last executing test programs: 25m39.895225579s ago: executing program 32 (id=20): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000062c0)=@base={0xa, 0x8001, 0x9, 0x8}, 0x50) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f0000000080)={r2, 0xfffffe38}, 0x10) 21m40.915755825s ago: executing program 33 (id=1256): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r2, 0x1e67e000) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0xc397e) 20m0.600280014s ago: executing program 34 (id=2183): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x800, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0x17, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001"], 0x0) 15m21.752913221s ago: executing program 35 (id=3815): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x88, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x200}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x6}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20020053}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_context(r5, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) getrandom(0x0, 0x0, 0x2) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x4001) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000006c0)=@nat={'nat\x00', 0x8, 0x5, 0x560, 0x0, 0x118, 0xffffffff, 0x260, 0x260, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xe8, 0x118, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@dev, @mcast1, [], [], 'veth0_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x3}}, @common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e21], [0x4e20, 0x4e21], 0xfe, 0x1, 0x2, 0x5}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@mcast2, @local, [], [], 'wg1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}}, @common=@hl={{0x28}, {0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv6=@mcast1, @icmp_id=0xfffd, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, [], [], 'vlan0\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x30, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2}}}}}}}, 0x0) 5m8.453358942s ago: executing program 36 (id=7463): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/asound/seq/clients\x00', 0x41, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x4, 0x4, 0x410, 0x0, 0x130, 0x218, 0x328, 0x328, 0x130, 0x4, 0x0, {[{{@arp={@remote, @private=0xa010101, 0x0, 0xffffff00, 0x4, 0x7, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x4, 0x8, 0xd, 0x8, 0xe8, 0x6, 'wg2\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x10000, 0x6, 0xff0c, 0x0, 0x0, "2e3db46bbd54492c3b8b94a26d2b6f09949a2c5d377e1886c36b8e355354a160d73a311a2ee6b7547689bb9a515857b39523fadabc9d55f111b9f1dbe8567b8a"}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1002, 0x100, 0xa, 0x64c, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x81, 0xff03}}}, {{@arp={@multicast2, @local, 0x0, 0xff000000, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local, {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000008af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500"/72], &(0x7f00000000c0)='GPL\x00', 0x0, 0x25, &(0x7f0000000100)=""/37, 0x100, 0x0, '\x00', r5, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=[{0x3, 0x5, 0xa, 0x6}], 0x10, 0x1}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m0.086860251s ago: executing program 37 (id=7514): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x2, 0xff, 0x8, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, 0x7801, 0x40, 0x9f8, 0x2}}) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@ipv6_getnetconf={0x2c, 0x52, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x800}, @NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xfffffffe}]}, 0x2c}}, 0x200480d0) 4m31.281523691s ago: executing program 38 (id=7788): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)=[{}, {&(0x7f00000000c0)=""/98, 0x62}, {&(0x7f0000000280)=""/207, 0xcf}, {&(0x7f0000000140)=""/11, 0xb}], 0x4}, 0x700) 3m58.311223172s ago: executing program 9 (id=8047): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x35dfdbfb, {0xa, 0x0, 0x80}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40045}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x6c, r2, 0x10, 0x0, 0x40000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x3c}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x6c}}, 0x2000c000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) syz_open_procfs(0x0, &(0x7f0000000400)='net/dev_mcast\x00') r5 = dup2(r3, r4) close_range(r5, 0xffffffffffffffff, 0x0) 3m57.927007501s ago: executing program 9 (id=8051): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) 3m57.863281878s ago: executing program 9 (id=8053): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0xf, 0x1, 0xc0, 0xd9}, {0xd, 0x4, 0x3, 0x2}, {0x8001, 0x0, 0xb5, 0x6848}, {0x5, 0x7, 0x4, 0x4}, {0x2, 0x6, 0x3, 0xc75}, {0x1c0, 0x7, 0x7, 0x1}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20002, 0x600a8}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x101}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x5c}}, 0x24008040) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x6, 0x7, 0x7fffffffffffffff}) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0xb, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c015}, 0x10004009) 3m57.688015341s ago: executing program 9 (id=8055): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = dup2(r0, r1) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r5, r7, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21010c2, &(0x7f00000001c0)={[{@grpid}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") write$P9_RGETLOCK(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='df'], 0x2c) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) creat(&(0x7f0000010280)='./file0\x00', 0x182) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x201c3, 0x1, {0xfffc}}) mount(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x100) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r9, r9, 0x0, 0xe3aa6ea) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r10, 0x0) syz_clone(0x944080, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) 3m55.206697059s ago: executing program 9 (id=8061): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket(0xa, 0x5, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, 0x0, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, &(0x7f0000000080)) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x78, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x6, 0x1f, {0x17, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x2f, 0xe5c, @empty, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x11, 0x3, [{0x7, 0x9, "a88088bea18f92"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x34, 0x4c, 0x1, 0x0, [{@multicast2, 0x9}, {@loopback, 0x5}, {@loopback, 0x20005}, {@loopback}, {@remote, 0x329}, {@rand_addr=0x64010102, 0x4}]}]}}}}}}}, 0x0) 3m53.68332668s ago: executing program 9 (id=8067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="01000000000000001c0012000c"], 0x3c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/reserved_size', 0x6e48c2, 0x92) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000440), 0x111, 0x5}}, 0x20) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000540)) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000004080102000000000000000000000007eac627588effa522ddc87b05000300110000000600024000080000"], 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 3m53.645461251s ago: executing program 39 (id=8067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="01000000000000001c0012000c"], 0x3c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/reserved_size', 0x6e48c2, 0x92) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000440), 0x111, 0x5}}, 0x20) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000540)) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000004080102000000000000000000000007eac627588effa522ddc87b05000300110000000600024000080000"], 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 2m6.85753879s ago: executing program 4 (id=8735): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file0\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) pwrite64(r0, &(0x7f0000005c80)="a9", 0x1, 0xc00000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @initdev, @multicast1}, &(0x7f0000000280)=0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendfile(r4, r3, 0x0, 0x80000000c) 2m6.591931523s ago: executing program 4 (id=8742): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200006, 0x801, 0x4, 0x7, 0xb0}) socket$netlink(0x10, 0x3, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r2, &(0x7f0000000a80)=ANY=[@ANYBLOB="0000001803030300ffffc4"], 0xe4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x16, 0x4) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) ioprio_set$pid(0x3, 0x0, 0x4007) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) listen(r3, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m6.037545237s ago: executing program 4 (id=8745): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000002060108e80034e400000000000000000500010006000000050004000000000009"], 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000640)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) renameat2(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5) 2m4.056026211s ago: executing program 4 (id=8753): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) dup2(r0, r1) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r4, r6, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0) creat(&(0x7f0000010280)='./file0\x00', 0x182) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x201c3, 0x1, {0xfffc}}) mount(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x100) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r8, r8, 0x0, 0xe3aa6ea) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r9, 0x0) syz_clone(0x944080, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) 2m2.9555173s ago: executing program 4 (id=8761): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000480)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x2b, 0x2, 0x2a927f8b, 0x6, 0x9, 0x1, "e404b6d9b1bd807b9672851e1a9b70770c366fe9cf103626b779ffc272a71c227adef873af21fa0138c684"}}, 0x143) 2m1.458782135s ago: executing program 4 (id=8766): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_io_uring_setup(0x10f, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000f80)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000580)={0x0, 0xba1, 0x1}, 0x8) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 2m1.458641595s ago: executing program 40 (id=8766): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_io_uring_setup(0x10f, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000f80)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000580)={0x0, 0xba1, 0x1}, 0x8) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 1m32.8859995s ago: executing program 0 (id=8926): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x121180) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r1, 0x40000000) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000001140)=""/136) 1m32.793553431s ago: executing program 0 (id=8927): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) dup2(r0, r1) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21010c2, &(0x7f00000001c0)={[{@grpid}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) creat(&(0x7f0000010280)='./file0\x00', 0x182) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x201c3, 0x1, {0xfffc}}) mount(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x100) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r6, r6, 0x0, 0xe3aa6ea) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0) syz_clone(0x944080, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) 1m28.918631547s ago: executing program 0 (id=8938): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) fsopen(&(0x7f00000000c0)='configfs\x00', 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) removexattr(0x0, &(0x7f0000000000)=@known='system.posix_acl_access\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getpgrp(0x0) geteuid() ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5560}}, './file0\x00'}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000009c0), 0x100) statx(0xffffffffffffffff, &(0x7f0000001d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x100, &(0x7f0000000a80)) lstat(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$netlink(r3, 0x0, 0x200008c0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) keyctl$session_to_parent(0x12) sendfile(r1, r2, 0x0, 0x20000023896) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x100102, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7, 0x0, 0xc0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 1m27.787055908s ago: executing program 0 (id=8948): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) dup2(r0, r1) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r4, 0x0, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21010c2, &(0x7f00000001c0)={[{@grpid}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) creat(&(0x7f0000010280)='./file0\x00', 0x182) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x201c3, 0x1, {0xfffc}}) mount(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x100) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r5, r5, 0x0, 0xe3aa6ea) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) syz_clone(0x944080, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) 1m26.525114673s ago: executing program 0 (id=8958): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000380)='./file0\x00', 0x8400, 0x190) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioprio_set$pid(0x1, 0x0, 0x2007) r2 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(r3, 0x1, &(0x7f0000000200)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_gettime(0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d5228ca65}, 0x200048c4) r5 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x7) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c) recvmmsg(r6, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x0, 0x0) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x18, 0x100) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x4001004) 1m25.959537024s ago: executing program 0 (id=8959): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000000980)=[{{&(0x7f0000000280)={0xa, 0x4e26, 0x1df6b78c, @mcast2, 0x43}, 0x1c, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="300000000000000029000000360000003c0300000000000005020001c910fe80000000000000000000000000003b0401ff0001"], 0x1090}}], 0x1, 0xff00) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x78bf, 0x0, 0x40204, 0x100039}, &(0x7f0000000340)=0x0, &(0x7f0000000f80)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) r10 = accept4(r2, &(0x7f00000004c0)=@nfc, &(0x7f00000001c0)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000400)={0x0, 0xc}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000580)={r11, 0xba1, 0x1}, 0x8) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r6, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 1m25.897390632s ago: executing program 41 (id=8959): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000000980)=[{{&(0x7f0000000280)={0xa, 0x4e26, 0x1df6b78c, @mcast2, 0x43}, 0x1c, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="300000000000000029000000360000003c0300000000000005020001c910fe80000000000000000000000000003b0401ff0001"], 0x1090}}], 0x1, 0xff00) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x78bf, 0x0, 0x40204, 0x100039}, &(0x7f0000000340)=0x0, &(0x7f0000000f80)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) r10 = accept4(r2, &(0x7f00000004c0)=@nfc, &(0x7f00000001c0)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000400)={0x0, 0xc}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000580)={r11, 0xba1, 0x1}, 0x8) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r6, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 1m25.600903089s ago: executing program 1 (id=8965): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file0\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) pwrite64(r0, &(0x7f0000005c80)="a9", 0x1, 0xc00000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @initdev, @multicast1}, &(0x7f0000000280)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r4, 0x4, 0x9, 0x8, 0x4, 0x4056e0f679010b9a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x1, 0x10, 0x8000, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3) sendfile(r3, r2, 0x0, 0x80000000c) 1m24.863589124s ago: executing program 1 (id=8969): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) dup2(r0, r1) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r4, 0x0, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21010c2, &(0x7f00000001c0)={[{@grpid}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) creat(&(0x7f0000010280)='./file0\x00', 0x182) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x201c3, 0x1, {0xfffc}}) mount(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x100) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r5, r5, 0x0, 0xe3aa6ea) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) syz_clone(0x944080, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) 1m23.118860508s ago: executing program 1 (id=8985): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) dup2(r0, r1) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r4, 0x0, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21010c2, &(0x7f00000001c0)={[{@grpid}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) creat(&(0x7f0000010280)='./file0\x00', 0x182) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x201c3, 0x1, {0xfffc}}) mount(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x100) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r5, r5, 0x0, 0xe3aa6ea) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) syz_clone(0x944080, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) 1m20.190975853s ago: executing program 1 (id=8992): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) dup2(r0, r1) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r4, r5, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21010c2, &(0x7f00000001c0)={[{@grpid}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) creat(&(0x7f0000010280)='./file0\x00', 0x182) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x201c3, 0x1, {0xfffc}}) mount(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x100) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r6, r6, 0x0, 0xe3aa6ea) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0) syz_clone(0x944080, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) 1m17.221995619s ago: executing program 1 (id=9000): gettid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, 0x0) 1m16.742270338s ago: executing program 1 (id=9002): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = dup2(r0, r1) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r5, r7, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21010c2, &(0x7f00000001c0)={[{@grpid}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") write$P9_RGETLOCK(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='df'], 0x2c) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x201c3, 0x1, {0xfffc}}) mount(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x100) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r9, r9, 0x0, 0xe3aa6ea) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r10, 0x0) syz_clone(0x944080, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) 1m16.741806267s ago: executing program 42 (id=9002): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = dup2(r0, r1) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r5, r7, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21010c2, &(0x7f00000001c0)={[{@grpid}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") write$P9_RGETLOCK(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='df'], 0x2c) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x201c3, 0x1, {0xfffc}}) mount(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x100) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r9, r9, 0x0, 0xe3aa6ea) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r10, 0x0) syz_clone(0x944080, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) 25.746816251s ago: executing program 7 (id=9338): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be689", 0x24}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a04", 0x4a}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000002c0)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 25.676273176s ago: executing program 7 (id=9341): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) statx(0xffffffffffffffff, &(0x7f0000001d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x100, &(0x7f0000000a80)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) keyctl$session_to_parent(0x12) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x100102, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 25.571452234s ago: executing program 7 (id=9344): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file0\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) pwrite64(r0, &(0x7f0000005c80)="a9", 0x1, 0xc00000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100), 0x0, 0x5412, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @initdev, @multicast1}, &(0x7f0000000280)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r5, 0x4, 0x9, 0x8, 0x4, 0x4056e0f679010b9a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x1, 0x10, 0x8000, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendfile(r4, r3, 0x0, 0x80000000c) 25.394318947s ago: executing program 7 (id=9355): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, r1, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21010c2, &(0x7f00000001c0)={[{@grpid}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) creat(&(0x7f0000010280)='./file0\x00', 0x182) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x201c3, 0x1, {0xfffc}}) mount(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x100) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r2, r2, 0x0, 0xe3aa6ea) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) syz_clone(0x944080, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) 23.84035062s ago: executing program 7 (id=9366): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x100, &(0x7f0000000a80)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) keyctl$session_to_parent(0x12) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x100102, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 23.298686007s ago: executing program 7 (id=9376): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, r1, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21010c2, &(0x7f00000001c0)={[{@grpid}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) creat(&(0x7f0000010280)='./file0\x00', 0x182) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x201c3, 0x1, {0xfffc}}) mount(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x100) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r2, r2, 0x0, 0xe3aa6ea) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) syz_clone(0x944080, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) 23.276680402s ago: executing program 43 (id=9376): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, r1, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21010c2, &(0x7f00000001c0)={[{@grpid}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) creat(&(0x7f0000010280)='./file0\x00', 0x182) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x201c3, 0x1, {0xfffc}}) mount(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x100) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r2, r2, 0x0, 0xe3aa6ea) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) syz_clone(0x944080, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) 19.300590996s ago: executing program 5 (id=9402): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000002060108e80034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000640)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) renameat2(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5) 11.776192695s ago: executing program 5 (id=9411): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9a}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xee01, 0xee00) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x2, 0xff, 0x6}, [@RTA_METRICS={0x8, 0x8, 0x0, 0x1, "82420589"}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x402, &(0x7f00000000c0), 0x1, 0x786, &(0x7f0000000f80)="$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") setxattr$security_ima(&(0x7f0000000000)='./file1\x00', &(0x7f0000000200), &(0x7f00000003c0)=ANY=[], 0x700, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') readv(r4, &(0x7f0000001440), 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d81500010000000000000000000000ffff7a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x400c044) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r4) 11.593487477s ago: executing program 5 (id=9412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000000980)=[{{&(0x7f0000000280)={0xa, 0x4e26, 0x1df6b78c, @mcast2, 0x43}, 0x1c, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB], 0x1090}}], 0x1, 0xff00) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x78bf, 0x0, 0x40204, 0x100039}, &(0x7f0000000340)=0x0, &(0x7f0000000f80)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x80) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) r10 = accept4(r2, &(0x7f00000004c0)=@nfc, &(0x7f00000001c0)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000400)={0x0, 0xc}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000580)={r11, 0xba1, 0x1}, 0x8) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r6, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 10.415996079s ago: executing program 5 (id=9416): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(0x0, 0x8400, 0x190) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioprio_set$pid(0x1, 0x0, 0x2007) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x4001004) 8.195372033s ago: executing program 5 (id=9422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@cgroup, 0x4, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x9, 0x5, 0xff, 0x7, 0x0, 0x7fffffff, 0x700, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x7}, 0x20a, 0x1, 0x7, 0x3, 0x81, 0x7, 0x8, 0x0, 0x58, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 6.022802376s ago: executing program 5 (id=9431): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) keyctl$session_to_parent(0x12) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x100102, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 5.953024241s ago: executing program 8 (id=9434): r0 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x20000131}, &(0x7f0000000140), &(0x7f0000000180)) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f00000000c0)={0x80, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, 0x0, 0x1) 5.789498337s ago: executing program 8 (id=9436): socket(0x2b, 0x1, 0x1) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x80010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3585, &(0x7f0000000040)={0x0, 0xfb67, 0x4000, 0x2, 0x37e}, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket(0xa, 0x3, 0x3a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0xffffffff, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) ioctl$TIOCSPTLCK(r8, 0x40045431, &(0x7f0000000000)) r9 = ioctl$TIOCGPTPEER(r8, 0x5441, 0x2076) ioctl$TCGETS2(r9, 0x802c542a, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "4e4106", 0x8, 0x3a, 0x1, @remote, @empty, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x8001}}}}}}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000140)=@IORING_OP_NOP={0x0, 0x5c}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x10, &(0x7f0000000000)=0xfb78, 0x4) 5.558515228s ago: executing program 8 (id=9439): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 32) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) (rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e24, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 32) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c370c8900083c0120010000000000000000000000000000fe8000"], 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000080)=0x8000, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) (async, rerun: 64) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) (async, rerun: 64) r5 = socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={0x0, @isdn={0x22, 0x6, 0x9, 0x6, 0x7f}, @l2={0x1f, 0x7, @none, 0xf, 0x2}, @ethernet={0x306, @multicast}, 0x2, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)='batadv0\x00', 0x7, 0x7, 0xa}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) (async) mmap$xdp(&(0x7f0000344000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r4, 0x100000000) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) (async) syz_io_uring_setup(0x496, &(0x7f0000000400)={0x0, 0x7daf, 0x10, 0x8000, 0x8000e1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) 5.51764912s ago: executing program 8 (id=9440): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x6}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x7, @local, 0x9}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x4855}, 0x4008850) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) 5.201269063s ago: executing program 8 (id=9443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@cgroup, 0x4, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x9, 0x5, 0xff, 0x7, 0x0, 0x7fffffff, 0x700, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x7}, 0x20a, 0x1, 0x7, 0x3, 0x81, 0x7, 0x8, 0x0, 0x58, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 5.106765114s ago: executing program 8 (id=9444): io_setup(0x8001, &(0x7f0000000340)=0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x10, 0x0, 0x0, 0x0, 0x4, 0xfe, 0x6}, [@RTA_NH_ID={0x14, 0x1e, 0x95d}, @RTA_MULTIPATH={0xc, 0x9, {0x2, 0x14, 0xdf}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4881}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000280)="af2178d12dd14c1ac862abd8b7fcf7ae604f7d0a81", 0x15}], 0x1, 0x2) r4 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x20, @remote}, 0x10) splice(r2, 0x0, r4, 0x0, 0x8000, 0x0) io_submit(r0, 0x20000000000000ee, &(0x7f0000000340)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 5.035548178s ago: executing program 2 (id=9445): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8917, &(0x7f00000007c0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e') 5.016000104s ago: executing program 2 (id=9446): socket$igmp(0x2, 0x3, 0x2) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000040) (fail_nth: 2) 4.941564368s ago: executing program 2 (id=9447): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) writev(r4, &(0x7f0000000640)=[{&(0x7f0000000240)="93", 0x1}], 0x1) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x8, r6}, 0x10) r7 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) unshare(0x400) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) signalfd(r8, &(0x7f0000000000)={[0x2]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 3.962625663s ago: executing program 3 (id=9453): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xa) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@private1, @in=@broadcast, 0x4e21, 0x1, 0x4e24, 0x6, 0xa, 0x0, 0xa0, 0x2f}, {0x802, 0x7f, 0x0, 0x5, 0x8000000000000001, 0xf, 0x7c3, 0x650}, {0x2, 0xff, 0x9, 0x3}, 0xe, 0x6e6bb9, 0x1, 0x0, 0x1}, {{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x3501, 0xc97ca9dac2949ce5, 0x2, 0x80, 0x0, 0x7, 0x90000000}}, 0xe8) setsockopt$inet6_int(r5, 0x29, 0xcf, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x23c}}, 0x4000) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x7, 0x0, "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", 0xf9, 0xf, 0xf0, 0x5, 0x5, 0x6, 0x0, 0x1}, r1}}, 0x120) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x1008205, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@jqfmt_vfsv1}]}, 0x81, 0x63e, &(0x7f00000004c0)="$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") 3.90247337s ago: executing program 2 (id=9454): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x8, 0x0, 0x22, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x700, 0x9, 0x6}}) r1 = syz_open_dev$vcsa(&(0x7f0000000240), 0x8000, 0x840) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) r5 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2000000004b, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0x100b08, 0x6, 0x0, 0x9, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000040000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000914"], 0x64}}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000280)={0x863a, 0xff, 0x0, 0x6, 0x2e4, 0x8, 0xfffffc00, 0x2e78, r4}, &(0x7f0000000300)=0x20) r7 = socket$key(0xf, 0x3, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000002000000fe8000000000000000000000030000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000010000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r10 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r10, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000638777fbac141416e000030a83040211fe8000ff811e0000845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r7}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r0}, 0x94) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000082aaaaaaaaaaaa88a800008100000086dd"], 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 3.070082275s ago: executing program 3 (id=9456): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2}, 0x1}], 0x2, 0x10002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40050c4}, 0x404c040) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) membarrier(0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) setreuid(0xee01, 0xee01) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) get_mempolicy(0x0, &(0x7f0000001640), 0x3ff, &(0x7f0000400000/0xc00000)=nil, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_int(r4, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000040)=r3, 0x4) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYRES32], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8}, 0x94) r6 = dup2(r5, r3) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4) socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mlock2(&(0x7f0000bf3000/0x1000)=nil, 0x1000, 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.973638765s ago: executing program 3 (id=9458): r0 = socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x0, 0xca9a3b, &(0x7f0000000000)={r2, r3+10000000}, 0xfffffffffffffffe) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x0, &(0x7f0000000100), &(0x7f0000000140)) r4 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) r5 = epoll_create1(0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)={0x10000000}) fadvise64(r4, 0x7, 0x5, 0x3) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x990e34c54cf5e961, 0x1, 0x6, 0x9, {{0x5, 0x4, 0x1, 0x2, 0x14, 0x68, 0x0, 0x6, 0x2f, 0x0, @loopback, @private=0xa010101}}}}) 1.882077415s ago: executing program 2 (id=9459): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800, 0xffffffffffffffff, 0x7fffffff}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x3}, [@initr0, @generic={0x66}, @exit, @ringbuf_query]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x10000}, 0xc) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x50) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=@delnexthop={0x68, 0x69, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x2400c801) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='a \x00:'], 0x9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x15, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") sendmmsg(r2, &(0x7f0000000840)=[{{&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7f, 0x1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000540)="efd8ad270107e148bfb113d80a4fc1141b074bf5b2f21902fbb3635846598fe40b8c0938a892503acefa4150fdb4dae8f61a56c9ab296b6d96755a97b36d6c772b43fd1e3602a888b805b89bc2efa011ab03a6c63087e89612d694b225852dc5cbe5376224aca6", 0x67}, {&(0x7f0000000640)="e887a0fe560758e429ac41abfe744851361871149cac94c0fbc6a019d9425eb366b26859dfce2c6055fb428edc933b8eb9168ff75e64e945cc2a299948b36161f5b3c38bc7713b42d3d11ddc4477b2427d0bdec6b515", 0x56}], 0x2}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000007c0)="78e75e968dd327a95d3ae20bbe623973b39485417cf95de082644da4970a557d351f7e98afa9385d512040605911be4e61cfa0c3276f47208a150529679ba72322", 0x41}], 0x2, &(0x7f0000001400)=[{0xe8, 0x108, 0x4, "b6eaa2eef9577529139bd2edaa36672f20078e88b4c4998be83a373eb02b280d7dc66b373ff455591594d36d6a575d881b422e7e50f7f889d069234d5b93c03f9c0dec7f24e88acfce68dfedcbfc09c92e327f1aa01c8474a712d31d11016cb8a78dd7818ebb55cca875994379d52536ab3a3ec59e9fa736d237c133359a5fc5efcd894c692e2833d3bad01bb869693f72de7ec1db364412cea2b6cf7018522eb6332208e6d7e7df5bb65a127c882b8997cad7f34345749660c6ac06f688d1f5b32389c91e7707a26fd33d1d35a8abd83c7bd266fb38aad5"}, {0xd8, 0x88, 0x4f, "d99528a7079c4796ed6b89f25971afc2c55487b237b95bcce8d74743e01fd5651879513260045169bb0972f9d5c64ba2d110d91f81b9a02061559ed33ec9388e46a3eebd19dba145811613bbe3a79c8c62c33287d8d04b24a8042beec529ef13af51a3ead933064c7698bb0ab1887b45c929ce652530f21a02a3b363ac0e0cc786c3aff075f9340c6a01bb1ea1b40eeb17b190aea6ba0b2e2d3cee4bea155597be12c5171cbc3b925e7cbcc9d5d17a29bd1d612923e8d8a5247ab653ffdc6bc23b011c41"}, {0x1010, 0x29, 0x36cd, "f0786d1226f78f20e32bf96228269dc63dc4627aa47dbb920c30e78a31203ee5dd4a48488e88517372019ef89e6ce81f653be0a4f75e0560178336193add8532c3193634e16d9eca5ca8faf6cc6d965d5e45075986375c338bf585580634fba64c78dbbe3e33747a6bac6d885bd1e44d0937ff031dedc4f960f35074e9b726f64d261a6afce2a5da27d20944763d4f89337aa762e5504d109fd311e8c45d861cfd928dfab6fd35227072f55476749c3f53e101f81e9d5069d3d46a3b97c18c204e982bac38e437930e38e50dec4ee06d0ba5427a2876868ac4098d1993a68eb69b95803f0a97251fbc59d7c1519e1248ec309202d5a3a22e44e5867ff70cdfbf75c3549f0179c3f6f04d6be206ee406c2699ee07569fcdb5568f653827c7c545fd0ffc23adda171b57fcfd70d79a4f6619b005196446f2bbb2e5e01db97aa22d3234dd96746777578eceb7582120b56d121fcf90475ef6ca53f472d2ea10b30bf3bf0bb3607cbf2d283f180e2225ab0249bc4b19dc74dc1f52a8273fef570a8f23e3630ce6d836aa1f48dc0938c24c4f9e54c36201ea4d2fcd8144b8073b91d63b6a33032fce27945480f2e74ddcd7d74f5d97de637206a81c463841f64884755ed59ba11880f3ef3c119ea2c9dd657ade6874cdf2b9fb4b4ef2e081994e1112f4e3758e9ed07ab2788a337c2d43f832a175c9868c802fe12a6ee252061bc8e1ae1260841dd8465691f1f393477ecf8eafebbd88ab6c7b7f1592017acd1da0d01bcd53fa3583dbbb0041a4bbcfe5d98a5c19cc37b60c56d4e52dce789a95b8b1903c98ddbf88c1a80eb2c24be0f57bbe6ffd184558fd9f1d35995216dd3979a5e67f32f687d67ed9f54d579af888d6f0cf5539b0301c0ecc5d10ca4a2f600a884d9105d9a22de74f21f1a0c6abd87670ca04885a6bec384d2e556116e7bef51068d489a5cf9fb4aad7c77811269e98f01c42c4b93a8b01b38ad9d8f91b4982244f2b1cd612d8ec715489cf9412db968eac5ed9b98fdc7954e28d858759efd4b2a1f8d270af9893231e583757bee8d7448c9c455bdeebe11a858a72f7dab35ff5c52e6f7f84c1a3a0531fc259c7a35a1cc3af0a7e216e41192afb2c8a55d39f1d27da98f56de3ff89b8fa9fedc8ad8bab765e477b71bc0da0c58d5b38615d9c7520dd58d7cfdb2b122dbcef2016addda5e1223f6e8161b6058e9531b958bfb4f182c39d19be1cf48f6ba17b59041ea6a03fd5878995548cd5685b857e61bdcdd300cb79e78a473766c95b81a1e47fc7233952ab692094e89a35010e5a404d05a9a4a79afcc2e343c71be5ae83369c2b082f3864d003c669089f4a9a6222d9a98cb028f62535fab82af3a2e7fa1ec64ccce09b45f84beff83e197bc9bfeb1c6aba72106bc091c687999cbf97bd4aa63f7207655bd35bfdc760a562113f9350bf13afbf9f752a0680359a7872c0d4b18baf535c0dd2f18a6ac0e78c60b9a14c19b8f15e5122ff155d7e2bc89ef568ba4e7d869ba78aae692e4e7c997c383bdac07f8febece54ceb6e862bf80a887b59903eeae964e458ffbd5580100ef63bdf8e8bb741a75c46c8b847f681297937274e64dc3f4c4885399c0a216c1b4877a4efc16d92d0bc0c71108d170c1754643b482aedcd032ff4e11b1c9498d31c369c305760d2306af2e13df74cf74dee4fbc0c75a7bcedf3fa610179616efc8cbcb0421288622eeca7829f5f55f6e493ebf9ca79e1ead8274144c7163abded175b294f995de675e725323e1930ba427497628c35befa6bd6acca14b5effed57e7b40b6a746910a2a730fa89e281d7337dd2c41dc567479d9002bba0a0e72718d0957d5dbda6f331fabdefcbe4ab620739438dac517cb18e1ff7869400cb050f8e53c6cef76580c5722428c4ca6b4f03b21121f4c1cd546cbd12d05f4119defe53cdb4f556c5969e8a6fb9f11754369d59995fb523bc2c0c9ca88e2e243220c7e4cd645753f7535b92b85c35505c05ae4f60250651fb50e41791a12d51b724578b201b0680845a4d30b1ff349d984b8eac9144211799f41b2cca8e7cb8c7eb1a5ae04ad8e3844d6ac10eff16c1bdcc800aa625182e80febc441345708bada754650b9cdcb455bd1636f79ab9072bc5fd196224d88ec0850957c0dcd741a3f1582c19d0c31dd58f62ebaf092309b9e820c1ba748e6e0ab610df1dd1747e8c27f961187b8f1044c99aed4b856adadf56d90545623b6761f677e0fa31d163913750c90fff24dd6828ba9a7861205ffa36d9b9e24af7454d12c6754eaa331afb7f3838be126ce0cbb4a70d15262a06d835dc496c78aa2b27a2c5b7210bc869dd5fc0a21b34eedb08de5bfde28070dabe21875399b53cb10e700e4225ad340ee81f995bfb682df510c9a5a2ce8a13dcd26fbc0d2423f9b516d2afcd2c8757459e77af4c958a0f95321fc877a84f0dd4db6f7e8cdfc688ace848c5ce5acf912d8372540a59a24be14b8ccf83651c26f15d12fd98299e3ba99498ac6448b96402946d8966ec779ae5b1d734277b9051a6b682e653fce12b3eeca4cf18fbb69f39f972a3fbc5ebad0480e97098f903c6d3ecd556b8fdb019adbdd73dbf39bcf916b9b0dc8baa3f0809ceb078cb14ebc4dd07c870d6f1d34b04742593874bb3c0204d422e9db54cbf5055ffca076fc88cc4e23efd0afccbd7c4285954a9c8b5d7013df11671b6ca26511e599d7396fce063dbe499043fc7966b9c96ee438476813bdfcdafdb2a68ac9241c3e2327afa77af4dfbc1aa8de039eb497d76c8832ddb3dbbd0b379b2197acf5ba55d0f871daebb7c3bd148ac5aadcbc13eac6105c673400593544bf1272a700033eb8e1a902ffd3331c1b42f5ff447323fa45134826dde15a4ae1db3301ecff3e1c96e538d46fc4e130a1aab0d8f34d9ccf3feb5e8492981c0ddc69ec5c4bf8c4765ce0812785cf6798d5a20de0a2df34d2d83ee798f747b314a6245ca746f5ad40e2549f2c414dcb6ca3eb082cdd89ed80849a7ec2d78ce6ff49aa7c4e11093e70142806ecd7a086e13d90233baba1676ced7d8e44718eceb9005768bec1c8dc346903f3390b66807065be3e2319857863a87b56850819b2cbd99035494fe94573166b4a4d68b72b977821611adf9b5184930dcae15732e76348fcceac0f5afe08a8beead34a373981a2ff26c449262216c8e1b4f877c0b4cedfc7d9b25b69a1d3c8ef1869121618cf6ee013de828f00e86013b5eaf080cdc9dbd1c5d550500e7d262db486f403dc1a1d241ace5359293bee5f5bac2e563ed6fafa4baa2c14492449c3dc3bd2489005dbd9d1772bd085215c09da9300bcf4a73e6fc6ccf55bab2c08290056aec9778d9640081640908073846deadf55872561db6a64b688fafc2ff83d9f982e3fba4b3e17bd2f3cdb552f00cf92f98b6fcac59d9c4af383ba3870fc7db9fb833fe43948dc58029a9e3cb72804d284a4a674492a09aebfc0048c0515f737a35584a0bf3af6c5e59191437de7d2a74d513dd91572cded571f3e97f1fa909696307a21b81215b94bef95ef49a5341b5be62948a19c0fa28bd52fc0fa4f37b0ba36360a4511db403f6b25d7850b0f582c270ff01681146add029fcd230f10bb30ded03de771b9d46389e8277a05590b6861b10f14b63fbbc7c30eaffa3360394664f2145360c0a5276640fe1034a62a103c2c7dd5c5ed4b79772f0e3d02060cd96733d810ea346f0a401855f13f5150dd3808135968ca42f4167fac1659bc4259a336b8c70b8c43580324ca3c1b56c231314a4d96b42b7408270152b21081f717c9f2089f67ab7cedd3b88d11aee416b04336548b5ea5839ff748df1f0cc73114d16f13183432368b48ad8510a094b90f303b84ea6ab645d6efd00157a5eebe7fedd71e17a5960899f886ab846e89d50725fe34210f7bd37b13cbca594c986d26c2669aae5fda32bb114e936975a5bdb9d4e801e3d546259029b098eef0565cc0e353a76937e22f4a7853236130daf11362c63386e34066e4be88f1d039f02c559f9b32b113dd0305eee62478dce859b00718c0f31a397200900813c6004d0f3d2755fbecb5d8cccd0977176f51b8f0fc5934fcb3e1af09bf5b4e967c1ff4d744e11423317d8398964e40ba9b75b56971b0e10db3c15637706d4d481300f792947ac250287086a29fd8ac22aebcea15f7d3be9a470f2e7772487fe4953baf3bc47abac4ebcc66bbc42f78bc638df6a6869cf6d0ee8298e8be8545dd7d4e3f2ce74eea87c20227e682b24400022638e749efb89dbbb3f0898c5331f7a802288458470a387cfd687d6e1a5083f25e1f1c12cd36b0c4b70d9af2c09d54a860ac49123e75a83cda9a2cb7226c2e7fc098a4adfdbc68193725394e890f451ef1c671218d847e469b9d8b5679add19705554b137fe83ccfc0b568d834aee074b08ca38fe6115dd1cf5b79de26688d1fd65879374d186b7c0120b5cf6dd69b277f0de9cfcd971c6e6db61393a882c99bd52a5c39f6f028d970394a5ca4fe3aeefbaefcce63c4346d73667e9eb06b5e7dba2b08cec0f7971516bb001acee6ea25b4c8c37c2bacce847b7e39b78a9d7024e68b8d73cd8e132cb50e5bd143dc8e1620d05049bd55bddc7bc6f1ece25082f8d411715e329c813bed762f0e8405f710831d4fb13cf758056630de5d44e042a68c18d9c78f9b969721810875b6f9708fb98f33ee82e04ee4f7ed99e3a045aef43c19bb794ec25f13f220711b8724c3d46d7f1791851bd30eaf40be32d53493b3a7c6ce9620c2a58ec16f189f2243071d2f727c0d7a19969baaf3707927c71855196d467778e7f53318f4eba28fbe567e7633185c8af481a35f306b2e239038cc0171204b95001d00afd49ad11b9a52038c0280fcd428a23cb6733f3842c97617d7555f03e723b84fa7e6670ea6c4325ecaca682f23bce44deee3890992e5563cdea5c51db0285fb034853e940620198f19bed06e88f0bf91af4ea4a912fe7703cb8a42012bca087e33b2365e3a2a6482f066a5eb2182c5f1c1901507bba6b3b3fa9815226fd63e6733dea227dc29767d55c7dd5382538662fddd4637ed725dfd866015cfe453ced17de0ab1f287dc3fd3469010a64d584613ad9a224608726ea0c55c9064922d787ff39cc1263ccdc95db2b1f16a1593ea3f73ede33f0a536653c4c8549442ade4da944e530177b707801638084ec2024cfcd44ac0d0fbe3e17161ae11519f30eb9c8997ef43e68ae29937292aecf1446b99d3b2a147fec315858d71500e411f763f11f4c73e7223d26a47ae4451544f587ab21c58d7633e409b74301b6488f38e56da4b2f6e02d0dd54ac77492b5cc96cd664718e616d0bcefba76f8c65fb1ca2fcafaab49a74cec73b2c858a5c560387ce5b150e7ca99a81eadf93466e3b898dcadc2aae4eea6cc687bbe1440ce3e5bbae66d952dc44c4e5d08e23baae196803c7158af8a137b897dced6a9d225a2304a986ecd8e6faa76970ea5c833a7e61172d86ae827295798a9085b0705fda1283eb7dd9611f3a57269aeb4f3aeb138f06025ffb4942c6035eff4703b0729920ed63b42278576c66fac92bdddcf464c3417ef3f603331d292ac962dac6631ed01bef987cb5329d21b55f06209b37075a20829b6db4c57860a61cad4e5901a7aaca1566299733bff785794eaf15c2d0a780d7c96c4554bcdb25a3ccf9f8caac9329815d8d2d58618fa0e466a120992d3cd46a10118348069d348f23a72ccee02ed81a30933ee121e64c3c811cb3fc97eb0e0634dc0f7ab"}, {0xd0, 0xff, 0x1, "36cb3dca44e2aa0d40dcc5682eee8f3f24019c4ddedc671cd951c39ba0282f8a1502c1888b7f540810d7d59c2d2063fdcfcd07b9d32c66fdb391e9b66cd8d302ed72a3cddc0a93421d7e76dc3c095c1c5a04733a6a23c8318c087602389bee3e6b37a107895ebb4f0a3f1f5af8648bb6e76150033ac4a31593c841a5cbad6ef09263c1bb58bd9e015f33f589097400f8c69a2f200667f7810f78ab0caf19994707e9cbf28deb47ae501e2abaf8c856e63c93b1eeab7779ba156ede7d51da46"}, {0xc0, 0x8, 0x2, "2c20083b56dde665dfa0ef7d1a105045083ead56e184be055b0128da372a8f06afb5eacc71e75bac732a712cab6bd71a2c7282d29192fffb55d7580b186c0ace97dd149fb17565d0f22a355faa0e75fe311c60b59d35d4aa06154db697a161f1da60321a74a14e488595add261499a458651565e4db438f7efc9b187c9c088c82caa6c37e90c82740c47edf64b1d90072c91f9dc64c18a42fcfa8475d0fb79d1d249ddc76f27b63d86"}], 0x1360}}], 0x2, 0x4000010) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7) 1.354922475s ago: executing program 3 (id=9460): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) keyctl$session_to_parent(0x12) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x100102, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 893.497408ms ago: executing program 6 (id=9461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x78bd30, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_extract_tcp_res$synack(&(0x7f0000000180)={0x41424344}, 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8894}, 0x4040000) syz_emit_ethernet(0x242, &(0x7f00000001c0)={@empty, @local, @val={@val={0x88a8, 0x4}, {0x8100, 0x2}}, {@mpls_mc={0x8848, {[{0x7fff, 0x0, 0x1}, {0x9}, {0x5}], @ipv6=@tcp={0xc, 0x6, "53ef28", 0x1f8, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', {[@routing={0x2c, 0xa, 0x1, 0x7, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @local]}, @dstopts={0x1d, 0x4, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfffffffb}]}, @fragment={0x2, 0x0, 0x2, 0x0, 0x0, 0x1e, 0x65}, @hopopts={0x0, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x44a00000}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @calipso={0x7, 0x28, {0x1, 0x8, 0x8, 0x800, [0x6, 0x80, 0x3a, 0x6be]}}, @ra={0x5, 0x2, 0x313}, @jumbo={0xc2, 0x4, 0x10}, @ra={0x5, 0x2, 0xe}]}, @srh={0x87, 0x6, 0x4, 0x3, 0x9, 0x8, 0x9, [@private0, @mcast2, @mcast2]}, @srh={0x2c, 0xa, 0x4, 0x5, 0x81, 0x20, 0x3, [@private0, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @empty, @empty]}], {{0x4e20, 0x4e24, r2, r5, 0x0, 0x0, 0x8, 0x20, 0x8, 0x0, 0x800, {[@exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0x9a}, @window={0x3, 0x3, 0x51}]}}, {"8e41b61b979914615bc63168f6c9de765aeeca406282130c9afe535586aee99da79e7af948fdf38c1b9de0a1b9ac50c12a3a6e15123417351db82685f126ccd0525229ad8cc8fa8caecc30f9b1436cf9cb92ff58a5f4081994410bfd052bb95f"}}}}}}}}, &(0x7f0000000440)={0x1, 0x3, [0xbb1, 0x89a, 0xf3b, 0xe36]}) write$tun(r0, &(0x7f0000000480)={@val={0x8, 0x6806}, @val={0x2, 0x1, 0x6, 0x4, 0x7, 0x48}, @ipv4=@tcp={{0x20, 0x4, 0x3, 0x4, 0x135, 0x67, 0x0, 0x86, 0x6, 0x0, @multicast2, @private=0xa010102, {[@lsrr={0x83, 0x7, 0xa9, [@private=0xa010101]}, @lsrr={0x83, 0x13, 0x9a, [@broadcast, @remote, @multicast2, @empty]}, @timestamp={0x44, 0x20, 0x65, 0x0, 0x2, [0xc, 0x3, 0x0, 0xc4e, 0x10, 0x8, 0x91]}, @generic={0x86, 0xd, "f4bac3401f712f3fa3b463"}, @timestamp_prespec={0x44, 0x24, 0x8a, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}, {@multicast2, 0xffff}, {@loopback, 0x6}, {@empty, 0x2}]}]}}, {{0x4e23, 0x4e23, r1, r2, 0x1, 0x0, 0x15, 0x1, 0x4, 0x0, 0x9, {[@fastopen={0x22, 0xa, "c57736b50eeeef39"}, @generic={0xfe, 0x12, "e366e75ccc1892af4896205dc5eec4bf"}, @md5sig={0x13, 0x12, "e0010b93573da08a3778b2cbd65ab3c4"}, @sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0xf, 0xf989, "b98316001b582ad6a5b7ca"}]}}, {"8df4d31b0c221e3c0e78d358a39df9f8c338c21b305647ce20af0dc81ef6cf78e3d5867031adce99c3fc052de6f2c561f88fc866d74393109984162a2a8ac5738117d7866248e9d31471a2eabe95378e1959d95f873c89f705dd83d792cafb5056"}}}}, 0x143) 892.842798ms ago: executing program 2 (id=9462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000000980)=[{{&(0x7f0000000280)={0xa, 0x4e26, 0x1df6b78c, @mcast2, 0x43}, 0x1c, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB], 0x1090}}], 0x1, 0xff00) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x78bf, 0x0, 0x40204, 0x100039}, &(0x7f0000000340)=0x0, &(0x7f0000000f80)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x80) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) r10 = accept4(r2, &(0x7f00000004c0)=@nfc, &(0x7f00000001c0)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000400)={0x0, 0xc}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000580)={r11, 0xba1, 0x1}, 0x8) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r6, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 864.277432ms ago: executing program 6 (id=9463): r0 = syz_socket_connect_nvme_tcp() close(r0) 826.495494ms ago: executing program 6 (id=9464): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x990e34c54cf5e961, 0x1, 0x6, 0x9, {{0x5, 0x4, 0x1, 0x2, 0x14, 0x68, 0x0, 0x6, 0x2f, 0x0, @loopback, @private=0xa010101}}}}) (fail_nth: 3) 521.5718ms ago: executing program 6 (id=9465): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file0\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) pwrite64(r0, &(0x7f0000005c80)="a9", 0x1, 0xc00000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100), 0x0, 0x5412, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, &(0x7f0000000280)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x8, 0x4, 0x4056e0f679010b9a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x1, 0x10, 0x8000, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendfile(r4, r3, 0x0, 0x80000000c) 333.31333ms ago: executing program 3 (id=9466): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4008011) r1 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x1}, {0xffff, 0xffff}, {0x7, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x24, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x1a}, @TCA_PIE_LIMIT={0x8, 0x2, 0x800}, @TCA_PIE_ECN={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffc00}]}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x9}}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}, @TCA_RATE={0x6, 0x5, {0x5}}]}, 0x7c}}, 0x404c810) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f00000004c0)={&(0x7f0000000280)=@hci, 0x80, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000140)=""/50, 0x32}], 0x2, &(0x7f0000000480)=""/30, 0x1e}, 0x40000000) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0xffff8000, r0, 0x4}, 0x38) 181.943699ms ago: executing program 3 (id=9467): unshare(0x6c010880) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x20000300, 0x0, 0x3, 0x9, 0x0, 0x6}, 0x28) 91.795239ms ago: executing program 6 (id=9468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x601, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "aef01ffbf7d084bc716fd6fe3dba05ce9b"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1c}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 0s ago: executing program 6 (id=9469): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000380)=""/179, 0xb3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000480)=@ethtool_link_settings={0x0, 0x8, 0x3, 0xe, 0x4, 0x6, 0x1, 0x2, 0x2, 0xe, [0x4, 0xeaac, 0x0, 0x9f, 0xffff59f1, 0x7, 0x10001, 0x86f8], [0x9]}}) kernel console output (not intermixed with test programs): [ 1524.727760][ T8360] smc: adding ib device syU with port count 1 [ 1524.733979][ T8360] smc: ib device syU port 1 has no pnetid [ 1524.740469][T17460] lo speed is unknown, defaulting to 1000 [ 1524.746648][ T8360] lo speed is unknown, defaulting to 1000 [ 1524.794325][ T8375] EXT4-fs: Ignoring removed mblk_io_submit option [ 1524.842726][ T8393] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9053'. [ 1524.865503][ T8375] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1524.873939][ T8360] lo speed is unknown, defaulting to 1000 [ 1524.944583][ T8360] lo speed is unknown, defaulting to 1000 [ 1524.956680][ T8375] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1525.046205][ T8360] lo speed is unknown, defaulting to 1000 [ 1525.090078][ T8375] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.9050: attempt to clear invalid blocks 2 len 1 [ 1525.112847][ T8375] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1525.118923][ T8375] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, [ 1525.128306][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1525.128355][ C1] EXT4-fs (loop3): initial error at time 1772464699: ext4_clear_blocks:876: inode 13 [ 1525.128644][ C1] EXT4-fs (loop3): last error at time 1772464699: ext4_clear_blocks:876: inode 13 [ 1525.154654][ T8360] lo speed is unknown, defaulting to 1000 [ 1525.163667][ T8375] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1525.240882][ T8412] vfat: Unknown parameter '00000000000000000000004' [ 1525.341121][ T8375] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.9050: invalid indirect mapped block 1819239214 (level 0) [ 1525.492732][ T8409] EXT4-fs: Ignoring removed mblk_io_submit option [ 1525.524273][ T8375] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1525.540106][ T8375] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.9050: invalid indirect mapped block 1819239214 (level 1) [ 1525.672067][ T8409] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1525.716907][ T8409] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 1525.766933][ T8375] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1525.782313][ T8375] EXT4-fs (loop3): 1 truncate cleaned up [ 1525.834799][ T8409] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.9055: attempt to clear invalid blocks 2 len 1 [ 1526.069258][ T8409] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1526.071723][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1526.087670][ C0] EXT4-fs (loop8): initial error at time 1772464700: ext4_clear_blocks:876: inode 13 [ 1526.097614][ C0] EXT4-fs (loop8): last error at time 1772464700: ext4_clear_blocks:876: inode 13 [ 1526.161364][ T8375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1526.211068][ T8424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1526.253912][ T8409] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1526.346070][ T8409] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.9055: invalid indirect mapped block 1819239214 (level 0) [ 1526.403628][ T8409] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1526.406498][ T8409] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.9055: invalid indirect mapped block 1819239214 (level 1) [ 1526.553196][ T8409] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1526.556028][ T8409] EXT4-fs (loop8): 1 truncate cleaned up [ 1526.580804][ T8409] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1526.768970][ T2761] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1526.819905][ T8444] set_capacity_and_notify: 7 callbacks suppressed [ 1526.819921][ T8444] loop2: detected capacity change from 0 to 512 [ 1526.874235][ T1694] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1527.835740][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9064'. [ 1528.404915][ T8465] siw: device registration error -23 [ 1528.428792][ T8472] netlink: 'syz.3.9066': attribute type 15 has an invalid length. [ 1528.436781][ T8472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9066'. [ 1528.574507][ T8481] loop3: detected capacity change from 0 to 512 [ 1528.598016][ T8487] netlink: 'syz.8.9069': attribute type 29 has an invalid length. [ 1528.646875][ T8487] netlink: 'syz.8.9069': attribute type 29 has an invalid length. [ 1528.680052][ T8481] loop3: detected capacity change from 0 to 2048 [ 1528.723174][ T8487] netlink: 500 bytes leftover after parsing attributes in process `syz.8.9069'. [ 1528.906072][ T8510] loop2: detected capacity change from 0 to 512 [ 1528.970639][ T8513] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1529.031908][ T8513] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 192 with error 28 [ 1529.076424][ T8513] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1529.076424][ T8513] [ 1529.111211][ T8513] EXT4-fs (loop3): Total free blocks count 0 [ 1529.133029][ T8513] EXT4-fs (loop3): Free/Dirty block details [ 1529.154277][ T8513] EXT4-fs (loop3): free_blocks=2415919504 [ 1529.174801][ T8513] EXT4-fs (loop3): dirty_blocks=3216 [ 1529.194403][ T8513] EXT4-fs (loop3): Block reservation details [ 1529.215365][ T8513] EXT4-fs (loop3): i_reserved_data_blocks=240 [ 1529.628213][ T8508] Can't find ip_set type hash:net,por [ 1529.782374][ T8510] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1529.856361][ T8510] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1529.898614][ T8510] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 1529.932199][ T8529] loop8: detected capacity change from 0 to 512 [ 1529.951885][ T8529] EXT4-fs: Ignoring removed mblk_io_submit option [ 1530.027765][ T8529] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1530.044934][ T8529] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 1530.063818][ T8529] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.9075: attempt to clear invalid blocks 2 len 1 [ 1530.110888][ T8529] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1530.112761][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1530.128309][ C1] EXT4-fs (loop8): initial error at time 1772464703: ext4_clear_blocks:876: inode 13 [ 1530.137784][ C1] EXT4-fs (loop8): last error at time 1772464703: ext4_clear_blocks:876: inode 13 [ 1530.162152][ T8529] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1530.199806][ T8529] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.9075: invalid indirect mapped block 1819239214 (level 0) [ 1530.230430][ T8529] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1530.230741][ T8529] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.9075: invalid indirect mapped block 1819239214 (level 1) [ 1530.280046][ T8529] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1530.281384][ T8529] EXT4-fs (loop8): 1 truncate cleaned up [ 1530.441723][ T8537] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1530.505647][ T8541] FAULT_INJECTION: forcing a failure. [ 1530.505647][ T8541] name failslab, interval 1, probability 0, space 0, times 0 [ 1530.536092][ T8541] CPU: 0 UID: 0 PID: 8541 Comm: syz.5.9078 Tainted: G W syzkaller #0 PREEMPT(full) [ 1530.536123][ T8541] Tainted: [W]=WARN [ 1530.536131][ T8541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1530.536222][ T8541] Call Trace: [ 1530.536230][ T8541] [ 1530.536238][ T8541] __dump_stack+0x1d/0x30 [ 1530.536265][ T8541] dump_stack_lvl+0x95/0xd0 [ 1530.536363][ T8541] dump_stack+0x15/0x1b [ 1530.536409][ T8541] should_fail_ex+0x263/0x280 [ 1530.536432][ T8541] should_failslab+0x8c/0xb0 [ 1530.536481][ T8541] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1530.536557][ T8541] ? __alloc_skb+0x2d6/0x690 [ 1530.536581][ T8541] __alloc_skb+0x2d6/0x690 [ 1530.536603][ T8541] ? __alloc_skb+0x200/0x690 [ 1530.536624][ T8541] netlink_alloc_large_skb+0xbf/0xf0 [ 1530.536685][ T8541] netlink_sendmsg+0x40c/0x6f0 [ 1530.536714][ T8541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1530.536755][ T8541] ____sys_sendmsg+0x5af/0x600 [ 1530.536782][ T8541] ___sys_sendmsg+0x195/0x1e0 [ 1530.536813][ T8541] __x64_sys_sendmsg+0xd4/0x160 [ 1530.536851][ T8541] x64_sys_call+0x194c/0x3020 [ 1530.536873][ T8541] do_syscall_64+0x12c/0x370 [ 1530.536893][ T8541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1530.536939][ T8541] RIP: 0033:0x7fe62936c799 [ 1530.536955][ T8541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1530.536972][ T8541] RSP: 002b:00007fe627dc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1530.536992][ T8541] RAX: ffffffffffffffda RBX: 00007fe6295e5fa0 RCX: 00007fe62936c799 [ 1530.537078][ T8541] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1530.537092][ T8541] RBP: 00007fe627dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 1530.537106][ T8541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1530.537118][ T8541] R13: 00007fe6295e6038 R14: 00007fe6295e5fa0 R15: 00007ffd36be0008 [ 1530.537174][ T8541] [ 1530.544102][ T8481] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1530.745484][ T8481] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1530.745484][ T8481] [ 1531.006168][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9081'. [ 1531.091734][ T8568] siw: device registration error -23 [ 1531.133416][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9084'. [ 1531.244059][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9084'. [ 1531.471710][ T8589] loop5: detected capacity change from 0 to 512 [ 1531.495254][ T8589] EXT4-fs: Ignoring removed mblk_io_submit option [ 1531.547786][ T8589] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1531.554556][ T8589] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 1531.568976][ T8589] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.9087: attempt to clear invalid blocks 2 len 1 [ 1531.582909][ T8589] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1531.588068][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1531.589260][ T8589] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, [ 1531.597185][ C0] EXT4-fs (loop5): initial error at time 1772464705: ext4_clear_blocks:876: inode 13 [ 1531.597234][ C0] EXT4-fs (loop5): last error at time 1772464705: ext4_clear_blocks:876: inode 13 [ 1531.633886][ T8589] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1531.648062][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9089'. [ 1531.668373][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9089'. [ 1531.742881][ T8589] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.9087: invalid indirect mapped block 1819239214 (level 0) [ 1531.775624][ T8619] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9090'. [ 1531.787580][ T8589] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1531.795798][ T8589] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.9087: invalid indirect mapped block 1819239214 (level 1) [ 1531.839519][ T8589] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1531.861785][ T8589] EXT4-fs (loop5): 1 truncate cleaned up [ 1531.947305][ T8634] loop8: detected capacity change from 0 to 512 [ 1531.985350][ T8634] loop8: detected capacity change from 0 to 2048 [ 1532.241813][ T8660] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1532.286618][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9099'. [ 1532.306253][ T8643] loop7: detected capacity change from 0 to 512 [ 1532.326219][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9099'. [ 1532.375183][ T8643] EXT4-fs: Ignoring removed mblk_io_submit option [ 1532.392422][ T8643] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1532.400673][ T8643] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 1532.411269][ T8660] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 224 with error 28 [ 1532.432784][ T8660] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1532.432784][ T8660] [ 1532.444547][ T8643] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.9095: attempt to clear invalid blocks 2 len 1 [ 1532.467586][ T8643] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1532.470832][ T8643] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, [ 1532.480206][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1532.480317][ C1] EXT4-fs (loop7): initial error at time 1772464706: ext4_clear_blocks:876: inode 13 [ 1532.480487][ C1] EXT4-fs (loop7): last error at time 1772464706: ext4_clear_blocks:876: inode 13 [ 1532.526196][ T8643] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1532.563162][ T8643] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.9095: invalid indirect mapped block 1819239214 (level 0) [ 1532.589394][ T8660] EXT4-fs (loop8): Total free blocks count 0 [ 1532.611357][ T8671] loop2: detected capacity change from 0 to 512 [ 1532.626965][ T8643] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1532.629288][ T8643] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.9095: invalid indirect mapped block 1819239214 (level 1) [ 1532.670902][ T8660] EXT4-fs (loop8): Free/Dirty block details [ 1532.676794][ T8660] EXT4-fs (loop8): free_blocks=2415919504 [ 1532.685320][ T8671] EXT4-fs: Ignoring removed mblk_io_submit option [ 1532.721842][ T8643] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1532.726361][ T8643] EXT4-fs (loop7): 1 truncate cleaned up [ 1532.753916][ T8660] EXT4-fs (loop8): dirty_blocks=7104 [ 1532.759302][ T8660] EXT4-fs (loop8): Block reservation details [ 1532.780796][ T8660] EXT4-fs (loop8): i_reserved_data_blocks=450 [ 1532.798831][ T8671] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1532.830318][ T8671] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1532.868748][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9101'. [ 1532.929676][ T8671] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.9096: attempt to clear invalid blocks 2 len 1 [ 1532.948077][ T8698] siw: device registration error -23 [ 1533.066269][ T8671] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1533.074209][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1533.090476][ C1] EXT4-fs (loop2): initial error at time 1772464706: ext4_clear_blocks:876: inode 13 [ 1533.100568][ C1] EXT4-fs (loop2): last error at time 1772464706: ext4_clear_blocks:876: inode 13 [ 1533.219775][ T8671] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1533.236272][ T8671] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.9096: invalid indirect mapped block 1819239214 (level 0) [ 1533.253830][ T8671] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1533.255387][ T8671] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.9096: invalid indirect mapped block 1819239214 (level 1) [ 1533.338945][ T8671] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1533.371576][ T8634] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1533.384951][ T8671] EXT4-fs (loop2): 1 truncate cleaned up [ 1533.397181][ T8634] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1533.397181][ T8634] [ 1533.457731][ T8717] FAULT_INJECTION: forcing a failure. [ 1533.457731][ T8717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1533.479239][ T8717] CPU: 0 UID: 0 PID: 8717 Comm: syz.7.9104 Tainted: G W syzkaller #0 PREEMPT(full) [ 1533.479266][ T8717] Tainted: [W]=WARN [ 1533.479273][ T8717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1533.479285][ T8717] Call Trace: [ 1533.479292][ T8717] [ 1533.479301][ T8717] __dump_stack+0x1d/0x30 [ 1533.479327][ T8717] dump_stack_lvl+0x95/0xd0 [ 1533.479372][ T8717] dump_stack+0x15/0x1b [ 1533.479390][ T8717] should_fail_ex+0x263/0x280 [ 1533.479460][ T8717] should_fail+0xb/0x20 [ 1533.479476][ T8717] should_fail_usercopy+0x1a/0x20 [ 1533.479497][ T8717] _copy_from_iter+0xcf/0xea0 [ 1533.479523][ T8717] ? alloc_pages_mpol+0x217/0x260 [ 1533.479665][ T8717] copy_page_from_iter+0x178/0x2a0 [ 1533.479690][ T8717] tun_get_user+0xbbd/0x27c0 [ 1533.479716][ T8717] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1533.479743][ T8717] tun_chr_write_iter+0x15e/0x210 [ 1533.479797][ T8717] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1533.479827][ T8717] vfs_write+0x5a6/0x9f0 [ 1533.479990][ T8717] ksys_write+0xdc/0x1a0 [ 1533.480020][ T8717] __x64_sys_write+0x40/0x50 [ 1533.480064][ T8717] x64_sys_call+0x27e1/0x3020 [ 1533.480089][ T8717] do_syscall_64+0x12c/0x370 [ 1533.480227][ T8717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.480249][ T8717] RIP: 0033:0x7faf460bc799 [ 1533.480265][ T8717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1533.480341][ T8717] RSP: 002b:00007faf44b0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1533.480362][ T8717] RAX: ffffffffffffffda RBX: 00007faf46335fa0 RCX: 00007faf460bc799 [ 1533.480410][ T8717] RDX: 000000000000009a RSI: 0000200000000000 RDI: 00000000000000c8 [ 1533.480430][ T8717] RBP: 00007faf44b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1533.480442][ T8717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1533.480453][ T8717] R13: 00007faf46336038 R14: 00007faf46335fa0 R15: 00007ffc707e8fa8 [ 1533.480472][ T8717] [ 1533.781381][ T8728] loop5: detected capacity change from 0 to 1024 [ 1534.141714][ T8760] netlink: 'syz.7.9115': attribute type 29 has an invalid length. [ 1534.169665][ T8760] netlink: 'syz.7.9115': attribute type 29 has an invalid length. [ 1534.202423][ T8762] loop5: detected capacity change from 0 to 128 [ 1534.248617][ T8763] netlink: 500 bytes leftover after parsing attributes in process `syz.7.9115'. [ 1534.542926][ T8768] loop7: detected capacity change from 0 to 512 [ 1535.190036][ T8767] loop7: detected capacity change from 0 to 2048 [ 1535.774109][ T8780] siw: device registration error -23 [ 1535.963825][ T8784] netlink: 'syz.5.9119': attribute type 15 has an invalid length. [ 1535.992260][ T8783] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1536.022211][ T8783] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 1536.043998][ T8783] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1536.043998][ T8783] [ 1536.073302][ T8783] EXT4-fs (loop7): Total free blocks count 0 [ 1536.090542][ T8772] loop8: detected capacity change from 0 to 512 [ 1536.092817][ T8783] EXT4-fs (loop7): Free/Dirty block details [ 1536.114398][ T8778] loop3: detected capacity change from 0 to 512 [ 1536.124564][ T8778] EXT4-fs: Ignoring removed mblk_io_submit option [ 1536.131274][ T8783] EXT4-fs (loop7): free_blocks=2415919504 [ 1536.137019][ T8783] EXT4-fs (loop7): dirty_blocks=960 [ 1536.151647][ T8778] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1536.158585][ T8783] EXT4-fs (loop7): Block reservation details [ 1536.164641][ T8783] EXT4-fs (loop7): i_reserved_data_blocks=60 [ 1536.172556][ T8778] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1536.188115][ T8778] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.9128: attempt to clear invalid blocks 2 len 1 [ 1536.213216][ T8793] loop5: detected capacity change from 0 to 1024 [ 1536.220169][ T8778] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1536.227800][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1536.229193][ T8772] EXT4-fs: Ignoring removed mblk_io_submit option [ 1536.236929][ C0] EXT4-fs (loop3): initial error at time 1772464709: ext4_clear_blocks:876: inode 13 [ 1536.236972][ C0] EXT4-fs (loop3): last error at time 1772464709: ext4_clear_blocks:876: inode 13 [ 1536.281202][ T8795] netlink: 'syz.2.9121': attribute type 29 has an invalid length. [ 1536.290978][ T8795] netlink: 'syz.2.9121': attribute type 29 has an invalid length. [ 1536.313726][ T8793] EXT4-fs mount: 16 callbacks suppressed [ 1536.313806][ T8793] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1536.319711][ T8778] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1536.393091][ T8778] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.9128: invalid indirect mapped block 1819239214 (level 0) [ 1536.410760][ T8772] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1536.421712][ T8772] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 1536.443321][ T8778] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.9128: invalid indirect mapped block 1819239214 (level 1) [ 1536.460179][ T8772] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.9118: attempt to clear invalid blocks 2 len 1 [ 1536.477327][ T6102] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1536.488475][ T8772] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1536.503334][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1536.503459][ C0] EXT4-fs (loop8): initial error at time 1772464709: ext4_clear_blocks:876: inode 13 [ 1536.503719][ C0] EXT4-fs (loop8): last error at time 1772464709: ext4_clear_blocks:876: inode 13 [ 1536.542712][ T8806] FAULT_INJECTION: forcing a failure. [ 1536.542712][ T8806] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.544505][ T8778] EXT4-fs (loop3): 1 truncate cleaned up [ 1536.565876][ T8772] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.9118: invalid indirect mapped block 1819239214 (level 0) [ 1536.580455][ T8778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1536.595683][ T8809] __nla_validate_parse: 3 callbacks suppressed [ 1536.595697][ T8809] netlink: 596 bytes leftover after parsing attributes in process `syz.5.9123'. [ 1536.627735][ T8806] CPU: 1 UID: 0 PID: 8806 Comm: syz.2.9124 Tainted: G W syzkaller #0 PREEMPT(full) [ 1536.627761][ T8806] Tainted: [W]=WARN [ 1536.627823][ T8806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1536.627836][ T8806] Call Trace: [ 1536.627843][ T8806] [ 1536.627897][ T8806] __dump_stack+0x1d/0x30 [ 1536.627920][ T8806] dump_stack_lvl+0x95/0xd0 [ 1536.627942][ T8806] dump_stack+0x15/0x1b [ 1536.627959][ T8806] should_fail_ex+0x263/0x280 [ 1536.628031][ T8806] should_failslab+0x8c/0xb0 [ 1536.628052][ T8806] kmem_cache_alloc_noprof+0x66/0x400 [ 1536.628072][ T8806] ? do_getname+0x2e/0x1c0 [ 1536.628143][ T8806] ? mutex_lock+0x57/0x90 [ 1536.628183][ T8806] do_getname+0x2e/0x1c0 [ 1536.628201][ T8806] __se_sys_mknodat+0x24/0xf0 [ 1536.628217][ T8806] __x64_sys_mknodat+0x55/0x70 [ 1536.628232][ T8806] x64_sys_call+0x312/0x3020 [ 1536.628355][ T8806] do_syscall_64+0x12c/0x370 [ 1536.628376][ T8806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.628398][ T8806] RIP: 0033:0x7f92ef29c799 [ 1536.628411][ T8806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.628428][ T8806] RSP: 002b:00007f92edcf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 1536.628466][ T8806] RAX: ffffffffffffffda RBX: 00007f92ef515fa0 RCX: 00007f92ef29c799 [ 1536.628481][ T8806] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1536.628495][ T8806] RBP: 00007f92edcf7090 R08: 0000000000000000 R09: 0000000000000000 [ 1536.628506][ T8806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1536.628517][ T8806] R13: 00007f92ef516038 R14: 00007f92ef515fa0 R15: 00007ffdd6687758 [ 1536.628534][ T8806] [ 1536.634679][ T8767] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1536.656894][ T8772] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.9118: invalid indirect mapped block 1819239214 (level 1) [ 1536.660106][ T8767] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1536.660106][ T8767] [ 1536.696067][ T8772] EXT4-fs (loop8): 1 truncate cleaned up [ 1536.908513][ T8772] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1537.215969][ T8835] loop7: detected capacity change from 0 to 512 [ 1537.222577][ T8835] EXT4-fs: Ignoring removed mblk_io_submit option [ 1537.242046][ T8835] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1537.248399][ T8835] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 1537.258248][ T8835] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.9127: attempt to clear invalid blocks 2 len 1 [ 1537.300388][ T8835] fserror_report: 5 callbacks suppressed [ 1537.300401][ T8835] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1537.301826][ T1694] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1537.318235][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1537.326186][ T8835] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, [ 1537.330557][ C1] EXT4-fs (loop7): initial error at time 1772464710: ext4_clear_blocks:876: inode 13 [ 1537.338798][ T8835] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1537.348467][ T8835] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.9127: invalid indirect mapped block 1819239214 (level 0) [ 1537.356561][ C1] EXT4-fs (loop7): last error at time 1772464710: ext4_mb_generate_buddy:1315 [ 1537.370538][ T8835] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1537.383143][ T8835] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.9127: invalid indirect mapped block 1819239214 (level 1) [ 1537.406751][ T7661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1537.447352][ T8835] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1537.450968][ T8835] EXT4-fs (loop7): 1 truncate cleaned up [ 1537.496165][ T8835] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1537.727140][ T8847] loop2: detected capacity change from 0 to 8192 [ 1537.979039][ T8852] lo speed is unknown, defaulting to 1000 [ 1538.010490][ T8852] lo speed is unknown, defaulting to 1000 [ 1538.596471][ T8018] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1538.662174][T18839] loop2: p1 < > p2 p4 < p5 > [ 1538.671554][T18839] loop2: partition table partially beyond EOD, truncated [ 1538.691621][ T8858] loop5: detected capacity change from 0 to 1024 [ 1538.712431][T18839] loop2: p1 start 134217728 is beyond EOD, truncated [ 1538.745161][T18839] loop2: p2 size 591360 extends beyond EOD, truncated [ 1538.776150][ T8858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1538.808128][T18839] loop2: p5 size 591360 extends beyond EOD, truncated [ 1538.922296][ T6102] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1538.952265][ T8870] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1539.019039][ T8875] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1539.206010][ T8847] loop2: p1 < > p2 p4 < p5 > [ 1539.213833][ T8847] loop2: partition table partially beyond EOD, truncated [ 1539.224105][ T8877] tipc: Started in network mode [ 1539.229013][ T8877] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 1539.236367][ T8877] tipc: Enabled bearer , priority 0 [ 1539.245432][ T8847] loop2: p1 start 134217728 is beyond EOD, truncated [ 1539.256233][ T8847] loop2: p2 size 591360 extends beyond EOD, truncated [ 1539.270886][ T8847] loop2: p5 size 591360 extends beyond EOD, truncated [ 1539.301676][ T8883] netlink: 52 bytes leftover after parsing attributes in process `syz.7.9143'. [ 1539.312952][ T8886] loop5: detected capacity change from 0 to 1024 [ 1539.332776][ T8893] netlink: 596 bytes leftover after parsing attributes in process `syz.8.9146'. [ 1539.341994][ T8891] netlink: 'syz.3.9145': attribute type 29 has an invalid length. [ 1539.351567][ T8883] netlink: 52 bytes leftover after parsing attributes in process `syz.7.9143'. [ 1539.360976][T18957] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 1539.361809][ T1144] udevd[1144]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 1539.370730][T18957] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1539.382135][ T8891] netlink: 'syz.3.9145': attribute type 29 has an invalid length. [ 1539.397681][T18839] udevd[18839]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1539.408807][T18957] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1539.416999][T18957] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1539.435122][T18957] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1539.435732][ T8886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1539.443184][T18957] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1539.466455][T18957] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1539.471213][ T8891] netlink: 500 bytes leftover after parsing attributes in process `syz.3.9145'. [ 1539.489468][T18957] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1539.499087][T18957] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1539.508193][T18957] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1539.517824][T18957] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1539.526984][T18957] udevd[18957]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1539.537661][ T6102] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1539.550841][T18839] udevd[18839]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1539.563022][ T1144] udevd[1144]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 1539.564504][T18957] udevd[18957]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1539.624083][ T8904] netlink: 'syz.2.9159': attribute type 29 has an invalid length. [ 1539.635450][ T8904] netlink: 'syz.2.9159': attribute type 29 has an invalid length. [ 1539.677414][ T8903] netlink: 'syz.5.9149': attribute type 29 has an invalid length. [ 1539.703079][ T8903] netlink: 'syz.5.9149': attribute type 29 has an invalid length. [ 1539.720852][ T8903] netlink: 500 bytes leftover after parsing attributes in process `syz.5.9149'. [ 1539.731383][ T8913] loop3: detected capacity change from 0 to 1024 [ 1539.737967][ T8911] loop7: detected capacity change from 0 to 512 [ 1539.784350][ T8911] loop7: detected capacity change from 0 to 2048 [ 1539.796204][ T8921] loop8: detected capacity change from 0 to 512 [ 1539.803237][ T8913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1539.845356][ T8911] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1539.887098][ T8915] netlink: 'syz.2.9153': attribute type 29 has an invalid length. [ 1539.906226][ T8921] loop8: detected capacity change from 0 to 2048 [ 1539.933584][ T8915] netlink: 'syz.2.9153': attribute type 29 has an invalid length. [ 1539.958297][ T1694] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1539.969414][ T8921] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1540.015596][ T8915] netlink: 500 bytes leftover after parsing attributes in process `syz.2.9153'. [ 1540.034857][ T8930] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1540.060865][ T8930] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 448 with error 28 [ 1540.079939][ T8933] FAULT_INJECTION: forcing a failure. [ 1540.079939][ T8933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1540.139069][ T8930] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1540.139069][ T8930] [ 1540.154689][ T8930] EXT4-fs (loop7): Total free blocks count 0 [ 1540.160733][ T8930] EXT4-fs (loop7): Free/Dirty block details [ 1540.166699][ T8930] EXT4-fs (loop7): free_blocks=2415919504 [ 1540.172457][ T8930] EXT4-fs (loop7): dirty_blocks=1376 [ 1540.177895][ T8933] CPU: 0 UID: 0 PID: 8933 Comm: syz.5.9158 Tainted: G W syzkaller #0 PREEMPT(full) [ 1540.177925][ T8933] Tainted: [W]=WARN [ 1540.177931][ T8933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1540.177941][ T8933] Call Trace: [ 1540.177948][ T8933] [ 1540.177955][ T8933] __dump_stack+0x1d/0x30 [ 1540.178045][ T8933] dump_stack_lvl+0x95/0xd0 [ 1540.178122][ T8933] dump_stack+0x15/0x1b [ 1540.178144][ T8933] should_fail_ex+0x263/0x280 [ 1540.178195][ T8933] should_fail+0xb/0x20 [ 1540.178210][ T8933] should_fail_usercopy+0x1a/0x20 [ 1540.178234][ T8933] _copy_from_iter+0xcf/0xea0 [ 1540.178261][ T8933] ? __rcu_read_unlock+0x4e/0x70 [ 1540.178282][ T8933] packet_sendmsg+0x2046/0x3370 [ 1540.178305][ T8933] ? avc_has_perm+0x101/0x190 [ 1540.178374][ T8933] ? selinux_socket_sendmsg+0x192/0x1c0 [ 1540.178406][ T8933] ? __pfx_packet_sendmsg+0x10/0x10 [ 1540.178494][ T8933] __sys_sendto+0x470/0x4d0 [ 1540.178586][ T8933] __x64_sys_sendto+0x76/0x90 [ 1540.178654][ T8933] x64_sys_call+0x2d35/0x3020 [ 1540.178680][ T8933] do_syscall_64+0x12c/0x370 [ 1540.178702][ T8933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.178723][ T8933] RIP: 0033:0x7fe62936c799 [ 1540.178736][ T8933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1540.178794][ T8933] RSP: 002b:00007fe627dc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1540.178811][ T8933] RAX: ffffffffffffffda RBX: 00007fe6295e5fa0 RCX: 00007fe62936c799 [ 1540.178872][ T8933] RDX: 0000000000000059 RSI: 0000200000000240 RDI: 0000000000000003 [ 1540.178886][ T8933] RBP: 00007fe627dc7090 R08: 00002000000001c0 R09: 0000000000000014 [ 1540.178901][ T8933] R10: 00000000200000c4 R11: 0000000000000246 R12: 0000000000000001 [ 1540.178912][ T8933] R13: 00007fe6295e6038 R14: 00007fe6295e5fa0 R15: 00007ffd36be0008 [ 1540.178967][ T8933] [ 1540.401989][ T8930] EXT4-fs (loop7): Block reservation details [ 1540.408155][ T8930] EXT4-fs (loop7): i_reserved_data_blocks=190 [ 1540.414459][ T9] tipc: Node number set to 9611946 [ 1540.578450][ T8945] loop3: detected capacity change from 0 to 256 [ 1540.585482][ T8945] vfat: Unknown parameter '00000000000000000000004' [ 1540.621556][ T8937] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1541.203186][ T8937] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 1541.256888][ T8937] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1541.256888][ T8937] [ 1541.299503][ T8937] EXT4-fs (loop8): Total free blocks count 0 [ 1541.326074][ T8937] EXT4-fs (loop8): Free/Dirty block details [ 1541.349370][ T8937] EXT4-fs (loop8): free_blocks=2415919504 [ 1541.387435][ T8937] EXT4-fs (loop8): dirty_blocks=2704 [ 1541.409006][ T8937] EXT4-fs (loop8): Block reservation details [ 1541.427186][ T8937] EXT4-fs (loop8): i_reserved_data_blocks=190 [ 1541.563412][ T8952] netlink: 'syz.2.9162': attribute type 29 has an invalid length. [ 1541.573610][ T8954] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9163'. [ 1541.604870][ T8961] netlink: 'syz.2.9162': attribute type 29 has an invalid length. [ 1541.634751][ T8962] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9163'. [ 1541.637337][ T8952] netlink: 500 bytes leftover after parsing attributes in process `syz.2.9162'. [ 1541.688888][ T8911] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1542.132889][ T8921] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1542.262497][ T8972] netlink: 'syz.5.9168': attribute type 29 has an invalid length. [ 1542.271323][ T8972] netlink: 'syz.5.9168': attribute type 29 has an invalid length. [ 1542.423285][ T8983] loop5: detected capacity change from 0 to 256 [ 1542.440594][ T8983] Q6`Ҙ: renamed from lo (while UP) [ 1542.515391][ T8986] netlink: 52 bytes leftover after parsing attributes in process `syz.7.9174'. [ 1542.560386][ T8986] netlink: 52 bytes leftover after parsing attributes in process `syz.7.9174'. [ 1542.579686][ T8994] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1542.655284][ T7661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.811810][ T9026] netlink: 500 bytes leftover after parsing attributes in process `syz.8.9187'. [ 1542.901285][ T9031] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1543.693667][ T9041] set_capacity_and_notify: 2 callbacks suppressed [ 1543.693682][ T9041] loop5: detected capacity change from 0 to 256 [ 1543.706558][ T9042] loop3: detected capacity change from 0 to 256 [ 1543.706867][ T9041] vfat: Unknown parameter '00000000000000000000004' [ 1543.713021][ T9042] vfat: Unknown parameter '00000000000000000000004' [ 1543.938349][ T7661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1545.999826][ T9047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.007457][ T9047] bridge_slave_1: left allmulticast mode [ 1546.026309][ T9047] bridge_slave_1: left promiscuous mode [ 1546.474952][ T9047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.513208][ T9047] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1546.540715][ T28] audit: type=1400 audit(1772464719.293:6905): avc: denied { accept } for pid=9044 comm="syz.8.9194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1546.568102][ T9050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1546.593363][ T9053] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9195'. [ 1546.619262][ T9053] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9195'. [ 1546.758857][ T9078] validate_nla: 6 callbacks suppressed [ 1546.758878][ T9078] netlink: 'syz.5.9199': attribute type 29 has an invalid length. [ 1546.800884][ T9078] netlink: 'syz.5.9199': attribute type 29 has an invalid length. [ 1546.909260][ T9087] FAULT_INJECTION: forcing a failure. [ 1546.909260][ T9087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1546.928904][ T9087] CPU: 1 UID: 0 PID: 9087 Comm: syz.2.9197 Tainted: G W syzkaller #0 PREEMPT(full) [ 1546.928951][ T9087] Tainted: [W]=WARN [ 1546.928958][ T9087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1546.928970][ T9087] Call Trace: [ 1546.928978][ T9087] [ 1546.928986][ T9087] __dump_stack+0x1d/0x30 [ 1546.929056][ T9087] dump_stack_lvl+0x95/0xd0 [ 1546.929079][ T9087] dump_stack+0x15/0x1b [ 1546.929099][ T9087] should_fail_ex+0x263/0x280 [ 1546.929123][ T9087] should_fail+0xb/0x20 [ 1546.929223][ T9087] should_fail_usercopy+0x1a/0x20 [ 1546.929246][ T9087] _copy_to_user+0x20/0xa0 [ 1546.929274][ T9087] simple_read_from_buffer+0xb5/0x130 [ 1546.929295][ T9087] proc_fail_nth_read+0x10e/0x150 [ 1546.929413][ T9087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1546.929440][ T9087] vfs_read+0x1ab/0x7f0 [ 1546.929463][ T9087] ? __rcu_read_unlock+0x4e/0x70 [ 1546.929485][ T9087] ? __fget_files+0x184/0x1c0 [ 1546.929512][ T9087] ? mutex_lock+0x57/0x90 [ 1546.929539][ T9087] ksys_read+0xdc/0x1a0 [ 1546.929565][ T9087] __x64_sys_read+0x40/0x50 [ 1546.929647][ T9087] x64_sys_call+0x2886/0x3020 [ 1546.929672][ T9087] do_syscall_64+0x12c/0x370 [ 1546.929693][ T9087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.929716][ T9087] RIP: 0033:0x7f92ef25cfce [ 1546.929794][ T9087] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1546.929811][ T9087] RSP: 002b:00007f92edcd5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1546.929831][ T9087] RAX: ffffffffffffffda RBX: 00007f92edcd66c0 RCX: 00007f92ef25cfce [ 1546.929846][ T9087] RDX: 000000000000000f RSI: 00007f92edcd60a0 RDI: 0000000000000009 [ 1546.929896][ T9087] RBP: 00007f92edcd6090 R08: 0000000000000000 R09: 0000000000000000 [ 1546.929907][ T9087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1546.929996][ T9087] R13: 00007f92ef516128 R14: 00007f92ef516090 R15: 00007ffdd6687758 [ 1546.930047][ T9087] [ 1547.179410][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9200'. [ 1547.248065][ T9090] siw: device registration error -23 [ 1547.680069][ T9126] FAULT_INJECTION: forcing a failure. [ 1547.680069][ T9126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1547.698911][ T9126] CPU: 0 UID: 0 PID: 9126 Comm: syz.8.9204 Tainted: G W syzkaller #0 PREEMPT(full) [ 1547.698952][ T9126] Tainted: [W]=WARN [ 1547.698960][ T9126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1547.698972][ T9126] Call Trace: [ 1547.698978][ T9126] [ 1547.698984][ T9126] __dump_stack+0x1d/0x30 [ 1547.699069][ T9126] dump_stack_lvl+0x95/0xd0 [ 1547.699090][ T9126] dump_stack+0x15/0x1b [ 1547.699116][ T9126] should_fail_ex+0x263/0x280 [ 1547.699135][ T9126] should_fail+0xb/0x20 [ 1547.699151][ T9126] should_fail_usercopy+0x1a/0x20 [ 1547.699170][ T9126] _copy_from_user+0x1c/0xb0 [ 1547.699207][ T9126] __copy_msghdr+0x244/0x300 [ 1547.699236][ T9126] ___sys_sendmsg+0x10c/0x1e0 [ 1547.699292][ T9126] __x64_sys_sendmsg+0xd4/0x160 [ 1547.699377][ T9126] x64_sys_call+0x194c/0x3020 [ 1547.699451][ T9126] do_syscall_64+0x12c/0x370 [ 1547.699473][ T9126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.699597][ T9126] RIP: 0033:0x7fb1dcd5c799 [ 1547.699668][ T9126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1547.699685][ T9126] RSP: 002b:00007fb1db796028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1547.699746][ T9126] RAX: ffffffffffffffda RBX: 00007fb1dcfd6090 RCX: 00007fb1dcd5c799 [ 1547.699762][ T9126] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 1547.699775][ T9126] RBP: 00007fb1db796090 R08: 0000000000000000 R09: 0000000000000000 [ 1547.699789][ T9126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1547.699801][ T9126] R13: 00007fb1dcfd6128 R14: 00007fb1dcfd6090 R15: 00007ffdf33edcd8 [ 1547.699819][ T9126] [ 1548.052066][ T9144] loop7: detected capacity change from 0 to 256 [ 1548.058799][ T9144] vfat: Unknown parameter '00000000000000000000004' [ 1548.343965][ T9153] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9208'. [ 1548.429576][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9208'. [ 1548.595613][ T9168] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9208'. [ 1548.646530][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9208'. [ 1548.770930][ T9177] netlink: 'syz.3.9212': attribute type 29 has an invalid length. [ 1548.790530][ T9177] netlink: 'syz.3.9212': attribute type 29 has an invalid length. [ 1548.810097][ T9177] netlink: 500 bytes leftover after parsing attributes in process `syz.3.9212'. [ 1548.883084][ T9190] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1549.469634][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9217'. [ 1549.539230][ T9225] siw: device registration error -23 [ 1549.712010][ T28] audit: type=1400 audit(1772464722.268:6906): avc: denied { checkpoint_restore } for pid=9228 comm="syz.3.9220" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1549.842436][ T9234] netlink: 'syz.7.9224': attribute type 29 has an invalid length. [ 1549.845636][ T9235] FAULT_INJECTION: forcing a failure. [ 1549.845636][ T9235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1549.851265][ T9234] netlink: 'syz.7.9224': attribute type 29 has an invalid length. [ 1549.876737][ T9234] netlink: 500 bytes leftover after parsing attributes in process `syz.7.9224'. [ 1549.886198][ T9235] CPU: 0 UID: 0 PID: 9235 Comm: syz.3.9222 Tainted: G W syzkaller #0 PREEMPT(full) [ 1549.886308][ T9235] Tainted: [W]=WARN [ 1549.886314][ T9235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1549.886324][ T9235] Call Trace: [ 1549.886330][ T9235] [ 1549.886337][ T9235] __dump_stack+0x1d/0x30 [ 1549.886359][ T9235] dump_stack_lvl+0x95/0xd0 [ 1549.886380][ T9235] dump_stack+0x15/0x1b [ 1549.886438][ T9235] should_fail_ex+0x263/0x280 [ 1549.886462][ T9235] should_fail+0xb/0x20 [ 1549.886482][ T9235] should_fail_usercopy+0x1a/0x20 [ 1549.886504][ T9235] _copy_from_user+0x1c/0xb0 [ 1549.886637][ T9235] __sys_bind+0x106/0x290 [ 1549.886667][ T9235] __x64_sys_bind+0x3f/0x50 [ 1549.886686][ T9235] x64_sys_call+0x2b30/0x3020 [ 1549.886711][ T9235] do_syscall_64+0x12c/0x370 [ 1549.886733][ T9235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.886850][ T9235] RIP: 0033:0x7f98fa52c799 [ 1549.886867][ T9235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.886884][ T9235] RSP: 002b:00007f98f8f7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1549.886901][ T9235] RAX: ffffffffffffffda RBX: 00007f98fa7a5fa0 RCX: 00007f98fa52c799 [ 1549.886913][ T9235] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1549.887000][ T9235] RBP: 00007f98f8f7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1549.887094][ T9235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1549.887105][ T9235] R13: 00007f98fa7a6038 R14: 00007f98fa7a5fa0 R15: 00007ffc8f853b28 [ 1549.887191][ T9235] [ 1550.118543][ T9241] loop2: detected capacity change from 0 to 1024 [ 1550.147399][ T9243] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9227'. [ 1550.177800][ T9241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1550.213245][ T9243] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9227'. [ 1550.218531][ T9254] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9227'. [ 1550.239635][ T9257] loop7: detected capacity change from 0 to 1024 [ 1550.262932][ T9257] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1550.299706][ T9255] loop3: detected capacity change from 0 to 8192 [ 1550.300188][ T9257] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1550.330417][ T2761] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1550.445602][ T9255] loop3: p1 < > p2 p4 < p5 > [ 1550.461281][ T9255] loop3: partition table partially beyond EOD, truncated [ 1550.646307][ T9255] loop3: p1 start 134217728 is beyond EOD, truncated [ 1550.677981][ T9255] loop3: p2 size 591360 extends beyond EOD, truncated [ 1550.689343][ T28] audit: type=1400 audit(1772464723.053:6907): avc: denied { create } for pid=9256 comm="syz.7.9229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1550.738658][ T9255] loop3: p5 size 591360 extends beyond EOD, truncated [ 1550.790220][ T28] audit: type=1400 audit(1772464723.053:6908): avc: denied { connect } for pid=9256 comm="syz.7.9229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1550.929329][ T28] audit: type=1400 audit(1772464723.053:6909): avc: denied { ioctl } for pid=9256 comm="syz.7.9229" path="socket:[152501]" dev="sockfs" ino=152501 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1550.962455][ T9271] Q6`Ҙ speed is unknown, defaulting to 1000 [ 1550.989007][ T9276] loop2: detected capacity change from 0 to 1024 [ 1550.994812][ T9271] lo speed is unknown, defaulting to 1000 [ 1550.997159][ T28] audit: type=1400 audit(1772464723.053:6910): avc: denied { relabelto } for pid=9256 comm="syz.7.9229" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 1551.048021][ T9276] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1551.074794][ T9276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1551.174397][ T8018] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1551.390859][ T1144] udevd[1144]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 1551.402121][T18957] udevd[18957]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1551.876197][ T9290] FAULT_INJECTION: forcing a failure. [ 1551.876197][ T9290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1551.889483][ T9290] CPU: 1 UID: 0 PID: 9290 Comm: syz.7.9235 Tainted: G W syzkaller #0 PREEMPT(full) [ 1551.889519][ T9290] Tainted: [W]=WARN [ 1551.889532][ T9290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1551.889542][ T9290] Call Trace: [ 1551.889548][ T9290] [ 1551.889554][ T9290] __dump_stack+0x1d/0x30 [ 1551.889576][ T9290] dump_stack_lvl+0x95/0xd0 [ 1551.889599][ T9290] dump_stack+0x15/0x1b [ 1551.889650][ T9290] should_fail_ex+0x263/0x280 [ 1551.889674][ T9290] should_fail+0xb/0x20 [ 1551.889690][ T9290] should_fail_usercopy+0x1a/0x20 [ 1551.889714][ T9290] _copy_from_user+0x1c/0xb0 [ 1551.889797][ T9290] ___sys_sendmsg+0xc1/0x1e0 [ 1551.889823][ T9290] ? path_openat+0x1b01/0x2050 [ 1551.889857][ T9290] __sys_sendmmsg+0x185/0x320 [ 1551.889948][ T9290] __x64_sys_sendmmsg+0x57/0x70 [ 1551.889969][ T9290] x64_sys_call+0x27aa/0x3020 [ 1551.890012][ T9290] do_syscall_64+0x12c/0x370 [ 1551.890030][ T9290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.890048][ T9290] RIP: 0033:0x7faf460bc799 [ 1551.890204][ T9290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1551.890221][ T9290] RSP: 002b:00007faf44acd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1551.890243][ T9290] RAX: ffffffffffffffda RBX: 00007faf46336180 RCX: 00007faf460bc799 [ 1551.890256][ T9290] RDX: 03fffffffffffeed RSI: 0000200000001380 RDI: 0000000000000007 [ 1551.890267][ T9290] RBP: 00007faf44acd090 R08: 0000000000000000 R09: 0000000000000000 [ 1551.890334][ T9290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1551.890350][ T9290] R13: 00007faf46336218 R14: 00007faf46336180 R15: 00007ffc707e8fa8 [ 1551.890366][ T9290] [ 1552.137379][ T2761] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1552.400681][T18839] udevd[18839]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1553.267886][ T9302] netlink: 'syz.8.9240': attribute type 29 has an invalid length. [ 1553.303297][ T9301] siw: device registration error -23 [ 1553.331153][ T9304] netlink: 'syz.8.9240': attribute type 29 has an invalid length. [ 1553.563457][ T9315] netlink: 'syz.8.9243': attribute type 1 has an invalid length. [ 1553.591075][ T9321] FAULT_INJECTION: forcing a failure. [ 1553.591075][ T9321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1553.626983][ T9315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1553.644445][ T9321] CPU: 1 UID: 0 PID: 9321 Comm: syz.7.9246 Tainted: G W syzkaller #0 PREEMPT(full) [ 1553.644526][ T9321] Tainted: [W]=WARN [ 1553.644534][ T9321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1553.644546][ T9321] Call Trace: [ 1553.644554][ T9321] [ 1553.644562][ T9321] __dump_stack+0x1d/0x30 [ 1553.644585][ T9321] dump_stack_lvl+0x95/0xd0 [ 1553.644605][ T9321] dump_stack+0x15/0x1b [ 1553.644655][ T9321] should_fail_ex+0x263/0x280 [ 1553.644676][ T9321] should_fail+0xb/0x20 [ 1553.644696][ T9321] should_fail_usercopy+0x1a/0x20 [ 1553.644720][ T9321] _copy_from_iter+0xcf/0xea0 [ 1553.644823][ T9321] ? alloc_pages_mpol+0x217/0x260 [ 1553.644860][ T9321] copy_page_from_iter+0x178/0x2a0 [ 1553.644943][ T9321] tun_get_user+0xbbd/0x27c0 [ 1553.644965][ T9321] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1553.644986][ T9321] tun_chr_write_iter+0x15e/0x210 [ 1553.645029][ T9321] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1553.645044][ T9321] vfs_write+0x5a6/0x9f0 [ 1553.645074][ T9321] ksys_write+0xdc/0x1a0 [ 1553.645101][ T9321] __x64_sys_write+0x40/0x50 [ 1553.645155][ T9321] x64_sys_call+0x27e1/0x3020 [ 1553.645180][ T9321] do_syscall_64+0x12c/0x370 [ 1553.645223][ T9321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.645289][ T9321] RIP: 0033:0x7faf4607cfce [ 1553.645305][ T9321] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1553.645399][ T9321] RSP: 002b:00007faf44b0efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1553.645419][ T9321] RAX: ffffffffffffffda RBX: 00007faf44b0f6c0 RCX: 00007faf4607cfce [ 1553.645434][ T9321] RDX: 0000000000000022 RSI: 00002000000013c0 RDI: 00000000000000c8 [ 1553.645449][ T9321] RBP: 00007faf44b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1553.645507][ T9321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1553.645520][ T9321] R13: 00007faf46336038 R14: 00007faf46335fa0 R15: 00007ffc707e8fa8 [ 1553.645540][ T9321] [ 1553.871318][ T9315] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1553.884246][ T9324] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1553.889896][ T9326] FAULT_INJECTION: forcing a failure. [ 1553.889896][ T9326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1553.891787][ T9324] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1553.904196][ T9326] CPU: 1 UID: 0 PID: 9326 Comm: syz.7.9247 Tainted: G W syzkaller #0 PREEMPT(full) [ 1553.904281][ T9326] Tainted: [W]=WARN [ 1553.904289][ T9326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1553.904365][ T9326] Call Trace: [ 1553.904372][ T9326] [ 1553.904380][ T9326] __dump_stack+0x1d/0x30 [ 1553.904404][ T9326] dump_stack_lvl+0x95/0xd0 [ 1553.904426][ T9326] dump_stack+0x15/0x1b [ 1553.904476][ T9326] should_fail_ex+0x263/0x280 [ 1553.904499][ T9326] should_fail+0xb/0x20 [ 1553.904578][ T9326] should_fail_usercopy+0x1a/0x20 [ 1553.904601][ T9326] _copy_to_user+0x20/0xa0 [ 1553.904623][ T9326] simple_read_from_buffer+0xb5/0x130 [ 1553.904703][ T9326] proc_fail_nth_read+0x10e/0x150 [ 1553.904730][ T9326] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1553.904756][ T9326] vfs_read+0x1ab/0x7f0 [ 1553.904911][ T9326] ? __rcu_read_unlock+0x4e/0x70 [ 1553.904931][ T9326] ? __fget_files+0x184/0x1c0 [ 1553.904991][ T9326] ? mutex_lock+0x57/0x90 [ 1553.905065][ T9326] ksys_read+0xdc/0x1a0 [ 1553.905093][ T9326] __x64_sys_read+0x40/0x50 [ 1553.905121][ T9326] x64_sys_call+0x2886/0x3020 [ 1553.905148][ T9326] do_syscall_64+0x12c/0x370 [ 1553.905246][ T9326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.905268][ T9326] RIP: 0033:0x7faf4607cfce [ 1553.905283][ T9326] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1553.905300][ T9326] RSP: 002b:00007faf44b0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1553.905354][ T9326] RAX: ffffffffffffffda RBX: 00007faf44b0f6c0 RCX: 00007faf4607cfce [ 1553.905368][ T9326] RDX: 000000000000000f RSI: 00007faf44b0f0a0 RDI: 0000000000000004 [ 1553.905381][ T9326] RBP: 00007faf44b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1553.905395][ T9326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1553.905465][ T9326] R13: 00007faf46336038 R14: 00007faf46335fa0 R15: 00007ffc707e8fa8 [ 1553.905484][ T9326] [ 1554.285530][ T9340] netlink: 'syz.5.9253': attribute type 29 has an invalid length. [ 1554.294268][ T9340] netlink: 'syz.5.9253': attribute type 29 has an invalid length. [ 1554.375967][ T9341] __nla_validate_parse: 7 callbacks suppressed [ 1554.375989][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9252'. [ 1554.451312][ T9341] siw: device registration error -23 [ 1554.616021][ T9348] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9254'. [ 1554.637806][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9254'. [ 1554.675198][ T9345] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9254'. [ 1554.706020][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9254'. [ 1554.853192][ T9356] loop8: detected capacity change from 0 to 512 [ 1554.867965][ T9356] EXT4-fs: Ignoring removed mblk_io_submit option [ 1554.973711][ T9356] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1554.990590][ T9356] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 1555.014996][ T9356] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.9257: attempt to clear invalid blocks 2 len 1 [ 1555.080224][ T9361] loop2: detected capacity change from 0 to 128 [ 1555.113871][ T9356] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1555.118098][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1555.133668][ C0] EXT4-fs (loop8): initial error at time 1772464727: ext4_clear_blocks:876: inode 13 [ 1555.143162][ C0] EXT4-fs (loop8): last error at time 1772464727: ext4_clear_blocks:876: inode 13 [ 1555.207676][ T9356] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1555.246183][ T9356] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.9257: invalid indirect mapped block 1819239214 (level 0) [ 1555.316696][ T9356] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1555.324100][ T9356] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.9257: invalid indirect mapped block 1819239214 (level 1) [ 1555.424517][ T9354] loop5: detected capacity change from 0 to 512 [ 1555.520027][ T9356] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1555.527511][ T9356] EXT4-fs (loop8): 1 truncate cleaned up [ 1555.580307][ T9354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1555.603952][ T9356] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1555.621266][ T9354] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1556.024110][ T6102] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1556.139938][ T7661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1556.543686][ T9369] FAULT_INJECTION: forcing a failure. [ 1556.543686][ T9369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1556.573385][ T9369] CPU: 0 UID: 0 PID: 9369 Comm: syz.2.9261 Tainted: G W syzkaller #0 PREEMPT(full) [ 1556.573470][ T9369] Tainted: [W]=WARN [ 1556.573476][ T9369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1556.573488][ T9369] Call Trace: [ 1556.573555][ T9369] [ 1556.573564][ T9369] __dump_stack+0x1d/0x30 [ 1556.573590][ T9369] dump_stack_lvl+0x95/0xd0 [ 1556.573613][ T9369] dump_stack+0x15/0x1b [ 1556.573637][ T9369] should_fail_ex+0x263/0x280 [ 1556.573657][ T9369] should_fail+0xb/0x20 [ 1556.573828][ T9369] should_fail_usercopy+0x1a/0x20 [ 1556.573901][ T9369] _copy_to_user+0x20/0xa0 [ 1556.573922][ T9369] simple_read_from_buffer+0xb5/0x130 [ 1556.573944][ T9369] proc_fail_nth_read+0x10e/0x150 [ 1556.573971][ T9369] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1556.574105][ T9369] vfs_read+0x1ab/0x7f0 [ 1556.574183][ T9369] ? __rcu_read_unlock+0x4e/0x70 [ 1556.574202][ T9369] ? __fget_files+0x184/0x1c0 [ 1556.574225][ T9369] ? __sys_bind+0x222/0x290 [ 1556.574260][ T9369] ? mutex_lock+0x57/0x90 [ 1556.574356][ T9369] ksys_read+0xdc/0x1a0 [ 1556.574440][ T9369] __x64_sys_read+0x40/0x50 [ 1556.574498][ T9369] x64_sys_call+0x2886/0x3020 [ 1556.574528][ T9369] do_syscall_64+0x12c/0x370 [ 1556.574608][ T9369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.574630][ T9369] RIP: 0033:0x7f92ef25cfce [ 1556.574643][ T9369] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1556.574658][ T9369] RSP: 002b:00007f92edcf6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1556.574675][ T9369] RAX: ffffffffffffffda RBX: 00007f92edcf76c0 RCX: 00007f92ef25cfce [ 1556.574720][ T9369] RDX: 000000000000000f RSI: 00007f92edcf70a0 RDI: 0000000000000003 [ 1556.574732][ T9369] RBP: 00007f92edcf7090 R08: 0000000000000000 R09: 0000000000000000 [ 1556.574743][ T9369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1556.574754][ T9369] R13: 00007f92ef516038 R14: 00007f92ef515fa0 R15: 00007ffdd6687758 [ 1556.574772][ T9369] [ 1556.879028][ T9385] loop3: detected capacity change from 0 to 1024 [ 1556.903491][ T9385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1556.942860][ T9374] loop5: detected capacity change from 0 to 512 [ 1556.958385][ T9374] EXT4-fs: Ignoring removed mblk_io_submit option [ 1556.982249][ T28] audit: type=1400 audit(1772464729.049:6911): avc: denied { create } for pid=9377 comm="syz.2.9264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1557.002383][ T28] audit: type=1400 audit(1772464729.087:6912): avc: denied { ioctl } for pid=9377 comm="syz.2.9264" path="socket:[152727]" dev="sockfs" ino=152727 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1557.041611][ T9374] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1557.045912][ T9394] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9267'. [ 1557.048832][ T9374] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 1557.066163][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9267'. [ 1557.089634][ T9374] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.9259: attempt to clear invalid blocks 2 len 1 [ 1557.103411][ T9374] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1557.105349][ T9374] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, [ 1557.114830][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1557.114971][ C0] EXT4-fs (loop5): initial error at time 1772464729: ext4_clear_blocks:876: inode 13 [ 1557.115193][ C0] EXT4-fs (loop5): last error at time 1772464729: ext4_clear_blocks:876: inode 13 [ 1557.151094][ T9374] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1557.164652][ T9374] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.9259: invalid indirect mapped block 1819239214 (level 0) [ 1557.181247][ T9394] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9267'. [ 1557.192124][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9267'. [ 1557.215944][ T1694] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1557.226759][ T9374] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1557.246084][ T9374] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.9259: invalid indirect mapped block 1819239214 (level 1) [ 1557.264150][ T9406] random: crng reseeded on system resumption [ 1557.275919][ T28] audit: type=1400 audit(1772464729.321:6913): avc: denied { write } for pid=9405 comm="syz.3.9270" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1557.310314][ T9374] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1557.314805][ T9374] EXT4-fs (loop5): 1 truncate cleaned up [ 1557.338571][ T9407] loop7: detected capacity change from 0 to 128 [ 1557.389079][ T28] audit: type=1400 audit(1772464729.442:6914): avc: denied { ioctl } for pid=9405 comm="syz.3.9270" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1557.420650][ T9374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1557.682337][ T9409] FAULT_INJECTION: forcing a failure. [ 1557.682337][ T9409] name failslab, interval 1, probability 0, space 0, times 0 [ 1557.800520][ T9409] CPU: 0 UID: 0 PID: 9409 Comm: syz.8.9271 Tainted: G W syzkaller #0 PREEMPT(full) [ 1557.800548][ T9409] Tainted: [W]=WARN [ 1557.800554][ T9409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1557.800566][ T9409] Call Trace: [ 1557.800573][ T9409] [ 1557.800581][ T9409] __dump_stack+0x1d/0x30 [ 1557.800652][ T9409] dump_stack_lvl+0x95/0xd0 [ 1557.800670][ T9409] dump_stack+0x15/0x1b [ 1557.800688][ T9409] should_fail_ex+0x263/0x280 [ 1557.800733][ T9409] should_failslab+0x8c/0xb0 [ 1557.800756][ T9409] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1557.800777][ T9409] ? __alloc_skb+0x2d6/0x690 [ 1557.800797][ T9409] __alloc_skb+0x2d6/0x690 [ 1557.800829][ T9409] tcp_stream_alloc_skb+0x30/0x320 [ 1557.800853][ T9409] tcp_sendmsg_locked+0xd21/0x2de0 [ 1557.800875][ T9409] ? __rcu_read_unlock+0x33/0x70 [ 1557.800897][ T9409] ? perf_output_begin_forward+0x58a/0x610 [ 1557.800922][ T9409] ? __rcu_read_unlock+0x4e/0x70 [ 1557.801063][ T9409] ? avc_has_perm_noaudit+0xab/0x130 [ 1557.801096][ T9409] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1557.801117][ T9409] tcp_sendmsg+0x2f/0x50 [ 1557.801136][ T9409] inet_sendmsg+0x76/0xd0 [ 1557.801233][ T9409] ____sys_sendmsg+0x53a/0x600 [ 1557.801320][ T9409] ___sys_sendmsg+0x195/0x1e0 [ 1557.801358][ T9409] __x64_sys_sendmsg+0xd4/0x160 [ 1557.801406][ T9409] x64_sys_call+0x194c/0x3020 [ 1557.801428][ T9409] do_syscall_64+0x12c/0x370 [ 1557.801449][ T9409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.801508][ T9409] RIP: 0033:0x7fb1dcd5c799 [ 1557.801522][ T9409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1557.801536][ T9409] RSP: 002b:00007fb1db7b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1557.801585][ T9409] RAX: ffffffffffffffda RBX: 00007fb1dcfd5fa0 RCX: 00007fb1dcd5c799 [ 1557.801597][ T9409] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000009 [ 1557.801609][ T9409] RBP: 00007fb1db7b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1557.801620][ T9409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1557.801631][ T9409] R13: 00007fb1dcfd6038 R14: 00007fb1dcfd5fa0 R15: 00007ffdf33edcd8 [ 1557.801716][ T9409] [ 1559.074379][ T6102] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1559.325874][ T9422] FAULT_INJECTION: forcing a failure. [ 1559.325874][ T9422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1559.368641][ T9422] CPU: 0 UID: 0 PID: 9422 Comm: syz.8.9275 Tainted: G W syzkaller #0 PREEMPT(full) [ 1559.368674][ T9422] Tainted: [W]=WARN [ 1559.368681][ T9422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1559.368691][ T9422] Call Trace: [ 1559.368697][ T9422] [ 1559.368705][ T9422] __dump_stack+0x1d/0x30 [ 1559.368744][ T9422] dump_stack_lvl+0x95/0xd0 [ 1559.368765][ T9422] dump_stack+0x15/0x1b [ 1559.368782][ T9422] should_fail_ex+0x263/0x280 [ 1559.368801][ T9422] should_fail+0xb/0x20 [ 1559.368887][ T9422] should_fail_usercopy+0x1a/0x20 [ 1559.368916][ T9422] _copy_from_iter+0xcf/0xea0 [ 1559.368989][ T9422] ? alloc_pages_mpol+0x217/0x260 [ 1559.369016][ T9422] ? __sk_mem_raise_allocated+0x578/0x9a0 [ 1559.369044][ T9422] ? __sk_mem_schedule+0x80/0xc0 [ 1559.369161][ T9422] mptcp_sendmsg+0x8cf/0xf40 [ 1559.369191][ T9422] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1559.369343][ T9422] inet6_sendmsg+0xc5/0xd0 [ 1559.369368][ T9422] sock_write_iter+0x23f/0x360 [ 1559.369401][ T9422] ? __pfx_sock_write_iter+0x10/0x10 [ 1559.369427][ T9422] vfs_write+0x5a6/0x9f0 [ 1559.369578][ T9422] ksys_write+0xdc/0x1a0 [ 1559.369603][ T9422] __x64_sys_write+0x40/0x50 [ 1559.369618][ T9422] x64_sys_call+0x27e1/0x3020 [ 1559.369639][ T9422] do_syscall_64+0x12c/0x370 [ 1559.369694][ T9422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.369714][ T9422] RIP: 0033:0x7fb1dcd5c799 [ 1559.369730][ T9422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1559.369760][ T9422] RSP: 002b:00007fb1db7b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1559.369781][ T9422] RAX: ffffffffffffffda RBX: 00007fb1dcfd5fa0 RCX: 00007fb1dcd5c799 [ 1559.369796][ T9422] RDX: 000000011ffffce1 RSI: 0000200000000080 RDI: 0000000000000003 [ 1559.369808][ T9422] RBP: 00007fb1db7b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1559.369819][ T9422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1559.369882][ T9422] R13: 00007fb1dcfd6038 R14: 00007fb1dcfd5fa0 R15: 00007ffdf33edcd8 [ 1559.369902][ T9422] [ 1559.889979][ T9434] loop5: detected capacity change from 0 to 512 [ 1559.958892][ T9436] loop8: detected capacity change from 0 to 512 [ 1560.015392][ T9434] EXT4-fs (loop5): 1 truncate cleaned up [ 1560.027318][ T9436] loop8: detected capacity change from 0 to 2048 [ 1560.034179][ T9434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1560.084274][ T9436] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1560.244406][ T6102] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1560.303889][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9273'. [ 1560.339783][ T9448] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1560.373427][ T9447] siw: device registration error -23 [ 1560.513849][ T9451] loop3: detected capacity change from 0 to 1024 [ 1560.531832][ T9453] loop5: detected capacity change from 0 to 512 [ 1560.582787][ T9451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1560.595532][ T9453] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1560.710449][ T9448] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 294 with error 28 [ 1560.732927][ T9448] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1560.732927][ T9448] [ 1560.743304][ T9448] EXT4-fs (loop8): Total free blocks count 0 [ 1560.749592][ T9448] EXT4-fs (loop8): Free/Dirty block details [ 1560.756090][ T9448] EXT4-fs (loop8): free_blocks=2415919504 [ 1560.760055][ T9453] EXT4-fs error (device loop5): ext4_quota_enable:7188: comm syz.5.9282: Bad quota inum: 2, type: 1 [ 1560.761854][ T9448] EXT4-fs (loop8): dirty_blocks=1184 [ 1560.761868][ T9448] EXT4-fs (loop8): Block reservation details [ 1560.761902][ T9448] EXT4-fs (loop8): i_reserved_data_blocks=74 [ 1560.791163][ T28] audit: type=1400 audit(1772464732.585:6915): avc: denied { getopt } for pid=9452 comm="syz.5.9282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1560.795595][ T1694] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1560.811618][ T9453] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 1560.890083][ T9459] msdos: Unknown parameter '' [ 1560.891790][ T28] audit: type=1400 audit(1772464732.716:6916): avc: denied { mounton } for pid=9452 comm="syz.5.9282" path="/147/file0/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1560.959638][ T9464] loop3: detected capacity change from 0 to 512 [ 1560.980593][ T9464] EXT4-fs: Ignoring removed mblk_io_submit option [ 1561.006226][ T9464] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1561.019416][ T9464] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1561.031507][ T9464] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.9285: attempt to clear invalid blocks 2 len 1 [ 1561.046482][ T6102] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1561.051404][ T9464] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1561.063397][ T9464] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, [ 1561.072775][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1561.072794][ C1] EXT4-fs (loop3): initial error at time 1772464732: ext4_clear_blocks:876: inode 13 [ 1561.072826][ C1] EXT4-fs (loop3): last error at time 1772464732: ext4_clear_blocks:876: inode 13 [ 1561.107752][ T9464] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1561.152328][ T9464] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.9285: invalid indirect mapped block 1819239214 (level 0) [ 1561.216095][ T9475] loop5: detected capacity change from 0 to 736 [ 1561.233203][ T9464] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1561.237981][ T9464] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.9285: invalid indirect mapped block 1819239214 (level 1) [ 1561.278992][ T9464] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1561.287778][ T9464] EXT4-fs (loop3): 1 truncate cleaned up [ 1561.287796][ T9436] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1561.340035][ T9464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1561.515722][ T9482] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1561.583559][ T8018] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1561.665350][ T9490] FAULT_INJECTION: forcing a failure. [ 1561.665350][ T9490] name failslab, interval 1, probability 0, space 0, times 0 [ 1561.696978][ T9490] CPU: 0 UID: 0 PID: 9490 Comm: syz.7.9294 Tainted: G W syzkaller #0 PREEMPT(full) [ 1561.697006][ T9490] Tainted: [W]=WARN [ 1561.697014][ T9490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1561.697027][ T9490] Call Trace: [ 1561.697034][ T9490] [ 1561.697040][ T9490] __dump_stack+0x1d/0x30 [ 1561.697088][ T9490] dump_stack_lvl+0x95/0xd0 [ 1561.697111][ T9490] dump_stack+0x15/0x1b [ 1561.697132][ T9490] should_fail_ex+0x263/0x280 [ 1561.697226][ T9490] should_failslab+0x8c/0xb0 [ 1561.697247][ T9490] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1561.697271][ T9490] ? __alloc_skb+0x2d6/0x690 [ 1561.697293][ T9490] __alloc_skb+0x2d6/0x690 [ 1561.697310][ T9490] ? __alloc_skb+0x200/0x690 [ 1561.697382][ T9490] netlink_alloc_large_skb+0xbf/0xf0 [ 1561.697403][ T9490] netlink_sendmsg+0x40c/0x6f0 [ 1561.697426][ T9490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1561.697449][ T9490] ____sys_sendmsg+0x5af/0x600 [ 1561.697527][ T9490] ___sys_sendmsg+0x195/0x1e0 [ 1561.697560][ T9490] __x64_sys_sendmsg+0xd4/0x160 [ 1561.697590][ T9490] x64_sys_call+0x194c/0x3020 [ 1561.697666][ T9490] do_syscall_64+0x12c/0x370 [ 1561.697689][ T9490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.697711][ T9490] RIP: 0033:0x7faf460bc799 [ 1561.697728][ T9490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1561.697743][ T9490] RSP: 002b:00007faf44b0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1561.697841][ T9490] RAX: ffffffffffffffda RBX: 00007faf46335fa0 RCX: 00007faf460bc799 [ 1561.697853][ T9490] RDX: 0000000020000000 RSI: 0000200000000540 RDI: 0000000000000006 [ 1561.697911][ T9490] RBP: 00007faf44b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1561.697924][ T9490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1561.697936][ T9490] R13: 00007faf46336038 R14: 00007faf46335fa0 R15: 00007ffc707e8fa8 [ 1561.697956][ T9490] [ 1562.032523][ T9495] syzkaller0: entered promiscuous mode [ 1562.038130][ T9495] syzkaller0: entered allmulticast mode [ 1562.111716][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9295'. [ 1562.180692][ T9500] siw: device registration error -23 [ 1562.296974][ T9503] syzkaller0: entered promiscuous mode [ 1562.310279][ T9503] syzkaller0: entered allmulticast mode [ 1562.320897][ T1694] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1562.402782][ T9506] set_capacity_and_notify: 1 callbacks suppressed [ 1562.402822][ T9506] loop5: detected capacity change from 0 to 512 [ 1562.466248][ T9506] loop5: detected capacity change from 0 to 2048 [ 1562.500628][ T9506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1562.553548][ T9512] loop8: detected capacity change from 0 to 512 [ 1562.572175][ T9516] syzkaller0: entered promiscuous mode [ 1562.579965][ T9516] syzkaller0: entered allmulticast mode [ 1562.582742][ T9518] FAULT_INJECTION: forcing a failure. [ 1562.582742][ T9518] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.599975][ T9516] FAULT_INJECTION: forcing a failure. [ 1562.599975][ T9516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1562.600913][ T9518] CPU: 1 UID: 0 PID: 9518 Comm: syz.7.9304 Tainted: G W syzkaller #0 PREEMPT(full) [ 1562.600941][ T9518] Tainted: [W]=WARN [ 1562.600947][ T9518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1562.600959][ T9518] Call Trace: [ 1562.600965][ T9518] [ 1562.600972][ T9518] __dump_stack+0x1d/0x30 [ 1562.601028][ T9518] dump_stack_lvl+0x95/0xd0 [ 1562.601052][ T9518] dump_stack+0x15/0x1b [ 1562.601087][ T9518] should_fail_ex+0x263/0x280 [ 1562.601108][ T9518] should_failslab+0x8c/0xb0 [ 1562.601125][ T9518] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1562.601145][ T9518] ? __alloc_skb+0x2d6/0x690 [ 1562.601227][ T9518] __alloc_skb+0x2d6/0x690 [ 1562.601252][ T9518] ? __alloc_skb+0x200/0x690 [ 1562.601274][ T9518] netlink_alloc_large_skb+0xbf/0xf0 [ 1562.601294][ T9518] netlink_sendmsg+0x40c/0x6f0 [ 1562.601346][ T9518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1562.601502][ T9518] ____sys_sendmsg+0x5af/0x600 [ 1562.601528][ T9518] ___sys_sendmsg+0x195/0x1e0 [ 1562.601618][ T9518] __x64_sys_sendmsg+0xd4/0x160 [ 1562.601653][ T9518] x64_sys_call+0x194c/0x3020 [ 1562.601695][ T9518] do_syscall_64+0x12c/0x370 [ 1562.601717][ T9518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.601782][ T9518] RIP: 0033:0x7faf460bc799 [ 1562.601796][ T9518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1562.601819][ T9518] RSP: 002b:00007faf44b0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1562.601844][ T9518] RAX: ffffffffffffffda RBX: 00007faf46335fa0 RCX: 00007faf460bc799 [ 1562.601859][ T9518] RDX: 0000000004004000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1562.601932][ T9518] RBP: 00007faf44b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1562.601944][ T9518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1562.601958][ T9518] R13: 00007faf46336038 R14: 00007faf46335fa0 R15: 00007ffc707e8fa8 [ 1562.601978][ T9518] [ 1562.815437][ T9516] CPU: 1 UID: 0 PID: 9516 Comm: syz.3.9303 Tainted: G W syzkaller #0 PREEMPT(full) [ 1562.815542][ T9516] Tainted: [W]=WARN [ 1562.815549][ T9516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1562.815561][ T9516] Call Trace: [ 1562.815567][ T9516] [ 1562.815574][ T9516] __dump_stack+0x1d/0x30 [ 1562.815669][ T9516] dump_stack_lvl+0x95/0xd0 [ 1562.815692][ T9516] dump_stack+0x15/0x1b [ 1562.815713][ T9516] should_fail_ex+0x263/0x280 [ 1562.815749][ T9516] should_fail+0xb/0x20 [ 1562.815765][ T9516] should_fail_usercopy+0x1a/0x20 [ 1562.815822][ T9516] _copy_from_user+0x1c/0xb0 [ 1562.815843][ T9516] __copy_msghdr+0x244/0x300 [ 1562.815866][ T9516] ___sys_sendmsg+0x10c/0x1e0 [ 1562.815975][ T9516] __x64_sys_sendmsg+0xd4/0x160 [ 1562.816004][ T9516] x64_sys_call+0x194c/0x3020 [ 1562.816029][ T9516] do_syscall_64+0x12c/0x370 [ 1562.816129][ T9516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.816151][ T9516] RIP: 0033:0x7f98fa52c799 [ 1562.816181][ T9516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1562.816196][ T9516] RSP: 002b:00007f98f8f7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1562.816213][ T9516] RAX: ffffffffffffffda RBX: 00007f98fa7a5fa0 RCX: 00007f98fa52c799 [ 1562.816226][ T9516] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1562.816241][ T9516] RBP: 00007f98f8f7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1562.816254][ T9516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1562.816268][ T9516] R13: 00007f98fa7a6038 R14: 00007f98fa7a5fa0 R15: 00007ffc8f853b28 [ 1562.816288][ T9516] [ 1562.852994][ T9521] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, [ 1562.969381][ T9528] loop2: detected capacity change from 0 to 512 [ 1562.974139][ T9521] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1562.974329][ T9521] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 256 with error 28 [ 1563.029071][ T9528] EXT4-fs: Ignoring removed mblk_io_submit option [ 1563.038763][ T9528] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1563.045241][ T9528] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1563.053715][ T9528] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.9306: attempt to clear invalid blocks 2 len 1 [ 1563.066672][ T9528] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1563.067018][ T9528] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, [ 1563.076164][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1563.076179][ C0] EXT4-fs (loop2): initial error at time 1772464734: ext4_clear_blocks:876: inode 13 [ 1563.076205][ C0] EXT4-fs (loop2): last error at time 1772464734: ext4_clear_blocks:876: inode 13 [ 1563.109528][ T9528] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1563.169603][ T9532] syzkaller0: entered promiscuous mode [ 1563.175136][ T9532] syzkaller0: entered allmulticast mode [ 1563.186230][ T9521] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1563.186230][ T9521] [ 1563.196073][ T9521] EXT4-fs (loop5): Total free blocks count 0 [ 1563.202500][ T9521] EXT4-fs (loop5): Free/Dirty block details [ 1563.208444][ T9521] EXT4-fs (loop5): free_blocks=2415919504 [ 1563.218057][ T9528] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.9306: invalid indirect mapped block 1819239214 (level 0) [ 1563.234317][ T9528] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1563.234462][ T9521] EXT4-fs (loop5): dirty_blocks=1104 [ 1563.251311][ T9528] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.9306: invalid indirect mapped block 1819239214 (level 1) [ 1563.335408][ T9521] EXT4-fs (loop5): Block reservation details [ 1563.354002][ T9528] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1563.354548][ T9528] EXT4-fs (loop2): 1 truncate cleaned up [ 1563.377135][ T9528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1563.378663][ T9521] EXT4-fs (loop5): i_reserved_data_blocks=264 [ 1563.492025][ T9538] loop7: detected capacity change from 0 to 256 [ 1563.498865][ T9538] vfat: Unknown parameter '00000000000000000000004' [ 1563.959833][ T9545] loop3: detected capacity change from 0 to 2048 [ 1564.071931][T18839] GPT:first_usable_lbas don't match. [ 1564.121587][T18839] GPT:34 != 290 [ 1564.179776][ T28] audit: type=1400 audit(1772464735.784:6917): avc: denied { write } for pid=9544 comm="syz.3.9312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1564.215869][T18839] GPT: Use GNU Parted to correct GPT errors. [ 1564.227375][ T9506] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1564.250779][T18839] loop3: p1 p2 p3 [ 1564.397149][ T9545] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) [ 1564.437288][ T9552] FAULT_INJECTION: forcing a failure. [ 1564.437288][ T9552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1564.464458][ T2999] GPT:first_usable_lbas don't match. [ 1564.469769][ T2999] GPT:34 != 290 [ 1564.485369][ T2999] GPT: Use GNU Parted to correct GPT errors. [ 1564.494780][ T9552] CPU: 1 UID: 0 PID: 9552 Comm: syz.8.9310 Tainted: G W syzkaller #0 PREEMPT(full) [ 1564.494851][ T9552] Tainted: [W]=WARN [ 1564.494858][ T9552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1564.494870][ T9552] Call Trace: [ 1564.494876][ T9552] [ 1564.494957][ T9552] __dump_stack+0x1d/0x30 [ 1564.494980][ T9552] dump_stack_lvl+0x95/0xd0 [ 1564.495028][ T9552] dump_stack+0x15/0x1b [ 1564.495117][ T9552] should_fail_ex+0x263/0x280 [ 1564.495139][ T9552] should_fail+0xb/0x20 [ 1564.495194][ T9552] should_fail_usercopy+0x1a/0x20 [ 1564.495214][ T9552] _copy_to_user+0x20/0xa0 [ 1564.495305][ T9552] simple_read_from_buffer+0xb5/0x130 [ 1564.495406][ T9552] proc_fail_nth_read+0x10e/0x150 [ 1564.495434][ T9552] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1564.495460][ T9552] vfs_read+0x1ab/0x7f0 [ 1564.495519][ T9552] ? __rcu_read_unlock+0x4e/0x70 [ 1564.495536][ T9552] ? __fget_files+0x184/0x1c0 [ 1564.495555][ T9552] ? mutex_lock+0x57/0x90 [ 1564.495649][ T9552] ksys_read+0xdc/0x1a0 [ 1564.495679][ T9552] __x64_sys_read+0x40/0x50 [ 1564.495745][ T9552] x64_sys_call+0x2886/0x3020 [ 1564.495792][ T9552] do_syscall_64+0x12c/0x370 [ 1564.495810][ T9552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.495828][ T9552] RIP: 0033:0x7fb1dcd1cfce [ 1564.495841][ T9552] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1564.495858][ T9552] RSP: 002b:00007fb1db7b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1564.495915][ T9552] RAX: ffffffffffffffda RBX: 00007fb1db7b76c0 RCX: 00007fb1dcd1cfce [ 1564.495930][ T9552] RDX: 000000000000000f RSI: 00007fb1db7b70a0 RDI: 0000000000000004 [ 1564.495941][ T9552] RBP: 00007fb1db7b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1564.495953][ T9552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1564.495966][ T9552] R13: 00007fb1dcfd6038 R14: 00007fb1dcfd5fa0 R15: 00007ffdf33edcd8 [ 1564.496005][ T9552] [ 1564.699188][ T2999] loop3: p1 p2 p3 [ 1564.717889][ T9554] loop8: detected capacity change from 0 to 512 [ 1564.738809][ T9554] FAT-fs (loop8): error, clusters badly computed (1 != 0) [ 1565.108575][ T2761] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1565.471717][ T9574] FAULT_INJECTION: forcing a failure. [ 1565.471717][ T9574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1565.499456][ T9574] CPU: 1 UID: 0 PID: 9574 Comm: syz.7.9320 Tainted: G W syzkaller #0 PREEMPT(full) [ 1565.499567][ T9574] Tainted: [W]=WARN [ 1565.499575][ T9574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1565.499588][ T9574] Call Trace: [ 1565.499595][ T9574] [ 1565.499602][ T9574] __dump_stack+0x1d/0x30 [ 1565.499624][ T9574] dump_stack_lvl+0x95/0xd0 [ 1565.499659][ T9574] dump_stack+0x15/0x1b [ 1565.499680][ T9574] should_fail_ex+0x263/0x280 [ 1565.499704][ T9574] should_fail+0xb/0x20 [ 1565.499734][ T9574] should_fail_usercopy+0x1a/0x20 [ 1565.499755][ T9574] _copy_from_user+0x1c/0xb0 [ 1565.499777][ T9574] __copy_msghdr+0x244/0x300 [ 1565.499862][ T9574] ___sys_sendmsg+0x10c/0x1e0 [ 1565.499922][ T9574] ? path_openat+0x1b01/0x2050 [ 1565.499980][ T9574] __sys_sendmmsg+0x185/0x320 [ 1565.500051][ T9574] __x64_sys_sendmmsg+0x57/0x70 [ 1565.500159][ T9574] x64_sys_call+0x27aa/0x3020 [ 1565.500181][ T9574] do_syscall_64+0x12c/0x370 [ 1565.500218][ T9574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.500238][ T9574] RIP: 0033:0x7faf460bc799 [ 1565.500253][ T9574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1565.500278][ T9574] RSP: 002b:00007faf44b0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1565.500399][ T9574] RAX: ffffffffffffffda RBX: 00007faf46335fa0 RCX: 00007faf460bc799 [ 1565.500412][ T9574] RDX: 0000000000000001 RSI: 0000200000004580 RDI: 0000000000000003 [ 1565.500423][ T9574] RBP: 00007faf44b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1565.500435][ T9574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1565.500445][ T9574] R13: 00007faf46336038 R14: 00007faf46335fa0 R15: 00007ffc707e8fa8 [ 1565.500471][ T9574] [ 1565.771433][ T9576] netlink: 52 bytes leftover after parsing attributes in process `syz.7.9321'. [ 1565.808892][ T9576] netlink: 56 bytes leftover after parsing attributes in process `syz.7.9321'. [ 1565.836648][ T9576] netlink: 'syz.7.9321': attribute type 1 has an invalid length. [ 1565.850761][ T9576] netlink: 116 bytes leftover after parsing attributes in process `syz.7.9321'. [ 1565.861834][ T9576] ieee802154 phy0 wpan0: encryption failed: -22 [ 1565.872793][ T28] audit: type=1400 audit(1772464737.374:6918): avc: denied { setopt } for pid=9575 comm="syz.7.9321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1565.897068][ T9576] loop7: detected capacity change from 0 to 512 [ 1565.904324][ T9580] tmpfs: Unknown parameter 'mp' [ 1565.905480][ T9576] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1565.917524][ T9580] loop3: detected capacity change from 0 to 512 [ 1565.926517][ T28] audit: type=1400 audit(1772464737.430:6919): avc: denied { setopt } for pid=9581 comm="syz.2.9324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1565.953292][ T9576] EXT4-fs (loop7): 1 truncate cleaned up [ 1565.963879][ T9576] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1565.992738][ T9580] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1566.015549][ T9580] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 1566.050095][ T9580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1566.183040][ T9580] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.9323: Unimplemented hash flags: 0x0001 [ 1566.194606][ T9580] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.9323: Corrupt directory, running e2fsck is recommended [ 1566.207848][ T9580] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.9323: path /345/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 1566.262343][ T9589] loop5: detected capacity change from 0 to 512 [ 1566.303535][ T9592] x_tables: duplicate underflow at hook 3 [ 1566.327266][ T9589] EXT4-fs: Ignoring removed mblk_io_submit option [ 1566.343524][ T9592] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9323'. [ 1566.385188][ T8018] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1566.454213][ T9589] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1566.500225][ T9589] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 1566.559308][ T9589] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.9325: attempt to clear invalid blocks 2 len 1 [ 1566.590109][ T9589] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1566.624013][ T9589] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, [ 1566.633731][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1566.633890][ C0] EXT4-fs (loop5): initial error at time 1772464738: ext4_clear_blocks:876: inode 13 [ 1566.634115][ C0] EXT4-fs (loop5): last error at time 1772464738: ext4_clear_blocks:876: inode 13 [ 1566.672122][ T9589] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1566.724746][ T9589] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.9325: invalid indirect mapped block 1819239214 (level 0) [ 1566.740374][ T9589] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1566.741907][ T9589] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.9325: invalid indirect mapped block 1819239214 (level 1) [ 1566.766393][ T9589] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1566.767733][ T1694] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1566.821959][ T9589] EXT4-fs (loop5): 1 truncate cleaned up [ 1566.848848][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9330'. [ 1566.888647][ T9589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1566.906253][ T9615] netlink: 'syz.3.9332': attribute type 29 has an invalid length. [ 1566.919122][ T9614] siw: device registration error -23 [ 1566.928129][ T9615] netlink: 'syz.3.9332': attribute type 29 has an invalid length. [ 1566.938098][ T9615] netlink: 500 bytes leftover after parsing attributes in process `syz.3.9332'. [ 1567.273793][ T9621] FAULT_INJECTION: forcing a failure. [ 1567.273793][ T9621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1567.305622][ T9621] CPU: 1 UID: 0 PID: 9621 Comm: syz.2.9334 Tainted: G W syzkaller #0 PREEMPT(full) [ 1567.305651][ T9621] Tainted: [W]=WARN [ 1567.305658][ T9621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1567.305751][ T9621] Call Trace: [ 1567.305758][ T9621] [ 1567.305766][ T9621] __dump_stack+0x1d/0x30 [ 1567.305790][ T9621] dump_stack_lvl+0x95/0xd0 [ 1567.305839][ T9621] dump_stack+0x15/0x1b [ 1567.305886][ T9621] should_fail_ex+0x263/0x280 [ 1567.305909][ T9621] should_fail+0xb/0x20 [ 1567.305926][ T9621] should_fail_usercopy+0x1a/0x20 [ 1567.305949][ T9621] _copy_from_user+0x1c/0xb0 [ 1567.306046][ T9621] core_sys_select+0x1e6/0x730 [ 1567.306082][ T9621] ? set_user_sigmask+0x116/0x140 [ 1567.306151][ T9621] __se_sys_pselect6+0x23c/0x2a0 [ 1567.306177][ T9621] __x64_sys_pselect6+0x78/0x90 [ 1567.306259][ T9621] x64_sys_call+0x8d5/0x3020 [ 1567.306281][ T9621] do_syscall_64+0x12c/0x370 [ 1567.306302][ T9621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.306419][ T9621] RIP: 0033:0x7f92ef29c799 [ 1567.306436][ T9621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1567.306464][ T9621] RSP: 002b:00007f92edcf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1567.306481][ T9621] RAX: ffffffffffffffda RBX: 00007f92ef515fa0 RCX: 00007f92ef29c799 [ 1567.306522][ T9621] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000040 [ 1567.306536][ T9621] RBP: 00007f92edcf7090 R08: 0000000000000000 R09: 0000200000000180 [ 1567.306559][ T9621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1567.306573][ T9621] R13: 00007f92ef516038 R14: 00007f92ef515fa0 R15: 00007ffdd6687758 [ 1567.306591][ T9621] [ 1567.519869][ T6102] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1567.608891][ T9625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9336'. [ 1567.660080][ T9625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9336'. [ 1567.680883][ T9643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1567.735738][ T9650] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1567.751198][ T2761] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1567.955379][ T8018] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1567.983970][ T9658] set_capacity_and_notify: 2 callbacks suppressed [ 1567.984062][ T9658] loop5: detected capacity change from 0 to 512 [ 1567.991663][ T9679] loop3: detected capacity change from 0 to 1024 [ 1568.030933][ T9658] EXT4-fs: Ignoring removed mblk_io_submit option [ 1568.060127][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9349'. [ 1568.130299][ T9680] siw: device registration error -23 [ 1568.189737][ T9658] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1568.198252][ T9679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1568.233218][ T9658] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 1568.297617][ T9658] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.9348: attempt to clear invalid blocks 2 len 1 [ 1568.320626][ T9658] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1568.323121][ T9658] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, [ 1568.333715][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1568.333952][ C1] EXT4-fs (loop5): initial error at time 1772464739: ext4_clear_blocks:876: inode 13 [ 1568.334239][ C1] EXT4-fs (loop5): last error at time 1772464739: ext4_clear_blocks:876: inode 13 [ 1568.371028][ T9658] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1568.389803][ T9658] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.9348: invalid indirect mapped block 1819239214 (level 0) [ 1568.406703][ T9658] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1568.428033][ T9658] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.9348: invalid indirect mapped block 1819239214 (level 1) [ 1568.454682][ T9658] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1568.468171][ T9692] loop7: detected capacity change from 0 to 512 [ 1568.517896][ T9692] loop7: detected capacity change from 0 to 2048 [ 1568.544532][ T9658] EXT4-fs (loop5): 1 truncate cleaned up [ 1568.560737][ T1694] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1568.581135][ T9658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1568.586516][ T9692] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1569.147099][ T9705] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1569.211854][ T9705] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 210 with error 28 [ 1569.248541][ T9705] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1569.248541][ T9705] [ 1569.260703][ T9705] EXT4-fs (loop7): Total free blocks count 0 [ 1569.268152][ T9705] EXT4-fs (loop7): Free/Dirty block details [ 1569.274221][ T9705] EXT4-fs (loop7): free_blocks=2415919504 [ 1569.279963][ T9705] EXT4-fs (loop7): dirty_blocks=752 [ 1569.285299][ T9705] EXT4-fs (loop7): Block reservation details [ 1569.291417][ T9705] EXT4-fs (loop7): i_reserved_data_blocks=59 [ 1569.322717][ T9711] FAULT_INJECTION: forcing a failure. [ 1569.322717][ T9711] name failslab, interval 1, probability 0, space 0, times 0 [ 1569.339219][ T9711] CPU: 0 UID: 0 PID: 9711 Comm: syz.2.9363 Tainted: G W syzkaller #0 PREEMPT(full) [ 1569.339250][ T9711] Tainted: [W]=WARN [ 1569.339257][ T9711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1569.339268][ T9711] Call Trace: [ 1569.339274][ T9711] [ 1569.339280][ T9711] __dump_stack+0x1d/0x30 [ 1569.339381][ T9711] dump_stack_lvl+0x95/0xd0 [ 1569.339453][ T9711] dump_stack+0x15/0x1b [ 1569.339473][ T9711] should_fail_ex+0x263/0x280 [ 1569.339503][ T9711] should_failslab+0x8c/0xb0 [ 1569.339524][ T9711] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1569.339528][ T6102] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1569.339626][ T9711] ? __alloc_skb+0x2d6/0x690 [ 1569.339648][ T9711] __alloc_skb+0x2d6/0x690 [ 1569.339674][ T9711] ? __alloc_skb+0x200/0x690 [ 1569.339695][ T9711] netlink_alloc_large_skb+0xbf/0xf0 [ 1569.339724][ T9711] netlink_sendmsg+0x40c/0x6f0 [ 1569.339751][ T9711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1569.339851][ T9711] ____sys_sendmsg+0x5af/0x600 [ 1569.339945][ T9711] ___sys_sendmsg+0x195/0x1e0 [ 1569.339981][ T9711] __x64_sys_sendmsg+0xd4/0x160 [ 1569.340009][ T9711] x64_sys_call+0x194c/0x3020 [ 1569.340040][ T9711] do_syscall_64+0x12c/0x370 [ 1569.340061][ T9711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.340082][ T9711] RIP: 0033:0x7f92ef29c799 [ 1569.340144][ T9711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1569.340160][ T9711] RSP: 002b:00007f92edcf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1569.340179][ T9711] RAX: ffffffffffffffda RBX: 00007f92ef515fa0 RCX: 00007f92ef29c799 [ 1569.340193][ T9711] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1569.340206][ T9711] RBP: 00007f92edcf7090 R08: 0000000000000000 R09: 0000000000000000 [ 1569.340239][ T9711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1569.340251][ T9711] R13: 00007f92ef516038 R14: 00007f92ef515fa0 R15: 00007ffdd6687758 [ 1569.340270][ T9711] [ 1569.480709][ T9706] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1569.611011][ T9718] FAULT_INJECTION: forcing a failure. [ 1569.611011][ T9718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1569.640347][ T9718] CPU: 0 UID: 0 PID: 9718 Comm: syz.8.9368 Tainted: G W syzkaller #0 PREEMPT(full) [ 1569.640377][ T9718] Tainted: [W]=WARN [ 1569.640383][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1569.640394][ T9718] Call Trace: [ 1569.640400][ T9718] [ 1569.640407][ T9718] __dump_stack+0x1d/0x30 [ 1569.640430][ T9718] dump_stack_lvl+0x95/0xd0 [ 1569.640523][ T9718] dump_stack+0x15/0x1b [ 1569.640543][ T9718] should_fail_ex+0x263/0x280 [ 1569.640563][ T9718] should_fail+0xb/0x20 [ 1569.640632][ T9718] should_fail_usercopy+0x1a/0x20 [ 1569.640652][ T9718] strncpy_from_user+0x27/0x250 [ 1569.640719][ T9718] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 1569.640758][ T9718] do_getname+0x59/0x1c0 [ 1569.640776][ T9718] getname_flags+0x1d/0x30 [ 1569.640864][ T9718] do_sys_openat2+0x60/0x130 [ 1569.640886][ T9718] __x64_sys_creat+0x65/0x90 [ 1569.640971][ T9718] x64_sys_call+0x2ea0/0x3020 [ 1569.641028][ T9718] do_syscall_64+0x12c/0x370 [ 1569.641097][ T9718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.641117][ T9718] RIP: 0033:0x7fb1dcd5c799 [ 1569.641130][ T9718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1569.641162][ T9718] RSP: 002b:00007fb1db7b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1569.641180][ T9718] RAX: ffffffffffffffda RBX: 00007fb1dcfd5fa0 RCX: 00007fb1dcd5c799 [ 1569.641192][ T9718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 1569.641203][ T9718] RBP: 00007fb1db7b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1569.641236][ T9718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1569.641249][ T9718] R13: 00007fb1dcfd6038 R14: 00007fb1dcfd5fa0 R15: 00007ffdf33edcd8 [ 1569.641267][ T9718] [ 1569.844227][ T9726] loop8: detected capacity change from 0 to 256 [ 1569.851815][ T9726] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1569.872564][ T9726] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1569.934762][ T9730] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9373'. [ 1570.057561][T11488] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.134132][ T9739] loop5: detected capacity change from 0 to 512 [ 1570.169707][ T9739] EXT4-fs: Ignoring removed mblk_io_submit option [ 1570.209523][ T9745] Q6`Ҙ speed is unknown, defaulting to 1000 [ 1570.219814][ T9739] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1570.233084][T11488] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.250846][ T9745] lo speed is unknown, defaulting to 1000 [ 1570.320249][ T9739] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 1570.541138][ T9739] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.9375: attempt to clear invalid blocks 2 len 1 [ 1570.590783][T11488] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.646204][ T28] audit: type=1400 audit(1772464741.846:6920): avc: denied { write } for pid=9767 comm="syz.3.9384" lport=56025 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1570.660653][ T9739] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1570.678808][ T9768] loop3: detected capacity change from 0 to 2048 [ 1570.699727][ T9739] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1570.714292][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1570.714460][ C0] EXT4-fs (loop5): initial error at time 1772464741: ext4_clear_blocks:876: inode 13 [ 1570.714708][ C0] EXT4-fs (loop5): last error at time 1772464741: ext4_clear_blocks:876: inode 13 [ 1570.767808][ T9739] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.9375: invalid indirect mapped block 1819239214 (level 0) [ 1570.783385][ T9739] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1570.791462][ T9739] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.9375: invalid indirect mapped block 1819239214 (level 1) [ 1570.802779][ T28] audit: type=1400 audit(1772464741.995:6921): avc: denied { getopt } for pid=9767 comm="syz.3.9384" lport=56025 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1570.818541][ T9745] chnl_net:caif_netlink_parms(): no params data found [ 1570.840076][ T9739] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1570.853354][T11488] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.855516][ T9739] EXT4-fs (loop5): 1 truncate cleaned up [ 1570.888141][ T9739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1570.925907][ T9745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.933249][ T9745] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.940575][ T9745] bridge_slave_0: entered allmulticast mode [ 1570.947191][ T9745] bridge_slave_0: entered promiscuous mode [ 1570.955324][ T9745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.008413][ T9745] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.016004][ T9745] bridge_slave_1: entered allmulticast mode [ 1571.022678][ T9745] bridge_slave_1: entered promiscuous mode [ 1571.040664][ T9745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1571.050819][ T9745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1571.171083][ T9745] team0: Port device team_slave_0 added [ 1571.184754][ T9745] team0: Port device team_slave_1 added [ 1571.190517][T11488] bridge_slave_0: left allmulticast mode [ 1571.196405][T11488] bridge_slave_0: left promiscuous mode [ 1571.202217][T11488] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.326018][ T9791] loop8: detected capacity change from 0 to 256 [ 1571.333053][ T9791] vfat: Unknown parameter '00000000000000000000004' [ 1572.174306][ T6102] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1572.285698][ T9811] __nla_validate_parse: 2 callbacks suppressed [ 1572.285715][ T9811] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9388'. [ 1572.343966][ T9818] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9388'. [ 1572.388764][T11488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1572.417719][T11488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1572.433546][T11488] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1572.461966][T11488] bond0 (unregistering): Released all slaves [ 1572.492418][ T9745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1572.506278][ T9745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1572.564130][ T9745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1572.586649][ T9745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1572.601655][ T9745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1572.657534][ T9745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1572.712549][ T9745] hsr_slave_0: entered promiscuous mode [ 1572.725743][ T9745] hsr_slave_1: entered promiscuous mode [ 1572.734135][ T9745] debugfs: 'hsr0' already exists in 'hsr' [ 1572.740093][ T9745] Cannot create hsr debugfs directory [ 1572.838433][ T9828] xt_hashlimit: size too large, truncated to 1048576 [ 1572.856132][T11488] hsr_slave_0: left promiscuous mode [ 1572.862511][T11488] hsr_slave_1: left promiscuous mode [ 1572.868481][T11488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1572.876595][T11488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1572.884428][T11488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1572.893433][T11488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1572.904023][T11488] veth1_macvtap: left promiscuous mode [ 1572.909540][T11488] veth0_macvtap: left promiscuous mode [ 1572.915024][T11488] veth1_vlan: left promiscuous mode [ 1572.920412][T11488] veth0_vlan: left promiscuous mode [ 1573.052210][ T9836] netlink: 'syz.2.9397': attribute type 11 has an invalid length. [ 1573.142032][T11488] team0 (unregistering): Port device team_slave_1 removed [ 1573.156976][T11488] team0 (unregistering): Port device team_slave_0 removed [ 1574.210059][ T9853] loop3: detected capacity change from 0 to 512 [ 1574.217514][ T9851] netlink: 'syz.2.9400': attribute type 29 has an invalid length. [ 1574.854056][ T9857] netlink: 596 bytes leftover after parsing attributes in process `syz.2.9400'. [ 1575.281516][ T9860] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9404'. [ 1575.450394][ T9869] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9404'. [ 1576.089671][ T9883] netlink: 'syz.3.9406': attribute type 29 has an invalid length. [ 1576.107073][ T9884] netlink: 'syz.3.9406': attribute type 29 has an invalid length. [ 1576.137401][ T9883] netlink: 500 bytes leftover after parsing attributes in process `syz.3.9406'. [ 1576.450431][ T9899] loop8: detected capacity change from 0 to 256 [ 1576.457388][ T9899] vfat: Unknown parameter '00000000000000000000004' [ 1577.356256][ T9903] loop2: detected capacity change from 0 to 256 [ 1577.362999][ T9903] vfat: Unknown parameter '00000000000000000000004' [ 1581.554744][ T9918] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1581.580507][ T9918] loop5: detected capacity change from 0 to 2048 [ 1581.614320][ T9918] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1581.628824][ T9918] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1581.645328][ T9918] netlink: 'syz.5.9411': attribute type 3 has an invalid length. [ 1581.653145][ T9918] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9411'. [ 1581.837654][ T6102] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1581.983216][ T9745] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1582.436476][ T9940] loop3: detected capacity change from 0 to 128 [ 1582.450767][ T28] audit: type=1400 audit(1772464752.883:6922): avc: denied { setattr } for pid=9936 comm="syz.8.9414" name="X25" dev="sockfs" ino=155738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1582.495422][ T9745] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1582.604038][ T9946] loop2: detected capacity change from 0 to 1024 [ 1582.671326][ T9745] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1582.706449][ T9946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1582.907809][ T9745] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1582.942801][ T9951] netlink: 'syz.5.9416': attribute type 29 has an invalid length. [ 1582.980158][ T9956] netlink: 'syz.5.9416': attribute type 29 has an invalid length. [ 1583.056200][ T2761] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1583.147883][ T9745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1583.193938][ T9745] 8021q: adding VLAN 0 to HW filter on device team0 [ 1583.221360][T11482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.228512][T11482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1583.267925][ T9976] netlink: 'syz.2.9417': attribute type 29 has an invalid length. [ 1583.290814][T11482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.297877][T11482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1583.306575][ T9970] netlink: 596 bytes leftover after parsing attributes in process `syz.2.9417'. [ 1583.446312][ T9745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1583.996383][T10019] loop2: detected capacity change from 0 to 128 [ 1584.316237][T10031] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9421'. [ 1584.591406][ T9745] veth0_vlan: entered promiscuous mode [ 1584.626669][ T9745] veth1_vlan: entered promiscuous mode [ 1584.681944][ T9745] veth0_macvtap: entered promiscuous mode [ 1584.731616][ T9745] veth1_macvtap: entered promiscuous mode [ 1584.779665][ T9745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1584.813255][ T9745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1584.853261][T11482] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.882362][T11482] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.913102][T11482] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.921803][T11482] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.200321][T10061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9424'. [ 1585.296627][T10065] loop6: detected capacity change from 0 to 256 [ 1585.303540][T10065] vfat: Unknown parameter '00000000000000000000004' [ 1587.377187][T10106] netlink: 'syz.3.9433': attribute type 29 has an invalid length. [ 1587.392965][T10106] netlink: 'syz.3.9433': attribute type 29 has an invalid length. [ 1587.458440][T10106] netlink: 500 bytes leftover after parsing attributes in process `syz.3.9433'. [ 1587.511449][T10116] xt_hashlimit: size too large, truncated to 1048576 [ 1587.649442][T10125] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1588.437872][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9447'. [ 1588.868774][T10226] xt_hashlimit: size too large, truncated to 1048576 [ 1589.231730][T10243] loop6: detected capacity change from 0 to 128 [ 1589.419394][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9454'. [ 1589.578768][T10263] loop3: detected capacity change from 0 to 1024 [ 1589.613981][T10263] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1589.624618][T10263] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1589.634329][T10263] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1589.648235][T10263] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1589.656283][T10263] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1589.667230][T10263] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.9453: Inode bitmap for bg 0 marked uninitialized [ 1589.679831][T10263] loop3: lost filesystem error report for type 5 error -117 [ 1589.681087][T10263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1590.237150][ T1694] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1591.367621][ T1502] IPVS: starting estimator thread 0... [ 1591.466229][T10425] IPVS: using max 2640 ests per chain, 132000 per kthread [ 1591.508629][T10427] loop2: detected capacity change from 0 to 512 [ 1591.528997][T10427] EXT4-fs: Ignoring removed mblk_io_submit option [ 1591.599269][T10427] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1591.613968][T10427] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1591.636775][T10427] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.9459: attempt to clear invalid blocks 2 len 1 [ 1591.650663][T10427] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1591.658646][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1591.674176][ C1] EXT4-fs (loop2): initial error at time 1772464761: ext4_clear_blocks:876: inode 13 [ 1591.683696][ C1] EXT4-fs (loop2): last error at time 1772464761: ext4_clear_blocks:876: inode 13 [ 1591.695181][T10427] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1591.723905][T10427] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.9459: invalid indirect mapped block 1819239214 (level 0) [ 1591.754895][T10427] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1591.756343][T10427] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.9459: invalid indirect mapped block 1819239214 (level 1) [ 1591.829282][T10427] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1591.848942][T10427] EXT4-fs (loop2): 1 truncate cleaned up [ 1591.879927][T10427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1591.901751][ T28] audit: type=1400 audit(1772464761.732:6923): avc: denied { accept } for pid=10417 comm="syz.3.9458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1592.420849][ T2761] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1592.492777][T10441] FAULT_INJECTION: forcing a failure. [ 1592.492777][T10441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1592.524685][T10441] CPU: 1 UID: 0 PID: 10441 Comm: syz.6.9464 Tainted: G W syzkaller #0 PREEMPT(full) [ 1592.524789][T10441] Tainted: [W]=WARN [ 1592.524795][T10441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1592.524865][T10441] Call Trace: [ 1592.524872][T10441] [ 1592.524881][T10441] __dump_stack+0x1d/0x30 [ 1592.524906][T10441] dump_stack_lvl+0x95/0xd0 [ 1592.524929][T10441] dump_stack+0x15/0x1b [ 1592.524987][T10441] should_fail_ex+0x263/0x280 [ 1592.525007][T10441] should_fail+0xb/0x20 [ 1592.525049][T10441] should_fail_usercopy+0x1a/0x20 [ 1592.525069][T10441] _copy_to_user+0x20/0xa0 [ 1592.525095][T10441] simple_read_from_buffer+0xb5/0x130 [ 1592.525118][T10441] proc_fail_nth_read+0x10e/0x150 [ 1592.525215][T10441] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1592.525242][T10441] vfs_read+0x1ab/0x7f0 [ 1592.525287][T10441] ? __rcu_read_unlock+0x4e/0x70 [ 1592.525305][T10441] ? __fget_files+0x184/0x1c0 [ 1592.525324][T10441] ? mutex_lock+0x57/0x90 [ 1592.525430][T10441] ksys_read+0xdc/0x1a0 [ 1592.525456][T10441] __x64_sys_read+0x40/0x50 [ 1592.525530][T10441] x64_sys_call+0x2886/0x3020 [ 1592.525550][T10441] do_syscall_64+0x12c/0x370 [ 1592.525567][T10441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.525663][T10441] RIP: 0033:0x7efe01d1cfce [ 1592.525679][T10441] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1592.525697][T10441] RSP: 002b:00007efe007aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1592.525718][T10441] RAX: ffffffffffffffda RBX: 00007efe007af6c0 RCX: 00007efe01d1cfce [ 1592.525733][T10441] RDX: 000000000000000f RSI: 00007efe007af0a0 RDI: 0000000000000004 [ 1592.525744][T10441] RBP: 00007efe007af090 R08: 0000000000000000 R09: 0000000000000000 [ 1592.525766][T10441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1592.525779][T10441] R13: 00007efe01fd6038 R14: 00007efe01fd5fa0 R15: 00007ffec8edeb18 [ 1592.525797][T10441] [ 1592.753162][T10443] loop6: detected capacity change from 0 to 1024 [ 1593.014339][T10443] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1593.216180][ T9745] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1593.316775][T10457] ================================================================== [ 1593.324865][T10457] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 1593.332752][T10457] [ 1593.335061][T10457] write to 0xffff88812ffa1780 of 8 bytes by task 10458 on cpu 0: [ 1593.342769][T10457] cpu_map_kthread_run+0x4fe/0x1680 [ 1593.347965][T10457] kthread+0x22a/0x280 [ 1593.352024][T10457] ret_from_fork+0x150/0x360 [ 1593.356614][T10457] ret_from_fork_asm+0x1a/0x30 [ 1593.361372][T10457] [ 1593.363682][T10457] read to 0xffff88812ffa1780 of 8 bytes by task 10457 on cpu 1: [ 1593.371303][T10457] bq_flush_to_queue+0x124/0x360 [ 1593.376237][T10457] cpu_map_enqueue+0x1ad/0x1c0 [ 1593.380999][T10457] xdp_do_redirect_frame+0x27b/0x580 [ 1593.386299][T10457] bpf_test_run_xdp_live+0xac3/0x1360 [ 1593.391672][T10457] bpf_prog_test_run_xdp+0x57b/0xa10 [ 1593.396948][T10457] bpf_prog_test_run+0x204/0x340 [ 1593.401873][T10457] __sys_bpf+0x52e/0x7e0 [ 1593.406101][T10457] __x64_sys_bpf+0x41/0x50 [ 1593.410507][T10457] x64_sys_call+0x10cb/0x3020 [ 1593.415174][T10457] do_syscall_64+0x12c/0x370 [ 1593.419757][T10457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.425643][T10457] [ 1593.427961][T10457] value changed: 0xffff88814ccee070 -> 0x0000000000000000 [ 1593.435051][T10457] [ 1593.437363][T10457] Reported by Kernel Concurrency Sanitizer on: [ 1593.443514][T10457] CPU: 1 UID: 0 PID: 10457 Comm: syz.6.9469 Tainted: G W syzkaller #0 PREEMPT(full) [ 1593.454443][T10457] Tainted: [W]=WARN [ 1593.458229][T10457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1593.468279][T10457] ==================================================================