last executing test programs: 2m5.030000857s ago: executing program 3 (id=808): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000000c0)={0x10000008}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x11}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f00000001c0)={{0xffffffff, 0x1, 0x7fffffff, 0xb884, 0x8001}, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0x12800}}, 0xf, 0x5, 0x5dc, 0x2, 0x54, 0x0, 0x4}, 0x9c) 2m1.556405627s ago: executing program 3 (id=829): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000f80), 0x2, 0xa8002) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0xfc}, @in=@multicast2, 0x0, 0x4, 0x4e24, 0x20, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x80000000, 0x20, 0x842, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x0, 0x2}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008010}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) setgid(0x0) 2m1.517046311s ago: executing program 3 (id=831): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = timerfd_create(0x0, 0x800) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)=""/245, 0xf5}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffa, 0x80, 0x2, 0x1}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r7 = socket$packet(0x11, 0x3, 0x300) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') r9 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0xffffffffffffffff, r9) open_by_handle_at(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r7], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) sendfile(r10, r10, 0x0, 0x7a680000) 1m58.422765487s ago: executing program 3 (id=845): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000480)={[{@grpid}, {@dioread_nolock}, {@nodelalloc}, {@jqfmt_vfsv1}, {@nodiscard}, {@usrjquota}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@dax_inode}]}, 0x3, 0x5a7, &(0x7f0000001540)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x800, 0x10000, 0x0, 0x6, 0x6, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x801) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) r3 = dup3(r1, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000003c0)={0x3, &(0x7f00000001c0)=[{0x9, 0x9}, {0xe, 0x478}, {0xb, 0x2}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="20100000000000001800128008000100677470000c00028008000300c5ce0001"], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2000000017ae000a01020000000000000000010009000900010073797a300000000024000000030a0108000000000000000001000000040004800900010073797a30000000004c000000060a010400000000000000000100000008000b4000d0950fa74c95c1b3797a300000000024000480200001800e000100636f6e6e6c696d69740000000c0002800800014000000000140000001100010000000000000000000000000a"], 0xb8}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0180c200000050a245d5cde0080045000028000000000002907800000000ffffffff12009078e0000002000000000000000000000000f07025f32edd7a09f01e546fdeaa39170ab3edb69c9c4034493d8496825c498ff2974a799aee4b3b053bdb7e"], 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x1000, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r6 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 1m57.982871187s ago: executing program 3 (id=847): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000008}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x11}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f00000001c0)={{0xffffffff, 0x1, 0x7fffffff, 0xb884, 0x8001}, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0x12800}}, 0xf, 0x5, 0x5dc, 0x2, 0x54, 0x0, 0x4}, 0x9c) 1m55.071217917s ago: executing program 0 (id=863): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f00000007c0)={0x0, 0x8, 0x1, [0x797d, 0xb88, 0xfffffffffffffffa, 0x1, 0x5], [0x0, 0x86, 0x9, 0x8, 0x8, 0x4, 0x80000001, 0x2, 0x0, 0x30, 0x7, 0x2, 0x4, 0x1, 0x9, 0x8, 0x8, 0x1ff, 0x4, 0xf, 0x7, 0x3, 0x6, 0x4, 0x1, 0x9, 0x3, 0x20002000000, 0x4, 0x2, 0x2, 0x0, 0x0, 0x4, 0x7fffffff, 0x1000, 0xa5, 0x5, 0x2, 0xffffffff, 0xc, 0x40, 0x25ba, 0x5, 0x101, 0xd, 0xfffffffffffffff8, 0xd13, 0xf1d, 0x7f, 0x9, 0x5, 0x4, 0x6, 0xffffffffffffffd0, 0x3, 0x4, 0x0, 0x9, 0x2b9b00000, 0x8, 0x0, 0xff, 0x197400000000000, 0x8, 0x0, 0xf00, 0x4, 0x756ad617, 0xb4, 0x8000, 0x5, 0x6c2, 0x0, 0x0, 0x1, 0x8, 0x8, 0x8001, 0x1, 0x0, 0x81, 0x4, 0xfffffffffffffffb, 0x400, 0x0, 0x2b4, 0x5, 0xd, 0x7, 0x80, 0xfd3, 0x0, 0x3, 0x5387, 0x4, 0x0, 0x401, 0x196, 0x401, 0x0, 0x4, 0x7fffffffffffffff, 0x10001, 0x100, 0x0, 0x4, 0x7f, 0x2b5b, 0x0, 0x5, 0x3, 0x2, 0xffffffffffffffff, 0x7fff, 0x100000001, 0x8, 0x8, 0xfffffffffffffff7, 0x3, 0x4]}) tkill(r2, 0x2d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) process_vm_writev(0x0, &(0x7f0000001c80), 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/103, 0x67}], 0x1, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) timer_create(0x5, 0x0, &(0x7f0000000040)) write$cgroup_pid(r7, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001800dd8d000000000000000002000000000000060000000006001500040000001400168004000880"], 0x38}, 0x1, 0x0, 0x0, 0x20040894}, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2030}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 1m55.057846868s ago: executing program 3 (id=864): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000008}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x11}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f00000001c0)={{0xffffffff, 0x1, 0x7fffffff, 0xb884, 0x8001}, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0x12800}}, 0xf, 0x5, 0x5dc, 0x2, 0x54, 0x0, 0x4}, 0x9c) 1m53.750262205s ago: executing program 0 (id=866): r0 = syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xa42, 0x9) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) r2 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) r3 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r0], 0x80}}, 0x81) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x101220, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x7}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) sendto$packet(r6, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @local}, 0x14) fchmodat(r4, &(0x7f0000000100)='./file0\x00', 0x145) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r2, 0x0, 0x1) fchdir(r9) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getdents(r10, &(0x7f0000001b00)=""/226, 0xe2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) alarm(0x38) fstat(r10, &(0x7f0000000240)) 1m53.290633736s ago: executing program 0 (id=868): socket$kcm(0x10, 0x2, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x6, 0x5, 0x7) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) r0 = syz_io_uring_setup(0x49c, &(0x7f00000000c0)={0x0, 0x79ae, 0x3100, 0x8000, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000001040)=0x8, 0x4) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f00000000c0)=0xf2b, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000080)=0x11) 1m52.065561245s ago: executing program 0 (id=871): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000001940)=[{{&(0x7f0000000240)={0xa, 0x4e1f, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfff}, 0x1c, &(0x7f0000001740)=[{&(0x7f0000000280)="029f1cd0ad891e56af54627de8dfb031", 0x10}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f00000002c0)="4a69c1927955520eee052ff3614adb356495edb1e928b43efa62f048c57ee9935d833c4e4c02104d1ec37a5dfa22e17d484b880ab5f0f65c133fb612876001dbdc998d2b503132", 0x47}, {&(0x7f0000001400)="c52d32d3e2d049ff6132ffcdcc51a8170f51a5aed40b7ab5cc0b00d2f490db134a2191bba40b3a6c2dbbc611b50c291aba74b04ca0c5a422b9ee4ec0397d828cd72406776bb40e7ec94b259c537f920a09129db897841a5d63e028fe0d626c4a7fad83d5bac5b58f93bb1fb434505cc15bac9ba472007390d793775ebe924d2268bbf58eca6da92482ba8f635f2ecd6f71d5101a123c1c97f602d476839890a5617c310070c65259a0ac79bc2bb2b69655ec8a11047c4cfb7dcb6ca427bb1533b1803f05387481190018947ccce5885ade9cc528876603d4deac115058e0cc390bc2648b3d6c944011f65e1d6bcc23b34475b65ccf46c1", 0xf7}, {&(0x7f0000001500)="89aebfe39aaed210b7954aaefac87ca31e612b7170aa7e3a2fdfc6774d7be83389d457a26a256eaa9644e1f718a8fe45ccf00ed2f6e77073e1a9c1eca7c28ea4f91d02c93a8186c7532eacc1db2f0e7826ed7bb72824202bf4c12a44592cec86c4091acc157542bad833a185095a9046a0835fdf", 0x74}, {&(0x7f0000000380)="86a8a960104ae42bda453ebaade809f9a4b5e44fc227e0200f5d978df0febf26812357a35e66092a5244fdaecb9a36cc398606e44b", 0x35}, {&(0x7f0000001580)="f81801f81aea72826b01ba95729089beca338bd5110f236aa8bb5838283956c2dbd2f26b52da0c60ba857a0ae85f9db9b65f4a3e31300351043096dbe9bc9e7152219e8d4b0f846c46dc2c424c697d0271d4e7fcca67bf1b09afdfcaa2c0e311c9aa81a08b5ce6763f9922dc9517bc5bf6f8716f1a77a09ee0850a152a0d3a2cd15b3e1351045a6d34297fd73e7a54f74a47dd3d2c9671456b96c326093730cc4495f0791508f0930d275509895a695a5ea959e03cafed5252fed7917443ba5fec53905bc3e325c7e768ad3f1c3bd665901995143bf2ccf3c641", 0xda}, {&(0x7f0000001680)="7c789ff2ecfb4be4c8a37da9f156a9f4e4e1cf6fcf97150f7dd5e42df88f0bb2dd305450ef977d41d6a3486af21d8bffa8609e02f62563646469200540bb804b012445dd7f68dc31d36ad0054d2e58abb911e93a3a9185b87543c856484fe8b30de1584819bf780ca0a1d9611e42d2f781b3a146c8a5361ef071009d464cf294a5092a7b2e009ab360bdaca51ab35b169d3daf7e6ed13cb5bf0e67", 0x9b}], 0x8, &(0x7f00000017c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @hopopts={{0x50, 0x29, 0x36, {0x5e, 0x6, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x1, 0x7, [0x0, 0x7]}}, @ra={0x5, 0x2, 0x7}, @generic={0x2, 0xe, "09e82b15a456f354d314c3da014b"}, @pad1]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0xc, 0xe, 0x2, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @local, @mcast2, @dev={0xfe, 0x80, '\x00', 0x13}, @ipv4={'\x00', '\xff\xff', @local}]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0x120}}], 0x1, 0x4004800) r1 = socket(0x18, 0x4, 0x0) recvmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000001a40)={0x0, 0x79af, 0x8, 0x0, 0x272}, &(0x7f0000000340)=0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, 0x0, 0x20840, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001a00), 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)='(', 0x1, 0x10, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) r7 = fsopen(&(0x7f0000000080)='nsfs\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8, 0x7}, 0x100050, 0x10000, 0x80, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, &(0x7f0000000240)=0x8) fcntl$setlease(r7, 0x400, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="000300d5", @ANYRES16=r11, @ANYBLOB="0100ffffffff030000002f0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000081c) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r12, 0x4b4c, &(0x7f0000000000)={0x6f49, 0x1}) bpf$ITER_CREATE(0x21, &(0x7f0000001980)={r5}, 0x8) 1m51.202050962s ago: executing program 0 (id=874): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000008}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x11}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f00000001c0)={{0xffffffff, 0x1, 0x7fffffff, 0xb884, 0x8001}, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0x12800}}, 0xf, 0x5, 0x5dc, 0x2, 0x54, 0x0, 0x4}, 0x9c) 1m46.612301913s ago: executing program 0 (id=889): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000008}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f00000001c0)={{0xffffffff, 0x1, 0x7fffffff, 0xb884, 0x8001}, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0x12800}}, 0xf, 0x5, 0x5dc, 0x2, 0x54, 0x0, 0x4}, 0x9c) 1m39.428832085s ago: executing program 32 (id=864): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000008}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x11}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f00000001c0)={{0xffffffff, 0x1, 0x7fffffff, 0xb884, 0x8001}, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0x12800}}, 0xf, 0x5, 0x5dc, 0x2, 0x54, 0x0, 0x4}, 0x9c) 1m31.461833946s ago: executing program 33 (id=889): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000008}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f00000001c0)={{0xffffffff, 0x1, 0x7fffffff, 0xb884, 0x8001}, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0x12800}}, 0xf, 0x5, 0x5dc, 0x2, 0x54, 0x0, 0x4}, 0x9c) 1m23.03211658s ago: executing program 1 (id=976): syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) 1m22.934040558s ago: executing program 1 (id=977): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r0, &(0x7f0000000000)=""/90, 0x5a) exit(0xbfd8) getdents64(r0, 0x0, 0x0) 1m22.035099789s ago: executing program 1 (id=983): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000f80), 0x2, 0xa8002) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0xfc}, @in=@multicast2, 0x0, 0x4, 0x4e24, 0x20, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x80000000, 0x20, 0x842, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x0, 0x2}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008010}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) setgid(0x0) 1m21.850289565s ago: executing program 1 (id=986): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000001c40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000007000000000000000061"], 0x0, 0x2a}, 0x28) 1m21.592522778s ago: executing program 1 (id=987): bpf$BPF_LINK_CREATE(0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, @val=@netfilter={0x3, 0x0, 0xbfe, 0x1}}, 0x20) 1m21.105995922s ago: executing program 1 (id=988): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000008}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x11}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f00000001c0)={{0xffffffff, 0x1, 0x7fffffff, 0xb884, 0x8001}, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0x12800}}, 0xf, 0x5, 0x5dc, 0x2, 0x54, 0x0, 0x4}, 0x9c) 1m5.867185428s ago: executing program 34 (id=988): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000008}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x11}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f00000001c0)={{0xffffffff, 0x1, 0x7fffffff, 0xb884, 0x8001}, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0x12800}}, 0xf, 0x5, 0x5dc, 0x2, 0x54, 0x0, 0x4}, 0x9c) 54.564276334s ago: executing program 2 (id=1259): lstat(0x0, 0x0) ustat(0x2, 0x0) 54.531701007s ago: executing program 2 (id=1260): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000008}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x11}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f00000001c0)={{0xffffffff, 0x1, 0x7fffffff, 0xb884, 0x8001}, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0x12800}}, 0xf, 0x5, 0x5dc, 0x2, 0x54, 0x0, 0x4}, 0x9c) 52.130517125s ago: executing program 2 (id=1283): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) eventfd2(0x2, 0x80800) 52.083189409s ago: executing program 2 (id=1284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f00000001c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x378, 0x268, 0x98, 0xfeffffff, 0x268, 0x268, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @remote, @icmp_id}}}}, {{@ip={@rand_addr=0x64010100, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv6=@mcast2, @port=0x4e23, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x0, 0x0) keyctl$setperm(0x5, r4, 0x202408) keyctl$chown(0x4, r4, 0xee01, 0x0) keyctl$setperm(0x5, r4, 0x20925) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r6, 0x0, 0x137, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x50) 51.219092838s ago: executing program 2 (id=1292): flistxattr(0xffffffffffffffff, &(0x7f0000000280)=""/183, 0xb7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r3 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) shmdt(r3) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e6400"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32, @ANYBLOB="0028000000000000140012800c0001006d61", @ANYRES32, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f64", 0x27}], 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) ioctl$TCSETSW(r8, 0x5403, &(0x7f00000000c0)={0x1ff, 0x1, 0x80000001, 0x7fffffff, 0x1b, "48b429d2ee13ed2ee2f41900"}) ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000000)={0xffffffef, 0x2, 0x6, 0x2, 0x90, "990001000000001300"}) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) 50.916271186s ago: executing program 2 (id=1293): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000008}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x11}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f00000001c0)={{0xffffffff, 0x1, 0x7fffffff, 0xb884, 0x8001}, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0x12800}}, 0xf, 0x5, 0x5dc, 0x2, 0x54, 0x0, 0x4}, 0x9c) 48.680239298s ago: executing program 5 (id=1313): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) syz_io_uring_setup(0x70ca, 0x0, &(0x7f0000000100), 0x0) r2 = add_key$fscrypt_provisioning(&(0x7f00000005c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="01000000000002008567bfa32e0602"], 0x18, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000700)=@chain={'key_or_keyring:', r2}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x80, 0x2, 0x164}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0xf23, 0x0, 0xc, 0x0, 0x0) 47.623382664s ago: executing program 5 (id=1322): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) 47.504312995s ago: executing program 5 (id=1323): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f00000007c0)={0x0, 0x8, 0x1, [0x797d, 0xb88, 0xfffffffffffffffa, 0x1, 0x5], [0x0, 0x86, 0x9, 0x8, 0x8, 0x4, 0x80000001, 0x2, 0x0, 0x30, 0x7, 0x2, 0x4, 0x1, 0x9, 0x8, 0x8, 0x1ff, 0x4, 0xf, 0x7, 0x3, 0x6, 0x4, 0x1, 0x9, 0x3, 0x20002000000, 0x4, 0x2, 0x2, 0x0, 0x0, 0x4, 0x7fffffff, 0x1000, 0xa5, 0x5, 0x2, 0xffffffff, 0xc, 0x40, 0x25ba, 0x5, 0x101, 0xd, 0xfffffffffffffff8, 0xd13, 0xf1d, 0x7f, 0x9, 0x5, 0x4, 0x6, 0xffffffffffffffd0, 0x3, 0x4, 0x0, 0x9, 0x2b9b00000, 0x8, 0x0, 0xff, 0x197400000000000, 0x8, 0x0, 0xf00, 0x4, 0x756ad617, 0xb4, 0x8000, 0x5, 0x6c2, 0x0, 0x0, 0x1, 0x8, 0x8, 0x8001, 0x1, 0x0, 0x81, 0x4, 0xfffffffffffffffb, 0x400, 0x0, 0x2b4, 0x5, 0xd, 0x7, 0x80, 0xfd3, 0x0, 0x3, 0x5387, 0x4, 0x0, 0x401, 0x196, 0x401, 0x0, 0x4, 0x7fffffffffffffff, 0x10001, 0x100, 0x0, 0x4, 0x7f, 0x2b5b, 0x0, 0x5, 0x3, 0x2, 0xffffffffffffffff, 0x7fff, 0x100000001, 0x8, 0x8, 0xfffffffffffffff7, 0x3, 0x4]}) tkill(r2, 0x2d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) process_vm_writev(0x0, &(0x7f0000001c80), 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/103, 0x67}], 0x1, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) timer_create(0x5, 0x0, &(0x7f0000000040)) write$cgroup_pid(r7, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001800dd8d000000000000000002000000000000060000000006001500040000001400168004000880"], 0x38}, 0x1, 0x0, 0x0, 0x20040894}, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2030}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 46.437774512s ago: executing program 5 (id=1329): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r3, @ANYBLOB="d500000000000200140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="0100"], 0x3c}}, 0x0) 46.362693089s ago: executing program 5 (id=1330): socket(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000001040)=0x8, 0x4) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f00000000c0)=0xf2b, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000080)=0x11) 46.221403482s ago: executing program 5 (id=1331): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000008}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x11}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f00000001c0)={{0xffffffff, 0x1, 0x7fffffff, 0xb884, 0x8001}, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0x12800}}, 0xf, 0x5, 0x5dc, 0x2, 0x54, 0x0, 0x4}, 0x9c) 35.504169165s ago: executing program 35 (id=1293): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000008}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x11}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f00000001c0)={{0xffffffff, 0x1, 0x7fffffff, 0xb884, 0x8001}, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0x12800}}, 0xf, 0x5, 0x5dc, 0x2, 0x54, 0x0, 0x4}, 0x9c) 31.171631919s ago: executing program 36 (id=1331): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000008}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x11}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f00000001c0)={{0xffffffff, 0x1, 0x7fffffff, 0xb884, 0x8001}, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0x12800}}, 0xf, 0x5, 0x5dc, 0x2, 0x54, 0x0, 0x4}, 0x9c) 12.834581643s ago: executing program 8 (id=1483): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000180)={[{@inode32}]}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4a21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x1c, 0x0}, 0xd158e5cd3365400d) 11.460342278s ago: executing program 8 (id=1489): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) unshare(0x22020600) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_gettime(r2, &(0x7f0000000380)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet_tcp_int(r4, 0x6, 0x2e, &(0x7f0000000140)=0xfb78, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0xe8, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x1, 0x8, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) readv(r5, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r7) signalfd4(r5, &(0x7f0000000140)={[0xfffffffffffffffb]}, 0x8, 0x80000) vmsplice(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)="16334282c68e254eafeb23b410358173b2750ea362e8806188afd9db75e930332bf1419cae6be5a2a7c48e80596e4992fa08e8ae24f4dd121c2041e502dcc9", 0x3f}, {&(0x7f0000000100)="2aece0ea75e24cc0492cc07c220603a493352c14cda0e7b257ab62e8dda1da8d01182d5fd4e070ffb0ce8e1ffb210322109b8fd77b9f737e28ea2df0d5eb28979216b138af353d4143329d80f28c31c77757c8dd52632a1d0d47c8aee01eef0fc30f9d8ffd51f733d8aa77c28b78c108b08667e7f604bbeab0ddd357aedb416e14bec5f86d09e71dd1f6c8e09550b12e0e5167c52dd5d6c4a895c2dd0e9a163d966449fabb9370d2c8384d9d002873c2f8bf5996b05758a140668a79792fad5cb662823248f4927ab8866b7f4f7a09f86b1d7b9f51a5eb8497b0d25b06edd2e547cf0de56580f4f046", 0xe9}, {&(0x7f0000000200)="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", 0xfd}, {&(0x7f0000000300)="3bcff49c989b8b752258265d64ae3c91479eda559236854163d78c925567d9b9e12be08171682710d3c66e440acc916199fb25eae7c39598886273a0496ee036d4f3a4b7448f86f9d7daaaa301a3224e096c904778072fbc710c00e7fb16f91255044a506306542906", 0x69}, {&(0x7f0000000540)="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", 0x132}], 0x1000000000000027, 0x1) 9.932862027s ago: executing program 8 (id=1499): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x3000) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x14010, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000001080)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0xffffffff, 0xf0, 0x240, 0xf0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@broadcast, @loopback, 0xff, 0xffffffff, 'vlan1\x00', 'macvlan0\x00', {}, {}, 0x62, 0x2, 0x42}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0\x00', {0x63, 0x518, 0x7fff, 0x586b, 0x2, 0x200, 0xfffffffc, 0x78, 0x80}, {0x8000000000000001}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2, 0x2}}, @common=@ah={{0x30}, {[0x10001, 0x6]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x7, 0x2, 0x2, 0x1, 0x3]}, {0x2, [0x4, 0x1, 0x7, 0x1, 0x0, 0x3], 0x2}}}}, {{@ip={@remote, @empty, 0xff000000, 0x0, 'vlan1\x00', 'vcan0\x00', {}, {}, 0x29, 0x2, 0x8}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'pim6reg1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000002060108e80034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000640)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x8, 0x4}, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 8.379986588s ago: executing program 9 (id=1505): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000f80), 0x2, 0xa8002) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0xfc}, @in=@multicast2, 0x0, 0x4, 0x4e24, 0x20, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x80000000, 0x20, 0x842, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x0, 0x2}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008010}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) setgid(0x0) 7.971368405s ago: executing program 9 (id=1506): flistxattr(0xffffffffffffffff, &(0x7f0000000280)=""/183, 0xb7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000000c0)={0xf28, 0xf, 0xa}, 0xc) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r3 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) shmdt(r3) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="0100000000000000240012"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32, @ANYBLOB="0028000000000000140012800c0001006d61", @ANYRES32, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f64", 0x27}], 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f00000000c0)={0x1ff, 0x1, 0x80000001, 0x7fffffff, 0x1b, "48b429d2ee13ed2ee2f41900"}) ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000000)={0xffffffef, 0x2, 0x6, 0x2, 0x90, "990001000000001300"}) 6.796410612s ago: executing program 8 (id=1511): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = dup(r2) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r3, &(0x7f0000000180)={[{0x2b, 'memory'}, {0x2b, 'pids'}, {0x2d, 'blkio'}, {0x2b, 'cpuset'}, {0x2d, 'net'}, {0x2d, 'net_cls'}, {0x2b, 'cpuset'}, {0x2b, 'blkio'}, {0x2d, 'blkio'}, {0x2d, 'rlimit'}]}, 0x49) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r4, 0x5) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) write(r4, &(0x7f0000000880)="8963e561fa88f38e8a5eadd77f4e319399307b9fd7c15d34201179faf29fed8098aee96df87f0109a7a8823a144d82c54982552e9340ec2868e70a9054368a36f6026633606015b8e5dd1b0a994ce0ace4454706acb8834804a52d59d332f2c4ef1cc9b3a7215b59fbdbc35b5b12595f656252cd8d29d3f149f70db3c090c7ce407fcc498037b1f5b177df489e0f4a85451fa0a5d85abb1b4858996b44a02afa1526003ae03dbf39453aa2b21e870f63407d6d87a7d10daace10ecbcf75c548827b60e1dc39d117b3efab4917537ecb758956fd0d4c7a1ec76094051b68a5be5eb6aa26cf1dfb2f5470ba6cf0c90c021c040161bac", 0xf5) acct(&(0x7f00000000c0)='./file1\x00') close(0x3) 6.607023649s ago: executing program 9 (id=1512): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) unshare(0x22020600) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_gettime(r2, &(0x7f0000000380)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet_tcp_int(r4, 0x6, 0x2e, &(0x7f0000000140)=0xfb78, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0xe8, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x1, 0x8, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) readv(r5, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r7) signalfd4(r5, &(0x7f0000000140)={[0xfffffffffffffffb]}, 0x8, 0x80000) vmsplice(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)="16334282c68e254eafeb23b410358173b2750ea362e8806188afd9db75e930332bf1419cae6be5a2a7c48e80596e4992fa08e8ae24f4dd121c2041e502dcc9", 0x3f}, {&(0x7f0000000100)="2aece0ea75e24cc0492cc07c220603a493352c14cda0e7b257ab62e8dda1da8d01182d5fd4e070ffb0ce8e1ffb210322109b8fd77b9f737e28ea2df0d5eb28979216b138af353d4143329d80f28c31c77757c8dd52632a1d0d47c8aee01eef0fc30f9d8ffd51f733d8aa77c28b78c108b08667e7f604bbeab0ddd357aedb416e14bec5f86d09e71dd1f6c8e09550b12e0e5167c52dd5d6c4a895c2dd0e9a163d966449fabb9370d2c8384d9d002873c2f8bf5996b05758a140668a79792fad5cb662823248f4927ab8866b7f4f7a09f86b1d7b9f51a5eb8497b0d25b06edd2e547cf0de56580f4f046", 0xe9}, {&(0x7f0000000200)="e191ba0edbb9ddfdfb053875a576057fc40c9d019030a5653741e3d14ab85b5ae4f2a864fd067239b2877c955daab460402ea8a12c9e787552faca262e381dd6409f06db58c4d7ce653c597abc8ac9c20a4268b4e25f4cf303c670a19e4fbae137517a016d07fb64f8bb43890fc48d82f717182223e0109bc0d880f32a5641258aed8c152398fb244b4affc02c77d9b66f793cdeffe1e27bfd8297bd7f103e444f6d861ab127610a1b4d51e60ce87fd92141016290f4adb91b80e9a81d2cf5285877770973941f9ffa3fae914ec83c7892431c10333c96935ccd951b2a6334baea1a55a31d37fa5bd764ef9f6c2f3ef90cfc61294cd717ebe56af6259b", 0xfd}, {&(0x7f0000000300)="3bcff49c989b8b752258265d64ae3c91479eda559236854163d78c925567d9b9e12be08171682710d3c66e440acc916199fb25eae7c39598886273a0496ee036d4f3a4b7448f86f9d7daaaa301a3224e096c904778072fbc710c00e7fb16f91255044a506306542906", 0x69}, {&(0x7f0000000540)="86a12b834aca3ba4ed4ef27147447c8db6cf41ae89fbbbac584ff5dd60d214ebcd3698bb78cd3ca88ad89e8d3f1ec6647a8e2e50f8cf05bb4aae8eba96d4d7729c4c798fb85e1a7001c0a8080014307804199419aaaa7972212dc759cc83697265530979b959d200f7efe5dbd64647863b1810231df1f273833bc58ac7f0534bcd969b248d9818b846f9bdbae2962c896962e32f6865bf82c196350fd44abd2a707bb39d44c1bb2e9fba5e4ada03520c8a01e1954608932aee95e4f49b6f05664127ca764ce1dba3f490086262e63d74e70b501bc9e724a6d8eb865175ec7acbcaf00fe0a104e0c37a6c0055042bc1aa81a65e0195bd1ef205db81086c8b6beaf23169e26087a4f8c3dada376b3081de319ce84ad1c547d706ceb911bc637f", 0x132}], 0x1000000000000027, 0x1) 4.889177375s ago: executing program 9 (id=1519): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000000c0), 0x0, 0x10000009, 0xffffffff) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0xffbf}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000680)=[{{&(0x7f00000008c0)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000740)="3ea25a51ad3ad320bd5f4c606314e490d288699ce1db186dec8c5c4bbdb7", 0x1e}], 0x1}}], 0x1, 0x20000014) lstat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RMKNOD(r1, &(0x7f0000000440)={0x14, 0x13, 0x2, {0x0, 0x4, 0x1}}, 0x14) 4.183843679s ago: executing program 9 (id=1523): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)={[{@data_err_ignore}]}, 0x1, 0x504, &(0x7f00000008c0)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x81, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r2 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = dup(r3) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r4, &(0x7f0000000180)={[{0x2b, 'memory'}, {0x2b, 'pids'}, {0x2d, 'blkio'}, {0x2b, 'cpuset'}, {0x2d, 'net'}, {0x2d, 'net_cls'}, {0x2d, 'blkio'}, {0x2d, 'rlimit'}]}, 0x3a) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000780)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@test_dummy_encryption_v1}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 3.973445608s ago: executing program 7 (id=1525): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010002503dccc00000000400000000000", @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f6e64000000000c00028005001d0000000000"], 0x3c}}, 0x54) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r4, 0x1, 0x0, 0x0, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pim6reg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', r5, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x50, r4, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x6}, @ETHTOOL_A_EEE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x9fe73060147cba48}, 0x20000000) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000044bc5b391d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) rename(&(0x7f00000003c0)='./file3\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x3c, 0x11, 0x1, 0x2000000, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {}, {}, {0xc, 0xd}}, [{0x8, 0xb, 0xe809}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 3.569130325s ago: executing program 7 (id=1527): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ptrace$peekuser(0x3, 0x0, 0x5) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/ipc\x00') ioctl$BTRFS_IOC_RM_DEV(r3, 0x8008b705, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0xfffffffd, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) syz_usb_disconnect(0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000"], 0x48) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) 3.487904582s ago: executing program 6 (id=1528): r0 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033200fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @remote}, 0x4, 0x1, 0x1, 0x1}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a80140007050000000000000000000000000000000114003500776731000000000000"], 0x50}}, 0x44) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000004c0)='./file0\x00', 0x10, &(0x7f0000000580)=ANY=[@ANYRES16=r2, @ANYRES32=r4, @ANYRESDEC=r4, @ANYRES16=r1, @ANYRES32=r0, @ANYRESDEC=r3], 0x1, 0x266, &(0x7f0000000700)="$eJzs2s9rHGUYB/BnYmvXlHQj/qIF6Yse1MvQ9ORBJEFaEAOKNkIVpFMz0SXDbsgsgRWx8aIX/wjP4tGbIBUvXnLxL/DgLZcce5COxE3Spq2ywawr9vO57MO+8515Z55heA/v9iuPxupKna8U/ZjKspiaj824lcVsTMW+zXjphas/P/vO1ffeWFhcvPT2ybi8cGXuYkrpzPkf3v/02+du9k+/+92Z70/F1uwH2zuf/7b19NbZ7dtXPu7UqVOnbq+finS91+sX16syLXfq1Tylt6qyqMvU6dbl+qHxlaq3tjZIRXd5ZnptvazrVHQHabUcpH4v9dcHqfio6HRTnudpZjr4J5a+udU0sdOcvBbZ/n8zv0Y7ssdT9sR89tS17JnN7OxO07QnO1HG5KD/TdM89nWcvjl6/29PYr4cr4OPekqtiOrLjaWNpeHvcHxhJTpRRRkXoh2/x+5rsmdYX3598dKFlFJzY3j8Xv7GxtIjh/Nz0Y7ZB+fn0lB8sZvbz5+K6bvzF6MdT96Xb+3dxgPyrXjx+bvyebTjlw+jF1Usx272zvU/m0vptTcX78mf+/M4AID/mzwdmD28/hmu3/L8r8aH+VHXh/evz07EuROTvXci6sEnq0VVleuKoxTnj5pqjW8+WUT8Rx7L3xfjf9maLGJsl9g85hP+9OOrL0++KfvF/L3dmfSXiX/DnaaPmmiNd0IAAAAAAAAAAACM5Ph2EX61d8ZDQ9lRdpYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPpz8CAAD//3lHxzA=") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x40047211, &(0x7f00000002c0)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000004000000000080006d560072352fe83ce00a778b820c1166c0a00000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unshare(0x2a020400) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000301"], 0x1c}, 0x1, 0x0, 0x0, 0x845}, 0x2000c010) socket$netlink(0x10, 0x3, 0x8000000004) io_setup(0x1, &(0x7f0000000b80)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) setitimer(0x1, &(0x7f00000001c0)={{r7, r8/1000+60000}, {r9, r10/1000+60000}}, &(0x7f0000000200)) 2.222380917s ago: executing program 8 (id=1529): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003400)) syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1780, 0x0, 0x1, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_io_uring_setup(0xb7f, &(0x7f0000000500)={0x0, 0x38ab, 0x10000, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002262, 0x0, {0x1}}) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f00000000c0)="4d2e2e7c8bdc018d531b710a78ed2cdae32d8297c11cd0d6371dbfdb7a91885dd2e6fc18a49f70709f6c9fa3b0dfd31fcaee1bbfe6d1a2bbbc668a67227352b36900", 0x42}], 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r7, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x98, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x13f}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9c}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x79}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x98}}, 0x4048000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000a00)="$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") r9 = eventfd2(0x4, 0x800) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r10, 0x2, &(0x7f0000000180)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xffed, r9, 0x0, 0x0, 0x0, 0x0, 0x3, r9}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x10, r9, 0x0, 0x0, 0x0, 0x0, 0x0, r9}]) io_cancel(r10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffc00, 0x0, 0x2}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r11, &(0x7f0000000140)='2', 0xff10, 0x8000c61) read$msr(r11, &(0x7f0000001200)=""/244, 0xfffffc9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) 2.020607356s ago: executing program 6 (id=1530): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) unshare(0x22020600) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_gettime(r2, &(0x7f0000000380)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet_tcp_int(r4, 0x6, 0x2e, &(0x7f0000000140)=0xfb78, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0xe8, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x1, 0x8, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) readv(r5, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r7) signalfd4(r5, &(0x7f0000000140)={[0xfffffffffffffffb]}, 0x8, 0x80000) vmsplice(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)="16334282c68e254eafeb23b410358173b2750ea362e8806188afd9db75e930332bf1419cae6be5a2a7c48e80596e4992fa08e8ae24f4dd121c2041e502dcc9", 0x3f}, {&(0x7f0000000100)="2aece0ea75e24cc0492cc07c220603a493352c14cda0e7b257ab62e8dda1da8d01182d5fd4e070ffb0ce8e1ffb210322109b8fd77b9f737e28ea2df0d5eb28979216b138af353d4143329d80f28c31c77757c8dd52632a1d0d47c8aee01eef0fc30f9d8ffd51f733d8aa77c28b78c108b08667e7f604bbeab0ddd357aedb416e14bec5f86d09e71dd1f6c8e09550b12e0e5167c52dd5d6c4a895c2dd0e9a163d966449fabb9370d2c8384d9d002873c2f8bf5996b05758a140668a79792fad5cb662823248f4927ab8866b7f4f7a09f86b1d7b9f51a5eb8497b0d25b06edd2e547cf0de56580f4f046", 0xe9}, {&(0x7f0000000200)="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", 0xfd}, {&(0x7f0000000300)="3bcff49c989b8b752258265d64ae3c91479eda559236854163d78c925567d9b9e12be08171682710d3c66e440acc916199fb25eae7c39598886273a0496ee036d4f3a4b7448f86f9d7daaaa301a3224e096c904778072fbc710c00e7fb16f91255044a506306542906", 0x69}, {&(0x7f0000000540)="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", 0x132}], 0x1000000000000027, 0x1) 1.841522322s ago: executing program 7 (id=1533): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="378303076844263bba765f9b4305", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.829999793s ago: executing program 4 (id=1534): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffff7a, 0xffffffff, 0x210, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000180)) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4a21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x1c, 0x0}, 0xd158e5cd3365400d) 1.64442171s ago: executing program 7 (id=1535): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000000c0), 0x0, 0x10000009, 0xffffffff) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0xffbf}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000680)=[{{&(0x7f00000008c0)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000740)="3ea25a51ad3ad320bd5f4c606314e490d288699ce1db186dec8c5c4bbdb7", 0x1e}], 0x1}}], 0x1, 0x20000014) lstat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RMKNOD(r1, &(0x7f0000000440)={0x14, 0x13, 0x2, {0x0, 0x4, 0x1}}, 0x14) 874.9764ms ago: executing program 4 (id=1536): flistxattr(0xffffffffffffffff, &(0x7f0000000280)=""/183, 0xb7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000000c0)={0xf28, 0xf, 0xa}, 0xc) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r3 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) shmdt(r3) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32, @ANYBLOB="0028000000000000140012800c0001006d61", @ANYRES32, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f64", 0x27}], 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) ioctl$TCSETSW(r8, 0x5403, &(0x7f00000000c0)={0x1ff, 0x1, 0x80000001, 0x7fffffff, 0x1b, "48b429d2ee13ed2ee2f41900"}) ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000000)={0xffffffef, 0x2, 0x6, 0x2, 0x90, "990001000000001300"}) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) 814.345005ms ago: executing program 7 (id=1538): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000038c0), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000300)=@newtaction={0x14, 0x30, 0x53b}, 0x14}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="1cd11e41cf8f94a12dc1eb5d4ff78a9e0172f465a4429c740473affe1baeee2ada8ffe27db39c728ba9cdd621a132a09a9586e80d05ffc0e79360079e829a36afff8859f7ef42f7a3e65850ff689f097456eeb9c4f3d48571c36803fc05099"], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file7\x00', 0x1000000, &(0x7f0000000000)={[{@noblock_validity}]}, 0x1, 0x49a, &(0x7f0000000cc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100070000000000040004000000000010000300000000003500070000000000"], 0x24, 0x3) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xb) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40ebe4ec9ca5cb72}, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x101) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TCXONC(r3, 0x540a, 0x1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r1, 0x201, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 750.615191ms ago: executing program 9 (id=1539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f00000001c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x298, 0x128, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x200, 0x230, 0x230, 0x200, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_to_team\x00'}, 0x0, 0xe0, 0x128, 0x0, {0x1000000}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x0, {0x3}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x378, 0x268, 0x98, 0xfeffffff, 0x268, 0x268, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @remote, @icmp_id}}}}, {{@ip={@rand_addr=0x64010100, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv6=@mcast2, @port=0x4e23, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x0, 0x0) keyctl$setperm(0x5, r5, 0x202408) keyctl$chown(0x4, r5, 0xee01, 0x0) keyctl$setperm(0x5, r5, 0x20925) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r7, 0x0, 0x137, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x50) 666.505179ms ago: executing program 8 (id=1541): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000005304aa"], 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) 662.315389ms ago: executing program 6 (id=1542): unshare(0x28000600) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0) 579.524066ms ago: executing program 4 (id=1543): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000070000000703"], 0x18}, 0x0) 497.414644ms ago: executing program 4 (id=1544): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ff", 0x0, 0x28b, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 497.256734ms ago: executing program 6 (id=1545): r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f0000000100)) 316.412231ms ago: executing program 6 (id=1546): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000f80), 0x2, 0xa8002) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0xfc}, @in=@multicast2, 0x0, 0x4, 0x4e24, 0x20, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x80000000, 0x20, 0x842, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x0, 0x2}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008010}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) setgid(0x0) 266.062895ms ago: executing program 4 (id=1547): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "2311099636ce06f43884a3d12ed62add8fcaaae43e31bcf9bb7a2c7a7d24cd551f751a25e5aa222b1809e8f104a1f36c614b24c98f61b849e95a42ac63ce3ec7", 0x32}, 0xfffffe73, 0xfffffffffffffff9) 32.654676ms ago: executing program 4 (id=1548): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffff7a, 0xffffffff, 0x210, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000180)={[{@inode32}]}) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xd158e5cd3365400d) 7.383778ms ago: executing program 6 (id=1549): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r3, @ANYBLOB="d500000000000200140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="0100"], 0x3c}}, 0x0) 0s ago: executing program 7 (id=1550): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000000c0), 0x0, 0x10000009, 0xffffffff) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0xffbf}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000680)=[{{&(0x7f00000008c0)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000740)="3ea25a51ad3ad320bd5f4c606314e490d288699ce1db186dec8c5c4bbdb7", 0x1e}], 0x1}}], 0x1, 0x20000014) lstat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RMKNOD(r1, &(0x7f0000000440)={0x14, 0x13, 0x2, {0x0, 0x4, 0x1}}, 0x14) kernel console output (not intermixed with test programs): .739242][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'. [ 201.777163][ T70] EXT4-fs (loop4): dirty_blocks=33 [ 201.807090][ T70] EXT4-fs (loop4): Block reservation details [ 201.873924][ T70] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 201.882287][ T7037] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 202.002764][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.137073][ T7037] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 202.179055][ T7165] xt_time: unknown flags 0xc [ 202.474210][ T7037] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 202.634545][ T7176] loop2: detected capacity change from 0 to 512 [ 202.773117][ T7176] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 203.129616][ T7187] netlink: 'syz.4.949': attribute type 13 has an invalid length. [ 203.167397][ T7176] EXT4-fs (loop2): 1 truncate cleaned up [ 203.224412][ T7176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.260115][ T7192] __nla_validate_parse: 1 callbacks suppressed [ 203.260147][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.949'. [ 203.337966][ T7192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.949'. [ 203.465724][ T7184] macvtap1: entered promiscuous mode [ 203.542577][ T7037] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 203.658284][ T7204] netlink: 28 bytes leftover after parsing attributes in process `syz.5.954'. [ 203.688446][ T7204] gtp0: entered promiscuous mode [ 203.707962][ T7204] gtp0: entered allmulticast mode [ 203.778878][ T7219] Cannot find add_set index 0 as target [ 203.787752][ T7205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7205 comm=syz.5.954 [ 203.811111][ T7205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=7205 comm=syz.5.954 [ 203.854081][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.112354][ T7226] syzkaller0: entered promiscuous mode [ 204.127493][ T7226] syzkaller0: entered allmulticast mode [ 204.135570][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.957'. [ 204.186505][ T7245] netlink: 20 bytes leftover after parsing attributes in process `syz.5.958'. [ 204.199261][ T7240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.957'. [ 204.206466][ T7245] netlink: 16 bytes leftover after parsing attributes in process `syz.5.958'. [ 204.223733][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.958'. [ 204.287214][ T7037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.349048][ T7037] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.362471][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.369769][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.458370][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.465690][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.488885][ T7269] netlink: 64 bytes leftover after parsing attributes in process `syz.1.962'. [ 204.525268][ T7269] netlink: 136 bytes leftover after parsing attributes in process `syz.1.962'. [ 204.603656][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 204.603677][ T28] audit: type=1400 audit(1771358662.789:2710): avc: denied { bind } for pid=7267 comm="syz.1.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 204.658530][ T28] audit: type=1400 audit(1771358662.789:2711): avc: denied { getopt } for pid=7267 comm="syz.1.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 204.695329][ T7037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.789014][ T28] audit: type=1400 audit(1771358662.969:2712): avc: denied { create } for pid=7289 comm="syz.1.964" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 204.818249][ T28] audit: type=1400 audit(1771358662.969:2713): avc: denied { rename } for pid=7289 comm="syz.1.964" name="file5" dev="tmpfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 204.906098][ T7299] loop1: detected capacity change from 0 to 512 [ 204.933453][ T7299] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 204.966368][ T7299] EXT4-fs (loop1): 1 truncate cleaned up [ 204.972605][ T7299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.154822][ T4336] bond0 (unregistering): Released all slaves [ 205.174811][ T4336] bond1 (unregistering): Released all slaves [ 205.198868][ T7307] syzkaller0: entered promiscuous mode [ 205.204825][ T7307] syzkaller0: entered allmulticast mode [ 205.287131][ T7313] netlink: 'syz.5.969': attribute type 16 has an invalid length. [ 205.295058][ T7313] netlink: 'syz.5.969': attribute type 17 has an invalid length. [ 205.330226][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.350782][ T7313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.553062][ T4336] hsr_slave_0: left promiscuous mode [ 205.620663][ T917] smc: removing ib device !yz! [ 205.651545][ T7339] Cannot find del_set index 4 as target [ 205.825810][ T28] audit: type=1400 audit(1771358664.019:2714): avc: denied { listen } for pid=7337 comm="syz.5.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 206.014884][ T7338] syzkaller0: entered promiscuous mode [ 206.138676][ T7037] veth0_vlan: entered promiscuous mode [ 206.167274][ T7037] veth1_vlan: entered promiscuous mode [ 206.191432][ T7037] veth0_macvtap: entered promiscuous mode [ 206.210482][ T7037] veth1_macvtap: entered promiscuous mode [ 206.242832][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.308506][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.331466][ T56] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.340917][ T56] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.351991][ T56] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.375137][ T56] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.405421][ T7378] syzkaller0: entered promiscuous mode [ 206.411011][ T7378] syzkaller0: entered allmulticast mode [ 206.419194][ T4336] IPVS: stop unused estimator thread 0... [ 206.445099][ T28] audit: type=1400 audit(1771358664.639:2715): avc: denied { mount } for pid=7037 comm="syz-executor" name="/" dev="gadgetfs" ino=3824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 206.528394][ T7388] loop2: detected capacity change from 0 to 512 [ 206.535004][ T7386] lo speed is unknown, defaulting to 1000 [ 206.545952][ T7388] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 206.563989][ T7386] lo speed is unknown, defaulting to 1000 [ 206.576180][ T7388] EXT4-fs (loop2): 1 truncate cleaned up [ 206.583501][ T7386] lo speed is unknown, defaulting to 1000 [ 206.591166][ T7388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.612425][ T7386] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 206.630250][ T6894] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 206.660209][ T7386] lo speed is unknown, defaulting to 1000 [ 206.666770][ T7386] lo speed is unknown, defaulting to 1000 [ 206.678083][ T7386] lo speed is unknown, defaulting to 1000 [ 206.694685][ T7386] lo speed is unknown, defaulting to 1000 [ 206.703249][ T7386] lo speed is unknown, defaulting to 1000 [ 206.726285][ T6894] CPU: 0 UID: 0 PID: 6894 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 206.726321][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 206.726367][ T6894] Call Trace: [ 206.726375][ T6894] [ 206.726383][ T6894] __dump_stack+0x1d/0x30 [ 206.726417][ T6894] dump_stack_lvl+0x95/0xd0 [ 206.726451][ T6894] dump_stack+0x15/0x1b [ 206.726483][ T6894] dump_header+0x80/0x240 [ 206.726507][ T6894] oom_kill_process+0x295/0x350 [ 206.726623][ T6894] out_of_memory+0x97d/0xb80 [ 206.726661][ T6894] try_charge_memcg+0x62e/0xa10 [ 206.726708][ T6894] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 206.726810][ T6894] __swap_cache_prepare_and_add+0x386/0x530 [ 206.726842][ T6894] swap_cache_alloc_folio+0xa2/0x120 [ 206.726891][ T6894] swap_cluster_readahead+0x26e/0x3d0 [ 206.726957][ T6894] swapin_readahead+0xde/0x840 [ 206.726989][ T6894] ? __rcu_read_unlock+0x4e/0x70 [ 206.727012][ T6894] ? __list_del_entry_valid_or_report+0x65/0x130 [ 206.727055][ T6894] ? __rcu_read_unlock+0x4e/0x70 [ 206.727079][ T6894] ? swap_cache_get_folio+0x26f/0x280 [ 206.727163][ T6894] do_swap_page+0x309/0x2210 [ 206.727271][ T6894] ? __schedule+0x85a/0xd40 [ 206.727302][ T6894] ? __rcu_read_lock+0x36/0x50 [ 206.727325][ T6894] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 206.727353][ T6894] handle_mm_fault+0xb40/0x3020 [ 206.727410][ T6894] ? vma_start_read+0x1c7/0x2c0 [ 206.727442][ T6894] do_user_addr_fault+0x62f/0x1050 [ 206.727480][ T6894] ? trace_page_fault_user+0x1f/0xe0 [ 206.727578][ T6894] exc_page_fault+0x62/0xa0 [ 206.727615][ T6894] asm_exc_page_fault+0x26/0x30 [ 206.727688][ T6894] RIP: 0033:0x7fb1ed757817 [ 206.727714][ T6894] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 206.727737][ T6894] RSP: 002b:00007ffdcc962ac0 EFLAGS: 00010202 [ 206.727811][ T6894] RAX: 0000000000000000 RBX: 0000555561d56500 RCX: 00007fb1ed757817 [ 206.727838][ T6894] RDX: 00007ffdcc962b00 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.727854][ T6894] RBP: 00007ffdcc962b6c R08: 0000000000000000 R09: 0000000000000000 [ 206.727870][ T6894] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 206.727885][ T6894] R13: 00000000000927c0 R14: 00000000000325ac R15: 00007ffdcc962bc0 [ 206.727973][ T6894] [ 206.728048][ T6894] memory: usage 302004kB, limit 307200kB, failcnt 109 [ 206.970949][ T6894] memory+swap: usage 214980kB, limit 9007199254740988kB, failcnt 0 [ 206.974499][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.979460][ T6894] kmem: usage 214752kB, limit 9007199254740988kB, failcnt 0 [ 206.995527][ T6894] Memory cgroup stats for /syz5: [ 206.996017][ T6894] cache 0 [ 207.004383][ T6894] rss 28672 [ 207.032905][ T6894] shmem 0 [ 207.036725][ T6894] mapped_file 0 [ 207.082977][ T6894] dirty 0 [ 207.087778][ T6894] writeback 24576 [ 207.091546][ T6894] workingset_refault_anon 2 [ 207.191451][ T6894] workingset_refault_file 0 [ 207.211850][ T6894] swap 77824 [ 207.239337][ T6894] swapcached 110592 [ 207.297964][ T6894] pgpgin 12237 [ 207.301394][ T6894] pgpgout 12229 [ 207.336839][ T6894] pgfault 15511 [ 207.425863][ T7412] vhci_hcd vhci_hcd.3: invalid port number 9 [ 207.472236][ T28] audit: type=1400 audit(1771358665.619:2716): avc: denied { mounton } for pid=7401 comm="syz.2.982" path="/proc/634/task" dev="proc" ino=17248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 207.662097][ T6894] pgmajfault 1 [ 207.761803][ T6894] inactive_anon 28672 [ 207.904474][ T6894] active_anon 4096 [ 207.908271][ T6894] inactive_file 0 [ 207.974947][ T6894] active_file 0 [ 207.978557][ T6894] unevictable 0 [ 207.982090][ T6894] hierarchical_memory_limit 314572800 [ 208.012022][ T7427] loop6: detected capacity change from 0 to 1024 [ 208.014054][ T6894] hierarchical_memsw_limit 9223372036854771712 [ 208.026993][ T6894] total_cache 0 [ 208.126321][ T6894] total_rss 28672 [ 208.142440][ T7427] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.163093][ T6894] total_shmem 0 [ 208.166610][ T6894] total_mapped_file 0 [ 208.170619][ T6894] total_dirty 0 [ 208.176380][ T6894] total_writeback 24576 [ 208.180574][ T6894] total_workingset_refault_anon 2 [ 208.188135][ T6894] total_workingset_refault_file 0 [ 208.193412][ T6894] total_swap 77824 [ 208.197237][ T6894] total_swapcached 110592 [ 208.201816][ T6894] total_pgpgin 12237 [ 208.210760][ T7440] Cannot find del_set index 4 as target [ 208.216946][ T6894] total_pgpgout 12229 [ 208.221154][ T6894] total_pgfault 15511 [ 208.225780][ T6894] total_pgmajfault 1 [ 208.229744][ T6894] total_inactive_anon 28672 [ 208.239841][ T6894] total_active_anon 4096 [ 208.248833][ T6894] total_inactive_file 0 [ 208.253142][ T6894] total_active_file 0 [ 208.257178][ T6894] total_unevictable 0 [ 208.261232][ T6894] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.979,pid=7372,uid=0 [ 208.273096][ T7446] syzkaller0: entered promiscuous mode [ 208.284117][ T6894] Memory cgroup out of memory: OOM victim 7372 (syz.5.979) is already exiting. Skip killing the task [ 208.297666][ T7446] syzkaller0: entered allmulticast mode [ 208.429170][ T7458] loop5: detected capacity change from 0 to 512 [ 208.469422][ T7037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.478839][ T7458] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 208.527947][ T7458] EXT4-fs (loop5): 1 truncate cleaned up [ 208.552276][ T7458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.688402][ T6894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.907605][ T7476] xt_time: unknown flags 0xc [ 209.012443][ T7478] netlink: 'syz.2.998': attribute type 16 has an invalid length. [ 209.021418][ T7478] netlink: 'syz.2.998': attribute type 17 has an invalid length. [ 209.061773][ T7478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.377269][ T7481] __nla_validate_parse: 6 callbacks suppressed [ 209.377285][ T7481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.999'. [ 209.458371][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'. [ 209.532353][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1001'. [ 209.559802][ T7489] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1001'. [ 209.839908][ T7506] loop4: detected capacity change from 0 to 512 [ 209.862471][ T7506] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 209.902303][ T7512] Cannot find add_set index 0 as target [ 209.943465][ T7506] EXT4-fs (loop4): 1 truncate cleaned up [ 209.978525][ T7506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.085365][ T7527] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1015'. [ 210.129759][ T7527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.140410][ T7527] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1015'. [ 210.149798][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1015'. [ 210.213887][ T7535] xt_time: unknown flags 0xc [ 210.312120][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.380517][ T7540] loop6: detected capacity change from 0 to 164 [ 210.456470][ T7540] rock: directory entry would overflow storage [ 210.466804][ T7540] rock: sig=0x4543, size=28, remaining=18 [ 210.532595][ T28] audit: type=1400 audit(1771358668.689:2717): avc: denied { mount } for pid=7537 comm="syz.6.1018" name="/" dev="loop6" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 210.795999][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1021'. [ 210.814106][ T28] audit: type=1400 audit(1771358668.939:2718): avc: denied { unmount } for pid=7037 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 210.871382][ T7544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1021'. [ 210.994303][ T7557] syzkaller0: entered promiscuous mode [ 210.999877][ T7557] syzkaller0: entered allmulticast mode [ 211.049744][ T7559] loop2: detected capacity change from 0 to 8192 [ 211.105356][ T3305] loop2: p4 < > [ 211.120994][ T7559] loop2: p4 < > [ 211.143745][ T7565] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1028'. [ 211.159389][ T7565] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.284241][ T7576] tmpfs: Bad value for 'mpol' [ 211.295405][ T28] audit: type=1400 audit(1771358669.479:2719): avc: denied { mounton } for pid=7574 comm="syz.6.1031" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 211.334811][ T7575] loop4: detected capacity change from 0 to 512 [ 211.354289][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 211.373731][ T7575] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.1032: corrupted in-inode xattr: bad e_name length [ 211.434829][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 211.448040][ T7575] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 211.448247][ T7575] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1032: couldn't read orphan inode 15 (err -117) [ 211.457692][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 211.457714][ C0] EXT4-fs (loop4): initial error at time 1771358669: ext4_iget_extra_inode:5025: inode 15 [ 211.457745][ C0] EXT4-fs (loop4): last error at time 1771358669: ext4_iget_extra_inode:5025: inode 15 [ 211.533802][ T7575] loop4: lost filesystem error report for type 5 error -117 [ 211.538833][ T7580] loop2: detected capacity change from 0 to 8192 [ 211.560281][ T7575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.593443][ T3305] loop2: p2 p3 p4 [ 211.597523][ T3305] loop2: p2 size 8388608 extends beyond EOD, truncated [ 211.607245][ T3305] loop2: p3 start 134217728 is beyond EOD, truncated [ 211.616833][ T3305] loop2: p4 size 262144 extends beyond EOD, truncated [ 211.645063][ T7580] loop2: p2 p3 p4 [ 211.648974][ T7580] loop2: p2 size 8388608 extends beyond EOD, truncated [ 211.656680][ T7580] loop2: p3 start 134217728 is beyond EOD, truncated [ 211.672532][ T7591] netlink: 'syz.6.1038': attribute type 16 has an invalid length. [ 211.680677][ T7591] netlink: 'syz.6.1038': attribute type 17 has an invalid length. [ 211.686980][ T7580] loop2: p4 size 262144 extends beyond EOD, truncated [ 211.808364][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 211.815937][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 211.830328][ T7591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.854723][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.865429][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 211.868782][ T4526] lo speed is unknown, defaulting to 1000 [ 211.876168][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 211.963892][ T7601] syzkaller0: entered promiscuous mode [ 211.969631][ T7601] syzkaller0: entered allmulticast mode [ 212.277712][ T7625] loop2: detected capacity change from 0 to 512 [ 212.304940][ T7625] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.1050: corrupted in-inode xattr: bad e_name length [ 212.333274][ T7625] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 212.333502][ T7625] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1050: couldn't read orphan inode 15 (err -117) [ 212.354571][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 212.354614][ C0] EXT4-fs (loop2): initial error at time 1771358670: ext4_iget_extra_inode:5025: inode 15 [ 212.354641][ C0] EXT4-fs (loop2): last error at time 1771358670: ext4_iget_extra_inode:5025: inode 15 [ 212.397094][ T7633] loop5: detected capacity change from 0 to 164 [ 212.403610][ T7625] loop2: lost filesystem error report for type 5 error -117 [ 212.404431][ T7625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.430038][ T7635] netlink: 'syz.6.1053': attribute type 16 has an invalid length. [ 212.481312][ T7635] netlink: 'syz.6.1053': attribute type 17 has an invalid length. [ 212.533114][ T7639] syzkaller0: entered promiscuous mode [ 212.539043][ T7639] syzkaller0: entered allmulticast mode [ 212.558415][ T7640] loop5: detected capacity change from 0 to 512 [ 212.588748][ T7640] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 212.611183][ T7640] EXT4-fs (loop5): 1 truncate cleaned up [ 212.619665][ T7635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.646126][ T7640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.749493][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.901405][ T6894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.993606][ T7669] netlink: 'syz.2.1067': attribute type 16 has an invalid length. [ 213.006908][ T7669] netlink: 'syz.2.1067': attribute type 17 has an invalid length. [ 213.022304][ T7669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.042407][ T7672] loop5: detected capacity change from 0 to 512 [ 213.050122][ T7670] syzkaller0: entered promiscuous mode [ 213.055720][ T7670] syzkaller0: entered allmulticast mode [ 213.079241][ T7672] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.1069: corrupted in-inode xattr: bad e_name length [ 213.103257][ T7672] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 213.103542][ T7672] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1069: couldn't read orphan inode 15 (err -117) [ 213.124635][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 213.124661][ C0] EXT4-fs (loop5): initial error at time 1771358671: ext4_iget_extra_inode:5025: inode 15 [ 213.124705][ C0] EXT4-fs (loop5): last error at time 1771358671: ext4_iget_extra_inode:5025: inode 15 [ 213.163151][ T7672] loop5: lost filesystem error report for type 5 error -117 [ 213.163940][ T7672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.413874][ T7687] loop4: detected capacity change from 0 to 8192 [ 213.437667][ T6894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.492386][ T7687] loop4: p1[EZD] p2 p3 p4 [ 213.505285][ T7687] loop4: p3 start 117772289 is beyond EOD, truncated [ 213.522412][ T7687] loop4: p4 size 262144 extends beyond EOD, truncated [ 213.569308][ T7698] loop2: detected capacity change from 0 to 1764 [ 213.614567][ T7698] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 213.658005][ T7704] syzkaller0: entered promiscuous mode [ 213.675928][ T7704] syzkaller0: entered allmulticast mode [ 213.689455][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 213.689585][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 213.729986][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 214.050800][ T7721] loop6: detected capacity change from 0 to 512 [ 214.159151][ T7721] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.1088: corrupted in-inode xattr: bad e_name length [ 214.308434][ T7721] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 214.310996][ T7721] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1088: couldn't read orphan inode 15 (err -117) [ 214.322953][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 214.322973][ C0] EXT4-fs (loop6): initial error at time 1771358672: ext4_iget_extra_inode:5025: inode 15 [ 214.323007][ C0] EXT4-fs (loop6): last error at time 1771358672: ext4_iget_extra_inode:5025: inode 15 [ 214.393023][ T7721] loop6: lost filesystem error report for type 5 error -117 [ 214.400339][ T7731] __nla_validate_parse: 22 callbacks suppressed [ 214.400362][ T7731] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1091'. [ 214.433300][ T7721] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.482307][ T7737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1091'. [ 214.563393][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1091'. [ 214.740691][ T7758] syzkaller0: entered promiscuous mode [ 214.754506][ T7758] syzkaller0: entered allmulticast mode [ 214.882502][ T7037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.993994][ T7766] Cannot find del_set index 4 as target [ 215.159045][ T7770] loop6: detected capacity change from 0 to 512 [ 215.160618][ T7770] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 215.182168][ T7770] EXT4-fs (loop6): 1 truncate cleaned up [ 215.183357][ T7770] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.508000][ T7037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.563959][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1105'. [ 215.659176][ T7777] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.667086][ T7777] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.676205][ T7784] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1105'. [ 215.747861][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1105'. [ 215.760463][ T7777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.773896][ T7777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.815182][ T7777] gtp0: left promiscuous mode [ 215.820084][ T7777] gtp0: left allmulticast mode [ 215.826717][ T917] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.853914][ T917] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.864015][ T917] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.873540][ T917] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.922420][ T7791] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1108'. [ 215.940344][ T7791] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1108'. [ 215.956773][ T7793] netlink: 'syz.6.1109': attribute type 16 has an invalid length. [ 215.963821][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1108'. [ 215.973268][ T7793] netlink: 'syz.6.1109': attribute type 17 has an invalid length. [ 215.998975][ T7793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.094169][ T7802] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1112'. [ 216.105219][ T7804] netlink: 'syz.2.1114': attribute type 16 has an invalid length. [ 216.114856][ T7804] netlink: 'syz.2.1114': attribute type 17 has an invalid length. [ 216.138454][ T7804] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.167140][ T7805] syzkaller0: entered promiscuous mode [ 216.174653][ T7805] syzkaller0: entered allmulticast mode [ 216.269597][ T28] audit: type=1326 audit(1771358674.459:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1821c629 code=0x7ffc0000 [ 216.311273][ T28] audit: type=1326 audit(1771358674.459:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1821c629 code=0x7ffc0000 [ 216.360033][ T28] audit: type=1326 audit(1771358674.459:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad1821c629 code=0x7ffc0000 [ 216.425478][ T28] audit: type=1326 audit(1771358674.459:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1821c629 code=0x7ffc0000 [ 216.449985][ T28] audit: type=1326 audit(1771358674.459:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1821c629 code=0x7ffc0000 [ 216.473841][ T28] audit: type=1326 audit(1771358674.469:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad1821c629 code=0x7ffc0000 [ 216.498367][ T28] audit: type=1326 audit(1771358674.479:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1821c629 code=0x7ffc0000 [ 216.562256][ T7819] Cannot find add_set index 0 as target [ 216.668284][ T7809] batman_adv: batadv0: Adding interface: dummy0 [ 216.733997][ T28] audit: type=1326 audit(1771358674.479:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1821c629 code=0x7ffc0000 [ 216.773124][ T7809] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.923587][ T28] audit: type=1326 audit(1771358674.479:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fad1821c629 code=0x7ffc0000 [ 216.988728][ T7809] batman_adv: batadv0: Interface activated: dummy0 [ 217.026815][ T28] audit: type=1326 audit(1771358674.479:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7808 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1821c629 code=0x7ffc0000 [ 217.078003][ T7816] batadv0: mtu less than device minimum [ 217.176246][ T7816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.187305][ T7816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.198310][ T7816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.209564][ T7816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.221056][ T7816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.232240][ T7816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.243271][ T7816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.254304][ T7816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.265634][ T7816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.434484][ T7830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.549304][ T7839] netlink: 'syz.6.1124': attribute type 16 has an invalid length. [ 217.557544][ T7839] netlink: 'syz.6.1124': attribute type 17 has an invalid length. [ 217.639103][ T7843] netlink: 'syz.5.1126': attribute type 16 has an invalid length. [ 217.659962][ T7843] netlink: 'syz.5.1126': attribute type 17 has an invalid length. [ 217.676780][ T7847] syzkaller0: entered promiscuous mode [ 217.682406][ T7847] syzkaller0: entered allmulticast mode [ 217.736761][ T7850] loop6: detected capacity change from 0 to 512 [ 217.774362][ T7843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.783712][ T7843] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.783718][ T7850] ALSA: seq fatal error: cannot create timer (-22) [ 218.053645][ T7856] Cannot find del_set index 4 as target [ 218.459167][ T7867] Cannot find add_set index 0 as target [ 218.833880][ T7869] loop6: detected capacity change from 0 to 512 [ 218.895198][ T7869] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 218.946242][ T7869] EXT4-fs (loop6): 1 truncate cleaned up [ 219.056054][ T7869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.245959][ T7037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.309922][ T7893] netlink: 'syz.2.1140': attribute type 16 has an invalid length. [ 219.348251][ T7893] netlink: 'syz.2.1140': attribute type 17 has an invalid length. [ 219.471049][ T7894] loop6: detected capacity change from 0 to 512 [ 219.596967][ T7894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.655417][ T7912] syzkaller0: entered promiscuous mode [ 219.663957][ T7894] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.700383][ T7912] syzkaller0: entered allmulticast mode [ 219.815703][ T7926] loop2: detected capacity change from 0 to 512 [ 219.854170][ T7926] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.1144: corrupted in-inode xattr: bad e_name length [ 219.867951][ T7926] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 219.872944][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 219.888792][ C1] EXT4-fs (loop2): initial error at time 1771358678: ext4_iget_extra_inode:5025: inode 15 [ 219.898291][ T7926] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1144: couldn't read orphan inode 15 (err -117) [ 219.899045][ C1] EXT4-fs (loop2): last error at time 1771358678: ext4_iget_extra_inode:5025: inode 15 [ 219.957394][ T7926] loop2: lost filesystem error report for type 5 error -117 [ 219.958151][ T7926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.257577][ T7037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.267341][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.415436][ T7954] __nla_validate_parse: 12 callbacks suppressed [ 220.415454][ T7954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1147'. [ 220.435687][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1148'. [ 220.482257][ T7954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1147'. [ 220.493174][ T7955] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1148'. [ 220.525534][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1147'. [ 220.539806][ T7955] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1148'. [ 220.762329][ T7960] loop4: detected capacity change from 0 to 512 [ 220.819208][ T7960] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 220.867850][ T7960] EXT4-fs (loop4): 1 truncate cleaned up [ 220.900714][ T7960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.928924][ T7958] loop6: detected capacity change from 0 to 512 [ 221.060377][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.096271][ T7974] loop2: detected capacity change from 0 to 512 [ 221.171293][ T7974] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 221.198743][ T7982] syzkaller0: entered promiscuous mode [ 221.213511][ T7973] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 221.233788][ T7982] syzkaller0: entered allmulticast mode [ 221.242122][ T7974] EXT4-fs (loop2): 1 truncate cleaned up [ 221.262755][ T7958] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.285703][ T7958] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.307899][ T7974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.373748][ T7037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.641921][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1160'. [ 221.708095][ T8019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1160'. [ 221.887870][ T8037] xt_time: unknown flags 0xc [ 222.263319][ T8041] Cannot find add_set index 0 as target [ 223.721592][ T8075] lo speed is unknown, defaulting to 1000 [ 223.799283][ T8084] loop4: detected capacity change from 0 to 512 [ 223.912671][ T8075] chnl_net:caif_netlink_parms(): no params data found [ 224.018702][ T7997] Process accounting resumed [ 224.065679][ T8075] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.069348][ T8084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.087230][ T8075] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.087376][ T8075] bridge_slave_0: entered allmulticast mode [ 224.088992][ T8075] bridge_slave_0: entered promiscuous mode [ 224.141793][ T8075] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.155697][ T8084] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.172994][ T8075] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.186343][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.191255][ T8075] bridge_slave_1: entered allmulticast mode [ 224.234864][ T8075] bridge_slave_1: entered promiscuous mode [ 224.300724][ T8075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.311460][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.322602][ T8075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.361733][ T8075] team0: Port device team_slave_0 added [ 224.366505][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 224.366548][ T28] audit: type=1326 audit(1771358682.549:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.5.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ed79c629 code=0x7ffc0000 [ 224.395306][ T8098] syzkaller0: entered promiscuous mode [ 224.419255][ T28] audit: type=1326 audit(1771358682.549:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.5.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ed79c629 code=0x7ffc0000 [ 224.442110][ T8098] syzkaller0: entered allmulticast mode [ 224.469571][ T28] audit: type=1326 audit(1771358682.549:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.5.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ed79c629 code=0x7ffc0000 [ 224.497622][ T8075] team0: Port device team_slave_1 added [ 224.515344][ T28] audit: type=1326 audit(1771358682.549:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.5.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ed79c629 code=0x7ffc0000 [ 224.540591][ T28] audit: type=1326 audit(1771358682.549:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.5.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fb1ed79c629 code=0x7ffc0000 [ 224.564611][ T28] audit: type=1326 audit(1771358682.549:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.5.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ed79c629 code=0x7ffc0000 [ 224.588769][ T28] audit: type=1326 audit(1771358682.549:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.5.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ed79c629 code=0x7ffc0000 [ 224.623355][ T8075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.630629][ T8075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.659269][ T28] audit: type=1326 audit(1771358682.569:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.5.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ed79c629 code=0x7ffc0000 [ 224.679378][ T8075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.703010][ T28] audit: type=1326 audit(1771358682.569:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.5.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ed79c629 code=0x7ffc0000 [ 224.715663][ T8075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.730318][ T28] audit: type=1326 audit(1771358682.569:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.5.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb1ed79c629 code=0x7ffc0000 [ 224.745047][ T8075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.789149][ T8075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.801866][ T7433] bond0: (slave syz_tun): Releasing backup interface [ 224.849990][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1172'. [ 224.852837][ T8075] hsr_slave_0: entered promiscuous mode [ 224.881405][ T8115] validate_nla: 1 callbacks suppressed [ 224.881424][ T8115] netlink: 'syz.2.1173': attribute type 16 has an invalid length. [ 224.895729][ T8115] netlink: 'syz.2.1173': attribute type 17 has an invalid length. [ 224.896176][ T8075] hsr_slave_1: entered promiscuous mode [ 224.909854][ T8075] debugfs: 'hsr0' already exists in 'hsr' [ 224.916495][ T8075] Cannot create hsr debugfs directory [ 224.936797][ T8115] net_ratelimit: 13 callbacks suppressed [ 224.936806][ T8115] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.967731][ T8113] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1172'. [ 225.098328][ T8075] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 225.132259][ T8075] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 225.154281][ T8075] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 225.161503][ T8124] netlink: 'syz.5.1175': attribute type 10 has an invalid length. [ 225.210604][ T8126] loop6: detected capacity change from 0 to 512 [ 225.311449][ T8124] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 225.402722][ T8075] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 225.419222][ T8126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.636642][ T8133] loop4: detected capacity change from 0 to 512 [ 225.657546][ T8126] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.689602][ T8141] loop5: detected capacity change from 0 to 512 [ 225.723697][ T8133] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.1178: corrupted in-inode xattr: bad e_name length [ 225.749992][ T8141] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 225.757060][ T8133] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 225.763567][ T4336] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 225.764446][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 225.791652][ C1] EXT4-fs (loop4): initial error at time 1771358683: ext4_iget_extra_inode:5025: inode 15 [ 225.798681][ T4336] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 225.803388][ C1] EXT4-fs (loop4): last error at time 1771358683: ext4_iget_extra_inode:5025: inode 15 [ 225.835975][ T8141] EXT4-fs (loop5): 1 truncate cleaned up [ 225.844523][ T8133] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1178: couldn't read orphan inode 15 (err -117) [ 225.897506][ T8133] loop4: lost filesystem error report for type 5 error -117 [ 225.898030][ T8133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.917758][ T4336] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 76:3e:6b:e5:e2:b8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 225.929378][ T8141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.991693][ T4336] erspan0 (unregistering): left promiscuous mode [ 226.003551][ T4336] gretap0 (unregistering): left promiscuous mode [ 226.135892][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.168873][ T7037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.180223][ T4336] bond2 (unregistering): (slave macvlan2): Removing an active aggregator [ 226.194634][ T4336] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 226.218619][ T4336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.231832][ T4336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.297686][ T8180] xt_time: unknown flags 0xc [ 226.451482][ T4336] bond0 (unregistering): Released all slaves [ 226.464474][ T4336] bond1 (unregistering): (slave veth3): Releasing backup interface [ 226.475216][ T4336] bond1 (unregistering): Released all slaves [ 226.488365][ T4336] bond2 (unregistering): (slave veth7): Releasing backup interface [ 226.499079][ T4336] bond2 (unregistering): (slave veth9): Releasing backup interface [ 226.511788][ T4336] bond2 (unregistering): Released all slaves [ 226.606209][ T8185] team0: entered promiscuous mode [ 226.625719][ T8185] team_slave_0: entered promiscuous mode [ 226.639816][ T8185] team_slave_1: entered promiscuous mode [ 226.648924][ T8185] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 226.667344][ T8173] syzkaller0: entered promiscuous mode [ 226.673197][ T8173] syzkaller0: entered allmulticast mode [ 226.697009][ T4336] hsr_slave_0: left promiscuous mode [ 226.709032][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.849918][ T8187] netlink: 'syz.6.1184': attribute type 16 has an invalid length. [ 226.858012][ T8187] netlink: 'syz.6.1184': attribute type 17 has an invalid length. [ 226.871955][ T6894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.895350][ T8190] __nla_validate_parse: 4 callbacks suppressed [ 226.895366][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1185'. [ 226.936510][ T8187] team0: left promiscuous mode [ 226.941475][ T8187] team_slave_0: left promiscuous mode [ 226.948010][ T8187] team_slave_1: left promiscuous mode [ 226.959625][ T8187] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.982656][ T8075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.991411][ T8190] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1185'. [ 227.000997][ T8075] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.019720][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.027089][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.067523][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.075262][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.220227][ T8208] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1190'. [ 227.236915][ T8208] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1190'. [ 227.250016][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1190'. [ 227.432701][ T8219] loop2: detected capacity change from 0 to 512 [ 227.464442][ T8225] netlink: 'syz.6.1192': attribute type 16 has an invalid length. [ 227.490146][ T8219] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.1191: corrupted in-inode xattr: bad e_name length [ 227.518628][ T8225] netlink: 'syz.6.1192': attribute type 17 has an invalid length. [ 227.537245][ T8219] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 227.539238][ T8219] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1191: couldn't read orphan inode 15 (err -117) [ 227.549640][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 227.549668][ C0] EXT4-fs (loop2): initial error at time 1771358685: ext4_iget_extra_inode:5025: inode 15 [ 227.549717][ C0] EXT4-fs (loop2): last error at time 1771358685: ext4_iget_extra_inode:5025: inode 15 [ 227.645785][ T8225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.690449][ T4336] IPVS: stop unused estimator thread 0... [ 227.809188][ T8219] loop2: lost filesystem error report for type 5 error -117 [ 227.812399][ T8219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.952392][ T8239] loop4: detected capacity change from 0 to 512 [ 228.030395][ T8239] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 228.062057][ T8245] syzkaller0: entered promiscuous mode [ 228.068738][ T8245] syzkaller0: entered allmulticast mode [ 228.081885][ T8075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.090788][ T8239] EXT4-fs (loop4): 1 truncate cleaned up [ 228.097411][ T8239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.202608][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.258649][ T8265] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1198'. [ 228.312493][ T8265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1198'. [ 228.334994][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1198'. [ 228.355398][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.391916][ T8279] netlink: 'syz.2.1198': attribute type 10 has an invalid length. [ 228.409339][ T8280] loop6: detected capacity change from 0 to 512 [ 228.425111][ T8280] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 228.491259][ T8280] EXT4-fs (loop6): 1 truncate cleaned up [ 228.503427][ T8280] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.638161][ T8075] veth0_vlan: entered promiscuous mode [ 228.667675][ T8297] netlink: 'syz.4.1203': attribute type 16 has an invalid length. [ 228.675885][ T8297] netlink: 'syz.4.1203': attribute type 17 has an invalid length. [ 228.744577][ T8297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.797946][ T8075] veth1_vlan: entered promiscuous mode [ 228.804564][ T7037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.867531][ T8075] veth0_macvtap: entered promiscuous mode [ 228.883510][ T8075] veth1_macvtap: entered promiscuous mode [ 228.936074][ T8075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.993761][ T8075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.034708][ T70] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.130143][ T8315] loop4: detected capacity change from 0 to 512 [ 229.351235][ T8315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.370230][ T8315] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.539478][ T70] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.576779][ T70] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.607838][ T70] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.769507][ T8331] loop2: detected capacity change from 0 to 512 [ 229.783980][ T8331] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 229.799870][ T8333] syzkaller0: entered promiscuous mode [ 229.817943][ T8331] EXT4-fs (loop2): 1 truncate cleaned up [ 229.846175][ T8333] syzkaller0: entered allmulticast mode [ 229.860308][ T8331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.910452][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.107269][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.177452][ T8343] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1212'. [ 230.187182][ T8343] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1212'. [ 230.187541][ T8340] loop4: detected capacity change from 0 to 512 [ 230.215989][ T8343] netlink: 'syz.2.1212': attribute type 10 has an invalid length. [ 230.304305][ T8355] loop2: detected capacity change from 0 to 512 [ 230.309023][ T8340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.328840][ T8355] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 230.363456][ T8358] Cannot find add_set index 0 as target [ 230.386254][ T8340] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.422647][ T8355] EXT4-fs (loop2): 1 truncate cleaned up [ 230.440213][ T8355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.466648][ T8362] netlink: 'syz.5.1217': attribute type 16 has an invalid length. [ 230.495525][ T8362] netlink: 'syz.5.1217': attribute type 17 has an invalid length. [ 230.574041][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.616374][ T8362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.785509][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.930425][ T8378] loop7: detected capacity change from 0 to 512 [ 231.009187][ T8379] Cannot find del_set index 4 as target [ 231.082231][ T8378] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 231.155673][ T8376] loop2: detected capacity change from 0 to 512 [ 231.186395][ T8378] EXT4-fs (loop7): 1 truncate cleaned up [ 231.194988][ T8378] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.378547][ T8376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.460762][ T8376] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.571143][ T8075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.713365][ T8397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.815836][ T8397] netlink: 'syz.7.1225': attribute type 10 has an invalid length. [ 231.843444][ T8397] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.851054][ T8397] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.862313][ T8397] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.869726][ T8397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.877243][ T8397] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.884558][ T8397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.896418][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.931965][ T8397] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 231.991771][ T8408] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 232.013484][ T8408] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 232.037262][ T8406] loop5: detected capacity change from 0 to 512 [ 232.135386][ T8414] xt_time: unknown flags 0xc [ 232.272376][ T8406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.334689][ T8406] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.667929][ T6894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.698871][ T8424] loop4: detected capacity change from 0 to 512 [ 232.729852][ T8424] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.1235: corrupted in-inode xattr: bad e_name length [ 232.739306][ T8427] __nla_validate_parse: 6 callbacks suppressed [ 232.739362][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1236'. [ 232.766871][ T8424] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 232.767211][ T8424] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1235: couldn't read orphan inode 15 (err -117) [ 232.777532][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 232.777570][ C1] EXT4-fs (loop4): initial error at time 1771358690: ext4_iget_extra_inode:5025: inode 15 [ 232.777600][ C1] EXT4-fs (loop4): last error at time 1771358690: ext4_iget_extra_inode:5025: inode 15 [ 232.810048][ T8427] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1236'. [ 232.817490][ T8424] loop4: lost filesystem error report for type 5 error -117 [ 232.829404][ T8424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.966560][ T8434] Cannot find del_set index 4 as target [ 233.300051][ T8451] netlink: 'syz.7.1244': attribute type 10 has an invalid length. [ 233.368457][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.386535][ T8451] team0: Port device netdevsim1 added [ 233.449411][ T8455] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1241'. [ 233.460049][ T8455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1241'. [ 233.470413][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1241'. [ 233.490954][ T8455] netlink: 'syz.4.1241': attribute type 10 has an invalid length. [ 233.595362][ T8457] loop7: detected capacity change from 0 to 512 [ 233.657788][ T8463] xt_time: unknown flags 0xc [ 233.841844][ T8457] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.968031][ T8457] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.283122][ T8075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.428127][ T8485] netlink: 'syz.4.1256': attribute type 16 has an invalid length. [ 234.451613][ T8489] syzkaller0: entered promiscuous mode [ 234.457752][ T8485] netlink: 'syz.4.1256': attribute type 17 has an invalid length. [ 234.459587][ T8489] syzkaller0: entered allmulticast mode [ 234.495473][ T28] kauditd_printk_skb: 127 callbacks suppressed [ 234.495490][ T28] audit: type=1400 audit(1771358692.689:2890): avc: denied { getattr } for pid=8492 comm="syz.2.1259" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 234.536270][ T8485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.756518][ T8499] loop4: detected capacity change from 0 to 512 [ 234.931198][ T8499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.953880][ T8499] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.054344][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.299945][ T8525] xt_time: unknown flags 0xc [ 235.511093][ T8531] netlink: 'syz.7.1269': attribute type 10 has an invalid length. [ 235.588221][ T8531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.657481][ T8531] team0: Port device bond0 added [ 236.009492][ T8538] Cannot find add_set index 0 as target [ 236.154399][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1273'. [ 236.271929][ T8540] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1273'. [ 236.545537][ T8551] netlink: 'syz.5.1276': attribute type 16 has an invalid length. [ 236.555433][ T8546] loop6: detected capacity change from 0 to 512 [ 236.564064][ T8551] netlink: 'syz.5.1276': attribute type 17 has an invalid length. [ 236.605294][ T8551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.725485][ T8546] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.757710][ T8546] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.837350][ T7037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.967732][ T28] audit: type=1326 audit(1771358695.159:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1821c629 code=0x7ffc0000 [ 236.997880][ T8567] loop6: detected capacity change from 0 to 512 [ 237.024908][ T28] audit: type=1326 audit(1771358695.189:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1821c629 code=0x7ffc0000 [ 237.050360][ T28] audit: type=1326 audit(1771358695.189:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fad1821c629 code=0x7ffc0000 [ 237.074922][ T28] audit: type=1326 audit(1771358695.189:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1821c629 code=0x7ffc0000 [ 237.099738][ T28] audit: type=1326 audit(1771358695.189:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1821c629 code=0x7ffc0000 [ 237.147432][ T8567] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.166494][ T8567] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.787248][ T7037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.886750][ T8597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1292'. [ 237.897413][ T8597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1292'. [ 237.906517][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1292'. [ 237.944106][ T8599] Cannot find add_set index 0 as target [ 238.687967][ T8626] loop7: detected capacity change from 0 to 128 [ 238.710612][ T8626] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.726210][ T8626] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.824467][ T8626] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 238.872502][ T8630] netlink: 'syz.7.1301': attribute type 16 has an invalid length. [ 238.880666][ T8630] netlink: 'syz.7.1301': attribute type 17 has an invalid length. [ 238.941945][ T8630] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.096638][ T8634] syzkaller0: entered promiscuous mode [ 239.102785][ T8634] syzkaller0: entered allmulticast mode [ 239.246331][ T8637] netlink: 'syz.7.1304': attribute type 16 has an invalid length. [ 239.254413][ T8637] netlink: 'syz.7.1304': attribute type 17 has an invalid length. [ 239.287251][ T8637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.354892][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1305'. [ 239.374056][ T8639] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1305'. [ 239.384914][ T8639] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1305'. [ 239.457049][ T8643] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1307'. [ 239.496078][ T8643] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 239.554992][ T8645] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1308'. [ 239.800877][ T8654] Cannot find del_set index 4 as target [ 240.028193][ T8645] loop5: detected capacity change from 0 to 1024 [ 240.067165][ T8645] EXT4-fs: Ignoring removed bh option [ 240.253592][ T8645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.444056][ T6894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.598235][ T8669] netlink: 'syz.7.1316': attribute type 16 has an invalid length. [ 240.607015][ T8669] netlink: 'syz.7.1316': attribute type 17 has an invalid length. [ 240.647720][ T8669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.697736][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'. [ 240.721538][ T8673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1317'. [ 240.796410][ T8678] loop7: detected capacity change from 0 to 512 [ 240.831327][ T8678] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.1318: corrupted in-inode xattr: bad e_name length [ 240.851323][ T8667] loop5: detected capacity change from 0 to 512 [ 240.925267][ T8678] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 240.925532][ T8678] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1318: couldn't read orphan inode 15 (err -117) [ 240.934768][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 240.934788][ C1] EXT4-fs (loop7): initial error at time 1771358699: ext4_iget_extra_inode:5025: inode 15 [ 240.934814][ C1] EXT4-fs (loop7): last error at time 1771358699: ext4_iget_extra_inode:5025: inode 15 [ 241.002948][ T8678] loop7: lost filesystem error report for type 5 error -117 [ 241.005637][ T8678] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.089932][ T8667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.114019][ T8667] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.344524][ T8075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.466542][ T6894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.279963][ T8749] netlink: 'syz.7.1326': attribute type 16 has an invalid length. [ 242.377937][ T8749] netlink: 'syz.7.1326': attribute type 17 has an invalid length. [ 242.518389][ T8749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.563535][ T8753] loop4: detected capacity change from 0 to 512 [ 242.747239][ T8753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.835004][ T8753] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.852315][ T8774] loop7: detected capacity change from 0 to 1024 [ 242.924123][ T8774] EXT4-fs: Ignoring removed bh option [ 242.941277][ T8774] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.334692][ T8075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.344659][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.490698][ T8801] netlink: 'syz.4.1338': attribute type 16 has an invalid length. [ 244.502373][ T8801] netlink: 'syz.4.1338': attribute type 17 has an invalid length. [ 244.537580][ T8801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.619521][ T8805] __nla_validate_parse: 4 callbacks suppressed [ 244.619543][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1340'. [ 244.734273][ T8805] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1340'. [ 245.356509][ T8819] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1343'. [ 245.699195][ T8821] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1345'. [ 245.760556][ T8817] loop4: detected capacity change from 0 to 512 [ 245.771908][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1345'. [ 246.027153][ T8817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.158709][ T8817] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.680943][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.068742][ T8838] netlink: 'syz.6.1350': attribute type 16 has an invalid length. [ 247.097615][ T8838] netlink: 'syz.6.1350': attribute type 17 has an invalid length. [ 247.116084][ T8836] loop7: detected capacity change from 0 to 512 [ 247.173766][ T8834] loop4: detected capacity change from 0 to 512 [ 247.185673][ T8838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.269141][ T8836] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.303277][ T8836] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.475388][ T8834] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.652525][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1351'. [ 247.808908][ T8075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.468632][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1356'. [ 248.500328][ T8860] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1356'. [ 248.581751][ T8862] loop6: detected capacity change from 0 to 512 [ 248.599500][ T8862] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.1357: corrupted in-inode xattr: bad e_name length [ 248.613490][ T8862] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 248.615118][ T8862] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1357: couldn't read orphan inode 15 (err -117) [ 248.624577][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 248.624597][ C1] EXT4-fs (loop6): initial error at time 1771358706: ext4_iget_extra_inode:5025: inode 15 [ 248.624647][ C1] EXT4-fs (loop6): last error at time 1771358706: ext4_iget_extra_inode:5025: inode 15 [ 248.674585][ T8862] loop6: lost filesystem error report for type 5 error -117 [ 248.675332][ T8862] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.885306][ T8834] EXT4-fs error (device loop4): ext4_add_entry:2415: inode #2: comm syz.4.1348: Directory hole found for htree leaf block 0 [ 248.962554][ T8870] EXT4-fs error (device loop4): ext4_add_entry:2415: inode #2: comm syz.4.1348: Directory hole found for htree leaf block 0 [ 249.004773][ T7037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.104984][ T3321] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 249.170187][ T8869] loop7: detected capacity change from 0 to 512 [ 249.261331][ T8875] netlink: 'syz.4.1360': attribute type 16 has an invalid length. [ 249.303224][ T8875] netlink: 'syz.4.1360': attribute type 17 has an invalid length. [ 249.344964][ T8876] Cannot find add_set index 0 as target [ 249.422060][ T8869] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.467010][ T8869] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.759658][ T8875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.892232][ T8075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.909560][ T8880] netlink: 'syz.4.1361': attribute type 16 has an invalid length. [ 249.938408][ T8880] netlink: 'syz.4.1361': attribute type 17 has an invalid length. [ 250.010942][ T8880] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.155197][ T8890] netlink: 'syz.6.1374': attribute type 16 has an invalid length. [ 250.164109][ T8890] netlink: 'syz.6.1374': attribute type 17 has an invalid length. [ 250.216134][ T8890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.440481][ T8896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1364'. [ 250.810885][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1367'. [ 250.832514][ T8900] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1367'. [ 251.369489][ T8912] loop6: detected capacity change from 0 to 512 [ 251.392155][ T8916] Cannot find del_set index 4 as target [ 251.619345][ T8912] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.707424][ T8912] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.942277][ T8922] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1375'. [ 252.122339][ T8924] loop4: detected capacity change from 0 to 512 [ 252.206578][ T8924] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 252.267812][ T8924] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 252.354784][ T8924] EXT4-fs (loop4): mount failed [ 252.506722][ T7037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.591039][ T28] audit: type=1326 audit(1771358966.782:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.4.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a92456417 code=0x7ffc0000 [ 252.621708][ T8928] netlink: 'syz.6.1377': attribute type 16 has an invalid length. [ 252.642646][ T28] audit: type=1326 audit(1771358966.782:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.4.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a923fda19 code=0x7ffc0000 [ 252.675004][ T8928] netlink: 'syz.6.1377': attribute type 17 has an invalid length. [ 252.720595][ T8928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.779217][ T28] audit: type=1326 audit(1771358966.782:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.4.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a92456417 code=0x7ffc0000 [ 252.804355][ T28] audit: type=1326 audit(1771358966.782:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.4.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a923fda19 code=0x7ffc0000 [ 252.840907][ T28] audit: type=1326 audit(1771358966.782:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.4.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a92456417 code=0x7ffc0000 [ 252.868505][ T28] audit: type=1326 audit(1771358966.782:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.4.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a923fda19 code=0x7ffc0000 [ 252.898254][ T28] audit: type=1326 audit(1771358966.782:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.4.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a92456417 code=0x7ffc0000 [ 252.922355][ T28] audit: type=1326 audit(1771358966.782:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.4.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a923fda19 code=0x7ffc0000 [ 252.947428][ T28] audit: type=1326 audit(1771358966.782:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.4.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a92456417 code=0x7ffc0000 [ 252.978887][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1380'. [ 252.992255][ T8935] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1380'. [ 253.002779][ T8935] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1380'. [ 253.353946][ T8942] loop6: detected capacity change from 0 to 512 [ 253.448827][ T8942] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.482298][ T8942] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.649383][ T7037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.837999][ T8956] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1385'. [ 253.924445][ T8957] Cannot find add_set index 0 as target [ 254.006565][ T8959] netlink: 'syz.6.1385': attribute type 10 has an invalid length. [ 254.104549][ T8959] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.112226][ T8959] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.298847][ T8959] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.306042][ T8959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.313793][ T8959] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.320956][ T8959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.360646][ T8959] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 254.472729][ T8961] loop4: detected capacity change from 0 to 512 [ 254.523931][ T8951] lo speed is unknown, defaulting to 1000 [ 254.665018][ T8976] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1391'. [ 254.694115][ T8976] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1391'. [ 254.793751][ T8961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.794028][ T8951] chnl_net:caif_netlink_parms(): no params data found [ 254.812498][ T8961] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.978988][ T8951] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.008480][ T8951] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.035663][ T8951] bridge_slave_0: entered allmulticast mode [ 255.048766][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.058022][ T8951] bridge_slave_0: entered promiscuous mode [ 255.104945][ T8951] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.137936][ T8951] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.155403][ T8951] bridge_slave_1: entered allmulticast mode [ 255.176812][ T8951] bridge_slave_1: entered promiscuous mode [ 255.240979][ T8951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.268011][ T8989] loop6: detected capacity change from 0 to 512 [ 255.501858][ T8989] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.552605][ T8989] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.807785][ T8951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.832200][ T7037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.883636][ T8951] team0: Port device team_slave_0 added [ 255.898140][ T8951] team0: Port device team_slave_1 added [ 255.939564][ T8951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.955464][ T8951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.043128][ T8951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.176489][ T8951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.190776][ T8951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.217277][ T8951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.262546][ T8951] hsr_slave_0: entered promiscuous mode [ 256.270929][ T8951] hsr_slave_1: entered promiscuous mode [ 256.305999][ T9014] Cannot find del_set index 4 as target [ 256.690764][ T8951] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 256.768901][ T8951] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 256.816226][ T8951] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 256.842396][ T8951] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 256.926437][ T9025] __nla_validate_parse: 2 callbacks suppressed [ 256.926497][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1401'. [ 257.015698][ T9030] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1401'. [ 257.022313][ T8951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.064367][ T8951] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.076102][ T9031] loop4: detected capacity change from 0 to 512 [ 257.084715][ T9025] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1401'. [ 257.112455][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.119711][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.136992][ T9031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.149100][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.156673][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.187793][ T9031] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.252770][ T8951] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 257.266190][ T8951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.276799][ T9037] loop7: detected capacity change from 0 to 512 [ 257.359282][ T9037] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.397390][ T8951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.439836][ T9037] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.761133][ T8951] veth0_vlan: entered promiscuous mode [ 257.790994][ T8951] veth1_vlan: entered promiscuous mode [ 257.831310][ T8951] veth0_macvtap: entered promiscuous mode [ 257.853136][ T8951] veth1_macvtap: entered promiscuous mode [ 257.886329][ T8951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.920123][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.937147][ T8951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.966236][ T30] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.979563][ T30] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.008073][ T30] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.054412][ T9065] loop4: detected capacity change from 0 to 512 [ 258.057485][ T30] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.080160][ T9065] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 258.183578][ T9065] EXT4-fs (loop4): 1 truncate cleaned up [ 258.236039][ T9065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.724445][ T9068] lo speed is unknown, defaulting to 1000 [ 259.145867][ T9068] chnl_net:caif_netlink_parms(): no params data found [ 259.266458][ T9101] Cannot find add_set index 0 as target [ 259.761080][ T9068] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.778081][ T9068] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.789115][ T9068] bridge_slave_0: entered allmulticast mode [ 259.796276][ T9068] bridge_slave_0: entered promiscuous mode [ 259.810759][ T9068] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.818225][ T9068] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.826017][ T9068] bridge_slave_1: entered allmulticast mode [ 259.834724][ T9068] bridge_slave_1: entered promiscuous mode [ 259.957081][ T9068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.977608][ T9068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.998010][ T8075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.020592][ T9068] team0: Port device team_slave_0 added [ 260.042497][ T9068] team0: Port device team_slave_1 added [ 260.111719][ T9068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.129187][ T9068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.183408][ T9068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.229211][ T4336] bridge_slave_0: left allmulticast mode [ 260.244121][ T4336] bridge_slave_0: left promiscuous mode [ 260.265490][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.327042][ T9118] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1414'. [ 260.477952][ T9121] loop7: detected capacity change from 0 to 512 [ 260.538211][ T9121] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.593902][ T9121] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.079345][ T8075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.247141][ T9064] Process accounting resumed [ 261.252030][ T9132] netlink: 'syz.7.1419': attribute type 27 has an invalid length. [ 261.290226][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.481355][ T4336] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 261.498895][ T4336] bridge_slave_1: left allmulticast mode [ 261.596137][ T4336] bond0 (unregistering): Released all slaves [ 261.724752][ T4336] bond1 (unregistering): Released all slaves [ 261.789299][ T9068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.858728][ T9068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.932606][ T9145] loop6: detected capacity change from 0 to 128 [ 262.024444][ T9068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.123999][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 262.124061][ T28] audit: type=1326 audit(1771358976.322:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9144 comm="syz.6.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5d6fc629 code=0x7ffc0000 [ 262.183177][ T28] audit: type=1326 audit(1771358976.322:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9144 comm="syz.6.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5d6fc629 code=0x7ffc0000 [ 262.231106][ T28] audit: type=1326 audit(1771358976.322:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9144 comm="syz.6.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a5d6fc629 code=0x7ffc0000 [ 262.270561][ T9147] loop6: detected capacity change from 0 to 512 [ 262.285613][ T9147] journal_path: Non-blockdev passed as './file2' [ 262.292002][ T9147] EXT4-fs: error: could not find journal device path [ 262.299843][ T9132] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.307198][ T9132] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.333374][ T28] audit: type=1326 audit(1771358976.322:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9144 comm="syz.6.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5d6fc629 code=0x7ffc0000 [ 262.379830][ T28] audit: type=1326 audit(1771358976.322:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9144 comm="syz.6.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2a5d6fc629 code=0x7ffc0000 [ 262.404318][ T28] audit: type=1326 audit(1771358976.402:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9144 comm="syz.6.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5d6fc629 code=0x7ffc0000 [ 262.477429][ T9152] Cannot find add_set index 0 as target [ 262.584107][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1421'. [ 262.639350][ T9147] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1421'. [ 262.670595][ T28] audit: type=1326 audit(1771358976.402:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9144 comm="syz.6.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5d6fc629 code=0x7ffc0000 [ 262.745475][ T28] audit: type=1326 audit(1771358976.462:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9144 comm="syz.6.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2a5d6fc629 code=0x7ffc0000 [ 262.840780][ T28] audit: type=1326 audit(1771358976.462:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9144 comm="syz.6.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5d6fc629 code=0x7ffc0000 [ 262.914354][ T28] audit: type=1326 audit(1771358976.462:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9144 comm="syz.6.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2a5d6fc629 code=0x7ffc0000 [ 262.982741][ T9132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.994435][ T9132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.111461][ T9133] bond0: (slave bridge0): Releasing backup interface [ 263.116852][ T9155] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1424'. [ 263.129656][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1424'. [ 263.139209][ T9133] team0: Port device bond0 removed [ 263.144818][ T9133] bridge_slave_0: left allmulticast mode [ 263.150502][ T9133] bridge_slave_0: left promiscuous mode [ 263.156766][ T9133] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.170562][ T9133] bridge_slave_1: left allmulticast mode [ 263.176362][ T9133] bridge_slave_1: left promiscuous mode [ 263.182161][ T9133] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.191408][ T9133] bond0: (slave bond_slave_0): Releasing backup interface [ 263.199963][ T9133] bond0: (slave bond_slave_1): Releasing backup interface [ 263.209155][ T9133] team0: Port device team_slave_0 removed [ 263.216195][ T9133] team0: Port device team_slave_1 removed [ 263.222214][ T9133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.230226][ T9133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.239884][ T9133] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 263.257171][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1420'. [ 263.271537][ T4336] hsr_slave_0: left promiscuous mode [ 263.278117][ T4336] hsr_slave_1: left promiscuous mode [ 263.406435][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.450601][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.458759][ T4336] batman_adv: batadv0: Interface deactivated: dummy0 [ 263.468246][ T4336] batman_adv: batadv0: Removing interface: dummy0 [ 264.892694][ T917] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.929445][ T917] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.949381][ T917] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.969682][ T9140] lo speed is unknown, defaulting to 1000 [ 265.086601][ T9161] lo speed is unknown, defaulting to 1000 [ 265.140168][ T9068] hsr_slave_0: entered promiscuous mode [ 265.182471][ T9068] hsr_slave_1: entered promiscuous mode [ 265.209033][ T9068] debugfs: 'hsr0' already exists in 'hsr' [ 265.240875][ T9068] Cannot create hsr debugfs directory [ 265.265617][ T917] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.461634][ T9183] loop7: detected capacity change from 0 to 512 [ 265.593067][ T9183] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.622432][ T9200] Cannot find add_set index 0 as target [ 265.686992][ T9068] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 265.699071][ T9068] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 265.712736][ T9183] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.771530][ T9068] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 265.854577][ T9068] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 266.051339][ T8075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.146599][ T9068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.175919][ T9068] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.195423][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.202797][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.331387][ T9223] Cannot find del_set index 4 as target [ 266.793402][ T9225] macsec0: entered promiscuous mode [ 266.809238][ T6982] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.816685][ T6982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.856766][ T9243] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1438'. [ 266.863606][ T9068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.874247][ T9243] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1438'. [ 266.983442][ T4336] bridge_slave_1: left allmulticast mode [ 267.000767][ T4336] bridge_slave_1: left promiscuous mode [ 267.014751][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.029835][ T4336] bridge_slave_0: left allmulticast mode [ 267.037109][ T4336] bridge_slave_0: left promiscuous mode [ 267.055879][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.136729][ T4336] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 267.200379][ T9258] loop8: detected capacity change from 0 to 512 [ 267.245542][ T9258] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.261707][ T9258] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.415659][ T4336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.442265][ T4336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.452459][ T4336] bond0 (unregistering): Released all slaves [ 267.460384][ T4336] bond1 (unregistering): Released all slaves [ 267.491293][ T8951] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.547598][ T9068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.757479][ T9287] Cannot find add_set index 0 as target [ 268.307829][ T9292] lo speed is unknown, defaulting to 1000 [ 268.729839][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1448'. [ 268.747943][ T4336] hsr_slave_0: left promiscuous mode [ 268.754426][ T9296] netlink: 'syz.8.1447': attribute type 16 has an invalid length. [ 268.776743][ T4336] hsr_slave_1: left promiscuous mode [ 268.978576][ T9303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1448'. [ 268.988518][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.996132][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.013127][ T9296] netlink: 'syz.8.1447': attribute type 17 has an invalid length. [ 269.056016][ T9304] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1448'. [ 269.070082][ T4336] team0 (unregistering): Port device team_slave_1 removed [ 269.097148][ T4336] team0 (unregistering): Port device team_slave_0 removed [ 269.168668][ T9302] veth1_macvtap: left promiscuous mode [ 269.186313][ T9302] macsec0: entered promiscuous mode [ 269.358284][ T9296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.511567][ T9329] netlink: 'syz.4.1452': attribute type 10 has an invalid length. [ 269.709632][ T9068] veth0_vlan: entered promiscuous mode [ 269.755673][ T9068] veth1_vlan: entered promiscuous mode [ 269.846193][ T9068] veth0_macvtap: entered promiscuous mode [ 269.864527][ T9068] veth1_macvtap: entered promiscuous mode [ 269.915671][ T9068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.947249][ T9068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.000862][ T56] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.025496][ T56] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.044499][ T9346] loop8: detected capacity change from 0 to 512 [ 270.082635][ T56] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.171287][ T917] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.226345][ T9346] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.251716][ T9346] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.277179][ T9369] Cannot find del_set index 4 as target [ 270.661697][ T8951] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.774947][ T9371] loop9: detected capacity change from 0 to 512 [ 270.866909][ T9371] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.885896][ T9371] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.054067][ T9068] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.244958][ T9407] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1461'. [ 271.259756][ T9407] macsec0: left promiscuous mode [ 271.724177][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1462'. [ 271.757752][ T9416] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1462'. [ 271.769035][ T9416] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1462'. [ 271.845096][ T9430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1476'. [ 271.898674][ T9434] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1476'. [ 271.977174][ T9382] kexec: Could not allocate control_code_buffer [ 271.993459][ T9437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1476'. [ 272.082272][ T9423] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.090006][ T9423] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.209650][ T9423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.299826][ T9459] Cannot find del_set index 4 as target [ 273.770924][ T9460] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1471'. [ 273.792977][ T9423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.852663][ T9461] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1471'. [ 273.862332][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1471'. [ 273.990105][ T9423] macsec0: left promiscuous mode [ 274.099634][ T4523] lo speed is unknown, defaulting to 1000 [ 274.105956][ T4523] syz2: Port: 1 Link DOWN [ 274.122046][ T9442] lo speed is unknown, defaulting to 1000 [ 274.149645][ T9469] netlink: 'syz.4.1473': attribute type 27 has an invalid length. [ 274.258578][ T50] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.399056][ T9479] Cannot find del_set index 4 as target [ 275.403296][ T9472] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 275.605467][ T9508] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1479'. [ 275.807778][ T50] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.860886][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1474'. [ 275.880101][ T9483] lo speed is unknown, defaulting to 1000 [ 276.099962][ T50] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.114016][ T50] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.352666][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1485'. [ 276.400658][ T9531] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1485'. [ 276.412798][ T9531] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1485'. [ 276.506513][ T9537] loop7: detected capacity change from 0 to 512 [ 276.787591][ T9537] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.1486: corrupted in-inode xattr: bad e_name length [ 276.791280][ T9546] xt_time: unknown flags 0xc [ 277.358005][ T9548] Cannot find del_set index 4 as target [ 277.409070][ T9537] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 277.409307][ T9537] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1486: couldn't read orphan inode 15 (err -117) [ 277.418712][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 277.418746][ C0] EXT4-fs (loop7): initial error at time 1771358991: ext4_iget_extra_inode:5025: inode 15 [ 277.418777][ C0] EXT4-fs (loop7): last error at time 1771358991: ext4_iget_extra_inode:5025: inode 15 [ 277.558093][ T9537] loop7: lost filesystem error report for type 5 error -117 [ 277.559317][ T9537] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.875251][ T9553] loop8: detected capacity change from 0 to 512 [ 277.925560][ T9553] __quota_error: 30 callbacks suppressed [ 277.925580][ T9553] Quota error (device loop8): v2_read_file_info: Free block number 1 out of range (1, 6). [ 277.974827][ T9553] EXT4-fs warning (device loop8): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 278.004015][ T9553] EXT4-fs (loop8): mount failed [ 278.098810][ T8075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.130021][ T9571] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1494'. [ 278.139571][ T9571] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1494'. [ 278.220928][ T28] audit: type=1326 audit(1771358992.412:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.8.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9a1bc36417 code=0x7ffc0000 [ 278.616077][ T28] audit: type=1326 audit(1771358992.412:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.8.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9a1bbdda19 code=0x7ffc0000 [ 278.792274][ T28] audit: type=1326 audit(1771358992.412:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.8.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9a1bc36417 code=0x7ffc0000 [ 278.828707][ T28] audit: type=1326 audit(1771358992.412:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.8.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9a1bbdda19 code=0x7ffc0000 [ 278.876538][ T9593] loop4: detected capacity change from 0 to 512 [ 278.900911][ T28] audit: type=1326 audit(1771358992.412:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.8.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9a1bc36417 code=0x7ffc0000 [ 278.927009][ T9593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.940315][ T9593] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.952414][ T28] audit: type=1326 audit(1771358992.412:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.8.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9a1bbdda19 code=0x7ffc0000 [ 278.976584][ T28] audit: type=1326 audit(1771358992.412:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.8.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9a1bc36417 code=0x7ffc0000 [ 279.001986][ T28] audit: type=1326 audit(1771358992.412:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.8.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9a1bbdda19 code=0x7ffc0000 [ 279.045882][ T28] audit: type=1326 audit(1771358992.412:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.8.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9a1bc36417 code=0x7ffc0000 [ 279.161762][ T9600] __nla_validate_parse: 2 callbacks suppressed [ 279.161781][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1509'. [ 279.187225][ T9577] kexec: Could not allocate control_code_buffer [ 279.331743][ T9600] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1509'. [ 280.113824][ T9612] Cannot find add_set index 0 as target [ 280.334664][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.494978][ T9618] lo speed is unknown, defaulting to 1000 [ 281.070444][ T9624] loop6: detected capacity change from 0 to 512 [ 281.140949][ T9629] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1506'. [ 281.161084][ T9629] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1506'. [ 281.181077][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1506'. [ 281.341690][ T9624] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.1504: corrupted in-inode xattr: bad e_name length [ 281.373599][ T9624] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 281.373813][ T9624] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1504: couldn't read orphan inode 15 (err -117) [ 281.383161][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 281.383184][ C1] EXT4-fs (loop6): initial error at time 1771358995: ext4_iget_extra_inode:5025: inode 15 [ 281.383227][ C1] EXT4-fs (loop6): last error at time 1771358995: ext4_iget_extra_inode:5025: inode 15 [ 281.678344][ T9624] loop6: lost filesystem error report for type 5 error -117 [ 281.679265][ T9624] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.265909][ T9643] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1510'. [ 282.484445][ T9645] loop8: detected capacity change from 0 to 512 [ 282.506492][ T9650] loop9: detected capacity change from 0 to 512 [ 282.518786][ T9645] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 282.549189][ T9645] EXT4-fs (loop8): 1 truncate cleaned up [ 282.555632][ T9645] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.587756][ T9650] EXT4-fs warning (device loop9): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 282.653188][ T9650] EXT4-fs (loop9): mount failed [ 282.720658][ T7037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.767027][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1515'. [ 282.814654][ T9666] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1515'. [ 282.834670][ T9668] loop6: detected capacity change from 0 to 512 [ 282.855495][ T9668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.897216][ T9668] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.936342][ T28] kauditd_printk_skb: 583 callbacks suppressed [ 282.936360][ T28] audit: type=1326 audit(1771358997.122:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9649 comm="syz.9.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f98f937da19 code=0x7ffc0000 [ 283.081736][ T28] audit: type=1326 audit(1771358997.132:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9649 comm="syz.9.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f98f93d6417 code=0x7ffc0000 [ 283.106263][ T28] audit: type=1326 audit(1771358997.132:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9649 comm="syz.9.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f98f937da19 code=0x7ffc0000 [ 283.148387][ T28] audit: type=1326 audit(1771358997.132:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9649 comm="syz.9.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f98f93d6417 code=0x7ffc0000 [ 283.174177][ T28] audit: type=1326 audit(1771358997.132:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9649 comm="syz.9.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f98f937da19 code=0x7ffc0000 [ 283.255985][ T9679] loop4: detected capacity change from 0 to 128 [ 283.263437][ T9679] vfat: Unknown parameter '' [ 283.282530][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1516'. [ 283.719756][ T28] audit: type=1326 audit(1771358997.132:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9649 comm="syz.9.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f98f93d6417 code=0x7ffc0000 [ 283.763165][ T28] audit: type=1326 audit(1771358997.132:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9649 comm="syz.9.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f98f937da19 code=0x7ffc0000 [ 283.827586][ T28] audit: type=1326 audit(1771358997.132:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9649 comm="syz.9.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f98f93d6417 code=0x7ffc0000 [ 283.880928][ T28] audit: type=1326 audit(1771358997.132:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9649 comm="syz.9.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f98f937da19 code=0x7ffc0000 [ 283.924975][ T28] audit: type=1326 audit(1771358997.132:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9649 comm="syz.9.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f98f93d6417 code=0x7ffc0000 [ 284.135369][ T12] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 284.170975][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 284.172135][ T9652] kexec: Could not allocate control_code_buffer [ 284.204025][ T12] EXT4-fs (loop6): This should not happen!! Data will be lost [ 284.204025][ T12] [ 284.276900][ T9687] Cannot find del_set index 4 as target [ 284.318679][ T12] EXT4-fs (loop6): Total free blocks count 0 [ 284.341885][ T12] EXT4-fs (loop6): Free/Dirty block details [ 284.369189][ T12] EXT4-fs (loop6): free_blocks=65280 [ 284.389125][ T12] EXT4-fs (loop6): dirty_blocks=33 [ 284.410156][ T12] EXT4-fs (loop6): Block reservation details [ 284.522164][ T12] EXT4-fs (loop6): i_reserved_data_blocks=33 [ 284.664465][ T7037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.769872][ T9700] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1521'. [ 284.799658][ T9700] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1521'. [ 284.845977][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1521'. [ 284.867149][ T9708] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1522'. [ 284.894674][ T9709] netlink: 'syz.7.1521': attribute type 10 has an invalid length. [ 284.910735][ T9712] loop9: detected capacity change from 0 to 512 [ 284.918459][ T9713] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1522'. [ 284.955760][ T9712] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.978834][ T9708] 8021q: adding VLAN 0 to HW filter on device bond1 [ 284.998284][ T9720] loop4: detected capacity change from 0 to 512 [ 285.004747][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1522'. [ 285.025138][ T9712] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 285.025770][ T9709] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 285.083949][ T9720] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.1524: corrupted in-inode xattr: bad e_name length [ 285.098046][ T9720] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 285.098283][ T9720] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1524: couldn't read orphan inode 15 (err -117) [ 285.107764][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 285.107806][ C0] EXT4-fs (loop4): initial error at time 1771358999: ext4_iget_extra_inode:5025: inode 15 [ 285.107837][ C0] EXT4-fs (loop4): last error at time 1771358999: ext4_iget_extra_inode:5025: inode 15 [ 285.146248][ T9720] loop4: lost filesystem error report for type 5 error -117 [ 285.149285][ T9720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.307021][ T9729] netlink: 'syz.7.1525': attribute type 13 has an invalid length. [ 285.370406][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1525'. [ 285.389220][ T9734] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1525'. [ 285.441199][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.452507][ T9732] syzkaller0: entered promiscuous mode [ 285.538413][ T9743] netlink: 'syz.4.1537': attribute type 16 has an invalid length. [ 285.546398][ T9743] netlink: 'syz.4.1537': attribute type 17 has an invalid length. [ 285.572981][ T9743] netlink: 'syz.4.1537': attribute type 27 has an invalid length. [ 285.869949][ T9752] loop6: detected capacity change from 0 to 128 [ 285.877684][ T9752] vfat: Unknown parameter '' [ 285.894942][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1528'. [ 286.787975][ T9733] Process accounting resumed [ 286.982086][ T8951] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.094615][ T9760] loop6: detected capacity change from 0 to 512 [ 287.121118][ T9756] loop8: detected capacity change from 0 to 512 [ 287.128561][ T9760] EXT4-fs warning (device loop6): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 287.162555][ T9756] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.194091][ T9756] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.213208][ T9760] EXT4-fs (loop6): mount failed [ 287.502229][ T9776] Cannot find del_set index 4 as target [ 287.947780][ T28] kauditd_printk_skb: 202 callbacks suppressed [ 287.947796][ T28] audit: type=1326 audit(1771359002.132:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9759 comm="syz.6.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a5d6f6417 code=0x7ffc0000 [ 287.993182][ T28] audit: type=1326 audit(1771359002.182:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9759 comm="syz.6.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a5d69da19 code=0x7ffc0000 [ 288.016693][ T28] audit: type=1326 audit(1771359002.182:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9759 comm="syz.6.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a5d6f6417 code=0x7ffc0000 [ 288.051237][ T28] audit: type=1326 audit(1771359002.182:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9759 comm="syz.6.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a5d69da19 code=0x7ffc0000 [ 288.077314][ T28] audit: type=1326 audit(1771359002.182:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9759 comm="syz.6.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a5d6f6417 code=0x7ffc0000 [ 288.108819][ T28] audit: type=1326 audit(1771359002.182:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9759 comm="syz.6.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a5d69da19 code=0x7ffc0000 [ 288.132253][ T28] audit: type=1326 audit(1771359002.182:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9759 comm="syz.6.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a5d6f6417 code=0x7ffc0000 [ 288.156109][ T28] audit: type=1326 audit(1771359002.182:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9759 comm="syz.6.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a5d69da19 code=0x7ffc0000 [ 288.179922][ T28] audit: type=1326 audit(1771359002.182:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9759 comm="syz.6.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a5d6f6417 code=0x7ffc0000 [ 288.212447][ T28] audit: type=1326 audit(1771359002.182:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9759 comm="syz.6.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a5d69da19 code=0x7ffc0000 [ 288.281314][ T9793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1536'. [ 288.297536][ T9796] loop7: detected capacity change from 0 to 512 [ 288.313418][ T9796] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.1538: corrupted in-inode xattr: bad e_name length [ 288.334511][ T9796] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 288.342926][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 288.358748][ C1] EXT4-fs (loop7): initial error at time 1771359002: ext4_iget_extra_inode:5025: inode 15 [ 288.368804][ C1] EXT4-fs (loop7): last error at time 1771359002: ext4_iget_extra_inode:5025: inode 15 [ 288.379115][ T9796] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1538: couldn't read orphan inode 15 (err -117) [ 288.394632][ T9068] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.410357][ T9793] netlink: 'syz.4.1536': attribute type 10 has an invalid length. [ 288.422517][ T9796] loop7: lost filesystem error report for type 5 error -117 [ 288.423427][ T9796] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.444365][ T4336] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 288.459490][ T4336] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 288.472565][ T4336] EXT4-fs (loop8): This should not happen!! Data will be lost [ 288.472565][ T4336] [ 288.482985][ T4336] EXT4-fs (loop8): Total free blocks count 0 [ 288.501156][ T4336] EXT4-fs (loop8): Free/Dirty block details [ 288.508778][ T4336] EXT4-fs (loop8): free_blocks=65280 [ 288.514578][ T4336] EXT4-fs (loop8): dirty_blocks=33 [ 288.519824][ T4336] EXT4-fs (loop8): Block reservation details [ 288.526399][ T4336] EXT4-fs (loop8): i_reserved_data_blocks=33 [ 288.740601][ T8951] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.091119][ T8075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.275939][ T8951] ================================================================== [ 289.285349][ T8951] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 289.293113][ T8951] [ 289.295484][ T8951] read-write to 0xffff888237d27760 of 8 bytes by task 9837 on cpu 1: [ 289.303765][ T8951] find_get_block_common+0x459/0x8a0 [ 289.309280][ T8951] bdev_getblk+0x4d/0x3f0 [ 289.313852][ T8951] __ext4_get_inode_loc+0x303/0x930 [ 289.319925][ T8951] ext4_get_inode_loc+0x66/0xe0 [ 289.324993][ T8951] ext4_xattr_ibody_get+0x92/0x2d0 [ 289.330503][ T8951] ext4_xattr_get+0xdc/0x470 [ 289.335846][ T8951] ext4_xattr_security_get+0x32/0x40 [ 289.341619][ T8951] __vfs_getxattr+0x2ad/0x2c0 [ 289.346344][ T8951] get_vfs_caps_from_disk+0x9e/0x360 [ 289.351692][ T8951] cap_bprm_creds_from_file+0x1a2/0xcf0 [ 289.357308][ T8951] security_bprm_creds_from_file+0x3c/0x70 [ 289.363230][ T8951] begin_new_exec+0x1f6/0x1270 [ 289.368120][ T8951] load_elf_binary+0x62b/0x1a20 [ 289.373093][ T8951] bprm_execve+0x476/0x9c0 [ 289.377543][ T8951] do_execveat_common+0x6b7/0x720 [ 289.382684][ T8951] __x64_sys_execve+0x5f/0x80 [ 289.387392][ T8951] x64_sys_call+0x2752/0x3020 [ 289.392203][ T8951] do_syscall_64+0x12c/0x370 [ 289.396820][ T8951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.402748][ T8951] [ 289.405086][ T8951] read to 0xffff888237d27760 of 8 bytes by task 8951 on cpu 0: [ 289.412824][ T8951] has_bh_in_lru+0x35/0x1f0 [ 289.417353][ T8951] smp_call_function_many_cond+0x2c1/0xc30 [ 289.423358][ T8951] on_each_cpu_cond_mask+0x3c/0x80 [ 289.428497][ T8951] invalidate_bh_lrus+0x2a/0x30 [ 289.433382][ T8951] blkdev_flush_mapping+0x9a/0x1a0 [ 289.438523][ T8951] bdev_release+0x2bf/0x3d0 [ 289.443271][ T8951] blkdev_release+0x15/0x20 [ 289.447890][ T8951] __fput+0x29b/0x650 [ 289.452071][ T8951] ____fput+0x1c/0x30 [ 289.456254][ T8951] task_work_run+0x130/0x1a0 [ 289.460972][ T8951] exit_to_user_mode_loop+0x1f4/0x6f0 [ 289.466667][ T8951] do_syscall_64+0x249/0x370 [ 289.471396][ T8951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.477491][ T8951] [ 289.479829][ T8951] value changed: 0x0000000000000000 -> 0xffff8881005123a8 [ 289.486959][ T8951] [ 289.489314][ T8951] Reported by Kernel Concurrency Sanitizer on: [ 289.495491][ T8951] CPU: 0 UID: 0 PID: 8951 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 289.505067][ T8951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.515892][ T8951] ================================================================== [ 289.586543][ T9840] Cannot find del_set index 4 as target