid length. [ 808.934761][T23708] .`: renamed from bond0 (while UP) [ 808.945362][T23711] netlink: 'syz.4.6010': attribute type 29 has an invalid length. [ 809.094190][T23726] syzkaller0: entered promiscuous mode [ 809.105711][T23726] syzkaller0: entered allmulticast mode [ 809.289151][T23753] netlink: 'syz.8.6028': attribute type 1 has an invalid length. [ 809.304875][T23753] vlan3: entered allmulticast mode [ 809.310348][T23753] veth0_to_bond: entered allmulticast mode [ 809.496894][T23780] netlink: 'syz.8.6041': attribute type 1 has an invalid length. [ 809.505962][T23778] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 809.520857][T23778] syzkaller0: entered promiscuous mode [ 809.526855][T23778] syzkaller0: entered allmulticast mode [ 809.745128][T23809] netlink: 'syz.8.6055': attribute type 1 has an invalid length. [ 809.761221][T23809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.914766][T23832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 810.300435][T23856] __nla_validate_parse: 15 callbacks suppressed [ 810.300450][T23856] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6076'. [ 810.369222][T23862] netlink: 55 bytes leftover after parsing attributes in process `syz.8.6079'. [ 810.537259][T23870] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6083'. [ 810.561453][T23872] netlink: 56 bytes leftover after parsing attributes in process `syz.8.6084'. [ 810.741827][T23895] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6095'. [ 810.791317][T23900] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6096'. [ 810.946939][T23920] syzkaller0: entered promiscuous mode [ 810.952649][T23920] syzkaller0: entered allmulticast mode [ 810.978213][T23896] chnl_net:caif_netlink_parms(): no params data found [ 810.990716][T23926] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6105'. [ 811.022757][T23931] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6106'. [ 811.036959][T23896] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.054034][T23896] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.062753][T23896] bridge_slave_0: entered allmulticast mode [ 811.069433][T23896] bridge_slave_0: entered promiscuous mode [ 811.076454][T23896] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.084546][T23896] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.091722][T23896] bridge_slave_1: entered allmulticast mode [ 811.095392][T20104] tipc: Subscription rejected, illegal request [ 811.100328][T23896] bridge_slave_1: entered promiscuous mode [ 811.136420][T23896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.147776][T23896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.168625][T23896] team0: Port device team_slave_0 added [ 811.175309][T23896] team0: Port device team_slave_1 added [ 811.192770][T23896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.199875][T23896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.226871][T23896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.243745][T23896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.255237][T23896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.283751][T23896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.317020][T23896] hsr_slave_0: entered promiscuous mode [ 811.324073][T23896] hsr_slave_1: entered promiscuous mode [ 811.395719][T23951] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.6115'. [ 811.427945][T23955] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6117'. [ 811.448151][T23896] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.552117][T23896] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.611071][T23896] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.706397][T23896] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.790095][T23896] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 811.802413][T23896] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 811.813161][T23896] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 811.824689][T23896] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 811.991458][T23979] bridge_slave_0: left allmulticast mode [ 811.997894][T23979] bridge_slave_0: left promiscuous mode [ 812.005575][T23979] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.358129][T23896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.370971][T23896] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.381133][ T886] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.388251][ T886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.401055][T19137] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.408175][T19137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.529297][T23896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.638459][T23896] veth0_vlan: entered promiscuous mode [ 812.647341][T23896] veth1_vlan: entered promiscuous mode [ 812.660866][T23896] veth0_macvtap: entered promiscuous mode [ 812.668990][T23896] veth1_macvtap: entered promiscuous mode [ 812.680748][T23896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 812.691221][T23896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 812.798593][T19133] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.820776][T19133] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.854876][T19133] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.895940][T19133] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.962115][T24033] validate_nla: 4 callbacks suppressed [ 812.962176][T24033] netlink: 'syz.3.6139': attribute type 39 has an invalid length. [ 814.688083][T24086] netlink: 'syz.4.6159': attribute type 10 has an invalid length. [ 814.699512][T24086] team0: Cannot enslave team device to itself [ 815.018189][T24133] netlink: 'syz.7.6165': attribute type 1 has an invalid length. [ 815.038204][T24133] 8021q: adding VLAN 0 to HW filter on device bond3 [ 815.062743][T24133] vlan3: entered allmulticast mode [ 815.074849][T24133] veth0_to_bond: entered allmulticast mode [ 815.196194][T24146] netlink: 'syz.7.6168': attribute type 10 has an invalid length. [ 815.197718][ T28] audit: type=1400 audit(1771983860.138:7694): avc: denied { create } for pid=24155 comm="syz.6.6170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 815.233885][ T28] audit: type=1400 audit(1771983860.166:7695): avc: denied { ioctl } for pid=24155 comm="syz.6.6170" path="socket:[78922]" dev="sockfs" ino=78922 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 815.423902][T24155] delete_channel: no stack [ 816.019226][T24232] netlink: 'syz.7.6178': attribute type 1 has an invalid length. [ 816.037115][T24232] 8021q: adding VLAN 0 to HW filter on device bond4 [ 816.257763][T24252] __nla_validate_parse: 9 callbacks suppressed [ 816.257779][T24252] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6187'. [ 817.545129][T24295] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6204'. [ 817.740357][T24312] syzkaller0: entered promiscuous mode [ 817.750671][T24312] syzkaller0: entered allmulticast mode [ 818.522156][T24340] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6224'. [ 818.531777][T24340] netlink: 'syz.8.6224': attribute type 1 has an invalid length. [ 818.539541][T24340] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6224'. [ 818.665126][T24353] netlink: 'syz.8.6230': attribute type 1 has an invalid length. [ 819.251037][T24372] bridge_slave_1: left allmulticast mode [ 819.257180][T24372] bridge_slave_1: left promiscuous mode [ 819.263165][T24372] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.273846][T24372] bridge_slave_0: left allmulticast mode [ 819.282542][T24372] bridge_slave_0: left promiscuous mode [ 819.290284][T24372] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.290309][T24374] netlink: 'syz.8.6235': attribute type 10 has an invalid length. [ 819.362364][T24377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6236'. [ 819.548007][T24374] geneve1: entered promiscuous mode [ 819.574780][T24374] .`: (slave geneve1): Enslaving as an active interface with an up link [ 819.697951][T24389] netlink: 'syz.3.6241': attribute type 1 has an invalid length. [ 819.720778][T24391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6242'. [ 819.738839][T24391] netlink: 'syz.4.6242': attribute type 1 has an invalid length. [ 819.751947][T24391] netlink: 'syz.4.6242': attribute type 2 has an invalid length. [ 819.767685][T24389] vlan2: entered allmulticast mode [ 819.779940][T24389] veth0_to_bond: entered allmulticast mode [ 820.690447][T24431] tipc: Enabling of bearer rejected, failed to enable media [ 820.703606][T24433] Ÿë: port 1(ip6gretap0) entered blocking state [ 820.716561][T24433] Ÿë: port 1(ip6gretap0) entered disabled state [ 820.723971][T24433] ip6gretap0: entered allmulticast mode [ 820.730207][T24433] ip6gretap0: entered promiscuous mode [ 820.938338][T24455] syzkaller0: entered promiscuous mode [ 820.951374][T24455] syzkaller0: entered allmulticast mode [ 821.383735][T24468] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6272'. [ 822.020455][T24487] netlink: 'syz.7.6279': attribute type 10 has an invalid length. [ 822.055329][T24495] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6282'. [ 822.065321][T24495] netlink: 'syz.7.6282': attribute type 1 has an invalid length. [ 822.073871][T24495] netlink: 'syz.7.6282': attribute type 2 has an invalid length. [ 822.180802][T24498] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6283'. [ 822.643363][T24528] netlink: 'syz.8.6294': attribute type 1 has an invalid length. [ 823.781312][T24555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6306'. [ 824.080029][T24585] syzkaller0: entered promiscuous mode [ 824.089069][T24585] syzkaller0: entered allmulticast mode [ 824.463468][T24608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6328'. [ 825.182630][T24673] validate_nla: 1 callbacks suppressed [ 825.182658][T24673] netlink: 'syz.3.6360': attribute type 10 has an invalid length. [ 825.196787][T24673] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6360'. [ 825.208718][T24673] net_ratelimit: 244 callbacks suppressed [ 825.215568][T24673] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 825.253806][T24681] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6362'. [ 825.263484][T24681] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6362'. [ 825.274018][T24681] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6362'. [ 825.312653][T24685] syzkaller0: entered promiscuous mode [ 825.318355][T24685] syzkaller0: entered allmulticast mode [ 825.464424][T24701] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6371'. [ 825.633765][T24711] netlink: 152 bytes leftover after parsing attributes in process `syz.8.6375'. [ 825.859433][T24731] netlink: 'syz.6.6385': attribute type 1 has an invalid length. [ 825.873263][T24731] netlink: 'syz.6.6385': attribute type 2 has an invalid length. [ 826.796186][T24831] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 826.811214][T24831] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 826.837671][T24831] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 826.867766][T24831] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 826.885782][T24831] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 826.911516][T24831] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 826.927252][T24831] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 826.942245][T24831] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 826.957391][T24831] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 827.261555][T24863] bridge_slave_1: left allmulticast mode [ 827.267485][T24863] bridge_slave_1: left promiscuous mode [ 827.275179][T24863] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.289552][T24863] bridge_slave_0: left allmulticast mode [ 827.297154][T24863] bridge_slave_0: left promiscuous mode [ 827.303226][T24863] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.523878][T24878] netlink: 'syz.7.6450': attribute type 4 has an invalid length. [ 827.542035][T24878] __nla_validate_parse: 5 callbacks suppressed [ 827.542049][T24878] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6450'. [ 827.905797][T24892] netlink: 'syz.7.6458': attribute type 10 has an invalid length. [ 827.914501][T24894] Ÿë: port 1(gretap0) entered blocking state [ 827.914602][T24894] Ÿë: port 1(gretap0) entered disabled state [ 827.915038][T24894] gretap0: entered allmulticast mode [ 827.919207][T24894] gretap0: entered promiscuous mode [ 827.956650][T24892] netlink: 55 bytes leftover after parsing attributes in process `syz.7.6458'. [ 828.103706][T24917] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6469'. [ 828.200866][T24923] netlink: 1047 bytes leftover after parsing attributes in process `syz.8.6471'. [ 828.210209][T24923] bridge_slave_1: default FDB implementation only supports local addresses [ 828.297630][T24936] netlink: 'syz.8.6477': attribute type 10 has an invalid length. [ 828.336441][T24936] team0: Port device macvlan1 added [ 828.518892][T24955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6487'. [ 828.606681][T24963] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6488'. [ 828.619285][T24963] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6488'. [ 828.631368][T24963] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6488'. [ 829.713530][T24981] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6496'. [ 829.849798][T24991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6501'. [ 830.620283][T25018] net_ratelimit: 246 callbacks suppressed [ 830.620302][T25018] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 830.953106][T25020] loop3: detected capacity change from 0 to 164 [ 830.997301][T25020] iso9660: Unknown parameter '' [ 831.021978][T25031] 9p: Bad value for 'rfdno' [ 831.156405][T25035] tipc: Started in network mode [ 831.176629][T25035] tipc: Node identity ae183e59e384, cluster identity 4711 [ 831.177799][T25041] netlink: 'syz.6.6518': attribute type 2 has an invalid length. [ 831.191820][T25035] tipc: Enabled bearer , priority 0 [ 831.210529][T25042] syzkaller0: entered promiscuous mode [ 831.221836][T25042] syzkaller0: entered allmulticast mode [ 831.238880][T25045] wg2: entered allmulticast mode [ 831.249651][T25035] tipc: Resetting bearer [ 831.262127][T25041] wg2: entered promiscuous mode [ 831.277514][T25034] tipc: Resetting bearer [ 831.287685][T25034] tipc: Disabling bearer [ 832.274256][T25073] loop4: detected capacity change from 0 to 164 [ 832.305433][T25073] iso9660: Unknown parameter '' [ 832.560359][T25083] loop6: detected capacity change from 0 to 512 [ 832.618666][T25083] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 832.690883][T25089] 9p: Bad value for 'rfdno' [ 832.727813][T25083] EXT4-fs (loop6): 1 truncate cleaned up [ 832.794605][T25083] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.444949][T22653] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.852848][T25131] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 833.875175][T25115] __nla_validate_parse: 5 callbacks suppressed [ 833.875193][T25115] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6541'. [ 834.150648][T25144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 834.565516][T25158] 9p: Bad value for 'rfdno' [ 834.571184][T25156] 9p: Bad value for 'rfdno' [ 834.650778][T25168] netlink: 'syz.7.6561': attribute type 3 has an invalid length. [ 834.664748][T25168] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.6561'. [ 834.709779][T25172] 8021q: adding VLAN 0 to HW filter on device bond2 [ 834.829233][T25184] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 834.937334][T25183] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6569'. [ 834.950224][T25177] 9p: Bad value for 'rfdno' [ 835.096758][T25193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6572'. [ 835.126016][T25193] team0: Port device team_slave_0 removed [ 835.166077][T25199] loop4: detected capacity change from 0 to 1024 [ 835.186322][T25199] EXT4-fs: Ignoring removed bh option [ 835.207109][T25199] EXT4-fs: inline encryption not supported [ 835.219059][T25206] 8021q: adding VLAN 0 to HW filter on device bond2 [ 835.231478][T25199] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 835.249629][T25201] 9p: Bad value for 'rfdno' [ 835.256208][T25199] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 835.275325][T25199] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.6572: lblock 2 mapped to illegal pblock 2 (length 1) [ 835.309518][T25199] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 835.309778][T25199] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 835.318976][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 835.318995][ C0] EXT4-fs (loop4): initial error at time 1771983878: ext4_map_blocks:776: inode 3: block 2 [ 835.319028][ C0] EXT4-fs (loop4): last error at time 1771983878: ext4_map_blocks:776: inode 3: block 2 [ 835.363638][T25199] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 48: comm syz.4.6572: lblock 0 mapped to illegal pblock 48 (length 1) [ 835.378301][T25199] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 835.412901][T25199] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 835.460636][T25199] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.6572: Failed to acquire dquot type 0 [ 835.494451][T25199] loop4: lost filesystem error report for type 5 error -117 [ 835.502558][T25199] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 835.513240][T25199] loop4: lost filesystem error report for type 5 error -117 [ 835.513463][T25199] EXT4-fs error (device loop4): ext4_evict_inode:255: inode #11: comm syz.4.6572: mark_inode_dirty error [ 835.533261][T25199] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 835.533464][T25199] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 835.555194][T25199] EXT4-fs (loop4): 1 orphan inode deleted [ 835.561535][T25199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.587701][ T30] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 835.606650][ T30] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 835.617704][T25224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6581'. [ 835.626666][ T30] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 0 [ 835.710975][ T28] audit: type=1326 audit(1771983879.238:7696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25217 comm="syz.8.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672b46c629 code=0x7ffc0000 [ 835.735510][ T28] audit: type=1326 audit(1771983879.238:7697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25217 comm="syz.8.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f672b46c629 code=0x7ffc0000 [ 835.780013][T25223] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6583'. [ 835.822390][ T28] audit: type=1326 audit(1771983879.238:7698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25217 comm="syz.8.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672b46c629 code=0x7ffc0000 [ 835.888084][ T28] audit: type=1326 audit(1771983879.238:7699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25217 comm="syz.8.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f672b46c629 code=0x7ffc0000 [ 835.920771][ T28] audit: type=1326 audit(1771983879.238:7700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25217 comm="syz.8.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672b46c629 code=0x7ffc0000 [ 835.944389][ T28] audit: type=1326 audit(1771983879.238:7701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25217 comm="syz.8.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672b46c629 code=0x7ffc0000 [ 835.971396][ T28] audit: type=1326 audit(1771983879.238:7702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25217 comm="syz.8.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f672b46c629 code=0x7ffc0000 [ 835.997141][T25237] 9p: Bad value for 'rfdno' [ 836.020351][T25239] 8021q: adding VLAN 0 to HW filter on device bond3 [ 836.099698][T23228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.120826][T23228] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 836.170009][T23228] loop4: lost filesystem error report for type 5 error -117 [ 836.170129][T23228] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 836.192990][T23228] loop4: lost filesystem error report for type 5 error -117 [ 836.193152][T23228] EXT4-fs error (device loop4): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 836.214082][T23228] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 836.456353][T25268] 9p: Bad value for 'rfdno' [ 836.566718][T25270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6597'. [ 836.667019][T25277] 8021q: adding VLAN 0 to HW filter on device bond5 [ 836.820124][T25288] batman_adv: batadv0: Adding interface: dummy0 [ 836.852491][T25288] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.941093][T25288] batman_adv: batadv0: Interface activated: dummy0 [ 836.978285][T25291] batadv0: mtu less than device minimum [ 836.987032][T25291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 836.997876][T25291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 837.008827][T25291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 837.019775][T25291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 837.030747][T25291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 837.041809][T25291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 837.046402][T25300] 9p: Bad value for 'rfdno' [ 837.052869][T25291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 837.053569][T25291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 837.054165][T25291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 837.158588][T25310] netlink: 'syz.6.6612': attribute type 1 has an invalid length. [ 837.172848][T25310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 837.187372][T25310] vlan2: entered allmulticast mode [ 837.193663][T25310] veth0_to_bond: entered allmulticast mode [ 837.200730][T25310] bond1: (slave vlan2): Opening slave failed [ 837.452621][T25332] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6619'. [ 837.940754][T25341] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6622'. [ 838.191644][T25353] netlink: 'syz.4.6627': attribute type 1 has an invalid length. [ 838.261061][T25353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 838.291724][T25357] vlan0: entered allmulticast mode [ 838.317839][T25357] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 838.401911][T25365] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6633'. [ 838.548774][T25378] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 838.761884][T25399] netlink: 'syz.3.6645': attribute type 1 has an invalid length. [ 838.776052][T25399] 8021q: adding VLAN 0 to HW filter on device bond3 [ 839.205952][T25415] loop3: detected capacity change from 0 to 1024 [ 839.213530][T25415] EXT4-fs: inline encryption not supported [ 839.375852][T25415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 839.779559][T25430] netlink: 'syz.4.6656': attribute type 1 has an invalid length. [ 840.122962][T25430] 8021q: adding VLAN 0 to HW filter on device bond2 [ 840.602794][T25456] __nla_validate_parse: 1 callbacks suppressed [ 840.602809][T25456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6665'. [ 840.879893][T23896] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.081613][T25470] netlink: 'syz.7.6670': attribute type 1 has an invalid length. [ 841.095786][T25470] 8021q: adding VLAN 0 to HW filter on device bond6 [ 841.304963][T25490] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6678'. [ 841.646409][T25508] 9p: Bad value for 'rfdno' [ 841.857371][T25521] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6689'. [ 842.527644][T25542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6698'. [ 842.641338][T25546] loop3: detected capacity change from 0 to 512 [ 842.666199][T25548] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6701'. [ 842.686747][T25546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 842.712349][T25546] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 842.783609][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 842.783634][ T28] audit: type=1326 audit(1771983885.947:7729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25545 comm="syz.3.6700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8216c629 code=0x7ffc0000 [ 842.832677][T25546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6700'. [ 842.842370][ T28] audit: type=1326 audit(1771983885.976:7730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25545 comm="syz.3.6700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8216c629 code=0x7ffc0000 [ 842.878795][ T28] audit: type=1326 audit(1771983885.994:7731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25545 comm="syz.3.6700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0d8216c629 code=0x7ffc0000 [ 842.879676][T23896] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.912437][ T28] audit: type=1326 audit(1771983885.994:7732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25545 comm="syz.3.6700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8216c629 code=0x7ffc0000 [ 842.936916][ T28] audit: type=1326 audit(1771983885.994:7733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25545 comm="syz.3.6700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8216c629 code=0x7ffc0000 [ 842.961158][ T28] audit: type=1326 audit(1771983885.994:7734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25545 comm="syz.3.6700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d8216c629 code=0x7ffc0000 [ 842.984902][ T28] audit: type=1326 audit(1771983885.994:7735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25545 comm="syz.3.6700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8216c629 code=0x7ffc0000 [ 843.024223][ T28] audit: type=1326 audit(1771983885.994:7736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25545 comm="syz.3.6700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8216c629 code=0x7ffc0000 [ 843.052434][ T28] audit: type=1326 audit(1771983885.994:7737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25545 comm="syz.3.6700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0d8216c629 code=0x7ffc0000 [ 843.076758][ T28] audit: type=1326 audit(1771983885.994:7738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25545 comm="syz.3.6700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8216c629 code=0x7ffc0000 [ 843.334246][T25582] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 843.432970][T25584] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6715'. [ 843.581268][T25614] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 844.923529][T25685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6752'. [ 844.947399][T25698] tipc: Started in network mode [ 845.454436][T25698] tipc: Node identity fa543f3b9e42, cluster identity 4711 [ 845.463779][T25698] tipc: Enabled bearer , priority 0 [ 845.518582][T25685] team0: Port device team_slave_0 removed [ 845.786774][T25716] loop4: detected capacity change from 0 to 164 [ 846.001454][T25698] syzkaller0: entered promiscuous mode [ 846.026161][T25685] loop3: detected capacity change from 0 to 1024 [ 846.036650][T25698] syzkaller0: entered allmulticast mode [ 846.063739][T25685] EXT4-fs: Ignoring removed bh option [ 846.093558][T25698] tipc: Resetting bearer [ 846.105436][T25697] tipc: Resetting bearer [ 846.118617][T25685] EXT4-fs: inline encryption not supported [ 846.138448][T25697] tipc: Disabling bearer [ 846.151454][T25685] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 846.199125][T25685] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 846.230786][T25731] 9p: Bad value for 'rfdno' [ 846.242610][T25685] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 2: comm syz.3.6752: lblock 2 mapped to illegal pblock 2 (length 1) [ 846.292689][T25685] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 846.292886][T25685] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 48: comm syz.3.6752: lblock 0 mapped to illegal pblock 48 (length 1) [ 846.316263][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 846.316285][ C0] EXT4-fs (loop3): initial error at time 1771983889: ext4_map_blocks:776: inode 3: block 2 [ 846.316326][ C0] EXT4-fs (loop3): last error at time 1771983889: ext4_map_blocks:776: inode 3: block 2 [ 846.424440][T25685] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 846.424580][T25685] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.6752: Failed to acquire dquot type 0 [ 847.280687][T25685] loop3: lost filesystem error report for type 5 error -117 [ 847.290203][T25685] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 847.299732][T25685] loop3: lost filesystem error report for type 5 error -117 [ 847.300035][T25685] EXT4-fs error (device loop3): ext4_evict_inode:255: inode #11: comm syz.3.6752: mark_inode_dirty error [ 847.337447][T25685] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 847.337657][T25685] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 847.389135][T25685] EXT4-fs (loop3): 1 orphan inode deleted [ 847.403939][ T886] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 847.425677][T25685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 847.458786][ T886] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 847.458979][ T886] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:6: Failed to release dquot type 0 [ 847.545427][T25771] batman_adv: batadv0: Adding interface: dummy0 [ 847.551798][T25771] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.582130][T25771] batman_adv: batadv0: Interface activated: dummy0 [ 847.604088][T25773] net_ratelimit: 11 callbacks suppressed [ 847.604144][T25773] batadv0: mtu less than device minimum [ 847.631158][T25773] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 847.642272][T25773] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 847.653456][T25773] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 847.664300][T25773] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 847.675251][T25773] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 847.686442][T25773] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 847.697385][T25773] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 847.708327][T25773] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 847.719252][T25773] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 847.964422][T25789] loop4: detected capacity change from 0 to 164 [ 848.010881][T25789] iso9660: Unknown parameter '' [ 848.080611][T25775] chnl_net:caif_netlink_parms(): no params data found [ 848.103527][T23896] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.176361][T23896] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 848.319228][T23896] loop3: lost filesystem error report for type 5 error -117 [ 848.319342][T23896] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 848.380274][T23896] loop3: lost filesystem error report for type 5 error -117 [ 848.381081][T23896] EXT4-fs error (device loop3): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 848.542065][T23896] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 848.926332][T25775] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.009660][T25775] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.017957][T25775] bridge_slave_0: entered allmulticast mode [ 849.024519][T25775] bridge_slave_0: entered promiscuous mode [ 849.032055][T25775] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.039396][T25775] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.046671][T25775] bridge_slave_1: entered allmulticast mode [ 849.053599][T25775] bridge_slave_1: entered promiscuous mode [ 849.127802][T25775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.138523][T25775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.159868][T25775] team0: Port device team_slave_0 added [ 849.166611][T25775] team0: Port device team_slave_1 added [ 849.187071][T25775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.194183][T25775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.220453][T25775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.232682][T25775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.239696][T25775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.267880][T25775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.325880][T25775] hsr_slave_0: entered promiscuous mode [ 849.332266][T25775] hsr_slave_1: entered promiscuous mode [ 849.339127][T25775] debugfs: 'hsr0' already exists in 'hsr' [ 849.344941][T25775] Cannot create hsr debugfs directory [ 849.522678][T25775] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.567254][T25775] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.622401][T25775] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.698164][T25775] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.746065][T25856] tipc: Enabled bearer , priority 0 [ 849.753318][T25856] syzkaller0: entered promiscuous mode [ 849.759196][T25856] syzkaller0: entered allmulticast mode [ 849.771770][T25856] tipc: Resetting bearer [ 849.780023][T25855] tipc: Resetting bearer [ 849.788116][T25855] tipc: Disabling bearer [ 849.808143][T25775] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 849.818131][T25775] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 849.827297][T25775] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 849.837256][T25775] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 849.861934][T25775] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.869120][T25775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.912095][T25866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6813'. [ 849.917995][T25775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.927841][T25866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6813'. [ 849.949706][ T886] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.988230][T25775] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.009784][T25775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 850.020870][T25775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 850.039145][ T886] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.046289][ T886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.055603][ T886] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.062715][ T886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.157346][T25775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 850.182801][T25880] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6816'. [ 850.596754][T25775] veth0_vlan: entered promiscuous mode [ 850.649336][T25775] veth1_vlan: entered promiscuous mode [ 850.676244][T25775] veth0_macvtap: entered promiscuous mode [ 850.691775][T25775] veth1_macvtap: entered promiscuous mode [ 850.705375][T25775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 850.714732][T25775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 850.741104][T19130] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.752178][T19130] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.768991][T19130] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.793321][T19130] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.467204][T25931] chnl_net:caif_netlink_parms(): no params data found [ 852.887971][T25931] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.918266][T25931] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.944883][T25931] bridge_slave_0: entered allmulticast mode [ 852.952709][T25931] bridge_slave_0: entered promiscuous mode [ 852.970601][T25931] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.996597][T25931] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.009438][T25931] bridge_slave_1: entered allmulticast mode [ 853.025441][T25931] bridge_slave_1: entered promiscuous mode [ 853.068726][T25931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.090775][T25931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.122097][T25931] team0: Port device team_slave_0 added [ 853.129261][T25931] team0: Port device team_slave_1 added [ 853.147723][T25931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.154929][T25931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.188326][T25931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.211246][T25931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.219293][T25931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.298565][T25931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.362003][T25931] hsr_slave_0: entered promiscuous mode [ 853.373683][T25931] hsr_slave_1: entered promiscuous mode [ 853.388462][T25931] debugfs: 'hsr0' already exists in 'hsr' [ 853.405112][T25931] Cannot create hsr debugfs directory [ 853.453631][T25984] 9p: Bad value for 'rfdno' [ 853.556792][T25931] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.614904][T25931] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.694238][T25931] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.706082][T25999] 9p: Bad value for 'rfdno' [ 853.860146][T25931] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.404165][T26028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6863'. [ 854.434589][T25931] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 854.476130][T25931] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 854.505424][T25931] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 854.539967][T25931] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 854.578367][T26022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6859'. [ 854.614038][T26022] team0: Port device team_slave_0 removed [ 854.668168][T26042] loop6: detected capacity change from 0 to 1024 [ 854.680627][T25931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.687792][T26042] EXT4-fs: Ignoring removed bh option [ 854.707631][T26042] EXT4-fs: inline encryption not supported [ 854.730308][T25931] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.738582][T26042] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 854.760266][T19137] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.767406][T19137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.779539][T26042] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 854.801124][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.808267][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.820213][T26042] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 2: comm syz.6.6859: lblock 2 mapped to illegal pblock 2 (length 1) [ 854.852096][T26042] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 854.852884][T26042] __quota_error: 49 callbacks suppressed [ 854.852923][T26042] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 854.867759][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 854.867796][ C0] EXT4-fs (loop6): initial error at time 1771983897: ext4_map_blocks:776: inode 3: block 2 [ 854.867828][ C0] EXT4-fs (loop6): last error at time 1771983897: ext4_map_blocks:776: inode 3: block 2 [ 854.902244][T26042] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 48: comm syz.6.6859: lblock 0 mapped to illegal pblock 48 (length 1) [ 854.916554][T26042] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 854.926955][T26042] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 854.959014][T26042] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.6859: Failed to acquire dquot type 0 [ 854.977660][T26042] loop6: lost filesystem error report for type 5 error -117 [ 854.985500][T26042] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 854.995302][T26042] loop6: lost filesystem error report for type 5 error -117 [ 854.995454][T26042] EXT4-fs error (device loop6): ext4_evict_inode:255: inode #11: comm syz.6.6859: mark_inode_dirty error [ 855.015979][T26042] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 855.016148][T26042] EXT4-fs warning (device loop6): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 855.058192][T26042] EXT4-fs (loop6): 1 orphan inode deleted [ 855.064732][T26042] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.073447][T25931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.087964][T19130] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 855.113914][T19130] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 855.114005][T19130] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 855.145770][T19130] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:12: Failed to release dquot type 0 [ 855.372452][T25931] veth0_vlan: entered promiscuous mode [ 855.391662][T25931] veth1_vlan: entered promiscuous mode [ 855.428246][T25931] veth0_macvtap: entered promiscuous mode [ 855.445821][T25931] veth1_macvtap: entered promiscuous mode [ 855.479313][T25931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.496836][T22653] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.509575][T22653] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 855.528214][T25931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.561150][T20102] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.570235][T22653] loop6: lost filesystem error report for type 5 error -117 [ 855.570449][T22653] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 855.580840][T20102] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.596154][T22653] loop6: lost filesystem error report for type 5 error -117 [ 855.596251][T22653] EXT4-fs error (device loop6): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 855.618709][T22653] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 855.630197][T19137] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.662036][T26086] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6876'. [ 855.675493][T19137] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.688641][T26088] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6875'. [ 855.741313][T26088] vlan2: entered allmulticast mode [ 855.874871][T26091] loop8: detected capacity change from 0 to 512 [ 855.929616][T26091] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 856.109448][T26091] EXT4-fs (loop8): 1 truncate cleaned up [ 856.427971][T26091] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.784562][T26118] 9p: Bad value for 'wfdno' [ 856.809245][T25931] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.968838][T26129] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6888'. [ 857.188724][T26116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6885'. [ 857.217790][T26116] loop3: detected capacity change from 0 to 1024 [ 857.232895][T26116] EXT4-fs: Ignoring removed bh option [ 857.239004][T26116] EXT4-fs: inline encryption not supported [ 857.259355][T26116] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 857.354174][T26116] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 857.411035][T26116] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 2: comm syz.3.6885: lblock 2 mapped to illegal pblock 2 (length 1) [ 857.425613][T26116] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 857.425915][T26116] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 857.434977][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 857.434999][ C0] EXT4-fs (loop3): initial error at time 1771983899: ext4_map_blocks:776: inode 3: block 2 [ 857.435040][ C0] EXT4-fs (loop3): last error at time 1771983899: ext4_map_blocks:776: inode 3: block 2 [ 857.554740][T26116] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 48: comm syz.3.6885: lblock 0 mapped to illegal pblock 48 (length 1) [ 857.554939][T26116] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 857.571200][T26116] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 857.571218][T26116] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.6885: Failed to acquire dquot type 0 [ 857.571237][T26116] loop3: lost filesystem error report for type 5 error -117 [ 857.571739][T26116] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 857.571909][T26116] loop3: lost filesystem error report for type 5 error -117 [ 857.572117][T26116] EXT4-fs error (device loop3): ext4_evict_inode:255: inode #11: comm syz.3.6885: mark_inode_dirty error [ 857.572158][T26116] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 857.572306][T26116] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 857.572333][T26116] EXT4-fs (loop3): 1 orphan inode deleted [ 857.574472][T26116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 857.588233][ T30] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 857.588636][ T30] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 857.588667][ T30] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 0 [ 858.053111][T23896] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.107817][T23896] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 858.153058][T23896] loop3: lost filesystem error report for type 5 error -117 [ 858.153183][T23896] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 858.192873][T26161] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6903'. [ 858.207460][T23896] loop3: lost filesystem error report for type 5 error -117 [ 858.214136][T23896] EXT4-fs error (device loop3): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 858.272230][T23896] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 858.454118][T26173] netlink: 'syz.4.6908': attribute type 1 has an invalid length. [ 858.489558][T26173] 8021q: adding VLAN 0 to HW filter on device bond3 [ 859.062046][T26183] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6910'. [ 859.089201][T26183] loop6: detected capacity change from 0 to 1024 [ 859.108301][T26183] EXT4-fs: Ignoring removed bh option [ 859.124337][T26183] EXT4-fs: inline encryption not supported [ 859.139765][T26183] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 859.162736][T26183] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 859.183295][T26183] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 2: comm syz.6.6910: lblock 2 mapped to illegal pblock 2 (length 1) [ 859.209789][T26183] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 859.210089][T26183] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 859.219213][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 859.219234][ C1] EXT4-fs (loop6): initial error at time 1771983901: ext4_map_blocks:776: inode 3: block 2 [ 859.219268][ C1] EXT4-fs (loop6): last error at time 1771983901: ext4_map_blocks:776: inode 3: block 2 [ 859.307332][T26183] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 48: comm syz.6.6910: lblock 0 mapped to illegal pblock 48 (length 1) [ 859.358896][T26183] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 859.402477][T26183] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.6910: Failed to acquire dquot type 0 [ 859.426448][T26183] loop6: lost filesystem error report for type 5 error -117 [ 859.443329][T26183] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 859.463682][T26183] loop6: lost filesystem error report for type 5 error -117 [ 859.464268][T26183] EXT4-fs error (device loop6): ext4_evict_inode:255: inode #11: comm syz.6.6910: mark_inode_dirty error [ 859.498676][T26183] EXT4-fs warning (device loop6): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 859.510909][T26183] EXT4-fs (loop6): 1 orphan inode deleted [ 859.539286][T26183] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 859.555560][T20102] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 859.586027][T20102] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 859.614466][T20102] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:18: Failed to release dquot type 0 [ 859.918559][T22653] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.940698][T22653] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 859.967011][T22653] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 859.993322][T22653] EXT4-fs error (device loop6): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 860.150047][ T886] .` (unregistering): (slave geneve1): Releasing backup interface [ 860.331843][ T886] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.376649][ T886] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.415401][ T886] .` (unregistering): Released all slaves [ 860.448603][ T886] bond0 (unregistering): Released all slaves [ 860.484460][ T886] bond1 (unregistering): Released all slaves [ 860.518520][ T886] bond2 (unregistering): Released all slaves [ 860.572131][ T886] bond3 (unregistering): Released all slaves [ 860.614500][ T886] tipc: Left network mode [ 860.645976][ T886] hsr_slave_0: left promiscuous mode [ 860.651773][ T886] hsr_slave_1: left promiscuous mode [ 860.666447][ T886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.673908][ T886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.709091][ T886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.716584][ T886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.744374][ T886] veth1_macvtap: left promiscuous mode [ 860.749901][ T886] veth0_macvtap: left promiscuous mode [ 860.772886][ T886] veth1_vlan: left promiscuous mode [ 860.778183][ T886] veth0_vlan: left promiscuous mode [ 860.924805][ T886] team0 (unregistering): Port device macvlan1 removed [ 861.029397][ T886] team0 (unregistering): Port device team_slave_1 removed [ 861.072315][T26241] netlink: 'syz.6.6930': attribute type 1 has an invalid length. [ 861.151866][T26241] 8021q: adding VLAN 0 to HW filter on device bond2 [ 861.176533][T26245] vlan2: entered allmulticast mode [ 861.241628][T26243] 9p: Bad value for 'rfdno' [ 861.560406][T26273] netlink: 'syz.7.6943': attribute type 1 has an invalid length. [ 861.590143][T26248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6932'. [ 861.654897][T26271] loop3: detected capacity change from 0 to 1024 [ 861.661407][T26273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 861.668618][T26271] EXT4-fs: Ignoring removed bh option [ 861.686304][T26283] syzkaller1: entered promiscuous mode [ 861.698937][T26271] EXT4-fs: inline encryption not supported [ 861.720011][T26283] syzkaller1: entered allmulticast mode [ 861.731198][T26271] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 861.761197][T26271] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 861.776770][T26271] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 2: comm syz.3.6932: lblock 2 mapped to illegal pblock 2 (length 1) [ 861.810041][T26271] fserror_report: 3 callbacks suppressed [ 861.810083][T26271] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 861.828572][T26271] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 861.837722][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 861.837764][ C0] EXT4-fs (loop3): initial error at time 1771983903: ext4_map_blocks:776: inode 3: block 2 [ 861.837793][ C0] EXT4-fs (loop3): last error at time 1771983903: ext4_map_blocks:776: inode 3: block 2 [ 861.872316][T26271] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 48: comm syz.3.6932: lblock 0 mapped to illegal pblock 48 (length 1) [ 861.888916][T26271] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 861.889159][T26271] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 861.907175][T26271] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.6932: Failed to acquire dquot type 0 [ 861.918430][T26271] fserror_report: 2 callbacks suppressed [ 861.918446][T26271] loop3: lost filesystem error report for type 5 error -117 [ 861.931848][T26271] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 861.951218][T26271] loop3: lost filesystem error report for type 5 error -117 [ 861.951431][T26271] EXT4-fs error (device loop3): ext4_evict_inode:255: inode #11: comm syz.3.6932: mark_inode_dirty error [ 861.970278][T26271] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 861.970451][T26271] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 861.989937][T26271] EXT4-fs (loop3): 1 orphan inode deleted [ 862.011932][ T36] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 862.024736][T26271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.121167][ T36] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 862.161356][ T36] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 0 [ 862.528475][T23896] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.570531][T23896] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 862.600390][T26311] loop8: detected capacity change from 0 to 512 [ 862.611670][T23896] loop3: lost filesystem error report for type 5 error -117 [ 862.611829][T23896] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 862.650256][T23896] loop3: lost filesystem error report for type 5 error -117 [ 862.656636][T23896] EXT4-fs error (device loop3): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 862.686187][T26311] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.699375][T23896] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 862.699618][T26311] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 862.833994][ T28] audit: type=1326 audit(1771983904.701:7785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26310 comm="syz.8.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92919c629 code=0x7ffc0000 [ 862.887556][T26311] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6952'. [ 862.929067][ T28] audit: type=1326 audit(1771983904.701:7786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26310 comm="syz.8.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa92919c629 code=0x7ffc0000 [ 862.985877][T25931] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.006196][ T28] audit: type=1326 audit(1771983904.701:7787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26310 comm="syz.8.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92919c629 code=0x7ffc0000 [ 863.080366][ T28] audit: type=1326 audit(1771983904.701:7788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26310 comm="syz.8.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92919c629 code=0x7ffc0000 [ 863.147843][ T28] audit: type=1326 audit(1771983904.701:7789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26310 comm="syz.8.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa92919c629 code=0x7ffc0000 [ 863.215560][ T28] audit: type=1326 audit(1771983904.701:7790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26310 comm="syz.8.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92919c629 code=0x7ffc0000 [ 863.280319][ T28] audit: type=1326 audit(1771983904.701:7791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26310 comm="syz.8.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92919c629 code=0x7ffc0000 [ 863.520728][T26345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6962'. [ 863.535472][T26345] loop6: detected capacity change from 0 to 1024 [ 863.547072][T26345] EXT4-fs: Ignoring removed bh option [ 863.553457][T26345] EXT4-fs: inline encryption not supported [ 863.562118][T26345] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 863.576307][T26345] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 863.591048][T26345] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 2: comm syz.6.6962: lblock 2 mapped to illegal pblock 2 (length 1) [ 863.605182][T26363] loop7: detected capacity change from 0 to 512 [ 863.614252][T26345] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 863.614587][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 863.630111][ C1] EXT4-fs (loop6): initial error at time 1771983905: ext4_map_blocks:776: inode 3: block 2 [ 863.640179][ C1] EXT4-fs (loop6): last error at time 1771983905: ext4_map_blocks:776: inode 3: block 2 [ 863.653649][T26345] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 48: comm syz.6.6962: lblock 0 mapped to illegal pblock 48 (length 1) [ 863.667900][T26345] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 863.668792][T26345] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.6962: Failed to acquire dquot type 0 [ 863.673306][T26363] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.677847][T26345] loop6: lost filesystem error report for type 5 error -117 [ 863.690156][T26363] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 863.719309][T26345] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 863.728673][T26363] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6967'. [ 863.738712][T26345] loop6: lost filesystem error report for type 5 error -117 [ 863.739578][T26345] EXT4-fs error (device loop6): ext4_evict_inode:255: inode #11: comm syz.6.6962: mark_inode_dirty error [ 863.758833][T26345] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 863.758986][T25775] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.759293][T26345] EXT4-fs warning (device loop6): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 863.787705][T26345] EXT4-fs (loop6): 1 orphan inode deleted [ 863.807439][T19133] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 863.824861][T26345] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.838200][T19133] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 863.838349][T19133] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:14: Failed to release dquot type 0 [ 865.214853][T22653] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.229686][T26391] loop4: detected capacity change from 0 to 512 [ 865.247057][T22653] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 865.301224][T22653] loop6: lost filesystem error report for type 5 error -117 [ 865.315834][T26391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 865.317260][T22653] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 865.361995][T26391] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 865.411267][T26391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6978'. [ 865.431699][T22653] loop6: lost filesystem error report for type 5 error -117 [ 865.434418][T22653] EXT4-fs error (device loop6): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 865.511114][T23228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.516507][T22653] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 866.291817][T26414] syzkaller0: entered promiscuous mode [ 866.327179][T26414] syzkaller0: entered allmulticast mode [ 866.830474][T26438] loop4: detected capacity change from 0 to 512 [ 866.949757][T26438] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 867.179267][T26438] EXT4-fs (loop4): 1 truncate cleaned up [ 867.228983][T26438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 867.542945][T26451] syzkaller0: entered promiscuous mode [ 867.549131][T26451] syzkaller0: entered allmulticast mode [ 867.555654][T23228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.483838][T26489] loop8: detected capacity change from 0 to 512 [ 868.567006][T26489] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 868.657763][T26489] EXT4-fs (loop8): 1 truncate cleaned up [ 868.692202][T26489] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 869.215288][T26510] syzkaller0: entered promiscuous mode [ 869.220868][T26510] syzkaller0: entered allmulticast mode [ 869.296088][T25931] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.350981][T26515] syzkaller1: entered promiscuous mode [ 869.356928][T26515] syzkaller1: entered allmulticast mode [ 869.384228][T26521] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7024'. [ 869.565816][T26523] loop3: detected capacity change from 0 to 164 [ 869.616319][T26523] iso9660: Unknown parameter '' [ 869.685214][T26542] syzkaller0: entered promiscuous mode [ 869.690754][T26542] syzkaller0: entered allmulticast mode [ 870.018487][T26567] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7038'. [ 870.961887][T26629] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7068'. [ 871.408030][T26650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7074'. [ 871.652214][T26662] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7080'. [ 871.741166][T26664] netlink: 'syz.8.7081': attribute type 1 has an invalid length. [ 871.785639][T26664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 872.296141][T26678] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7085'. [ 872.799005][T26687] loop4: detected capacity change from 0 to 512 [ 872.848726][T26687] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 872.947079][T26687] EXT4-fs (loop4): 1 truncate cleaned up [ 872.971603][T26687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 873.031138][T26702] netlink: 'syz.6.7094': attribute type 1 has an invalid length. [ 873.038925][T26702] netlink: 'syz.6.7094': attribute type 2 has an invalid length. [ 873.337416][T26711] loop3: detected capacity change from 0 to 512 [ 873.376164][T26711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 873.437485][T26711] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 873.537576][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 873.537592][ T28] audit: type=1326 audit(1771983914.723:7836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26710 comm="syz.3.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8216c629 code=0x7ffc0000 [ 873.571269][T26711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7097'. [ 873.596329][T23228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.605351][ T28] audit: type=1326 audit(1771983914.751:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26710 comm="syz.3.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8216c629 code=0x7ffc0000 [ 873.640206][T23896] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.817830][T26725] netlink: 'syz.3.7102': attribute type 1 has an invalid length. [ 873.860964][T26725] 8021q: adding VLAN 0 to HW filter on device bond4 [ 874.256123][T26740] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7104'. [ 874.664317][T26745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7108'. [ 874.720761][T26747] loop4: detected capacity change from 0 to 512 [ 874.731135][T26742] 9p: Bad value for 'rfdno' [ 874.763557][T26747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 874.792318][T26747] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 874.874557][T26747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7109'. [ 874.884757][ T28] audit: type=1326 audit(1771983915.977:7838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26746 comm="syz.4.7109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282f8c629 code=0x7ffc0000 [ 874.987174][T26759] netlink: 'syz.6.7113': attribute type 1 has an invalid length. [ 875.011078][ T28] audit: type=1326 audit(1771983915.977:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26746 comm="syz.4.7109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282f8c629 code=0x7ffc0000 [ 875.034972][T23228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.081002][ T28] audit: type=1326 audit(1771983915.977:7840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26746 comm="syz.4.7109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6282f8c629 code=0x7ffc0000 [ 875.107581][T26759] 8021q: adding VLAN 0 to HW filter on device bond3 [ 875.162851][ T28] audit: type=1326 audit(1771983915.977:7841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26746 comm="syz.4.7109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282f8c629 code=0x7ffc0000 [ 875.186433][ T28] audit: type=1326 audit(1771983915.977:7842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26746 comm="syz.4.7109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282f8c629 code=0x7ffc0000 [ 875.210834][ T28] audit: type=1326 audit(1771983915.977:7843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26746 comm="syz.4.7109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6282f8c629 code=0x7ffc0000 [ 875.240140][T26767] syzkaller0: entered promiscuous mode [ 875.245718][ T28] audit: type=1326 audit(1771983915.977:7844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26746 comm="syz.4.7109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282f8c629 code=0x7ffc0000 [ 875.269362][T26767] syzkaller0: entered allmulticast mode [ 875.280132][ T28] audit: type=1326 audit(1771983915.977:7845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26746 comm="syz.4.7109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282f8c629 code=0x7ffc0000 [ 875.627045][T26796] netlink: 'syz.7.7127': attribute type 1 has an invalid length. [ 875.684729][T26796] 8021q: adding VLAN 0 to HW filter on device bond2 [ 875.714227][T26801] vlan2: entered allmulticast mode [ 875.744009][T26801] veth0_to_bond: entered allmulticast mode [ 875.951991][T26810] loop4: detected capacity change from 0 to 164 [ 875.965045][T26810] iso9660: Unknown parameter '' [ 876.415235][T26839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7145'. [ 876.606754][T26853] netlink: 'syz.6.7151': attribute type 1 has an invalid length. [ 876.631319][T26853] 8021q: adding VLAN 0 to HW filter on device bond4 [ 876.688755][T26856] 9p: Bad value for 'rfdno' [ 877.102569][T26887] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7163'. [ 877.176748][T26893] netlink: 68 bytes leftover after parsing attributes in process `syz.7.7167'. [ 877.379064][T26897] loop3: detected capacity change from 0 to 512 [ 877.425421][T26897] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 877.488182][T26897] EXT4-fs (loop3): 1 truncate cleaned up [ 877.502931][T26897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 878.445168][T23896] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.949208][T26970] netlink: 'syz.4.7201': attribute type 1 has an invalid length. [ 878.999001][T26970] 8021q: adding VLAN 0 to HW filter on device bond4 [ 879.054333][T26972] loop3: detected capacity change from 0 to 512 [ 879.084327][T26972] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 879.155219][T26972] EXT4-fs (loop3): 1 truncate cleaned up [ 879.167508][T26972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 879.302602][T26987] loop4: detected capacity change from 0 to 164 [ 879.331937][T26987] iso9660: Unknown parameter '' [ 879.859144][T23896] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.901984][T26995] loop8: detected capacity change from 0 to 512 [ 879.923155][T26995] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 879.955051][T26995] EXT4-fs (loop8): 1 truncate cleaned up [ 880.026917][T26995] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 880.805882][T25931] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.272279][T27056] bridge_slave_1: left allmulticast mode [ 881.288908][T27056] bridge_slave_1: left promiscuous mode [ 881.309752][T27056] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.336966][T27056] bridge_slave_0: left allmulticast mode [ 881.357901][T27056] bridge_slave_0: left promiscuous mode [ 881.371774][T27057] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7233'. [ 881.400717][T27056] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.766075][T27068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7235'. [ 882.255259][T27074] syzkaller0: entered promiscuous mode [ 882.281693][T27074] syzkaller0: entered allmulticast mode [ 882.633559][T27092] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7243'. [ 882.691713][T27096] tipc: Enabled bearer , priority 0 [ 882.704432][T27096] syzkaller0: entered promiscuous mode [ 882.719277][T27096] syzkaller0: entered allmulticast mode [ 882.729889][T27096] tipc: Resetting bearer [ 882.737143][T27095] tipc: Resetting bearer [ 882.747324][T27095] tipc: Disabling bearer [ 883.051602][T27115] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7251'. [ 883.486643][T27120] loop6: detected capacity change from 0 to 512 [ 883.517352][T27120] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 883.554093][T27126] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7257'. [ 883.555209][T27120] EXT4-fs (loop6): 1 truncate cleaned up [ 883.572616][T27120] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.984199][T27144] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7263'. [ 884.162117][T27152] loop4: detected capacity change from 0 to 764 [ 884.189130][T27154] 8021q: adding VLAN 0 to HW filter on device bond2 [ 884.253652][T27154] vlan2: entered allmulticast mode [ 884.259483][T27154] veth0_to_bond: entered allmulticast mode [ 884.271641][T22653] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.284040][T27154] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 884.309371][T27158] netlink: 'syz.6.7267': attribute type 1 has an invalid length. [ 884.351449][T27158] 8021q: adding VLAN 0 to HW filter on device bond5 [ 884.400234][T27165] bridge_slave_1: left allmulticast mode [ 884.406138][T27165] bridge_slave_1: left promiscuous mode [ 884.411427][T27161] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7268'. [ 884.416548][T27165] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.429659][T27165] bridge_slave_0: left allmulticast mode [ 884.435560][T27165] bridge_slave_0: left promiscuous mode [ 884.441770][T27165] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.481651][T27166] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7269'. [ 884.963552][T27184] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7271'. [ 885.209865][T27187] loop3: detected capacity change from 0 to 512 [ 885.247078][T27187] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 885.283560][T27187] EXT4-fs (loop3): 1 truncate cleaned up [ 885.312797][T27187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 885.490575][T27203] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7280'. [ 885.900514][T27211] loop6: detected capacity change from 0 to 512 [ 885.936744][T27216] loop8: detected capacity change from 0 to 764 [ 885.940986][T27211] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 885.973890][T23896] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.041826][T27211] EXT4-fs (loop6): 1 truncate cleaned up [ 886.125438][T27211] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 886.415209][T27234] loop8: detected capacity change from 0 to 512 [ 886.457740][T27234] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 886.541703][T27234] EXT4-fs (loop8): 1 truncate cleaned up [ 886.559812][T27234] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 886.736287][T22653] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.876895][T25931] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.910096][T27238] 9p: Bad value for 'rfdno' [ 887.132652][T27248] loop8: detected capacity change from 0 to 764 [ 887.209454][T19133] bridge_slave_1: left allmulticast mode [ 887.217497][T19133] bridge_slave_1: left promiscuous mode [ 887.245782][T19133] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.268881][T19133] bridge_slave_0: left allmulticast mode [ 887.278457][T19133] bridge_slave_0: left promiscuous mode [ 887.296689][T19133] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.326454][T27255] 9p: Bad value for 'rfdno' [ 887.453923][T27264] loop7: detected capacity change from 0 to 512 [ 887.484463][T27266] loop4: detected capacity change from 0 to 512 [ 887.509492][T27266] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 887.564338][T27279] loop8: detected capacity change from 0 to 764 [ 887.603522][T27281] iso9660: Unknown parameter '' [ 887.723394][T27264] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 887.758046][T27266] EXT4-fs (loop4): 1 truncate cleaned up [ 887.785084][T27266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 887.834707][T27264] EXT4-fs (loop7): 1 truncate cleaned up [ 887.845756][T19133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 887.859646][T27264] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 887.934452][T19133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 887.957895][T19133] bond0 (unregistering): Released all slaves [ 887.996767][T19133] bond1 (unregistering): Released all slaves [ 888.036063][T19133] bond2 (unregistering): Released all slaves [ 888.065559][T19133] bond3 (unregistering): Released all slaves [ 888.142213][T27300] syzkaller0: entered promiscuous mode [ 888.153576][T27300] syzkaller0: entered allmulticast mode [ 888.176200][T19133] tipc: Left network mode [ 888.183990][T25775] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.195460][T19133] hsr_slave_0: left promiscuous mode [ 888.201662][T19133] hsr_slave_1: left promiscuous mode [ 888.215435][T19133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 888.238793][T19133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.250973][T23228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.264802][T19133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.288254][T19133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.325486][T19133] dummy0: left allmulticast mode [ 888.348979][T19133] veth1_macvtap: left promiscuous mode [ 888.368020][T19133] veth0_macvtap: left promiscuous mode [ 888.384882][T19133] veth1_vlan: left promiscuous mode [ 888.403798][T19133] veth0_vlan: left promiscuous mode [ 888.668244][T27313] 9p: Bad value for 'rfdno' [ 888.709056][T19133] team0 (unregistering): Port device team_slave_1 removed [ 889.103617][T27332] set_capacity_and_notify: 1 callbacks suppressed [ 889.103633][T27332] loop7: detected capacity change from 0 to 512 [ 889.148280][T27332] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 889.197215][T27332] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 889.296636][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 889.296654][ T28] audit: type=1326 audit(1771983929.472:7877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27331 comm="syz.7.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922333c629 code=0x7ffc0000 [ 889.337431][T27332] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7327'. [ 889.399476][ T28] audit: type=1326 audit(1771983929.509:7878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27331 comm="syz.7.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922333c629 code=0x7ffc0000 [ 889.456537][ T28] audit: type=1326 audit(1771983929.509:7879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27331 comm="syz.7.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f922333c629 code=0x7ffc0000 [ 889.495478][T25775] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.497621][T27348] syzkaller0: entered promiscuous mode [ 889.532337][ T28] audit: type=1326 audit(1771983929.509:7880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27331 comm="syz.7.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922333c629 code=0x7ffc0000 [ 889.559647][ T28] audit: type=1326 audit(1771983929.509:7881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27331 comm="syz.7.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922333c629 code=0x7ffc0000 [ 889.598837][T27348] syzkaller0: entered allmulticast mode [ 889.629392][ T28] audit: type=1326 audit(1771983929.509:7882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27331 comm="syz.7.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f922333c629 code=0x7ffc0000 [ 889.679873][ T28] audit: type=1326 audit(1771983929.509:7883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27331 comm="syz.7.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922333c629 code=0x7ffc0000 [ 889.736153][ T28] audit: type=1326 audit(1771983929.509:7884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27331 comm="syz.7.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922333c629 code=0x7ffc0000 [ 889.788314][ T28] audit: type=1326 audit(1771983929.518:7885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27331 comm="syz.7.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f922333c629 code=0x7ffc0000 [ 889.877894][ T28] audit: type=1326 audit(1771983929.518:7886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27331 comm="syz.7.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922333c629 code=0x7ffc0000 [ 889.939971][T27366] loop7: detected capacity change from 0 to 164 [ 889.953272][T27366] iso9660: Unknown parameter '' [ 890.124449][T27378] netlink: 'syz.7.7343': attribute type 1 has an invalid length. [ 890.147568][T27378] 8021q: adding VLAN 0 to HW filter on device bond3 [ 890.266078][T27385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7345'. [ 890.339314][T27390] loop8: detected capacity change from 0 to 764 [ 890.772994][T27399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7351'. [ 891.211518][T27411] netlink: 'syz.3.7356': attribute type 1 has an invalid length. [ 891.239898][T27411] 8021q: adding VLAN 0 to HW filter on device bond5 [ 891.583749][T27429] syzkaller0: entered promiscuous mode [ 891.623024][T27429] syzkaller0: entered allmulticast mode [ 891.904921][T27447] loop4: detected capacity change from 0 to 164 [ 891.919873][T27447] iso9660: Unknown parameter '' [ 893.483354][T27476] loop7: detected capacity change from 0 to 164 [ 893.503708][T27476] iso9660: Unknown parameter '' [ 893.880038][T27483] loop7: detected capacity change from 0 to 512 [ 893.955116][T27483] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 894.001463][T27486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7383'. [ 894.036449][T27475] loop3: detected capacity change from 0 to 1024 [ 894.066887][T27475] EXT4-fs: Ignoring removed bh option [ 894.109937][T27475] EXT4-fs: inline encryption not supported [ 894.133363][T27475] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 894.157130][T27483] EXT4-fs (loop7): 1 truncate cleaned up [ 894.166401][T27475] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 894.189944][T27483] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.241781][T27475] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 2: comm syz.3.7383: lblock 2 mapped to illegal pblock 2 (length 1) [ 894.268077][T27475] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 894.268333][T27475] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 48: comm syz.3.7383: lblock 0 mapped to illegal pblock 48 (length 1) [ 894.277518][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 894.277542][ C0] EXT4-fs (loop3): initial error at time 1771983934: ext4_map_blocks:776: inode 3: block 2 [ 894.277596][ C0] EXT4-fs (loop3): last error at time 1771983934: ext4_map_blocks:776: inode 3: block 2 [ 894.318433][T27475] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 894.318629][T27475] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.7383: Failed to acquire dquot type 0 [ 894.361078][T27475] loop3: lost filesystem error report for type 5 error -117 [ 894.371644][T27475] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 894.401335][T27475] loop3: lost filesystem error report for type 5 error -117 [ 894.401536][T27475] EXT4-fs error (device loop3): ext4_evict_inode:255: inode #11: comm syz.3.7383: mark_inode_dirty error [ 894.444181][T27475] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 894.444314][T27475] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 894.506356][T27475] EXT4-fs (loop3): 1 orphan inode deleted [ 894.518856][ T70] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 894.521250][T27475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.563852][ T70] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 894.564050][ T70] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:5: Failed to release dquot type 0 [ 894.650535][T25775] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.863741][T27517] batman_adv: batadv0: Adding interface: dummy0 [ 894.870053][T27517] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.906560][T27509] loop4: detected capacity change from 0 to 512 [ 894.921208][T27522] loop6: detected capacity change from 0 to 764 [ 894.976560][T27517] batman_adv: batadv0: Interface activated: dummy0 [ 894.996555][T27509] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 895.012003][T27523] net_ratelimit: 10 callbacks suppressed [ 895.012021][T27523] batadv0: mtu less than device minimum [ 895.032876][T23896] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.042169][T23896] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 895.043737][T27523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.066077][T27523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.075872][T23896] loop3: lost filesystem error report for type 5 error -117 [ 895.076831][T23896] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 895.077055][T27523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.084200][T23896] loop3: lost filesystem error report for type 5 error -117 [ 895.094642][T27523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.122196][T27523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.133005][T27523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.143881][T27523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.154822][T27523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.165779][T27523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.191524][T23896] EXT4-fs error (device loop3): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 895.222223][T23896] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 895.234452][T27509] EXT4-fs (loop4): 1 truncate cleaned up [ 895.315196][T27509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 895.357426][T27527] loop8: detected capacity change from 0 to 512 [ 895.383010][T27527] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 895.398169][T27531] loop7: detected capacity change from 0 to 512 [ 895.436965][T27527] EXT4-fs (loop8): 1 truncate cleaned up [ 895.447757][T27527] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 895.483976][T27531] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 895.508332][T27531] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 895.534802][T27540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7398'. [ 895.564880][T25931] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.579569][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 895.579587][ T28] audit: type=1326 audit(1771983935.358:7899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27530 comm="syz.7.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922333c629 code=0x7ffc0000 [ 895.621403][T27531] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7400'. [ 895.636412][ T28] audit: type=1326 audit(1771983935.358:7900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27530 comm="syz.7.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922333c629 code=0x7ffc0000 [ 895.640334][T23228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.665742][ T28] audit: type=1326 audit(1771983935.386:7901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27530 comm="syz.7.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f922333c629 code=0x7ffc0000 [ 895.693404][T27543] loop8: detected capacity change from 0 to 512 [ 895.695046][T27531] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7400'. [ 895.718094][ T28] audit: type=1326 audit(1771983935.386:7902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27530 comm="syz.7.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922333c629 code=0x7ffc0000 [ 895.742356][ T28] audit: type=1326 audit(1771983935.386:7903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27530 comm="syz.7.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922333c629 code=0x7ffc0000 [ 895.773807][T25775] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.776887][ T28] audit: type=1326 audit(1771983935.386:7904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27530 comm="syz.7.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f922333c629 code=0x7ffc0000 [ 895.901708][T27543] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 895.914965][T27550] loop7: detected capacity change from 0 to 512 [ 895.923223][T27543] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 895.945678][T27550] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 895.986063][ T28] audit: type=1326 audit(1771983935.386:7905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27530 comm="syz.7.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922333c629 code=0x7ffc0000 [ 896.010642][ T28] audit: type=1326 audit(1771983935.386:7906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27530 comm="syz.7.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922333c629 code=0x7ffc0000 [ 896.035668][ T28] audit: type=1326 audit(1771983935.395:7907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27530 comm="syz.7.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f922333c629 code=0x7ffc0000 [ 896.062370][T27550] EXT4-fs (loop7): 1 truncate cleaned up [ 896.067869][ T28] audit: type=1326 audit(1771983935.404:7908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27530 comm="syz.7.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922333c629 code=0x7ffc0000 [ 896.097309][T27543] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7401'. [ 896.104013][T27550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 896.152583][T25931] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.469634][T25775] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.859166][T27579] syzkaller0: entered promiscuous mode [ 896.881666][T27579] syzkaller0: entered allmulticast mode [ 897.081104][T27581] loop3: detected capacity change from 0 to 164 [ 897.091330][T27586] loop6: detected capacity change from 0 to 512 [ 897.111648][T27581] iso9660: Unknown parameter '' [ 897.147618][T27586] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 897.161332][T27593] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7416'. [ 897.183341][T27586] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 897.269903][T27586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7415'. [ 897.319465][T27586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7415'. [ 897.416740][T22653] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.751865][T27603] loop6: detected capacity change from 0 to 512 [ 897.856701][T27603] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 897.972985][T27603] EXT4-fs (loop6): 1 truncate cleaned up [ 898.041117][T27603] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 898.398058][T22653] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.453589][T27618] syzkaller0: entered promiscuous mode [ 898.461403][T27616] loop7: detected capacity change from 0 to 512 [ 898.466177][T27618] syzkaller0: entered allmulticast mode [ 898.507776][T27616] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 898.591192][T27616] EXT4-fs (loop7): 1 truncate cleaned up [ 898.592104][T27625] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7427'. [ 898.617964][T27616] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 899.082077][T27641] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 899.165930][T25775] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.207570][T27641] EXT4-fs (loop8): 1 truncate cleaned up [ 899.259783][T27641] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 899.458782][T27656] syzkaller0: entered promiscuous mode [ 899.464312][T27656] syzkaller0: entered allmulticast mode [ 899.548515][T27654] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 899.655522][T27654] EXT4-fs (loop3): 1 truncate cleaned up [ 899.709425][T27654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 899.964592][T27671] iso9660: Unknown parameter '' [ 899.979107][T25931] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.111506][T27675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7441'. [ 900.492475][T23896] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.543024][T27682] set_capacity_and_notify: 4 callbacks suppressed [ 900.543045][T27682] loop3: detected capacity change from 0 to 512 [ 900.571152][T27682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 900.613439][T27682] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 900.724709][T27696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7443'. [ 900.767089][T27695] loop8: detected capacity change from 0 to 512 [ 900.819727][T27695] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 900.848940][ T2985] ================================================================== [ 900.857103][ T2985] BUG: KCSAN: data-race in evdev_pass_values / evdev_read [ 900.864274][ T2985] [ 900.866622][ T2985] write to 0xffff888104a11808 of 4 bytes by task 27698 on cpu 0: [ 900.874362][ T2985] evdev_pass_values+0x387/0x4e0 [ 900.879348][ T2985] evdev_events+0x8e/0xd0 [ 900.883730][ T2985] input_pass_values+0x123/0x390 [ 900.888726][ T2985] input_event_dispose+0x248/0x320 [ 900.893881][ T2985] input_handle_event+0x9e8/0xa20 [ 900.898947][ T2985] input_inject_event+0xbc/0x120 [ 900.903918][ T2985] evdev_write+0x224/0x2b0 [ 900.908383][ T2985] vfs_write+0x269/0x9f0 [ 900.912664][ T2985] ksys_write+0xdc/0x1a0 [ 900.916950][ T2985] __x64_sys_write+0x40/0x50 [ 900.921567][ T2985] x64_sys_call+0x27e1/0x3020 [ 900.926278][ T2985] do_syscall_64+0x12c/0x370 [ 900.930903][ T2985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.936908][ T2985] [ 900.939246][ T2985] read to 0xffff888104a11808 of 4 bytes by task 2985 on cpu 1: [ 900.946818][ T2985] evdev_read+0x157/0x5e0 [ 900.951181][ T2985] vfs_read+0x1ab/0x7f0 [ 900.955376][ T2985] ksys_read+0xdc/0x1a0 [ 900.959564][ T2985] __x64_sys_read+0x40/0x50 [ 900.964124][ T2985] x64_sys_call+0x2886/0x3020 [ 900.968851][ T2985] do_syscall_64+0x12c/0x370 [ 900.973508][ T2985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.979437][ T2985] [ 900.981794][ T2985] value changed: 0x0000000e -> 0x00000010 [ 900.987531][ T2985] [ 900.989891][ T2985] Reported by Kernel Concurrency Sanitizer on: [ 900.996069][ T2985] CPU: 1 UID: 0 PID: 2985 Comm: acpid Tainted: G W syzkaller #0 PREEMPT(full) [ 901.006529][ T2985] Tainted: [W]=WARN [ 901.010354][ T2985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 901.020442][ T2985] ================================================================== [ 901.102396][T27695] EXT4-fs (loop8): 1 truncate cleaned up [ 901.120310][T27695] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 901.430830][T23896] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.609496][T25931] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.