last executing test programs: 7m34.128371339s ago: executing program 32 (id=230): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) 7m0.533150917s ago: executing program 33 (id=572): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, 0x0}}], 0x1, 0x931766f6319eed40) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8c001000, 0x0, 0x0, 0x0, 0x0, 0x0) setgid(0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="00000000020000", @ANYRESHEX, @ANYBLOB=',\x00']) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x14, 0x6400, 0x0, 0x3) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)) 6m54.142685538s ago: executing program 34 (id=614): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x2}, 0x100080, 0x0, 0x0, 0x37f147c935b5820, 0x7fffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb3}, 0x0, 0x0, 0x90a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x400000000010, 0x800, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r4, 0x0, 0x4000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r3, 0x0, 0x0, 0x0}, 0x30) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000240)={'\x00', 0x1, 0x6, 0x401, 0x0, 0x8}) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m8.211226892s ago: executing program 3 (id=1349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000400000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000020000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001400000000028000000000a0104000000000000000003000000090001"], 0xb0}}, 0x0) 5m8.200708762s ago: executing program 3 (id=1351): tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4e, 0x10000000) r0 = dup(0xffffffffffffffff) file_setattr(r0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x80000103, 0x400, 0x72, 0x3, 0x8}, 0x18, 0x100) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x74, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0xc8, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x3, 0x0, 0x3}, {}, {0x0, 0x2, 0x0, 0x1}, {0x0, 0x0, 0x8}, {0xfffd}, {0x16, 0x1}, {0x0, 0xff}, {}, {0x7}, {0x100, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {0x2}, {0x72f, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0x2, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0x10}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x10, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {0x2, 0x55}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x6, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000004c0)='./file0\x00', 0x1000c00, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES32, @ANYRES32], 0xff, 0x248, &(0x7f0000000880)="$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") lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x4}, 0x102802, 0x2e, 0xfffffff8, 0x3, 0x1, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00ce0f9c0940ebc690f92cda9906380f9ee70730", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x0, 0x5004) 5m6.146002168s ago: executing program 3 (id=1355): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xfffc, @any, 0xb}, 0xe) 5m5.909143565s ago: executing program 3 (id=1357): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x14f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x9}, @IFLA_WEIGHT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @random="bd407db97ae7", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x2, 0x3, 0x38, 0x64, 0x0, 0x7, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x3, 0x8f}, @generic={0x44, 0xa, "073292e8acce704a"}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14, 0x6071, 0x0, 0xe7}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x40080) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00'], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f000074c000/0x1000)=nil, &(0x7f00006a6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a3, 0x1, 0x3, 0x347}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x400005, 0x4140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0x2}, 0x2, 0x0, 0xffd, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x20000000005}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000040)={0x67, @loopback, 0x4e20, 0x2, 'rr\x00', 0x8, 0xf, 0x37}, 0x2c) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 5m4.962232366s ago: executing program 3 (id=1368): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000000c0), 0x1, 0x44f, &(0x7f0000000640)="$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") r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0)) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@migrate={0xec, 0x21, 0x409, 0x70bd2d, 0x25dfdbfd, {{@in=@multicast1, @in=@loopback, 0x4e22, 0x7f, 0x4e21, 0xb, 0xa, 0x0, 0x0, 0x32}, 0x6e6bae, 0x2}, [@migrate={0x9c, 0x11, [{@in=@empty, @in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast2, 0xff, 0x2, 0x0, 0x3506, 0x8, 0x2}, {@in6=@empty, @in=@local, @in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x6c, 0x1, 0x0, 0x3500, 0xb, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20008000}, 0x94) syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000200)=ANY=[@ANYBLOB="127629d3d57658cd3b0b576306b34201010200000020050b431740000102030109028800038134482965c092c1f82c85069259640109403fa0ee000000010100000a2401d2000a000201020904010000010200000904010101010200000724010808e4ff0f2402020002ff0f00f441a4440fb209050109ff037808bafe2401080400000000000000330279000904020101010200000b240201fc030801371fc8072401080502100903"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2fa30fa5", @ANYRES16=r3, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x4041}, 0x0) 5m3.840598711s ago: executing program 3 (id=1372): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x8044, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0xd4, 0x2}, 0x100, 0x32, 0x1, 0x6, 0x8, 0x9b9b, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @const={0x2, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x61]}}, 0x0, 0x36, 0x0, 0xfffffffc, 0x9}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800eeffffffffffffffe0113059ffd8a7c7e936eb65c9ab9836cfc42694df1ea4c6abc9000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) 5m3.640127867s ago: executing program 35 (id=1372): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x8044, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0xd4, 0x2}, 0x100, 0x32, 0x1, 0x6, 0x8, 0x9b9b, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @const={0x2, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x61]}}, 0x0, 0x36, 0x0, 0xfffffffc, 0x9}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800eeffffffffffffffe0113059ffd8a7c7e936eb65c9ab9836cfc42694df1ea4c6abc9000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) 4m19.185953061s ago: executing program 7 (id=1670): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x86, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x78, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x6, 0x1f, {0x17, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x2f, 0xe5c, @empty, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x11, 0x3, [{0x7, 0x9, "a88088bea18f92"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x34, 0x4c, 0x1, 0x0, [{@multicast2, 0x9}, {@loopback, 0x5}, {@loopback, 0x20005}, {@loopback}, {@remote, 0x329}, {@rand_addr=0x64010102, 0x4}]}]}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r1) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x10) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) setpriority(0x2, 0x0, 0x6) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000004000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000005"], 0xfc}}, 0x0) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r7, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) r8 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r8, &(0x7f0000000580)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x7, @loopback, 0x0, 0x2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000780)="3f74bb33", 0x4}], 0x1}, 0x40854) 4m18.965233877s ago: executing program 7 (id=1680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x3e8, 0xe, 0x6) timer_create(0x3, 0x0, &(0x7f0000000400)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x77359400}, {0x77359400}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}}, &(0x7f00000008c0)) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x0, 0x7fff, 0x9a}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 4m18.453148014s ago: executing program 7 (id=1685): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0xffffffbc}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r0, &(0x7f0000000840)="a6e0775c40424a", 0x7, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) (async) shutdown(r0, 0x1) 4m18.375032406s ago: executing program 7 (id=1686): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$eJzs3V2IXGcdB+D/md1N87E1H7Zqa2xWQ20gdGez2YREvLDEj1qTWlG8CIWwZKe7IbM7a3YD3algizeiIII3IggVe2FFNJCbSqntRYs3Ckr9oKIxoIIIRSsFEdSRdz620+akCe7uHJrzPHBm3/Oe2X3f2eE355w57zkngNIaSw9ZxGhEXIyI7Z3Z1z9hrPOjefDCXJqyaLU+/bes/byZgxfmek/t/d629DAcsTkidh3LYu/Ile0urTTPTtfrtXPd+ery/GJ1aaV595n56dnabG3h0JGpo5OHp45Mrd9rnfjZ1lv/fOf9l594/p///tZvDv8g9Xe0u6z/dayXsRjr/k9GYmdf/XAWcd96N1aQoc5bHXf21WXDBXaI69Zq7fp+ev/eHhF72/nfHkPRefNeevrBf2yPX91bdB+BjdPqyV/8Sgu4YVXa28BZZTwiOuVKZXy8sw1/S2yt1BtLy/sfapxfmOlsK++IkcpDZ+q1ie6+wo4YydL8gXb5tfnJN8wfjGhvA39paEt7fvx0oz4z6A87oG004tLFz53etO0N+f/LUCf/wI0r5f+XLzz1bCq/OlR0b4BBSvn/3qvznwj5h9KRfygv+Yfykn8oL/mH8pJ/KC/5h/KSfygv+Yfykn8or17+HzhxIh44caLV7J7/vtCYPXN2bvHo5MT4/PnT46cb5xbHZxuN2fYZO/PX/rv1RmPxwGScf7i6XFtari6tNE/NN84vLJ9qn9d/qpZzKQCgACcvb75v557nXsoi4tEPbGlPyabuclmFG1urlUXR5yADxbDrD+XlUm1QXvbxgewayzdfbUF9/fsCDEal6A4AhbnrNsf/oKx8/w/l5ft/KC/b+IDv/6F8fP8P5TV6lft/3dx3766JiHhbRPx0aOSm3r2+gLeU1+3qj0ZcuvSdz1ZX78OtoKCgsFoo7oMKGIzXQl90T4CizBy8MNebBtXmM7ODagnI8/I9nUFAKffN7tRZMrx6bGBkg8YJ7bwjPf7o94/vmxtKU3Q/hzagKSDHo49FxLvy1v9Z+9jAju7zdnWeFrdExK0R8Y6IeOca2/7GpyLG4oVaf538w+Bcb/5vi4i0ur49It4dEbsj4j1rbPsXF1P+f72lv07+oRw+/3zRPQCK8vGniu4BUJSTxhhAaX33kaJ7ABTl6R8W3QOgKF99segeQLk9d09ETOQd/6u0j/f3jHSvC3hT91oAWyJia0Rs655DeHP3HMHtfccMr+XUJyPG4o4f99c5/geD0xv/17xi/F9ldfzfUETsWUMbz3xw9Ct59dO7U/6feKQ3/i9Nqf3eWEBgY738WMTtufnPVsf8ZpFyGvHe/7ONsS9cfjKv/sX7098d+bn8QzFa3454f+TnvyeVqsvzi9Wllebd7ft4z9YWDh2ZOjp5eOrIVLV9iZBq70IhOY7//ZX9efW/m0z5/+Yh+YdipPX/1qvkv3/7/31raOPY1798Mq9+9I8p/7ufffP8V/66KftMe753X4KHp5eXzx2I2JQdv7J+cg0dhRtcLyO9DKX879ubv/+/q/s7af1/LCI+nLYXIuI/EfHfiPhIRHw0Ij4WEfe+SZtfu2v2cl79H55M+X/8rPU/FCPlf+Ya6//0819raGP/vp98Ma/+Q3tS/sd/+6fjDw6nSf4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1t/SSvPsdL1eO7eBhaJfIwAAAAAAAJTF/wIAAP//d8Uzog==") openat(0xffffffffffffff9c, 0x0, 0x0, 0x234d1d727ef5a80a) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7) openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="373fe8af96482c1d4d16667c103bdda0"}}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='ip6erspan0\x00', 0x10) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x4030000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = syz_io_uring_setup(0x5968, &(0x7f0000000180)={0x0, 0x86df, 0x40, 0x0, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) lseek(r3, 0x1, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x22052, r3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000300) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000280)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x23) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSCTTY(r3, 0x540e, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) futex(&(0x7f0000000440)=0x2, 0x8b, 0x2, &(0x7f0000000480), 0x0, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 4m18.286991219s ago: executing program 7 (id=1688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x1, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc1}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fsync(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FIOCLEX(r2, 0x5451) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x105) getdents64(r3, &(0x7f0000000280)=""/152, 0x98) 4m18.003528028s ago: executing program 7 (id=1690): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 4m17.967828219s ago: executing program 36 (id=1690): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 2m29.286326174s ago: executing program 2 (id=2276): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x5) connect$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xe, 0x4, 0x9, 0x7, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="060000000000000069117446a61f4ecd0002000000850000000500000095000000000000009500856a0c582342fafe8eafa451481db06d22b56cc912ce3618951a570f31694d10e19c5c3ebba8d92a513cadc269710642931365d949469accf202d69ae262b693c67c6ba4af381e49ebb2c9a57faf"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) getpid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, &(0x7f00000000c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 2m27.052277035s ago: executing program 2 (id=2280): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000100048c0000000004000500a9930000100000000000000020"], 0x24, 0x0) 2m26.935569678s ago: executing program 2 (id=2281): mkdir(&(0x7f0000000300)='./file0\x00', 0x142) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4c3, &(0x7f00000005c0)="$eJzs3U1oXNUeAPD/nXw0L01f8j54r3SV9wp9fZQmTad5pdAH7apQtGArKOjC0EzStJO2NCmYLMQP0IoK7aYbi6ALBekirlQEkS5ERXDRjaAUVBAbSKtVpAshcu/MxLSZpE1Tc2n8/eBwz7kzc89/5uSeueefSxLAH1ZnROyKiIaI2BIR7dX9hWqJJyslfV6pOHEoLUlMTx+4mkQSEXuLE4dqx0qq29XVA7RExIUPI1ob5/Y7MjZ+pK9cLp2otrtHh493j4yNbx4a7hssDZaOFnu2F4vF3h3F3rv2Xn/45fCZd67vef7sle8//ebi2+eT2BVt1cdmv4+7pTM6Zz6T2RqTiP/f7c5y1pJ3ACza+fvPvJR3DADA8kuv8f8aEf/Orv/boyEqF+uHJx+91h7XBuZ7XcfPr1xezjgBAACAOzcd7bEz3QIAAAArViEi2iIpdFXvBWiLQqGrq3IP79+jtVA+NjK6aeDYyaP9kd0r2xFNhYGhcql2r3BHNCVpuyer/9beelO7GBF/iYhT7X/K2l0Hj5X7805+AAAAwArXFnHpkWfe/efqedb/qS/b844SAAAAWIp0/b/mUmv2p7p+ss4HAACAFSld/1979srHYf0PAAAAK1Zt/T/zf7hUVFRUZip5z1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw1/R0EtMAAADAipZ3/gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHvL3uLEoVpZrj4n9yxXT8xnandEdFTGv1QtlUcaoyXbtkRTRLT+mETjrNclEdGwxL67NkR0xqbPTz/x3VtpierP4RIPyz1i4uu8IyBPzdvyjoA8rXsg7wjI02en8o6APF2cyjsC8rT/QN4RkKd9/8s7AvL08tW8I+CD3RGxpV7+rxBrs20lC3Rz/qchyxAtzSfnIjqj69vZ++bmfwqTS+yGBUztjtgZEaU5+b9C7SkdDdXWmixV2JQMDJVLWyLizxGxMZpWpe2eBfrYu/ZC3UzPi/9Ix//kvlr+Ly1p/7VcYDWOycZVN76uv2+0b6nvm4qppyLWNdYb/2Qm/5vMk/9ddZt9vPfV/uF6+69/lI7/C+8vPP78nqZfjfhP3fM/mXlOWuseHT7ePTI2vnlouG+wNFg6WuzZXiwWe3cUe7uz+aC7NivM9ebTr9f9pv/XwWz+HzP++UnP/9aFxz+b/0fGxo/0lculEyOL7+O5DWfrfoe/cTYd/+YLdzL/NycPZgE2V/c93jc6eqInojm5b+7+rYuPeaWqfR61zysd/43r63//167/KvN/Yc78/7fqtlD5FeK8/vva5br7vzidjn/xIed/ftLx77/F+Z/ccP4vvvLY+v0b6/X9cGTXf+duff5vy4KpHcT1363d7gDlHScAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMz2awAAAP//MEf3BQ==") setxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000780), &(0x7f0000000280)='system_u:object_r:var_log_t:s0\x00', 0x1f, 0x1) 2m26.703171216s ago: executing program 2 (id=2285): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x401}}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)=@newlink={0x38, 0x10, 0x503, 0x0, 0x800000, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x3, 0xe99, 0x41, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x700, 0x1, 0x10000, 0xffff}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00'}, 0x18) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8602, 0x0) preadv2(r7, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000080)=""/40, 0x28}, {&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000480)=""/143, 0x8f}, {&(0x7f0000000540)=""/93, 0x5d}, {&(0x7f00000005c0)=""/14, 0xe}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000006c0)=""/253, 0xfd}, {&(0x7f0000000900)=""/103, 0x67}], 0xa, 0x7fffffff, 0x100, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r9 = signalfd(r0, &(0x7f0000000680)={[0x7fffffffffffffff]}, 0x8) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0xa}, 0xc) r13 = syz_io_uring_complete(0x0, 0x0) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x1d, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x7f}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @alu={0x7, 0x0, 0xa, 0x7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x616}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x6}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0xa0, &(0x7f0000000340)=""/160, 0x41100, 0x40, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000500)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[r6, r8, r9, r10, r11, r12, r13, r14], &(0x7f00000008c0)=[{0x2, 0x2, 0xe}], 0x10, 0x41b}, 0x94) 2m25.487507185s ago: executing program 2 (id=2290): r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x106220, 0x1000, 0x22da, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r2}, 0x10) fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000200000000000000008001e8040000000", 0x24) r6 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="0c0300001b0000012bbdeedaf9d97000fedbdf25000000ffffe000000100000000000000c8499530fa130647084e2306000000e02073000000", @ANYRES32=r2, @ANYRESOCT=r4, @ANYRES64=r3, @ANYRES32=0x0, @ANYBLOB="000000000a0010000100000000000000e4000600ffffffff000000000000000000000000fe8000000000000000000000000000bb4e2000044e2102000a00a02008000000", @ANYRES8=0x0, @ANYRES32=r6, @ANYBLOB="7f000001000000000000000000000000000004d43c000000fe8000000000000000000000000000bb0048751800000000040000000000000004000000000000000100000000000000690400000000000004000000000000000800000000000000050000000000000004000000000000006f000000000000000600000000000000960000000000000005000000ffffffff0a0000002bbd700000350000000006070800000000000000"], 0x30c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x6, 0x20, 0x0, 0x0, 0x0, 0x90281, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, @perf_config_ext={0x4}, 0x0, 0x3e, 0x0, 0x4, 0x2, 0xb3, 0x401, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r8 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r8, &(0x7f0000000700)=[{&(0x7f0000000580)=""/72, 0x48}], 0x1, 0x4, 0x10003ff) sendmmsg$inet(r7, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)='\x00', 0x1}], 0x1}}], 0x1, 0x41) 2m25.166057465s ago: executing program 2 (id=2295): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80380, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000000000006b11ff7f000000008510000002000000850000800500000095005200000000aadb614be525d578fd3f79009500a50500000000abd65bebb9f986d4ef8898924ff499352e0a0053a40ebbe9391b23dc0d08ac8257b4f826629795f67d09599e2b16e12535fda4f5c29dc4183663f8"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) getrlimit(0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r6, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000380)=ANY=[], 0x57) setsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010100}, 0xc) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') r9 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x9000000d}) epoll_wait(r9, &(0x7f0000000d00)=[{}], 0x1, 0x8000) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, 0x0) 2m13.37914558s ago: executing program 8 (id=2361): bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 2m13.190616405s ago: executing program 8 (id=2363): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket(0x400000010, 0x3, 0x0) write(r0, &(0x7f0000000200)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040f815b2ccd243f295edbabc7c3f1a5f4e023dd16b1766f0b0860a0083df150c", 0xba) socket$kcm(0x2, 0x3, 0x84) socket$kcm(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r1], 0x44}}, 0x8000) 2m12.991105712s ago: executing program 8 (id=2364): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) set_mempolicy_home_node(&(0x7f000027a000/0xc00000)=nil, 0xc00000, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu~\"\"\nt\x00') socket$inet6_sctp(0xa, 0x801, 0x84) 2m11.827438599s ago: executing program 8 (id=2368): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f00000003c0)={0x1, 'veth1_virt_wifi\x00', {}, 0x4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r7, 0x0, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0xdcdf, @loopback, 0xffff}]}, &(0x7f0000000100)=0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000400000002000000000000110300000000000000000000000000000d03000000020000000000000c02000000000061"], 0x0, 0x44}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="0100000000"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)=ANY=[@ANYBLOB="4a840200000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 2m10.094081654s ago: executing program 37 (id=2295): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80380, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000000000006b11ff7f000000008510000002000000850000800500000095005200000000aadb614be525d578fd3f79009500a50500000000abd65bebb9f986d4ef8898924ff499352e0a0053a40ebbe9391b23dc0d08ac8257b4f826629795f67d09599e2b16e12535fda4f5c29dc4183663f8"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) getrlimit(0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r6, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000380)=ANY=[], 0x57) setsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010100}, 0xc) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') r9 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x9000000d}) epoll_wait(r9, &(0x7f0000000d00)=[{}], 0x1, 0x8000) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, 0x0) 2m9.068205466s ago: executing program 8 (id=2373): r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x106220, 0x1000, 0x22da, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r2}, 0x10) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 2m8.805281475s ago: executing program 8 (id=2379): socket(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x60) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000d0000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac141442, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="a400000010001fff000000000100007f84000000", @ANYRES32=0x0, @ANYBLOB="00000000022100007c0012800b00010067656e65766500006c000280050009000100000008000b40000007f5060005004e20000005000a000100000005000a000000000014000700000000000000000000000000000000000500040002000000050003000a00000005000900000000001400070020"], 0xa4}}, 0x0) 2m2.233376894s ago: executing program 6 (id=2395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/cgroup\x00') syz_clone3(&(0x7f00000004c0)={0xbe80b200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="65830000000000000000010000000800010074000007080022c1"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r2, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffc, 0x75}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x24040000) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000ffffffff001300000000000000000000ac5e0101000000000000000000000000000107944e230005000000004d000020", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d66c000000e0000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c270800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff0000000000000000d400000000000000ff0100000000000004000000fcffffff000000002abd700000000000020001fd2000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x104, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@empty, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fchdir(0xffffffffffffffff) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 1m59.658159065s ago: executing program 6 (id=2401): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102, 0x25dfdbf8}, 0x14}, 0x1, 0x2b1e}, 0x2004c000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000018000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9004000000000b5090100004100009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) futex(&(0x7f0000004000)=0x7, 0x5, 0x2, 0x0, &(0x7f0000004000)=0x4, 0xb3020000) socket$inet6(0xa, 0x6, 0x8010000000000084) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x6) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="e9a4ea8d246a02fb3d7b6d068c4bd0018e0400000000", 0x16}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)="2ebb203023d89132c1980796d3480bf302680bb6d94cc2ddc4b641c81144696a15b4d88e56d04ec393bf39b3774c70aa01f9aee0fc51897c613f9ed201e53a48b093ea3325ebab77c2d8af147f7ab32ba427004c17a5625c7e10cdd9e30fec85fdb932aa067d0f6e891750cd952158d3288fc4cb3a551e6d8f828c6e02ef0e295c", 0x81}]}}], 0x2, 0x44088) io_uring_setup(0x5bf0, &(0x7f0000000040)={0x0, 0x1dc, 0xf000, 0x3, 0x1d4}) recvmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x96) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f00000001c0)='%d\xf1\xfa\xbc$j\xfe^wb%P\xd3\x9f0/\x7f=\r\xe4\xeaU6f;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad\x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8sQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f$\xc5=\x18\xcct7\xfb\xad4\xe0o`^\'H\'_\xca\x93\xb5\xa2\xc2\xc4\x94z\xee7>}@\x98\xd4\x8a\x1d\xf2\x7fyPQVD\v\x15\x9c\xf0\xb8\xa1w\xa8\xf7\x8c){\x9c\x0eT\x15p+\xbc\xeb\x18\x12\xfa') r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000500)={{r2}, 0x9, &(0x7f0000000480)=[0xc, 0x5, 0x790, 0x9, 0x800, 0x401, 0xe81, 0x0, 0x5], 0x200, 0x8, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000001340)={{r7}, 0x0, 0x10, @unused=[0xc00000000, 0x6, 0x7, 0x10001], @name="74728f05b512f41b397c3d2be1da6c2a61971526c09672ab94e3662d3f6c085f08a6a3ddcd0a1988fb3935040ad1564f6d6ce46eaa1112db758b6ab24f7dc718e540d39ea1e3a1b64e5caca5e1a6e14d5b86c0f4385387ef378509db3c7b3d85806794d91f681484a2042e2f22e533c7667351351e96d7deada7e6d124013ca47174bca7340e79746ced468ec2355b5e95ae4a3e66b2e1d45f11ad6159aa4b778ddf6091c50ebc1b008c09781e56fd9021fde6a8feeea588aa7e8391b9c8a1455cde5e2eed78cd4b4f90d2c586691c68e127168ca3f84db15e8ffbdf5d1ce043042008cf325c16f4dc2b5b1280c5d7324276f8a1c88a675af6c874491e03e05dcc261062f1f75b3abc0a2ccf78992fb219f5f64ace38156ed7a21893e765d530f06bd802cc59b9e0f2747d232c0df04b6dfc05cb732e8da9bbc43f0599de51670d4609c74869a7026d0cc3c8c10c426c21dc6bef78d4d7d6b0c2bfdff3061ace2efb8e9d472ea7c68ec368f96799cfd5425ee723afae7ee1c31b9a3f2cdcabf61efad7a5667f7c06cc648818208c066a6e078720471c58fafbe34e59ecfa9a31aa51ee446396a8caccbe8f9b1002b211aed4ccd2c66c1fabd6b0561e0d6325d108c181a2d5aa14bb63c27f1821ce2670a88a89491713dfede17a3078a5c2b96c47774140425fad40d3168bd3419532b85a7b592e4dfa7cb7df9c45e5e65ccd68580a13955d31495daa5e74e6ad0b0b0ceabde6f0605564a4fd965507b43ceb984759b8215b27f4797028c7e1ff2d4c3803e8d70aa405e932500a0105626ad5969538788b9747c819ec94e75e669af0bb4d008d0e6a8008a4d014038a6d913bb7dfb1e220026cef1152eeeda0ba5f307b6644224f34bada3ca9f4f1a76570f9d87be63bb42dc837791af820a410832b1962026982b6795af1913717d895e8a4ecab42a52804e8d3a757a7893000ce48f6b76a452798eb85df4fd699cc174e88327942adeb3adbf0c1af05df7904402a8c445af69f38ac88c2624993a41a5e7398e56432be5791874bdb2809f3ad01214f1a92b6a8f323330c518177e47d8c0dbf97bb0d1f3c09157d44e915643be4edef663eb3118403baf3dc2eef2eaf4e5068eb49ebd3682da1b335cf5bdc70d0a4cdbf5de55c1aa9d953096b0724fedf7050590cb70967bbf9c55eac1c82ca3a9d180d8eda4116fea1bee161dd066147f7bde15e627e05c6bac5aefce37b239d4354acd5fbb05817dac7b36a81d5068f9021e63e47efa9ed9bcdb126181db556bb66d481b1afe2ba72f33e5afeb98261ea385f6bcab1eb5e7bc8fd5500d8e4d854c6c916311dfddbbe836916867c361a9d77f146088d5640b114a3b7cf0165e723cb9060655c9ab8bdb4dc49440b55af3649871cff5d1fb4b25526eb62b43020c9e1a06c8579dab08c822f2981f5ee4732cba109d7193f9bee00cbe11c88e72f9ebb93648dd38b5bb4ec2d9a0722c761b5f5b0e7e188bb98be1db55c4611fcd5bef9f2749203e7471b832d6647019e2a3cec44019e28bbc8e9ac69943f49b93197cbccb23a0403e372d962a39103de98a3f522202338725f5c4c1c56488a116d53e27ac74ec2d4696bb75b030497b80f358aad64f757d84d914af07a4c810252c89309be49ebf49220ebd7b22c7b888bed509e4c0c48f6abd45f8725b96553731d3739ed793531f4024cdc00df6d691f8f3477ac363389edec117157b740db679603bb14963d47307c5b09945f35715ebf9fb1cc159325d232d7adfced558f80c8994bf09eb5d67aa6448d3dc3f79cd50d742345948962ae57e329b85982c3363dea36e6307004c57b3dd764ad34d66f6218fe4150c7ae7c1d64f10c140c63f2eefa4fa7871935445a206749006070706ea35e2533ea946e93f6ab3659f402bf7a577efaaa914befd43b2ee179bcd6c7f12f86d9d1760e1961b6c27808cde7cb880934d632a73b2c53387a0c84f7d862d53f2b669bb6f0761ca087b7df74685cdcf5e893c01101b1a09ab6f79e4b6072a3219fc0c7b0a7ee587e98f434f7b526a3fadf788e22479869b5c0642b1bac4b31fe959c6c7ffbecb9b048bf7c030bad733c09735c8f4b64b4a07cf32cbed06c887d4203033f2be2fe2e8221b2148b2cc49420637bf84e97c57032abb670b779b9280416a28a135242a39a8d15a8cff19bd78b556392652131c1fab035909c60ad2f313e7487b0b6d91ef5a666121bfa3bf378649eeb7f6c30f9ae36186abb9a3b75164e04a6cee899800bc9fd308139510f0fe49f0e9a20f0c2202d2c473c358a1b615514e92d3af09f1c4a6961ec7482859413ad5dd2c3058e51ca9acf2f9cc038f0155fee3ff9490894c11d81cd975cc8b4be6a82fe0bf94a06ceb97e9ea54921f787bb7cd9ea5e092ff541587df83e6fd4dac5cb941ac8ba2229f7138f581bc61b03b00082a3e4850c08ef3d88002dabc5e45f41e867a414b44c573413413821a000ca34dddcafa51ac8742e1099ff913c8beff8d14bced5e0ae9c3b9f787d62e12dab72a322f64d95ec100ae4d4b0f2157d4bd47e169e1ea479fb7fc85f251283c288ed7f5232a319b2f111f733636943c87bbcb72d11e2b255dcd870db9aecc08ef7c3bdb143ddf69c8ba7eb84338766b504db20752c26becfc199068fae7554a46d01bcf2041a7b7aaff07d7920c00291c519aea878c704c97f40d14f8d81c6e4db5cd9ef27f69b66d6fec11d970fdf772f94329a19b15195228df13c3bbaede7a8fef09102a58160c3bb3d18fdc71ba119076cae258ceba9b2171f6e27c449a550d3e4f5d08a332af7dfdf1861509c4daaeb2cd5dc5f9190ffc89f5e3f5812619b4fb705082bcc94c1c091ef3621b46112cbe67d76669cb914d5a1b4ba9f52033c96e72ac966ca15a6526143725ddb6f50f20a0cd8b7b2c107bd5515d2468e82fc47c037c6e7de207d062d3b9b2e85e051d35234f2ae964570c27d7fb1a66c4707a69fb65b9304656a6705356fbb4f3b86465b83227689ac0c4321a4ac389d0840182d6318c6b4d377908ba16639cab836d323edb4fecbb00a4c502ba951ff761876cf88c66d6e6bdb9a3b0c4206e565d05bc80ae8d52cb4d19299fc93ad5ee41dfe7dcc1a257a4fc5a3c7434b4a9e8df5421fe15422d2ada7fff1c8335e1d2f8b46415c4e42d7540a9f8ca2f3bcd8f6032297e9842255cefa267c9f505266fc3beae476de7120af12cd5ffb27f3167ce3995bb1500efa85125f65da102ea870deebb64587a65cde1291cddf248e7a18cfd0b0afe5ec90c22936aa7d098e608b6fd296ee92e4bfa1ff8fbd83c1982bedc3e5ae644c7b3436559048655d3b2f50152eaf01d90d770b74805b7d11ed315b40d9f26d8c3c42a1a00adf839751e8fbae296852d0b8629ab7f018d297c2b6e8dcbf2ecb82bd40b05340efb0b3eafb52a5b6255591cdb0bcc1017fb494ed197b32d0a3e06b79c34a434c76d5f80294dd288d0c0ce7df71b85bbc16cd83f96362bf3e73a9f3d8f53be9cc3376b89fef0c8fb13524fccf9c819d2579118935f0e34939eeb923520b5695dbee1923baa0b352dc11bee01f892cccbb4313af30c996906e85fe273006433d04099ab615dabf7bd42b5d56d16fbd414f7863a22ccfc1784a9adcd2724f0ef531fff4a46d34caebb3c6813a181688a1084e0ccda6db0b779ca8724e2375bf699feefddcd3fac63d7bebb68f190ff5f6e67f7f86129d411cfbac266876c78ce01535151d64f16df22703bbd45652e8f4014d52e073c039eeb8364109827969570d06eb182644b3309df6f4b260ddbdb7807c8bdf39ca4d26f7ea18042812207f3f81315b01352121d287fe7470de2db14981e590483e1a2384112f82718c7efc7d61c2052102a37aeca28c70a7ac6dcc746d99af825725dfb29fe922c880a6cdee51236288ac085918c2b52792bee7f1d1e8301f081f700e1be6fa940dd35abe65b8d7c10e15e7940d3a9f24a27fcce6044754e554a2d0019bb67f7f297e17bd3218acc1c05c5a07baa6e81ea9c75aae82d4f3b07c6437ed829d4aa48fe610ae1da89f5e34a217f65c1386e46fd3878cc99b15f1f350de5f992c3bc5899e21555cc190ad2e827b2dd34133ccc454da1dadf559a4977cc03ea2d7e8a865197b1e9e7f57e041fe300c85a7c825c82478f91590c78343140798de014370e697334effe5d9c60f8adf7cd6f9c4267c3386a1dabc931e8c5d75fa143f133bb6127f3791cc19367944ec448cd6e1e7e50c436f144ff985bb09de62a8b72449b15800adbc252184abd5fddb050830b6d38442a84da3e6107c03dfd9fdf92d2feadc023467a6e133b4e548fe1b27ced906c52f17d5333cd02470d42607b72e7819de68981a7afff4d461318137bfb34f1caa1c3d3743a1e1b1a3a594f673ca3b2a005d359c9bf7ad5130b714ff417d6a2dbbb2ccf23058cf28ca33867b5b3bb7eab2108b9564512acbb2cbb38af6830c3547df71cdc063bd7df0fbc5c7af13a61cd34a0c1da29ac7d862687304231100beedba836cab4dfdbc4d76ccb4f8f5ec9b888d18e8136d9b7e0a51838395915c7fdb8e19ce7e6ceb6450a6db28fd613aee08149cd6f0d9f70ffa4f9cfecf146a8d9e068184e3ad8cf7b332a47bcddf64614f645175ff671fc96e397c599d6a85276f0f802947055b4ef9fcf4c61e0c58c9f404812a7efee8459e25b160fc6d9e0d188e4bb54d372971ce08cc0f4baa406685c2ac7898385dd3c8eac1c89428d52587aadd05b32a824bfa40e32120e27bd0c2780a8e5aa6298ebafdbe57ab9b5cf911f12e1eccbbffcdc23fd2faf9d68a3d887a1885caf166e5105e41c11b7fdd36b69915d3e949a6cc9cb466690a76ac8b4c0511897981231ad8f8b56cb0cebc6d7681cce01053162b104feb114fc7a1e7cf9cd82c0b0a81a0d343d2e03bdc64bf221457b3fd0460eb5c69ebb0bf5b1bfba131ebda5e2c9b6ee07d791c5bca258fc826c19230947073cf39f174e6777a8308bda500dbc4ef8b27bfb74c43f3a888da4979e13d83ab33d107187d9d0d501c5abd0e66020e14e52d75d2ed8a45898b5096de3dbd9d8b45bb9839f1743723b08d4f1f18cf84b16e5d1395a3f1328f4ca9f4d6fb711df367b22b9379ecddd92d253466032738d65749d646eb51d7b600126bc6ae756b232d6d93fbb785da8638fb4559d4ff006fe515c15bf9c9d3dc506d9f4f4bc19a16d7ba3666f9ef9499bb9f4eb38fd2de1e07fe1deb261c5a9257a7893c552a5b33c7bf6cee2936ebf8bccaac1d68d7bea547e2244e2c8eb9f55d9a9c8f0984db324bd35abf2d1bf2c617d0aeaabb0428d013b60ff4e133cb9163db12feab3e1ca98b6aa645292f02e6f8dad443642cf76dd2db433e1585e736683d8c29504dd9803c01f473af42308e3116f2318c4ed801b685548bae0ffa8d2caa748b8dd2ee72648c099dcf4fc53392a0ed6cce17b5ac859458960905dec4c2b60ed403c65c7b64a0028e62835693dfb0fa6ad66391e662a12e8431e37105483da55ead088286cf533d9d64f8a9a0aa04949545ad5db1c1521ef4f72523e89ec747fba60c28713eeee2d1a6a40a3961121918e7841f6edec27bfefb21c5b920667d5467ba552a1948e13f0c08982a55d0b21897fc54e9edc57ec39ac592e50aaef8caea23d78b6887b51f480219f67dd7b22159fbeac142aa151bdaadf9297c"}) 1m59.390785414s ago: executing program 6 (id=2402): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000003000000000000000000010091114f000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x94) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@fallback, 0x1e, 0x2151b989d9db7c11, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x100888e, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@delalloc}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f00000002c0)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r8 = fsmount(r7, 0x0, 0xa) fchdir(r8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="8300000000200000", @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB, @ANYRES64=r6], 0x20) openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000980)={0x2000, 0x1f6, 0x29}, 0xfffffffffffffe71) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff58}, 0x94) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r9, 0x0, &(0x7f0000004540)) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000700000003ac005afed86e"], 0x0, 0x43}, 0x28) r11 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r11, &(0x7f0000004200)='t', 0x1) sendfile(r11, r10, 0x0, 0x7fffffff) futimesat(r11, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={{0x0, 0xea60}, {0x77359400}}) 1m58.695423246s ago: executing program 6 (id=2405): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102, 0x25dfdbf8}, 0x14}, 0x1, 0x2b1e}, 0x2004c000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000018000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9004000000000b5090100004100009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) futex(&(0x7f0000004000)=0x7, 0x5, 0x2, 0x0, &(0x7f0000004000)=0x4, 0xb3020000) socket$inet6(0xa, 0x6, 0x8010000000000084) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x6) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="e9a4ea8d246a02fb3d7b6d068c4bd0018e0400000000", 0x16}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)="2ebb203023d89132c1980796d3480bf302680bb6d94cc2ddc4b641c81144696a15b4d88e56d04ec393bf39b3774c70aa01f9aee0fc51897c613f9ed201e53a48b093ea3325ebab77c2d8af147f7ab32ba427004c17a5625c7e10cdd9e30fec85fdb932aa067d0f6e891750cd952158d3288fc4cb3a551e6d8f828c6e02ef0e295c", 0x81}]}}], 0x2, 0x44088) io_uring_setup(0x5bf0, &(0x7f0000000040)={0x0, 0x1dc, 0xf000, 0x3, 0x1d4}) recvmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x96) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f00000001c0)='%d\xf1\xfa\xbc$j\xfe^wb%P\xd3\x9f0/\x7f=\r\xe4\xeaU6f;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad\x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8sQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f$\xc5=\x18\xcct7\xfb\xad4\xe0o`^\'H\'_\xca\x93\xb5\xa2\xc2\xc4\x94z\xee7>}@\x98\xd4\x8a\x1d\xf2\x7fyPQVD\v\x15\x9c\xf0\xb8\xa1w\xa8\xf7\x8c){\x9c\x0eT\x15p+\xbc\xeb\x18\x12\xfa') syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x891a, &(0x7f0000000000)={'ip_vti0\x00', @random="02000300"}) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000500)={{r3}, 0x9, &(0x7f0000000480)=[0xc, 0x5, 0x790, 0x9, 0x800, 0x401, 0xe81, 0x0, 0x5], 0x200, 0x8, 0x1}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) 1m58.366378037s ago: executing program 6 (id=2406): r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x106220, 0x1000, 0x22da, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 1m58.125747134s ago: executing program 6 (id=2407): prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x828, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0xc1}) syz_io_uring_setup(0x16b, &(0x7f0000000000)={0x0, 0x0, 0x13090}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='6L\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m53.695477745s ago: executing program 38 (id=2379): socket(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x60) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000d0000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac141442, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="a400000010001fff000000000100007f84000000", @ANYRES32=0x0, @ANYBLOB="00000000022100007c0012800b00010067656e65766500006c000280050009000100000008000b40000007f5060005004e20000005000a000100000005000a000000000014000700000000000000000000000000000000000500040002000000050003000a00000005000900000000001400070020"], 0xa4}}, 0x0) 1m42.367376975s ago: executing program 39 (id=2407): prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x828, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0xc1}) syz_io_uring_setup(0x16b, &(0x7f0000000000)={0x0, 0x0, 0x13090}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='6L\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.284473021s ago: executing program 5 (id=3210): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_config_ext={0x2b5834b3, 0x2}, 0xd, 0x0, 0x11000, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a0004"], 0x3c}}, 0x0) syz_io_uring_setup(0x1486, &(0x7f0000000100)={0x0, 0xbe4d, 0x100, 0x1, 0x247}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd70000000000010000000180001801400020076657468315f746f5f626f6e6400000005000e"], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x4044890) 4.992962501s ago: executing program 5 (id=3213): perf_event_open(&(0x7f0000000480)={0x1, 0x9a, 0x10, 0x0, 0x0, 0x2, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8001, 0x2200}, 0x8004, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) socket(0xf, 0x803, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000000000001000000018000180140002007665746831"], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x4044890) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a3bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800599c6d0e0000ded650492d"], 0xfe33) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0xd0, 0x30, 0x871a15abc695fb3d, 0x70bd25, 0x25dfdbfe, {}, [{0xbc, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x36ff}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x80, 0x16, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x9, 0x8, 0x5, 0xb}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x40, 0x10000000, 0x3, 0x6800000}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xa2d2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xea25}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0xa, 0x6, "0cb6479ea28b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 4.881523884s ago: executing program 5 (id=3215): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000003000000000000000000010091114f000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x94) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@fallback, 0x1e, 0x2151b989d9db7c11, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x100888e, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@delalloc}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f00000002c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) fchdir(0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="8300000000200000", @ANYRES32=r6, @ANYRES32, @ANYBLOB, @ANYRES64=r7], 0x20) openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000980)={0x2000, 0x1f6, 0x29}, 0xfffffffffffffe71) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff58}, 0x94) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r9, 0x0, &(0x7f0000004540)) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000700000003ac005afed86e"], 0x0, 0x43}, 0x28) r11 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r11, &(0x7f0000004200)='t', 0x1) sendfile(r11, r10, 0x0, 0x7fffffff) futimesat(r11, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={{0x0, 0xea60}, {0x77359400}}) bpf$PROG_LOAD(0x5, &(0x7f0000003ac0)={0x1d, 0x12, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000005000000000000007507000018110000", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32, @ANYBLOB="00000000000000001b330100ffffffffbf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000b40)='GPL\x00', 0x7f, 0x13, &(0x7f0000000b80)=""/19, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1a, r10, 0x8, &(0x7f0000000c00)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x4, 0x101, 0x5}, 0x10, 0x0, r3, 0x0, &(0x7f0000001000)=[r10], &(0x7f0000003a80), 0x10, 0x6}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.187342806s ago: executing program 5 (id=3217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000003000000000000000000010091114f000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x94) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@fallback, 0x1e, 0x2151b989d9db7c11, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x100888e, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@delalloc}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f00000002c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r9 = fsmount(r8, 0x0, 0xa) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="8300000000200000", @ANYRES32=r6, @ANYRES32=r9, @ANYBLOB, @ANYRES64=r7], 0x20) openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000980)={0x2000, 0x1f6, 0x29}, 0xfffffffffffffe71) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff58}, 0x94) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r10, 0x0, &(0x7f0000004540)) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000700000003ac005afed86e"], 0x0, 0x43}, 0x28) r12 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r12, &(0x7f0000004200)='t', 0x1) sendfile(r12, r11, 0x0, 0x7fffffff) futimesat(r12, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={{0x0, 0xea60}, {0x77359400}}) bpf$PROG_LOAD(0x5, &(0x7f0000003ac0)={0x1d, 0x12, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000005000000000000007507000018110000", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32, @ANYBLOB="00000000000000001b330100ffffffffbf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000b40)='GPL\x00', 0x7f, 0x13, &(0x7f0000000b80)=""/19, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1a, r11, 0x8, &(0x7f0000000c00)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x4, 0x101, 0x5}, 0x10, 0x0, r3, 0x0, &(0x7f0000001000)=[r11], &(0x7f0000003a80), 0x10, 0x6}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r13, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.686371964s ago: executing program 5 (id=3230): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140)=0x9, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x681c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x20000, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) uname(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x1, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}, 0x1, 0x0, 0x0, 0x4008880}, 0x800) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x1c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800002}, 0xc, &(0x7f0000000600)={0x0, 0x144}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) r5 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6403b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) unshare(0x400) socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2}, 0x0, 0x0, 0x0) accept(r0, 0x0, 0x0) 2.043077324s ago: executing program 5 (id=3237): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x24088000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3a, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x2ffc, 0x6000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x0) socket$netlink(0x10, 0x3, 0xa) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_buf(r3, 0x0, 0x17, &(0x7f0000000080)=""/3, &(0x7f00000000c0)=0x3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x32, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x13, 0x1, {{0x0, 0x0, 0x0, 0x12000000, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xfe) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x90, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.691691466s ago: executing program 4 (id=3245): unshare(0x2c040480) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x8001) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000480)=@get={0x1, &(0x7f00000003c0)=""/175, 0x3}) unshare(0x20000) bind$bt_l2cap(r1, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r1}, {r0, 0xb01f}], 0x2, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@bsdgroups}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000700)="$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") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000040), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@remote}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d3, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="70000000020605021c0000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c0002805b110140000000000c0001800800014000001c02080006400000000005000500020000000500010006", @ANYRESHEX=r4], 0x70}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'veth0_to_team\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x50, 0xfffffffd, 0xee, 0x3, 0x5, 0x0, 0x9, 0x2, 0x3}}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x2004d000) socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x64, 0x31, 0x1, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0xe}, @generic="ca91f0a46dd52801991b7ddc0751dacb7b80e771c37e5db9bc836887a6e62b5db0db41b44fbb3a398dee043dc0e42a5437e37fc9217584fb95ec06c6e0e9bf9ee2a1168ef8dd56478901c8"]}, 0x64}, 0x1, 0x0, 0x0, 0x20042804}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c) setsockopt(r8, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 1.21988893s ago: executing program 0 (id=3253): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@grpjquota}, {@dioread_lock}, {@i_version}, {@stripe={'stripe', 0x3d, 0xf0}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f0000000600)="$eJzs281vFOUfAPDvzLbw+/HWivgColbR2PjS0oLKwYtGEw+amOgBj7UtBFmooTUR0mg1Bo+GxLvxaOJf4EkvRj2ZeNW7ISHaC+hpzczOlO2yu7R06xb280kGnmfm2T7Pt888O8/MMw2gb41k/yQRuyLit4gYqmdXFxip/3dteXH67+XF6SRqtTf/TPJyV5cXp8ui5ed2FpnRNCL9NCkqWW3+/IXTU9Xq7LkiP75w5r3x+fMXnjl1Zurk7MnZs5PHjh09MvH8c5PPrj2YJGl7aHfW1gMfzh3c/+rbl16fPn7pnZ++yUrvKo43xrERaUN6JAv8r1quudzj3ahsC9ndkE4Gbl6GraESEVl3Debjfygqcb3zhuKVT3raOGBTZdem7e0PL9VaqbTcC9x2kuh1C4DeKC/02f1vuf1HU48t4cqL9Rugq8ni9LXl+lY/MrByLz+4ifeuIxFxfOmfL7MtuvgcAgCgne+y+c/TreZ/adzbUG5PsTY0HBF3RcTeiLg7IvZFxD0Redn7IuL+G2pIO9bfvDR04/wnvXzLwa1BNv97oVjbWj3/W2n3cKXI7c7jH0xOnKrOHi5+J6MxuD3LT3So4/uXf/283bHG+V+2ZfWXc8GiHZcHmh7QzUwtTOWT0i648nHEgYFW8ScrKwFJROyPiAPr+9F7ysSpJ78+2K7QzePvoM0603rUvop4Iuv/WrIUTfGXks7rk+P/i+rs4fHyrLjRz79cfKNd/RuKvwuy/t+x+vxvLjKcNK7Xzq+/jou/f9b2nuZWz/9tyVt5v2wr9n0wtbBwbiJiW/Janl+1f/L6Z8t8WT6Lf/RQ6/G/t/hMVs8DEZGdxA9GxEMR8XDR9kci4tGIONQh/h9feuzdW49/c2Xxz7T8/ls5/5v6f/2Jyukfvm1X/9r6/2ieGi325N9/N7HWBm7kdwcAAAC3izR/Bz5Jx1bSaTo2Vn+Hf1/sSKtz8wtPnZh7/+xM/V354RhMyyddQw3PQyeSpeIn1vOTxbPi8viR4rnxF5X/5/mx6bnqTI9jh363s834z/xR6XXrgE3XhXU04DbVPP47v7IB3Elc/6F/Gf/Qv4x/6F+txv9HTXlrAXBncv2H/mX8Q/8y/qF/Gf/Qlzbyd/0S/ZyIdEs0Y5MSQ1ujGT1M9PqbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDv+DQAA//82merZ") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) prlimit64(r1, 0x0, &(0x7f0000000040)={0x8, 0x8}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x12662a, 0x10004, 0x20da, 0x5, 0xa, 0x8, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_uring_enter(r2, 0x8ae, 0x6931, 0x17, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000140)={0x800, r3, 0x0, {0x4, 0x6}, 0x6}, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 810.588353ms ago: executing program 4 (id=3255): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000000000001000000018000180140002007665746831"], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x4044890) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a3bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800599c6d0e0000ded650492d"], 0xfe33) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0xd0, 0x30, 0x871a15abc695fb3d, 0x70bd25, 0x25dfdbfe, {}, [{0xbc, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x36ff}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x80, 0x16, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x9, 0x8, 0x5, 0xb}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x40, 0x10000000, 0x3, 0x6800000}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xa2d2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xea25}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0xa, 0x6, "0cb6479ea28b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 765.549855ms ago: executing program 4 (id=3257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x0, 0x2}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000840)={[{@nobh}, {@dioread_lock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2000011}}, {@bh}, {@usrjquota}]}, 0xfc, 0x590, &(0x7f0000001140)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = creat(&(0x7f0000000200)='./file1\x00', 0xa8) fallocate(r4, 0x0, 0x0, 0x8ffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x401f, 0x6b40a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x100, 0x0, 0x7, 0x8, 0x7fff, 0xd, 0x0, 0xffff}, r3, 0xff6fbffffffffffe, 0xffffffffffffffff, 0x1) unshare(0x20000400) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0xa00, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r5, r6, 0x1, 0x0, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r8}, 0x8) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xdc, r9, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x862c}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x71}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x32}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4840}, 0x401c014) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x34, r10, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009815}, 0x4000080) 688.274858ms ago: executing program 0 (id=3258): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x800000}, [@call={0x85, 0x0, 0x0, 0x22}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x188202, 0x0) getpgrp(0xffffffffffffffff) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@gettfilter={0x54, 0x2e, 0x10, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1}, {0xa, 0xb}, {0x5, 0xfff9}}, [{0x8}, {0x8, 0xb, 0x50}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x251}, {0x8, 0xb, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, 0x0, &(0x7f0000000080)=0x58) (async) getsockname$inet(r3, &(0x7f0000000500)={0x2, 0x0, @remote}, &(0x7f0000000540)=0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400)={0x27, 0x0, 0x1, 0x7, 0x0, 0x3, "e8850900000039e8abff005597c8ef939554d75d5b6bd60000dff2badc958845d800006acf1b1ff55a201300000000000000000000000000000900", 0x1b}, 0x60) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2300000000000000, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) (async) ioperm(0x7, 0x81, 0x2) r5 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYRES16=r1], 0x44}}, 0x8000) 597.23861ms ago: executing program 0 (id=3261): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x34, r0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000844) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20d9, 0x5, 0x2f73, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a30000000000900010073797a30000000000800054000000016500000000c0a010300000000000000000100000008000440000000000900010073797a30000000002800038024000080200001801a0001"], 0xd4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x7, 0x3, 0x3ff, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x3, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x4, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x400004, 0x4, 0x6, 0xfc, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x1, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x2004f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x3, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x7f, 0xf0, 0x4, 0x3, 0x6, 0x4, 0xcd0, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 596.750281ms ago: executing program 1 (id=3262): setuid(0xee01) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x4369, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x280a, 0x0, 0x800000, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x3, 0xe, 0x0, 0xff, 0x0, 0xff, 0x0, 0x210, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0xc000, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0, 0x41, 0x0, 0x1}, 0x28) unshare(0x22020400) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @empty}}}}) 566.812671ms ago: executing program 9 (id=3263): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x3, 0xa) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffffffffffff) 566.494411ms ago: executing program 4 (id=3264): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/sync_on_suspend', 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102, 0x25dfdbf8}, 0x14}, 0x1, 0x2b1e}, 0x2004c000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$ptp(r0, &(0x7f0000000180)=""/53, 0x35) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x38}}, 0x0) recvmmsg(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002740)=""/228, 0xe4}], 0x1, &(0x7f0000003880)=""/7, 0x7}, 0xfffffff9}], 0x1, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x2}}, 0x10, &(0x7f0000000580)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x1000a8d0}, 0x10) socket$inet6(0xa, 0x6, 0x8010000000000084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f00000001c0)='%d\xf1\xfa\xbc$j\xfe^wb%P\xd3\x9f0/\x7f=\r\xe4\xeaU6f;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad\x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8sQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f$\xc5=\x18\xcct7\xfb\xad4\xe0o`^\'H\'_\xca\x93\xb5\xa2\xc2\xc4\x94z\xee7>}@\x98\xd4\x8a\x1d\xf2\x7fyPQVD\v\x15\x9c\xf0\xb8\xa1w\xa8\xf7\x8c){\x9c\x0eT\x15p+\xbc\xeb\x18\x12\xfa') r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r3, 0x89e0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x10000000}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0x0, 0x48010}, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000140)=0xc, 0x4) 565.966851ms ago: executing program 1 (id=3265): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x5c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x44) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$eJzs3d9rY1kdAPBvMv2Rdjrbru7DKuqO6+oowyRtZrcs+6DriyDLssK6TyKzpc2U0qQpTbpua8EO+Oar4IBP+if4IPggzJPvvumbLyMojDo4TAWRyE1uOm2adMq0aWaazwcuOefc2/s9J3DP6T1J7glgaF2NiN2IGIuIjyNiOi3PpFu829qS4x4/3Fnce7izmIlG48N/jqRH7iy2j2+7nJ4zF/FBkh/vEre2tb26UC6XNtJ8oV5ZL9S2tm+sVBaWS8ultWJxfm5+9u2bbxXPrK2vVX7z4Dsr7330+9998f4fd7/x46TO32rtGkvadmaBDmi9L6MxdaAseefe60ewAbiUtmds0BXhmWQj4jMR8Xqa3pcbXJ0AgP5qNKajMX0w31vmBMcAAM+/5J5/KjLZfHr/PxXZbD7fnMPLvRKT2XK1Vr9+u7q5thTNOayZGM3eXimXZtO5wpkYzST5uWb6Sb7Ykb8ZES9HxM/HJ5r5/GK1vDSof3oAYMhd7hj/H423xv8T8AkBALzIjOQAMHyOjv+jA6kHAHB+3P8DwPA5MP53+60uAHAB5Tp++w8AXHwH7v9Huh7wavzkh+dXHQDgHPj8HwCGyvfefz/ZGnvp86+XPtnaXK1+cmOpVFvNVzYX84vVjfX8crW63HxmT+Vp5ytXq+tzb8bmp4V6qVYv1La2b1Wqm2v1W83net8q+WEBAAzey6/d+3MmInbfmWhu0V7LwRcC4MJzmcPwujToCgAD0/37PsAwMB8PZJ6yv+dXhO72/puJU9QH6L9rn+sx/9/tf4M7+6n/Nc6vikCfmP+H4XW6+X+zB/AiM/8Pw6vRyFjPHwCGzAnu4H1FEC64Z/78HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYVHPLZPPpWuBTkc3m8xFXImJmYjRze6Vcmo2IlyLiT+Oj40l+btCVBgBOKfv3TLr+17XpN6Y6945l/jPefI2IH/3yw198ulCvb8wl5f/aL6/fTcuLXQOM978NAMABI50F7XG6PY631/d9/HBnsb2dZwUffLu1uGgSdy/d2lVvVT4XoxEx+e/MocZkzmhh4t07EfFqZ/uz+/tn0pVPO+Mnsa/0LX40Wzh1KH72UPxsc1/rNXkvPnsGdYFhcy/pf97tdv1l42rzNb3+Moc701z87Gjn+gza/d9eo7P/a13vH1zJNfuabv3f1ZPGePMP3+25786lxudHIvaO9L/tFaFzzdSR+CMRb3Q74U+/+Wizo+gvX/jS673iN34VcS2Oi99KFeqV9UJta/vGSmVhubRcWisW5+fmZ9+++Vax0JyjLrRnqo/6xzvXX+rd/ojJHvFzx7U/Ir7a66Qdfv3fj3/w5WPif/0r3eJn45Vj4idj4tdOGH9h8rc9l+9O4i/1aP/Iofhjh/4uKbt+wvj3/7q9dMJDAYBzUNvaXl0ol0sbEqdN5Pp15svPSQMleiT+9tGha2rg9TmTxMC6JOCcPLnoB10TAAAAAAAAAAAAAACgl9r300f+9fHHcINuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//OkHLZw==") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000680)=""/180, 0xb4}], 0x1, 0x2, 0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod$loop(0x0, 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={[&(0x7f0000000200)='\x01']}) pselect6(0x40, &(0x7f00000003c0)={0xfffffffffffffff8, 0x7, 0x8, 0x81, 0x2, 0x7, 0x1, 0x5ed}, &(0x7f0000000400)={0x59ddaf4c, 0xa0ee, 0x4, 0x7, 0x0, 0x5, 0x64, 0x80}, 0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={[0x1ff]}, 0x8}) perf_event_open(&(0x7f0000010280)={0x2, 0x80, 0x4, 0x8, 0x7f, 0x8, 0x0, 0x2e63, 0x24, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x4}, 0xc500, 0xffffffffffff0001, 0x4008, 0x7, 0x6, 0x20008, 0x8000, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000850000006d924480a962c58975144c7c443cabf821ef389af66e5cbec8c1aeb941255998209e04366e29c8315bd5ec6ad66232d7715dbd03e9486136c899f03df8e24cb5c9110791df446fef3d296a84827afbf2fb745e3650421e8c77a3f3633c32ce773b5491b8341a86f86912180aef80030d837a173143ece906bce40f9900286925a73fde60ca4ccf2df700"/176], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r5, &(0x7f0000002240)=""/237, 0xed, 0x4eb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x1}, 0x94) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000400)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000001080)={0x0, 0x1}, &(0x7f00000010c0)=0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010025bd700000000000ac1414030000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) 508.288923ms ago: executing program 9 (id=3266): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x62e9, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010026bd7000fedbdf251000000005000f000a000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 507.766903ms ago: executing program 0 (id=3267): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000000000001000000018000180140002007665746831"], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x4044890) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a3bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800599c6d0e0000ded650492d"], 0xfe33) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0xd0, 0x30, 0x871a15abc695fb3d, 0x70bd25, 0x25dfdbfe, {}, [{0xbc, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x36ff}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x80, 0x16, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x9, 0x8, 0x5, 0xb}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x40, 0x10000000, 0x3, 0x6800000}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xa2d2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xea25}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0xa, 0x6, "0cb6479ea28b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 413.901726ms ago: executing program 9 (id=3268): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000019000100000000000000000080"], 0x30}}, 0x0) 413.705106ms ago: executing program 9 (id=3269): r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r4, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x0, 0x8, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") r6 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x1000, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setns(r2, 0x40000000) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 413.245416ms ago: executing program 0 (id=3270): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="8520000804000000"], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000001811000000", @ANYRES32=r3, @ANYRESOCT], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001340)={{r3}, &(0x7f00000012c0), &(0x7f0000001300)='%pi6 \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r5 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x1, 0xffffffffffffffb1}, 0x10c0e8, 0x9, 0x0, 0x1, 0x6, 0x7ffe, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) readlink(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff0000000000000000000000e1ff000000f8c9277b4b92fb53128439037a221f026a9659a1a5f5e4b3784591cdc350c983ae221d39fdd9f25680490248dd2b46f7c352ad", @ANYRES32=0x0, @ANYBLOB="85a7abf9c7f90906fba9ab7246ff1a2a00ee28f1288d29a28c5ebc73cc7ab7ecdff67e8d4000cb5872bb2e17862b658463ba16fc93010c759eb1b3eb586877f52b745ca57aed50e0a906010fc1e90049d5c8aba5e327dd5082c0d650e97dc50ce03196e0b76ace4b21b0531a7957f78d", @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xb, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x2e, 0x8000000000002, 0x101, 0x200000001300, 0x7], 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1830df3acfc98d466cc69e2cf7a3ae01f2a9aa5fe841163d2a3995c254d6d6b9fd4c750a493d4b2caf7ee2b8533461d3e38bec9d3946525a6049a422e0f8b0a166a65bbb365e3b01a2016478328103042c485f11e5e340bb8f3e2d6e081033e0e0c524295829176e24a85402170aedd46284f5a2030db5d7b36290ebe5a3e7e778df90ed7a6062b38da26045db389ee6a263000f6884b51304e543755e4f2cfdb6eb0a6bd073f8b2c693c54cc83774fa50179ad5ba27d0c523d0775c5792fc84b64a593fa963b86592d3ac291e6b2552b05ff947ba436c460869", @ANYRESHEX=r2, @ANYBLOB="d3b8bce002b71ae10f9d9043f8e9d17b450f6026ea209f92b0dfcb574f0cbcde122b01474cdbf912790e5522820e8460d56b436373d243b0666f3035859948a4e6a621eff1b6056706ade7b8e08dd4b0ac54cdbe0c921b7672a64134669c84b1231ab360449977fc55ceaebe90a26d3dba2b56af882ed17ede2ffd8bf18c869ccdefb9b5d4765ff61eeda03bdc4aadb8e9a6d0f331f73ae4822454f203878f94805b4beeac0a095f8225a890050fa4d5106a071e171decc170016edafdc71894652fa301dac1f671421c6c6edae2b3e613b37f0c774511aa65b2ec2ec4bd63e957f69188269bd0d6c73292615ca168c4"]}, 0x254) sendto$x25(r0, &(0x7f0000000000)="2058f60690c51a044c2c93b9d27b73f23ee6be6ed515bdf02dd02b4cec2054eac152ee6b583ed3b04908d90eefee497e454739d5c9a275f6608c369e8e00a342c6480b91cafd8b46ab692d2db479222987c090c35db35ded2d1e6018a3a3c6741e75c04ef984c19ffc7c35a7ed0fe19c78eb53acae833264f2c7687760c76b433e6f438d9eb1ceb8a79560625ee440a4724d485464a0f9b09af9967665b732ca0dd0115e16a3a70465064b184c51e083a5e374631c83fe5682e5cd5b7c0b0e2cc5270bf985f7a017bea175df360f98fc", 0xd0, 0x4000, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000140)=0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x1, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xb, 0xffffffffffffffff, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000880)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, ':\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2'}, 0x112) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 385.560137ms ago: executing program 0 (id=3271): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) syz_read_part_table(0x105f, &(0x7f00000011c0)="$eJzsz7FtwlAUBdBrR05i/URUrMIm1PSUTOAJYAoaNqFCzMAAsIGRZQs2AIpzqq//7n3SC2/VJuvV13eSKkmXMv6l+nlm6rLblEWTKrchtU3Sz5J+HDZJPTz2xymdcnpUL8Oq6znJX5L/Lr9p51MzqZeHV94KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ/qHgAA//+qQg4Q") bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) 243.563241ms ago: executing program 9 (id=3272): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x47a, &(0x7f0000000180)="$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") r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000058", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 243.073461ms ago: executing program 1 (id=3273): socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00'], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x828, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0xc1}) syz_io_uring_setup(0x16b, &(0x7f0000000000)={0x0, 0x0, 0x13090}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='6L'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 218.243152ms ago: executing program 9 (id=3274): socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x201800, 0x4) socket$netlink(0x10, 0x3, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200440d4}, 0x4804) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) getpid() (async) getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, 0x0, 0x30) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) pwrite64(r8, 0x0, 0x0, 0x1da1ac15) (async) pwrite64(r8, 0x0, 0x0, 0x1da1ac15) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, 0x0, 0x4000000) 167.773094ms ago: executing program 4 (id=3275): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@bsdgroups}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000700)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, r1, 0x9, 0x973f, 0x80081, 0x25}) 39.286868ms ago: executing program 1 (id=3276): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x9}, 0x2001, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x3, 0xa) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffffffffffff) 11.124019ms ago: executing program 1 (id=3277): setuid(0xee01) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x4369, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x280a, 0x0, 0x800000, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x3, 0xe, 0x0, 0xff, 0x0, 0xff, 0x0, 0x210, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0xc000, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0, 0x41, 0x0, 0x1}, 0x28) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @empty}}}}) 0s ago: executing program 4 (id=3278): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x62e9, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010026bd7000fedbdf251000000005000f000a000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) kernel console output (not intermixed with test programs): l. Quota mode: none. [ 506.912287][ T28] audit: type=1400 audit(1779685550.597:15372): avc: denied { write } for pid=14496 comm="syz.5.2672" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 507.015316][T14510] netlink: 'syz.9.2674': attribute type 21 has an invalid length. [ 507.085375][T13500] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 507.086578][T14514] netlink: 'syz.1.2675': attribute type 14 has an invalid length. [ 507.118952][T14514] bond0: option xmit_hash_policy: invalid value (21) [ 507.173703][T13057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.245416][T14518] netlink: 'syz.9.2678': attribute type 21 has an invalid length. [ 507.294676][T14524] netlink: 'syz.5.2677': attribute type 21 has an invalid length. [ 507.317595][T14528] set_capacity_and_notify: 3 callbacks suppressed [ 507.317614][T14528] loop0: detected capacity change from 0 to 1024 [ 507.383656][T14528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 507.404673][T14531] futex_wake_op: syz.1.2682 tries to shift op by 32; fix this program [ 507.443889][T14527] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=73 sclass=netlink_audit_socket pid=14527 comm=syz.0.2681 [ 507.467051][T14527] __nla_validate_parse: 10 callbacks suppressed [ 507.467084][T14527] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2681'. [ 507.652030][T14539] SELinux: failed to load policy [ 507.729288][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2685'. [ 507.847447][T14548] loop5: detected capacity change from 0 to 512 [ 507.861914][T14548] EXT4-fs: Ignoring removed bh option [ 507.886039][T14548] EXT4-fs: inline encryption not supported [ 507.907376][T14548] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 507.931710][T14548] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 507.958444][T14548] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2686: bg 0: block 248: padding at end of block bitmap is not set [ 507.973178][T14548] loop5: lost filesystem error report for type 5 error -117 [ 507.973479][T14548] Quota error (device loop5): write_blk: dquota write failed [ 507.980897][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 507.980916][ C1] EXT4-fs (loop5): last error at time 1779685551: ext4_validate_block_bitmap:441 [ 508.004922][T14548] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 508.015240][T14548] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2686: Failed to acquire dquot type 1 [ 508.028966][T14548] loop5: lost filesystem error report for type 5 error -28 [ 508.029561][T14548] EXT4-fs (loop5): 1 truncate cleaned up [ 508.046743][T14548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 508.168111][ T28] audit: type=1400 audit(1779685551.137:15373): avc: denied { create } for pid=14525 comm="syz.0.2681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 508.260790][T12490] Bluetooth: hci0: command 0x1003 tx timeout [ 508.266854][ T5104] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 508.299690][T13057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 508.309789][T13500] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 508.317600][T14553] netlink: 'syz.4.2688': attribute type 21 has an invalid length. [ 508.366428][T14555] netlink: 'syz.0.2689': attribute type 14 has an invalid length. [ 508.390300][T14557] loop5: detected capacity change from 0 to 256 [ 508.400055][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2689'. [ 508.413162][ T28] audit: type=1400 audit(1779685552.097:15374): avc: denied { create } for pid=14558 comm="syz.9.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 508.439936][T14555] bond0: option xmit_hash_policy: invalid value (21) [ 508.476796][T14562] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2690'. [ 508.479343][T14564] FAULT_INJECTION: forcing a failure. [ 508.479343][T14564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.508783][T14565] 9p: Bad value for 'wfdno' [ 508.523874][T14557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2687'. [ 508.525918][T14565] netlink: 'syz.4.2691': attribute type 27 has an invalid length. [ 508.546961][T14564] CPU: 0 UID: 0 PID: 14564 Comm: syz.1.2692 Tainted: G W syzkaller #0 PREEMPT(full) [ 508.547003][T14564] Tainted: [W]=WARN [ 508.547011][T14564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 508.547027][T14564] Call Trace: [ 508.547036][T14564] [ 508.547045][T14564] __dump_stack+0x1d/0x30 [ 508.547077][T14564] dump_stack_lvl+0x95/0xd0 [ 508.547106][T14564] dump_stack+0x15/0x1b [ 508.547211][T14564] should_fail_ex+0x263/0x280 [ 508.547251][T14564] should_fail+0xb/0x20 [ 508.547297][T14564] should_fail_usercopy+0x1a/0x20 [ 508.547333][T14564] _copy_from_user+0x1c/0xb0 [ 508.547434][T14564] vmemdup_user+0x5e/0xd0 [ 508.547531][T14564] path_setxattrat+0x1b1/0x310 [ 508.547617][T14564] __x64_sys_setxattr+0x6e/0x90 [ 508.547641][T14564] x64_sys_call+0x2ee2/0x3020 [ 508.547672][T14564] do_syscall_64+0x12c/0x3b0 [ 508.547719][T14564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.547747][T14564] RIP: 0033:0x7f27ec9ace59 [ 508.547767][T14564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.547789][T14564] RSP: 002b:00007f27eb407028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 508.547845][T14564] RAX: ffffffffffffffda RBX: 00007f27ecc25fa0 RCX: 00007f27ec9ace59 [ 508.547883][T14564] RDX: 0000200000000300 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 508.547902][T14564] RBP: 00007f27eb407090 R08: 0000000000000000 R09: 0000000000000000 [ 508.547915][T14564] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 508.547928][T14564] R13: 00007f27ecc26038 R14: 00007f27ecc25fa0 R15: 00007ffd0fd8aae8 [ 508.547947][T14564] [ 508.755009][T14567] gre0 speed is unknown, defaulting to 1000 [ 508.790840][T14572] netlink: 'syz.9.2694': attribute type 21 has an invalid length. [ 508.803882][T14574] loop5: detected capacity change from 0 to 512 [ 508.812105][T14575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2693'. [ 508.852355][T14574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.869686][T14574] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.897933][T14574] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.2695: corrupted xattr block 6: invalid header [ 508.936484][T14580] loop1: detected capacity change from 0 to 512 [ 508.970778][T14580] EXT4-fs: Ignoring removed nobh option [ 508.984310][T14574] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 509.004469][T14580] EXT4-fs: Ignoring removed orlov option [ 509.021926][T14574] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.2695: corrupted xattr block 6: invalid header [ 509.035609][T14585] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.2695: corrupted xattr block 6: invalid header [ 509.054154][T14580] EXT4-fs error (device loop1): __ext4_iget:5481: inode #11: block 1: comm syz.1.2696: invalid block [ 509.068704][T14580] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 509.068881][T14580] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2696: couldn't read orphan inode 11 (err -117) [ 509.078121][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 509.078145][ C1] EXT4-fs (loop1): initial error at time 1779685552: __ext4_iget:5481: inode 11: block 1 [ 509.078180][ C1] EXT4-fs (loop1): last error at time 1779685552: __ext4_iget:5481: inode 11: block 1 [ 509.096973][T14585] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 509.128901][T14574] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 509.140219][T14580] loop1: lost filesystem error report for type 5 error -117 [ 509.140348][T14585] EXT4-fs error (device loop5): ext4_xattr_block_list:766: inode #12: comm syz.5.2695: corrupted xattr block 6: invalid header [ 509.162563][T14580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.175567][T14574] EXT4-fs error (device loop5): ext4_xattr_block_find:1881: inode #12: comm syz.5.2695: corrupted xattr block 6: invalid header [ 509.247203][T12664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.275327][T10105] Bluetooth: hci0: Frame reassembly failed (-84) [ 509.302699][T13057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.334755][T14595] netlink: 'syz.1.2701': attribute type 21 has an invalid length. [ 509.355113][T14597] netlink: 'syz.9.2703': attribute type 14 has an invalid length. [ 509.368030][T14597] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2703'. [ 509.377629][T14597] bond0: option xmit_hash_policy: invalid value (21) [ 509.430167][T14599] futex_wake_op: syz.5.2702 tries to shift op by 32; fix this program [ 509.734813][T14624] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2712'. [ 509.744609][T14624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2712'. [ 509.792125][T14627] netlink: 700 bytes leftover after parsing attributes in process `syz.1.2713'. [ 509.814480][T14629] bond0: option xmit_hash_policy: invalid value (21) [ 510.006117][T14642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.020195][T14642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.030681][T14642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.047734][T14642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.124544][ T28] audit: type=1400 audit(1779685553.817:15375): avc: denied { write } for pid=14637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.296265][T14661] dvmrp0: entered allmulticast mode [ 510.336675][T14677] loop5: detected capacity change from 0 to 512 [ 510.363420][T14677] EXT4-fs: Ignoring removed bh option [ 510.398534][T14677] EXT4-fs: inline encryption not supported [ 510.412982][T14683] loop1: detected capacity change from 0 to 512 [ 510.429015][T14677] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 510.443273][T14683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.478708][T14677] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 510.506996][T14677] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2727: bg 0: block 248: padding at end of block bitmap is not set [ 510.523840][T14677] loop5: lost filesystem error report for type 5 error -117 [ 510.524171][T14677] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2727: Failed to acquire dquot type 1 [ 510.531582][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 510.531624][ C0] EXT4-fs (loop5): last error at time 1779685554: ext4_validate_block_bitmap:441 [ 510.559751][T14677] loop5: lost filesystem error report for type 5 error -28 [ 510.560352][T14677] EXT4-fs (loop5): 1 truncate cleaned up [ 510.574359][T14677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 510.658784][T12664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.693592][T13057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 510.740555][T14716] loop1: detected capacity change from 0 to 1024 [ 510.769753][T14716] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 510.802145][T14716] System zones: 0-1, 3-8 [ 510.824690][T14716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 510.863894][T14716] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.942668][T14716] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.2736: lblock 0 mapped to illegal pblock 0 (length 1) [ 510.962815][T14716] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 510.976956][T14716] EXT4-fs (loop1): This should not happen!! Data will be lost [ 510.976956][T14716] [ 511.012944][ T120] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 3) [ 511.038478][ T120] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 511.067560][ T120] EXT4-fs (loop1): This should not happen!! Data will be lost [ 511.067560][ T120] [ 511.081422][T12664] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 511.099009][T12664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 511.250604][T14755] futex_wake_op: syz.1.2742 tries to shift op by 32; fix this program [ 511.297410][T12490] Bluetooth: hci0: command 0x1003 tx timeout [ 511.303649][ T5104] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 511.997230][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 511.997260][ T28] audit: type=1400 audit(1779685555.667:15469): avc: denied { write } for pid=14784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.165648][T14809] validate_nla: 8 callbacks suppressed [ 512.166180][T14809] netlink: 'syz.9.2751': attribute type 21 has an invalid length. [ 512.191517][ T28] audit: type=1400 audit(1779685555.877:15470): avc: denied { write } for pid=14807 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.419317][T14818] 9p: Bad value for 'rfdno' [ 512.478499][T14786] loop1: detected capacity change from 0 to 1024 [ 512.495126][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 512.510459][T14786] EXT4-fs (loop1): stripe (36) is not aligned with cluster size (16), stripe is disabled [ 512.530759][T14829] __nla_validate_parse: 10 callbacks suppressed [ 512.530785][T14829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2756'. [ 512.546442][T14829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.585190][T14826] futex_wake_op: syz.0.2755 tries to shift op by 32; fix this program [ 512.624930][T14835] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2757'. [ 512.650807][T14786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.662001][T14835] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2757'. [ 512.698869][T14841] loop4: detected capacity change from 0 to 764 [ 512.809849][ T28] audit: type=1400 audit(1779685556.497:15471): avc: denied { write } for pid=14817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.812270][T14847] netlink: 'syz.9.2759': attribute type 21 has an invalid length. [ 512.895354][ T28] audit: type=1400 audit(1779685556.587:15472): avc: denied { append } for pid=14851 comm="syz.0.2760" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 512.970303][ T28] audit: type=1400 audit(1779685556.637:15473): avc: denied { write } for pid=14857 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 513.023260][T12664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.142717][T14873] loop4: detected capacity change from 0 to 512 [ 513.159792][T14872] netlink: 'syz.1.2763': attribute type 21 has an invalid length. [ 513.227737][ T28] audit: type=1400 audit(1779685556.927:15474): avc: denied { write } for pid=14866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 513.267208][T14885] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2766'. [ 513.283351][ T28] audit: type=1326 audit(1779685556.977:15475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14884 comm="syz.1.2766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ec9ace59 code=0x7ffc0000 [ 513.333012][ T28] audit: type=1326 audit(1779685557.007:15476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14884 comm="syz.1.2766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ec9ace59 code=0x7ffc0000 [ 513.359866][ T28] audit: type=1326 audit(1779685557.007:15477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14884 comm="syz.1.2766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ec9ace59 code=0x7ffc0000 [ 513.388088][ T28] audit: type=1326 audit(1779685557.007:15478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14884 comm="syz.1.2766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ec9ace59 code=0x7ffc0000 [ 513.604840][T14892] loop4: detected capacity change from 0 to 512 [ 513.623181][T14909] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2769'. [ 513.639822][T14909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2769'. [ 513.741236][T14914] futex_wake_op: syz.1.2770 tries to shift op by 32; fix this program [ 513.793661][T14924] netlink: 'syz.9.2771': attribute type 21 has an invalid length. [ 514.071265][T14958] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2778'. [ 514.093563][T14957] loop4: detected capacity change from 0 to 8192 [ 514.127765][T14957] loop4: p1 < > p3 p4 [ 514.136456][T14957] loop4: p3 start 201326592 is beyond EOD, truncated [ 514.143414][T14957] loop4: p4 size 33554432 extends beyond EOD, truncated [ 514.243714][T14964] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2779'. [ 514.497262][ T5104] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 514.534284][T14968] netlink: 'syz.5.2782': attribute type 21 has an invalid length. [ 514.586718][T14972] loop5: detected capacity change from 0 to 2048 [ 514.594200][T14972] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000802) [ 514.634504][T14974] loop1: detected capacity change from 0 to 128 [ 514.644789][T14972] loop5: detected capacity change from 0 to 128 [ 514.656885][T14974] FAT-fs (loop1): bogus logical sector size 2134 [ 514.664070][T14974] FAT-fs (loop1): Can't find a valid FAT filesystem [ 514.671817][T14972] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 514.692202][T14972] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 514.745043][T14976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2786'. [ 514.780690][T14976] loop1: detected capacity change from 0 to 512 [ 514.787926][T14976] EXT4-fs: Ignoring removed orlov option [ 514.794251][T14976] EXT4-fs: Mount option(s) incompatible with ext3 [ 514.925354][T14982] loop0: detected capacity change from 0 to 512 [ 514.938331][T14982] EXT4-fs: Ignoring removed orlov option [ 514.955310][T14982] EXT4-fs: Mount option(s) incompatible with ext3 [ 514.981458][T14984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2789'. [ 515.074330][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 515.085418][T14991] Bluetooth: hci0: Frame reassembly failed (-84) [ 515.093321][T14991] Bluetooth: hci0: Frame reassembly failed (-84) [ 515.127839][T14989] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 515.137099][T14989] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 515.146228][T14989] EXT4-fs (loop5): 1 truncate cleaned up [ 515.156481][T14989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.235057][T14989] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 515.271258][T15000] netlink: 'syz.9.2794': attribute type 21 has an invalid length. [ 515.358858][T13057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.622497][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 515.681359][T15026] netlink: 'syz.9.2805': attribute type 21 has an invalid length. [ 515.691989][T15028] netlink: 'syz.0.2806': attribute type 1 has an invalid length. [ 515.714687][T15028] bond1: (slave gretap1): making interface the new active one [ 515.722804][T15028] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 515.737292][T15028] bond1: entered promiscuous mode [ 515.742448][T15028] gretap1: entered promiscuous mode [ 515.748454][T15028] bond1: entered allmulticast mode [ 515.753684][T15028] gretap1: entered allmulticast mode [ 515.798168][T15035] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15035 comm=syz.0.2809 [ 515.815460][T15036] netlink: 'syz.9.2808': attribute type 21 has an invalid length. [ 515.832971][T15036] netlink: 'syz.9.2808': attribute type 4 has an invalid length. [ 515.844669][T15036] dummy0: entered allmulticast mode [ 516.099680][T15047] xt_connbytes: Forcing CT accounting to be enabled [ 516.107554][T15047] set match dimension is over the limit! [ 517.202502][ T5104] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 517.500061][T15093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.527749][T15093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.044182][T15102] set_capacity_and_notify: 2 callbacks suppressed [ 518.044199][T15102] loop1: detected capacity change from 0 to 512 [ 518.078992][T15102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.111075][T15102] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.205856][ T28] kauditd_printk_skb: 509 callbacks suppressed [ 518.205876][ T28] audit: type=1326 audit(1779685561.897:15988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15108 comm="syz.5.2836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b410ce59 code=0x7ffc0000 [ 518.281592][ T28] audit: type=1326 audit(1779685561.937:15989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15108 comm="syz.5.2836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b410ce59 code=0x7ffc0000 [ 518.417930][ T28] audit: type=1326 audit(1779685561.937:15990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15108 comm="syz.5.2836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b410ce59 code=0x7ffc0000 [ 518.444149][ T28] audit: type=1326 audit(1779685561.937:15991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15108 comm="syz.5.2836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b410ce59 code=0x7ffc0000 [ 518.470320][ T28] audit: type=1326 audit(1779685561.937:15992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15108 comm="syz.5.2836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fe9b410ce59 code=0x7ffc0000 [ 518.496193][ T28] audit: type=1326 audit(1779685561.937:15993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15108 comm="syz.5.2836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b410ce59 code=0x7ffc0000 [ 518.525241][T12664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.534903][ T28] audit: type=1326 audit(1779685561.937:15994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15108 comm="syz.5.2836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b410ce59 code=0x7ffc0000 [ 518.561117][ T28] audit: type=1326 audit(1779685561.937:15995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15108 comm="syz.5.2836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b410ce59 code=0x7ffc0000 [ 518.600772][T15116] __nla_validate_parse: 7 callbacks suppressed [ 518.600888][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2838'. [ 518.693479][ T28] audit: type=1326 audit(1779685561.937:15996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15108 comm="syz.5.2836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b410ce59 code=0x7ffc0000 [ 518.740518][ T28] audit: type=1326 audit(1779685561.937:15997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15108 comm="syz.5.2836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9b410ce59 code=0x7ffc0000 [ 519.026413][T15123] loop0: detected capacity change from 0 to 512 [ 519.252229][T15123] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 519.271469][T15123] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 519.293210][T15123] EXT4-fs (loop0): 1 truncate cleaned up [ 519.308301][T15123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.467798][T15130] validate_nla: 2 callbacks suppressed [ 519.467816][T15130] netlink: 'syz.1.2843': attribute type 6 has an invalid length. [ 519.485599][T15134] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2845'. [ 519.522446][T15123] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 519.575013][T15138] set match dimension is over the limit! [ 519.591239][T15138] loop5: detected capacity change from 0 to 256 [ 519.792564][T13500] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.802049][T15143] xt_hashlimit: size too large, truncated to 1048576 [ 519.864671][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2849'. [ 519.938330][T15151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2851'. [ 520.019778][T15153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2852'. [ 520.086653][T15156] ªªªªªª: renamed from vlan0 (while UP) [ 520.305713][T15166] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2857'. [ 520.333472][T15166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2857'. [ 520.520274][T15173] loop5: detected capacity change from 0 to 2048 [ 520.532039][T15173] EXT4-fs: dax option not supported [ 520.625766][T15170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2856'. [ 521.114869][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2865'. [ 521.174319][T15205] netlink: 'syz.1.2866': attribute type 4 has an invalid length. [ 521.252962][T15205] bridge_slave_0: left allmulticast mode [ 521.260039][T15205] bridge_slave_0: left promiscuous mode [ 521.266704][T15205] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.289563][T15205] bridge_slave_1: left allmulticast mode [ 521.313713][T15205] bridge_slave_1: left promiscuous mode [ 521.333620][T15205] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.373156][T15205] bond0: (slave bond_slave_0): Releasing backup interface [ 521.394859][T15205] bond0: (slave bond_slave_1): Releasing backup interface [ 521.397208][T15211] netlink: 'syz.5.2869': attribute type 21 has an invalid length. [ 521.441190][T15205] team0: Port device team_slave_0 removed [ 521.461063][T15205] team0: Port device team_slave_1 removed [ 521.479532][T15205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.521965][T15205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.550095][T15205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.580746][T15205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.597338][T15205] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 521.962081][T15224] loop4: detected capacity change from 0 to 512 [ 522.052221][T15224] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2872: inode has both inline data and extents flags [ 522.065571][T15224] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 522.066271][T15224] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2872: couldn't read orphan inode 15 (err -117) [ 522.075571][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 522.075591][ C1] EXT4-fs (loop4): initial error at time 1779685565: ext4_orphan_get:1397: inode 15 [ 522.075635][ C1] EXT4-fs (loop4): last error at time 1779685565: ext4_orphan_get:1397: inode 15 [ 522.112649][T15224] loop4: lost filesystem error report for type 5 error -117 [ 522.115562][T15224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.761729][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.935952][T15251] netlink: 'syz.1.2881': attribute type 21 has an invalid length. [ 524.024030][T15254] loop1: detected capacity change from 0 to 512 [ 524.159744][T15259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2883'. [ 524.232540][T15259] netlink: 'syz.5.2883': attribute type 1 has an invalid length. [ 524.990698][T15254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.003556][T15254] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.015122][T15254] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.2882: corrupted xattr block 6: invalid header [ 525.028923][T15254] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 525.053154][T15254] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.2882: corrupted xattr block 6: invalid header [ 525.097291][T15254] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 525.126271][T15254] EXT4-fs error (device loop1): ext4_xattr_block_find:1881: inode #12: comm syz.1.2882: corrupted xattr block 6: invalid header [ 525.948161][T15281] SELinux: failed to load policy [ 525.960797][T12664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.171800][T15290] netlink: 'syz.4.2892': attribute type 21 has an invalid length. [ 526.961211][T15305] vlan2: entered promiscuous mode [ 526.989769][T15309] loop4: detected capacity change from 0 to 512 [ 526.995857][T15305] bridge0: entered promiscuous mode [ 527.022438][T15309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.129564][T15310] bond1: option tlb_dynamic_lb: invalid value (255) [ 527.152424][T15310] bond1 (unregistering): Released all slaves [ 527.211495][T15309] ext4 filesystem being mounted at /568/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.237987][T15309] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.2899: corrupted xattr block 6: invalid header [ 527.278515][T15309] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 527.294206][T15322] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.2899: corrupted xattr block 6: invalid header [ 527.307451][T15309] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.2899: corrupted xattr block 6: invalid header [ 527.321992][T15322] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 527.333019][T15309] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 527.345967][T15322] EXT4-fs error (device loop4): ext4_xattr_block_list:766: inode #12: comm syz.4.2899: corrupted xattr block 6: invalid header [ 527.364436][T15325] SELinux: failed to load policy [ 527.375681][T15309] EXT4-fs error (device loop4): ext4_xattr_block_find:1881: inode #12: comm syz.4.2899: corrupted xattr block 6: invalid header [ 527.398032][T15326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2901'. [ 527.419191][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.556174][T15337] netlink: 'syz.4.2903': attribute type 21 has an invalid length. [ 527.607215][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 527.607271][ T28] audit: type=1326 audit(1779685571.297:16092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.0.2907" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abc3dce59 code=0x7ffc0000 [ 527.700153][ T28] audit: type=1326 audit(1779685571.297:16093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.0.2907" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abc3dce59 code=0x7ffc0000 [ 527.849970][T15346] loop1: detected capacity change from 0 to 512 [ 527.910864][T15347] sctp: [Deprecated]: syz.5.2908 (pid 15347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 527.910864][T15347] Use struct sctp_sack_info instead [ 527.952037][T15346] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 527.995777][T15346] EXT4-fs (loop1): 1 truncate cleaned up [ 528.013907][T15346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.044899][T15346] audit: audit_backlog=65 > audit_backlog_limit=64 [ 528.052051][T15346] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 528.060394][T15346] audit: backlog limit exceeded [ 528.089440][T15346] audit: audit_backlog=65 > audit_backlog_limit=64 [ 528.096804][T15346] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 528.105729][T15346] audit: backlog limit exceeded [ 528.473695][T15340] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.481163][T15340] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.680456][ T28] audit: type=1326 audit(1779685571.297:16094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.0.2907" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abc3dce59 code=0x7ffc0000 [ 528.706302][ T28] audit: type=1326 audit(1779685571.297:16095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.0.2907" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abc3dce59 code=0x7ffc0000 [ 529.469207][T12664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.529284][T15340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.560600][T15340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.794331][T10109] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.812826][T10109] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.822226][T10109] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.822949][T15360] netlink: 'syz.1.2911': attribute type 21 has an invalid length. [ 529.840529][T10097] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.890924][T15367] loop5: detected capacity change from 0 to 128 [ 529.916274][T15368] loop0: detected capacity change from 0 to 512 [ 529.957989][T15371] SELinux: failed to load policy [ 529.968148][T15368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.998062][T15368] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.010980][T15368] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.2914: corrupted xattr block 6: invalid header [ 530.030940][T15368] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 530.032509][T15374] loop4: detected capacity change from 0 to 1024 [ 530.046565][T15378] loop5: detected capacity change from 0 to 1024 [ 530.048440][T15368] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.2914: corrupted xattr block 6: invalid header [ 530.058794][T15378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 530.068311][T15374] ext4: Bad value for 'mb_optimize_scan' [ 530.082457][T15378] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 530.090626][T15368] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 530.106203][T15376] xt_bpf: check failed: parse error [ 530.113168][T15368] EXT4-fs error (device loop0): ext4_xattr_block_find:1881: inode #12: comm syz.0.2914: corrupted xattr block 6: invalid header [ 530.128521][T15376] loop1: detected capacity change from 0 to 128 [ 530.150257][T15379] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.2914: corrupted xattr block 6: invalid header [ 530.169725][T15379] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 530.179019][T15379] EXT4-fs error (device loop0): ext4_xattr_block_list:766: inode #12: comm syz.0.2914: corrupted xattr block 6: invalid header [ 530.206792][T15384] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2918'. [ 530.245704][T15383] netlink: 'syz.5.2919': attribute type 21 has an invalid length. [ 530.255754][T13500] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.386416][T15389] loop0: detected capacity change from 0 to 8192 [ 530.510010][T15389] loop0: p1 < > p3 p4 [ 531.399982][T15389] loop0: p3 start 201326592 is beyond EOD, truncated [ 531.406835][T15389] loop0: p4 size 33554432 extends beyond EOD, truncated [ 531.472902][ T4905] udevd[4905]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 531.486487][ T5552] udevd[5552]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 531.576978][T15397] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2922'. [ 531.590519][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2922'. [ 532.433415][T15410] loop5: detected capacity change from 0 to 512 [ 532.448452][T15410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.538134][T13057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.570716][T15423] netlink: 'syz.1.2931': attribute type 21 has an invalid length. [ 532.586508][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2933'. [ 532.630373][T15418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2929'. [ 532.652534][ T28] kauditd_printk_skb: 252 callbacks suppressed [ 532.652553][ T28] audit: type=1400 audit(1779685576.347:16348): avc: denied { mounton } for pid=15422 comm="syz.9.2933" path="/file0" dev="hugetlbfs" ino=44112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 532.769096][T15438] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2935'. [ 532.785884][T15435] loop1: detected capacity change from 0 to 512 [ 532.794815][T15438] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2935'. [ 532.891466][T15435] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 532.940667][T15435] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 532.960923][T15435] EXT4-fs (loop1): 1 truncate cleaned up [ 532.998542][T15435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.068739][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2938'. [ 533.218006][ T28] audit: type=1326 audit(1779685576.897:16349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.4.2938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeccd8ce59 code=0x7ffc0000 [ 533.391882][T15435] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 533.419017][ T28] audit: type=1326 audit(1779685576.907:16350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.4.2938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeccd8ce59 code=0x7ffc0000 [ 533.565375][ T28] audit: type=1326 audit(1779685576.907:16351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.4.2938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeccd8ce59 code=0x7ffc0000 [ 533.664794][ T28] audit: type=1326 audit(1779685576.907:16352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.4.2938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7efeccd8ce59 code=0x7ffc0000 [ 533.722342][ T28] audit: type=1326 audit(1779685576.907:16353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.4.2938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeccd8ce59 code=0x7ffc0000 [ 533.777322][ T28] audit: type=1326 audit(1779685576.947:16354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.4.2938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeccd8ce59 code=0x7ffc0000 [ 533.826518][ T28] audit: type=1326 audit(1779685576.957:16355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.4.2938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeccd8ce59 code=0x7ffc0000 [ 533.885487][ T28] audit: type=1326 audit(1779685576.957:16356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.4.2938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeccd8ce59 code=0x7ffc0000 [ 533.952752][ T28] audit: type=1326 audit(1779685576.967:16357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.4.2938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efeccd8ce59 code=0x7ffc0000 [ 533.989609][T12664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.094997][T15456] FAULT_INJECTION: forcing a failure. [ 534.094997][T15456] name failslab, interval 1, probability 0, space 0, times 0 [ 534.147111][T15456] CPU: 1 UID: 0 PID: 15456 Comm: syz.1.2940 Tainted: G W syzkaller #0 PREEMPT(full) [ 534.147151][T15456] Tainted: [W]=WARN [ 534.147161][T15456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.147177][T15456] Call Trace: [ 534.147253][T15456] [ 534.147264][T15456] __dump_stack+0x1d/0x30 [ 534.147292][T15456] dump_stack_lvl+0x95/0xd0 [ 534.147312][T15456] dump_stack+0x15/0x1b [ 534.147349][T15456] should_fail_ex+0x263/0x280 [ 534.147384][T15456] should_failslab+0x8c/0xb0 [ 534.147425][T15456] kmem_cache_alloc_noprof+0x66/0x3f0 [ 534.147529][T15456] ? do_getname+0x2e/0x1c0 [ 534.147550][T15456] do_getname+0x2e/0x1c0 [ 534.147582][T15456] getname_flags+0x1d/0x30 [ 534.147605][T15456] do_sys_openat2+0x60/0x130 [ 534.147629][T15456] __x64_sys_openat+0xf2/0x120 [ 534.147707][T15456] x64_sys_call+0x1e39/0x3020 [ 534.147731][T15456] do_syscall_64+0x12c/0x3b0 [ 534.147812][T15456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.147920][T15456] RIP: 0033:0x7f27ec9ace59 [ 534.147935][T15456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.147954][T15456] RSP: 002b:00007f27eb407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 534.147974][T15456] RAX: ffffffffffffffda RBX: 00007f27ecc25fa0 RCX: 00007f27ec9ace59 [ 534.147990][T15456] RDX: 000000000059b801 RSI: 0000200000000680 RDI: ffffffffffffff9c [ 534.148008][T15456] RBP: 00007f27eb407090 R08: 0000000000000000 R09: 0000000000000000 [ 534.148031][T15456] R10: 00000000000001ce R11: 0000000000000246 R12: 0000000000000001 [ 534.148049][T15456] R13: 00007f27ecc26038 R14: 00007f27ecc25fa0 R15: 00007ffd0fd8aae8 [ 534.148075][T15456] [ 534.410802][T15458] netlink: 'syz.4.2942': attribute type 3 has an invalid length. [ 534.545304][T15460] infiniband syz2: set down [ 534.555261][T15460] infiniband syz2: added bond_slave_1 [ 534.638851][T15460] RDS/IB: syz2: added [ 534.650060][T15460] smc: adding ib device syz2 with port count 1 [ 534.672156][T15460] smc: ib device syz2 port 1 has no pnetid [ 534.686510][T15464] netlink: 'syz.1.2944': attribute type 21 has an invalid length. [ 534.951568][T15471] loop1: detected capacity change from 0 to 128 [ 534.961750][T15472] futex_wake_op: syz.4.2946 tries to shift op by 32; fix this program [ 534.974051][T15466] futex_wake_op: syz.5.2945 tries to shift op by 32; fix this program [ 534.976192][T15471] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 535.015352][T15471] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 535.192675][T15481] loop4: detected capacity change from 0 to 512 [ 535.220687][T15481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.245786][T15481] ext4 filesystem being mounted at /578/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.262217][T15481] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.2948: corrupted xattr block 6: invalid header [ 535.320033][T15481] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 535.353544][T15486] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.2948: corrupted xattr block 6: invalid header [ 535.353516][T15481] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.2948: corrupted xattr block 6: invalid header [ 535.354048][T15481] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 535.396464][T15486] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 535.397325][T15481] EXT4-fs error (device loop4): ext4_xattr_block_find:1881: inode #12: comm syz.4.2948: corrupted xattr block 6: invalid header [ 535.419590][T12664] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 535.428769][T15486] EXT4-fs error (device loop4): ext4_xattr_block_list:766: inode #12: comm syz.4.2948: corrupted xattr block 6: invalid header [ 535.466642][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2950'. [ 535.490384][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.547356][T15492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2952'. [ 535.595769][T15490] futex_wake_op: syz.5.2951 tries to shift op by 32; fix this program [ 535.783637][T15504] sock: sock_timestamping_bind_phc: sock not bind to device [ 535.800130][T15504] loop1: detected capacity change from 0 to 512 [ 536.009472][T15504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.060792][T15504] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.095074][T15516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2960'. [ 536.145728][T15517] netlink: 'syz.5.2957': attribute type 21 has an invalid length. [ 536.460709][T15522] loop0: detected capacity change from 0 to 512 [ 536.571807][T15522] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 536.582631][T15522] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 536.594618][T15522] EXT4-fs (loop0): 1 truncate cleaned up [ 536.603031][T15522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.687517][T15522] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 536.825613][T12664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.842645][T13500] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.864730][T15525] vlan2: entered promiscuous mode [ 536.904534][T15525] bridge0: entered promiscuous mode [ 537.060514][T15534] loop5: detected capacity change from 0 to 512 [ 537.067493][T15534] EXT4-fs: inline encryption not supported [ 537.073600][T15532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2964'. [ 537.085582][T15534] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 537.739326][T15542] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2967'. [ 537.919321][T15534] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 537.958343][T15534] __quota_error: 189 callbacks suppressed [ 537.958360][T15534] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 538.009958][T15534] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 538.050345][T15534] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2965: Failed to acquire dquot type 1 [ 538.086015][T15534] loop5: lost filesystem error report for type 5 error -5 [ 538.086248][T15534] EXT4-fs (loop5): Remounting filesystem read-only [ 538.093526][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 538.093547][ C1] EXT4-fs (loop5): initial error at time 1779685581: ext4_acquire_dquot:7034 [ 538.093580][ C1] EXT4-fs (loop5): last error at time 1779685581: ext4_acquire_dquot:7034 [ 538.200182][T15534] EXT4-fs (loop5): 1 truncate cleaned up [ 538.219831][T15534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.327885][T13057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.510676][ T28] audit: type=1326 audit(1779685582.207:16547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15531 comm="syz.0.2964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3abc3dce59 code=0x7ffc0000 [ 538.567728][T15563] loop5: detected capacity change from 0 to 1024 [ 538.574645][T15563] EXT4-fs: Ignoring removed bh option [ 538.599859][T15563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.774278][T15570] netlink: 'syz.0.2975': attribute type 21 has an invalid length. [ 538.784967][ T28] audit: type=1400 audit(1779685582.317:16548): avc: denied { write } for pid=15561 comm="syz.5.2974" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 539.402418][T13057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.819363][ T28] audit: type=1400 audit(1779685583.517:16549): avc: denied { setattr } for pid=15579 comm="syz.0.2979" name="tty21" dev="devtmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 540.260638][T15582] futex_wake_op: syz.5.2978 tries to shift op by 32; fix this program [ 540.404759][T15587] netlink: 'syz.0.2980': attribute type 1 has an invalid length. [ 540.995744][ T28] audit: type=1400 audit(1779685584.687:16550): avc: denied { create } for pid=15590 comm="syz.5.2982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 541.039743][T15596] loop1: detected capacity change from 0 to 512 [ 541.068768][T15596] EXT4-fs: Ignoring removed bh option [ 541.092721][T15596] EXT4-fs: inline encryption not supported [ 541.121428][T15596] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 541.149486][T15596] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 541.184739][T15596] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2983: bg 0: block 248: padding at end of block bitmap is not set [ 541.202357][T15596] loop1: lost filesystem error report for type 5 error -117 [ 541.204045][T15596] Quota error (device loop1): write_blk: dquota write failed [ 541.211405][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 541.211428][ C1] EXT4-fs (loop1): last error at time 1779685584: ext4_validate_block_bitmap:441 [ 541.216986][T15606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2986'. [ 541.237477][T15596] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 541.253979][T15596] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.2983: Failed to acquire dquot type 1 [ 541.265507][T15596] loop1: lost filesystem error report for type 5 error -28 [ 541.267455][T15596] EXT4-fs (loop1): 1 truncate cleaned up [ 541.270180][ T28] audit: type=1326 audit(1779685584.967:16551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15605 comm="syz.0.2986" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abc3dce59 code=0x7ffc0000 [ 541.288184][T15596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 541.323275][ T28] audit: type=1326 audit(1779685584.967:16553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15605 comm="syz.0.2986" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3abc3dce59 code=0x7ffc0000 [ 541.454836][T12664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 541.545718][T15615] loop0: detected capacity change from 0 to 512 [ 541.557899][T15615] EXT4-fs: Ignoring removed orlov option [ 541.592355][T15615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.624003][T15621] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2989'. [ 541.655488][T15615] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 541.671686][T15621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2989'. [ 541.745610][T15615] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 543.095596][T13500] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.169622][T15650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2997'. [ 543.220495][T15651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2997'. [ 543.307988][T15644] loop5: detected capacity change from 0 to 512 [ 543.347598][T15663] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3001'. [ 543.406809][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3001'. [ 543.467415][T15644] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 543.496943][T15644] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 543.559316][T15644] EXT4-fs (loop5): 1 truncate cleaned up [ 543.595658][T15644] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.661594][T15671] loop4: detected capacity change from 0 to 512 [ 543.691780][T15671] EXT4-fs: Ignoring removed oldalloc option [ 543.728753][T15671] EXT4-fs: Ignoring removed bh option [ 543.742203][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 543.742220][ T28] audit: type=1400 audit(1779685587.437:16594): avc: denied { setattr } for pid=15668 comm="syz.9.3005" name="CAN_RAW" dev="sockfs" ino=44366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 543.786496][T15671] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 543.808009][T15644] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 543.881512][T15671] EXT4-fs (loop4): 1 truncate cleaned up [ 543.892555][ T28] audit: type=1400 audit(1779685587.587:16595): avc: denied { prog_load } for pid=15642 comm="syz.5.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 543.920774][T15671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.986122][ T28] audit: type=1400 audit(1779685587.677:16596): avc: denied { write } for pid=15670 comm="syz.4.3006" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 544.165888][T13057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.281522][ T28] audit: type=1400 audit(1779685587.977:16597): avc: denied { map_create } for pid=15680 comm="syz.1.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 544.387349][ T28] audit: type=1400 audit(1779685587.977:16598): avc: denied { map_read map_write } for pid=15680 comm="syz.1.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 544.471429][ T28] audit: type=1400 audit(1779685588.017:16599): avc: denied { prog_run } for pid=15680 comm="syz.1.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 544.536786][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.703105][T15702] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3016'. [ 544.741231][T15702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3016'. [ 544.816965][T15697] loop4: detected capacity change from 0 to 512 [ 544.906942][ T28] audit: type=1400 audit(1779685588.597:16600): avc: denied { bind } for pid=15684 comm="syz.1.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 546.339710][ T3413] kernel read not supported for file [fscontext] (pid: 3413 comm: kworker/1:6) [ 547.002013][T15697] tmpfs: Bad value for 'nr_inodes' [ 547.081819][T15744] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3028'. [ 547.106265][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3028'. [ 547.193104][T15758] loop1: detected capacity change from 0 to 512 [ 547.221823][T15758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.235583][ T28] audit: type=1400 audit(1779685590.917:16601): avc: denied { node_bind } for pid=15759 comm="syz.5.3035" saddr=::ffff:172.20.20.46 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 547.243755][T15760] netlink: 'syz.5.3035': attribute type 21 has an invalid length. [ 547.685728][T15772] gre0 speed is unknown, defaulting to 1000 [ 547.734830][ T5155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.860646][ T5155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.973328][ T5155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.051377][T12664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.128037][ T5155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.271708][T15793] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3044'. [ 548.321892][T15793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3044'. [ 548.420491][ T5155] batadv1: left allmulticast mode [ 548.444272][ T5155] batadv1: left promiscuous mode [ 548.471947][ T5155] bridge0: port 3(batadv1) entered disabled state [ 548.514566][ T5155] bridge_slave_1: left promiscuous mode [ 548.539916][ T5155] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.572093][T15798] x_tables: duplicate underflow at hook 1 [ 548.589247][ T5155] bridge_slave_0: left allmulticast mode [ 548.597781][T15800] loop0: detected capacity change from 0 to 512 [ 548.614756][ T5155] bridge_slave_0: left promiscuous mode [ 548.629944][T15800] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 548.653947][ T5155] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.686896][T15800] EXT4-fs (loop0): 1 truncate cleaned up [ 548.711182][T15800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.778127][ T28] audit: type=1400 audit(1779685592.477:16602): avc: denied { write } for pid=15799 comm="syz.0.3045" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 548.800242][ T28] audit: type=1400 audit(1779685592.487:16603): avc: denied { write } for pid=15799 comm="syz.0.3045" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 548.890122][ T28] audit: type=1400 audit(1779685592.487:16604): avc: denied { write } for pid=15799 comm="syz.0.3045" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 548.982846][ T28] audit: type=1400 audit(1779685592.487:16605): avc: denied { rename } for pid=15799 comm="syz.0.3045" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 549.119417][ T28] audit: type=1400 audit(1779685592.517:16606): avc: denied { write } for pid=15799 comm="syz.0.3045" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 549.162139][T10109] smc: removing ib device syz1 [ 549.321363][ T5155] bond0 (unregistering): Released all slaves [ 549.382565][ T3364] gre0 speed is unknown, defaulting to 1000 [ 549.413647][ T3364] syz1: Port: 1 Link DOWN [ 549.450425][T15812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3049'. [ 549.977726][T15772] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.981708][T15772] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.016722][T15772] bridge_slave_0: entered allmulticast mode [ 551.204696][T15772] bridge_slave_0: entered promiscuous mode [ 551.224176][T15772] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.248945][T15772] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.271237][T15772] bridge_slave_1: entered allmulticast mode [ 551.293742][T15772] bridge_slave_1: entered promiscuous mode [ 551.366992][T15772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.403726][T15772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.467047][T15772] team0: Port device team_slave_0 added [ 551.488360][T15772] team0: Port device team_slave_1 added [ 551.502055][T15828] loop1: detected capacity change from 0 to 512 [ 551.543632][T15772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.567579][T15772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.642218][T15772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.677032][T15772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.706518][T15772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.783765][T15772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.817041][T15835] xt_bpf: check failed: parse error [ 551.964522][ T28] audit: type=1400 audit(1779685595.657:16607): avc: denied { write } for pid=15820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 552.036108][T15772] hsr_slave_0: entered promiscuous mode [ 552.067140][T15772] hsr_slave_1: entered promiscuous mode [ 552.094053][T15772] debugfs: 'hsr0' already exists in 'hsr' [ 552.112893][T15772] Cannot create hsr debugfs directory [ 552.512252][ T28] audit: type=1400 audit(1779685596.207:16608): avc: denied { write } for pid=15843 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 552.543334][ T5155] tipc: Disabling bearer [ 552.557901][ T5155] tipc: Left network mode [ 552.581359][T15831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8296 sclass=netlink_route_socket pid=15831 comm=syz.1.3052 [ 552.583728][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 552.602683][ T5155] IPVS: stopping backup sync thread 8985 ... [ 552.674596][T15847] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3054'. [ 552.694704][T15847] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3054'. [ 552.746716][T15851] FAULT_INJECTION: forcing a failure. [ 552.746716][T15851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.771975][T15851] CPU: 1 UID: 0 PID: 15851 Comm: syz.5.3056 Tainted: G W syzkaller #0 PREEMPT(full) [ 552.772018][T15851] Tainted: [W]=WARN [ 552.772028][T15851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 552.772044][T15851] Call Trace: [ 552.772052][T15851] [ 552.772062][T15851] __dump_stack+0x1d/0x30 [ 552.772133][T15851] dump_stack_lvl+0x95/0xd0 [ 552.772160][T15851] dump_stack+0x15/0x1b [ 552.772186][T15851] should_fail_ex+0x263/0x280 [ 552.772254][T15851] should_fail+0xb/0x20 [ 552.772279][T15851] should_fail_usercopy+0x1a/0x20 [ 552.772315][T15851] _copy_from_user+0x1c/0xb0 [ 552.772408][T15851] ipv6_flowlabel_opt+0xa3/0x1a00 [ 552.772450][T15851] ? lockref_put_return+0xf7/0x130 [ 552.772492][T15851] ? __rcu_read_unlock+0x4e/0x70 [ 552.772597][T15851] ? terminate_walk+0x1e6/0x210 [ 552.772641][T15851] ? path_openat+0x1ab2/0x2050 [ 552.772670][T15851] ? lock_sock_nested+0x84/0x110 [ 552.772758][T15851] do_ipv6_setsockopt+0xb4e/0x2130 [ 552.772787][T15851] ? kstrtoull+0x111/0x140 [ 552.772816][T15851] ? __rcu_read_unlock+0x4e/0x70 [ 552.772839][T15851] ? avc_has_perm_noaudit+0xab/0x130 [ 552.772936][T15851] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 552.772963][T15851] ipv6_setsockopt+0x59/0x130 [ 552.772985][T15851] tcp_setsockopt+0x98/0xb0 [ 552.773021][T15851] sock_common_setsockopt+0x69/0x80 [ 552.773122][T15851] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 552.773162][T15851] __sys_setsockopt+0x184/0x200 [ 552.773188][T15851] __x64_sys_setsockopt+0x64/0x80 [ 552.773267][T15851] x64_sys_call+0x2327/0x3020 [ 552.773292][T15851] do_syscall_64+0x12c/0x3b0 [ 552.773331][T15851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.773361][T15851] RIP: 0033:0x7fe9b410ce59 [ 552.773402][T15851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.773434][T15851] RSP: 002b:00007fe9b2b5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 552.773460][T15851] RAX: ffffffffffffffda RBX: 00007fe9b4385fa0 RCX: 00007fe9b410ce59 [ 552.773477][T15851] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 552.773489][T15851] RBP: 00007fe9b2b5f090 R08: 000000000000fe60 R09: 0000000000000000 [ 552.773569][T15851] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 552.773587][T15851] R13: 00007fe9b4386038 R14: 00007fe9b4385fa0 R15: 00007ffd1b9b75e8 [ 552.773609][T15851] [ 553.085416][ T5155] hsr_slave_0: left promiscuous mode [ 553.095177][ T5155] hsr_slave_1: left promiscuous mode [ 553.122886][ T5155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.154534][ T5155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.166648][T15863] loop1: detected capacity change from 0 to 512 [ 553.184108][ T28] audit: type=1400 audit(1779685596.877:16609): avc: denied { setopt } for pid=15858 comm="syz.5.3058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 553.186827][ T5155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.226292][ T5155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.248092][ T5155] batman_adv: batadv0: Interface deactivated: dummy0 [ 553.260930][ T5155] batman_adv: batadv0: Removing interface: dummy0 [ 553.268586][T15863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.278731][ T28] audit: type=1400 audit(1779685596.967:16610): avc: denied { write } for pid=15854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.287346][T15863] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.317749][ T5155] veth1_vlan: left allmulticast mode [ 553.323368][T15863] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.3059: corrupted xattr block 6: invalid header [ 553.336670][ T5155] veth1_macvtap: left promiscuous mode [ 553.342254][ T5155] veth1_vlan: left promiscuous mode [ 553.347741][ T5155] veth0_vlan: left promiscuous mode [ 553.352998][T15863] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 553.362103][T15863] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.3059: corrupted xattr block 6: invalid header [ 553.375919][T15875] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.3059: corrupted xattr block 6: invalid header [ 553.389692][T15863] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 553.389697][T15875] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 553.389728][T15875] EXT4-fs error (device loop1): ext4_xattr_block_list:766: inode #12: comm syz.1.3059: corrupted xattr block 6: invalid header [ 553.436720][T15879] netlink: 'syz.9.3060': attribute type 14 has an invalid length. [ 553.436720][ T28] audit: type=1400 audit(1779685597.127:16611): avc: denied { write } for pid=15877 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.447869][T15879] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3060'. [ 553.490631][T15863] EXT4-fs error (device loop1): ext4_xattr_block_find:1881: inode #12: comm syz.1.3059: corrupted xattr block 6: invalid header [ 553.519242][T12664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.554624][T15882] loop1: detected capacity change from 0 to 1764 [ 553.640998][T15879] bond0: option xmit_hash_policy: invalid value (21) [ 553.649444][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 554.090276][T15893] loop1: detected capacity change from 0 to 4096 [ 554.586920][T15893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.602347][ T28] audit: type=1400 audit(1779685598.307:16612): avc: denied { write } for pid=15881 comm="syz.1.3061" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 554.646982][T15904] xt_bpf: check failed: parse error [ 554.682524][ T28] audit: type=1400 audit(1779685598.377:16613): avc: denied { write } for pid=15886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.761590][T15772] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 554.790434][T15772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 554.798941][T15772] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 554.811045][T15772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 554.817959][ T28] audit: type=1400 audit(1779685598.517:16614): avc: denied { write } for pid=15909 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.876250][T13500] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.984377][T15772] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 555.070142][T15772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 555.156770][T15914] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3065'. [ 555.188264][T15772] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 555.254384][T15914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3065'. [ 555.286345][T15772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 555.411054][T15772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.431699][ T5155] IPVS: stop unused estimator thread 0... [ 555.439049][T15772] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.460426][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.467613][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.560430][T10099] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.567662][T10099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.602441][T15931] loop0: detected capacity change from 0 to 512 [ 555.617711][T15931] ext4: Bad value for 'stripe' [ 555.630157][ T28] audit: type=1326 audit(1779685599.327:16615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15929 comm="syz.0.3067" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abc3dce59 code=0x7ffc0000 [ 555.699213][T15772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 555.722995][ T28] audit: type=1326 audit(1779685599.327:16616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15929 comm="syz.0.3067" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abc3dce59 code=0x7ffc0000 [ 555.832437][ T28] audit: type=1326 audit(1779685599.327:16617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15929 comm="syz.0.3067" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abc3dce59 code=0x7ffc0000 [ 555.908671][ T28] audit: type=1326 audit(1779685599.327:16618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15929 comm="syz.0.3067" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abc3dce59 code=0x7ffc0000 [ 555.995728][ T28] audit: type=1326 audit(1779685599.327:16619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15929 comm="syz.0.3067" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3abc3dce59 code=0x7ffc0000 [ 556.038793][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3071'. [ 556.067364][ T28] audit: type=1326 audit(1779685599.327:16620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15929 comm="syz.0.3067" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abc3dce59 code=0x7ffc0000 [ 556.095171][T15953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.146594][ T28] audit: type=1326 audit(1779685599.327:16621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15929 comm="syz.0.3067" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abc3dce59 code=0x7ffc0000 [ 556.211950][T15772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.339581][T15972] netlink: 'syz.0.3073': attribute type 21 has an invalid length. [ 556.575964][T15994] xt_bpf: check failed: parse error [ 556.585616][T15772] veth0_vlan: entered promiscuous mode [ 556.708004][T15772] veth1_vlan: entered promiscuous mode [ 556.715814][T12664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.729442][T15772] veth0_macvtap: entered promiscuous mode [ 556.736907][T15772] veth1_macvtap: entered promiscuous mode [ 556.755522][T15772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.783606][T15772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.833882][ T120] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.904407][ T120] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.953129][ T120] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.998809][ T120] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.188272][T16005] autofs4:pid:16005:validate_dev_ioctl: path string terminator missing for cmd(0xc018937b) [ 557.442529][T16020] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3076'. [ 557.457796][T16020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3076'. [ 557.532604][T16027] netlink: 161700 bytes leftover after parsing attributes in process `syz.9.3078'. [ 557.569188][T16027] netlink: 'syz.9.3078': attribute type 4 has an invalid length. [ 557.609501][T16027] netlink: 'syz.9.3078': attribute type 4 has an invalid length. [ 557.784429][T16044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3082'. [ 558.142075][T16062] loop4: detected capacity change from 0 to 8192 [ 558.437416][T16094] xt_bpf: check failed: parse error [ 559.261209][T16123] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3092'. [ 559.298823][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3092'. [ 559.569409][T16127] netlink: 'syz.4.3094': attribute type 21 has an invalid length. [ 559.609129][T16136] loop0: detected capacity change from 0 to 512 [ 559.690502][T16136] EXT4-fs: Ignoring removed bh option [ 559.764784][T16136] EXT4-fs: inline encryption not supported [ 559.849007][T16136] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 559.953363][T16136] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 560.219222][T16136] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3095: bg 0: block 248: padding at end of block bitmap is not set [ 560.267024][ T28] kauditd_printk_skb: 273 callbacks suppressed [ 560.267042][ T28] audit: type=1400 audit(1779685603.957:16895): avc: denied { getopt } for pid=16146 comm="syz.5.3097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 560.297570][T16136] loop0: lost filesystem error report for type 5 error -117 [ 560.307127][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 560.320977][ C0] EXT4-fs (loop0): last error at time 1779685603: ext4_validate_block_bitmap:441 [ 560.330401][T16136] Quota error (device loop0): write_blk: dquota write failed [ 560.343274][T16136] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 560.361317][T16136] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.3095: Failed to acquire dquot type 1 [ 560.392787][T16136] loop0: lost filesystem error report for type 5 error -28 [ 560.393408][T16136] EXT4-fs (loop0): 1 truncate cleaned up [ 560.420189][ T28] audit: type=1400 audit(1779685604.117:16896): avc: denied { write } for pid=16134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 560.445891][T16136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 560.623430][ T28] audit: type=1326 audit(1779685604.317:16897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.9.3100" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ed0fce59 code=0x7ffc0000 [ 560.786606][ T28] audit: type=1326 audit(1779685604.357:16898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.9.3100" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ed0fce59 code=0x7ffc0000 [ 560.913749][ T28] audit: type=1326 audit(1779685604.377:16899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.9.3100" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ed0fce59 code=0x7ffc0000 [ 561.005692][ T28] audit: type=1326 audit(1779685604.377:16900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.9.3100" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ed0fce59 code=0x7ffc0000 [ 561.121482][ T28] audit: type=1326 audit(1779685604.377:16901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.9.3100" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff5ed0fce59 code=0x7ffc0000 [ 561.298398][ T28] audit: type=1326 audit(1779685604.377:16902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.9.3100" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ed0fce59 code=0x7ffc0000 [ 561.328969][T16169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3103'. [ 561.412702][T13500] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 561.605172][T16177] xt_bpf: check failed: parse error [ 561.632736][T16177] loop0: detected capacity change from 0 to 128 [ 561.639399][T16175] loop1: detected capacity change from 0 to 512 [ 562.350485][T16175] tmpfs: Bad value for 'nr_inodes' [ 562.617933][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3110'. [ 562.638671][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3110'. [ 562.651356][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3110'. [ 562.660963][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3110'. [ 563.439710][T16204] loop4: detected capacity change from 0 to 512 [ 563.458810][T16207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3117'. [ 563.471798][T16204] EXT4-fs: Ignoring removed bh option [ 563.495049][T16204] EXT4-fs: inline encryption not supported [ 563.527967][T16204] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 563.569575][T16204] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 563.618739][T16204] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3115: bg 0: block 248: padding at end of block bitmap is not set [ 563.771559][T16204] loop4: lost filesystem error report for type 5 error -117 [ 563.771868][T16204] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.3115: Failed to acquire dquot type 1 [ 563.779249][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 563.779270][ C0] EXT4-fs (loop4): last error at time 1779685607: ext4_validate_block_bitmap:441 [ 563.868440][T16204] loop4: lost filesystem error report for type 5 error -28 [ 563.870520][T16204] EXT4-fs (loop4): 1 truncate cleaned up [ 563.899375][T16204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 564.092111][T15772] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 564.732070][T16228] xt_bpf: check failed: parse error [ 564.760061][T16228] loop1: detected capacity change from 0 to 128 [ 566.045337][T16245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3128'. [ 566.088897][T16247] loop1: detected capacity change from 0 to 164 [ 566.376721][T16255] sch_fq: defrate 2 ignored. [ 566.433073][T16247] FAULT_INJECTION: forcing a failure. [ 566.433073][T16247] name failslab, interval 1, probability 0, space 0, times 0 [ 566.446532][T16247] CPU: 0 UID: 0 PID: 16247 Comm: syz.1.3129 Tainted: G W syzkaller #0 PREEMPT(full) [ 566.446573][T16247] Tainted: [W]=WARN [ 566.446582][T16247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 566.446665][T16247] Call Trace: [ 566.446674][T16247] [ 566.446683][T16247] __dump_stack+0x1d/0x30 [ 566.446713][T16247] dump_stack_lvl+0x95/0xd0 [ 566.446737][T16247] dump_stack+0x15/0x1b [ 566.446762][T16247] should_fail_ex+0x263/0x280 [ 566.446853][T16247] should_failslab+0x8c/0xb0 [ 566.446894][T16247] __kmalloc_noprof+0xb8/0x4d0 [ 566.446927][T16247] ? security_sk_alloc+0x52/0x120 [ 566.447028][T16247] ? should_failslab+0x8c/0xb0 [ 566.447067][T16247] security_sk_alloc+0x52/0x120 [ 566.447154][T16247] sk_prot_alloc+0xc2/0x180 [ 566.447199][T16247] sk_alloc+0x35/0x3e0 [ 566.447295][T16247] bpf_prog_test_run_skb+0x320/0x11c0 [ 566.447335][T16247] ? kstrtoull+0x111/0x140 [ 566.447438][T16247] ? __rcu_read_unlock+0x4e/0x70 [ 566.447465][T16247] ? __fget_files+0x184/0x1c0 [ 566.447489][T16247] ? __rcu_read_unlock+0x4e/0x70 [ 566.447518][T16247] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 566.447587][T16247] bpf_prog_test_run+0x204/0x340 [ 566.447625][T16247] __sys_bpf+0x52e/0x7e0 [ 566.447664][T16247] __x64_sys_bpf+0x41/0x50 [ 566.447716][T16247] x64_sys_call+0x10cb/0x3020 [ 566.447746][T16247] do_syscall_64+0x12c/0x3b0 [ 566.447785][T16247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.447812][T16247] RIP: 0033:0x7f27ec9ace59 [ 566.447846][T16247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.447872][T16247] RSP: 002b:00007f27eb407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 566.447896][T16247] RAX: ffffffffffffffda RBX: 00007f27ecc25fa0 RCX: 00007f27ec9ace59 [ 566.447914][T16247] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 566.447967][T16247] RBP: 00007f27eb407090 R08: 0000000000000000 R09: 0000000000000000 [ 566.447984][T16247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.447999][T16247] R13: 00007f27ecc26038 R14: 00007f27ecc25fa0 R15: 00007ffd0fd8aae8 [ 566.448100][T16247] [ 566.667652][T16260] loop4: detected capacity change from 0 to 512 [ 566.674363][T16260] EXT4-fs: Ignoring removed bh option [ 566.679876][T16260] EXT4-fs: inline encryption not supported [ 566.689931][T16260] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 566.719430][T16260] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 566.757445][T16260] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3133: bg 0: block 248: padding at end of block bitmap is not set [ 566.784370][T16260] loop4: lost filesystem error report for type 5 error -117 [ 566.784692][T16260] __quota_error: 389 callbacks suppressed [ 566.784711][T16260] Quota error (device loop4): write_blk: dquota write failed [ 566.792094][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 566.792123][ C0] EXT4-fs (loop4): last error at time 1779685610: ext4_validate_block_bitmap:441 [ 566.834319][T16260] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 566.844610][T16260] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.3133: Failed to acquire dquot type 1 [ 566.856413][T16260] loop4: lost filesystem error report for type 5 error -28 [ 566.856931][T16260] EXT4-fs (loop4): 1 truncate cleaned up [ 566.890580][T16260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 567.029261][T15772] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 567.986617][T16280] xt_bpf: check failed: parse error [ 568.028864][T16282] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3141'. [ 568.042270][T16284] loop0: detected capacity change from 0 to 128 [ 568.163435][T16285] loop4: detected capacity change from 0 to 512 [ 568.171863][T16285] vfat: Bad value for 'shortname' [ 569.080059][T16299] loop5: detected capacity change from 0 to 512 [ 569.156713][T16294] loop1: detected capacity change from 0 to 512 [ 569.200502][T16299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.236221][ T28] audit: type=1400 audit(1779685612.927:17290): avc: denied { write } for pid=16298 comm="syz.5.3145" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 569.269429][T13057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.425125][T16314] loop0: detected capacity change from 0 to 8192 [ 569.434989][T16315] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3149'. [ 569.435231][T16313] loop4: detected capacity change from 0 to 512 [ 569.572111][T16317] tmpfs: Too small a size for current use [ 569.635542][T16322] netlink: 'syz.0.3154': attribute type 3 has an invalid length. [ 569.655022][T16322] netlink: 'syz.0.3154': attribute type 3 has an invalid length. [ 569.674144][T16324] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3155'. [ 569.811632][T16330] xt_bpf: check failed: parse error [ 569.828415][T16330] loop5: detected capacity change from 0 to 128 [ 570.132418][T16337] loop0: detected capacity change from 0 to 512 [ 570.248092][T16337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.337986][ T28] audit: type=1400 audit(1779685614.027:17291): avc: denied { write } for pid=16333 comm="syz.0.3159" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 570.512104][T16294] tmpfs: Bad value for 'nr_inodes' [ 570.621243][T16341] loop1: detected capacity change from 0 to 512 [ 570.880215][T13500] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.996734][T16348] loop5: detected capacity change from 0 to 512 [ 571.005821][T16349] loop0: detected capacity change from 0 to 512 [ 571.020910][T16348] msdos: Unknown parameter 'noaots' [ 571.035808][T16349] EXT4-fs: Ignoring removed bh option [ 571.037709][T16313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3151'. [ 571.091256][T16349] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 571.093553][T16342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8296 sclass=netlink_route_socket pid=16342 comm=syz.4.3151 [ 571.112266][T16349] EXT4-fs (loop0): 1 truncate cleaned up [ 571.126784][T16349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.170281][ T28] audit: type=1400 audit(1779685614.857:17292): avc: denied { write } for pid=16345 comm="syz.0.3162" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 571.218397][T10105] Bluetooth: hci0: Frame reassembly failed (-84) [ 571.252787][T16346] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3162: bg 0: block 465: padding at end of block bitmap is not set [ 571.268722][ T28] audit: type=1400 audit(1779685614.947:17293): avc: denied { write } for pid=16345 comm="syz.0.3162" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 571.320476][T16341] tmpfs: Bad value for 'nr_inodes' [ 571.346401][T16357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3166'. [ 571.682110][T16370] loop1: detected capacity change from 0 to 128 [ 571.710295][T16370] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 571.892343][T16370] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 571.905226][T16370] ext2 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.940706][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3170'. [ 572.023595][T12664] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 572.054929][T16378] vhci_hcd vhci_hcd.3: default hub control req: 0508 v7fff i0003 l1 [ 572.108410][T16381] loop4: detected capacity change from 0 to 512 [ 572.149268][T16381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 572.187311][T16381] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.286185][ T28] audit: type=1400 audit(1779685615.977:17294): avc: denied { write } for pid=16380 comm="syz.4.3173" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 572.313947][T16381] FAULT_INJECTION: forcing a failure. [ 572.313947][T16381] name failslab, interval 1, probability 0, space 0, times 0 [ 572.326673][T16381] CPU: 0 UID: 0 PID: 16381 Comm: syz.4.3173 Tainted: G W syzkaller #0 PREEMPT(full) [ 572.326756][T16381] Tainted: [W]=WARN [ 572.326763][T16381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 572.326776][T16381] Call Trace: [ 572.326783][T16381] [ 572.326791][T16381] __dump_stack+0x1d/0x30 [ 572.326820][T16381] dump_stack_lvl+0x95/0xd0 [ 572.326840][T16381] dump_stack+0x15/0x1b [ 572.326866][T16381] should_fail_ex+0x263/0x280 [ 572.326901][T16381] should_failslab+0x8c/0xb0 [ 572.326934][T16381] kmem_cache_alloc_noprof+0x66/0x3f0 [ 572.327027][T16381] ? __es_insert_extent+0x508/0xee0 [ 572.327173][T16381] __es_insert_extent+0x508/0xee0 [ 572.327212][T16381] ? get_page_from_freelist+0x7cc/0x1970 [ 572.327307][T16381] ? should_fail_ex+0xd9/0x280 [ 572.327342][T16381] ext4_es_cache_extent+0x37e/0x5a0 [ 572.327460][T16381] ? __es_find_extent_range+0x17d/0x310 [ 572.327503][T16381] ext4_ext_map_blocks+0x142c/0x2ea0 [ 572.327544][T16381] ? __pfx___rcu_read_lock+0xf/0x10 [ 572.327577][T16381] ext4_map_query_blocks+0xb2/0x550 [ 572.327676][T16381] ? ext4_es_lookup_extent+0x3a2/0x500 [ 572.327731][T16381] ext4_map_blocks+0x306/0x970 [ 572.327794][T16381] ext4_iomap_begin+0x901/0xf10 [ 572.327893][T16381] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 572.327931][T16381] iomap_iter+0x3ed/0x7a0 [ 572.327960][T16381] __iomap_dio_rw+0x845/0x1480 [ 572.328192][T16381] iomap_dio_rw+0x40/0x90 [ 572.328223][T16381] ext4_file_write_iter+0xcaa/0xfa0 [ 572.328289][T16381] aio_write+0x2fe/0x430 [ 572.328415][T16381] io_submit_one+0xbc1/0x1350 [ 572.328455][T16381] __se_sys_io_submit+0xfb/0x280 [ 572.328492][T16381] __x64_sys_io_submit+0x43/0x50 [ 572.328523][T16381] x64_sys_call+0x19d5/0x3020 [ 572.328602][T16381] do_syscall_64+0x12c/0x3b0 [ 572.328635][T16381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.328658][T16381] RIP: 0033:0x7fc45407ce59 [ 572.328747][T16381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.328771][T16381] RSP: 002b:00007fc452ad7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 572.328799][T16381] RAX: ffffffffffffffda RBX: 00007fc4542f5fa0 RCX: 00007fc45407ce59 [ 572.328818][T16381] RDX: 0000200000000540 RSI: 000000000000003b RDI: 00007fc452aae000 [ 572.328868][T16381] RBP: 00007fc452ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 572.328881][T16381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.328894][T16381] R13: 00007fc4542f6038 R14: 00007fc4542f5fa0 R15: 00007ffe866d2048 [ 572.328980][T16381] [ 572.590683][T16391] netlink: 1032 bytes leftover after parsing attributes in process `syz.9.3176'. [ 573.217211][ T5104] Bluetooth: hci0: command 0x1003 tx timeout [ 573.221246][T12490] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 575.168577][T13500] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.213690][T15772] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 575.226186][T16400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3179'. [ 575.295979][T16410] FAULT_INJECTION: forcing a failure. [ 575.295979][T16410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.332742][T16410] CPU: 0 UID: 0 PID: 16410 Comm: syz.0.3184 Tainted: G W syzkaller #0 PREEMPT(full) [ 575.332847][T16410] Tainted: [W]=WARN [ 575.332856][T16410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 575.332869][T16410] Call Trace: [ 575.332876][T16410] [ 575.332946][T16410] __dump_stack+0x1d/0x30 [ 575.333036][T16410] dump_stack_lvl+0x95/0xd0 [ 575.333056][T16410] dump_stack+0x15/0x1b [ 575.333158][T16410] should_fail_ex+0x263/0x280 [ 575.333188][T16410] should_fail+0xb/0x20 [ 575.333222][T16410] should_fail_usercopy+0x1a/0x20 [ 575.333284][T16410] _copy_from_user+0x1c/0xb0 [ 575.333325][T16410] kstrtouint_from_user+0x69/0xf0 [ 575.333427][T16410] ? 0xffffffff81000000 [ 575.333446][T16410] ? selinux_file_permission+0x1e1/0x320 [ 575.333480][T16410] proc_fail_nth_write+0x50/0x160 [ 575.333519][T16410] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 575.333575][T16410] vfs_write+0x269/0x9f0 [ 575.333654][T16410] ? __rcu_read_unlock+0x4e/0x70 [ 575.333683][T16410] ? __fget_files+0x184/0x1c0 [ 575.333758][T16410] ? mutex_lock+0x57/0x90 [ 575.333783][T16410] ksys_write+0xdc/0x1a0 [ 575.333864][T16410] __x64_sys_write+0x40/0x50 [ 575.333902][T16410] x64_sys_call+0x27e1/0x3020 [ 575.333927][T16410] do_syscall_64+0x12c/0x3b0 [ 575.333991][T16410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.334020][T16410] RIP: 0033:0x7f3abc39d68e [ 575.334045][T16410] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 575.334063][T16410] RSP: 002b:00007f3abae2efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 575.334083][T16410] RAX: ffffffffffffffda RBX: 00007f3abae2f6c0 RCX: 00007f3abc39d68e [ 575.334104][T16410] RDX: 0000000000000001 RSI: 00007f3abae2f0a0 RDI: 0000000000000005 [ 575.334122][T16410] RBP: 00007f3abae2f090 R08: 0000000000000000 R09: 0000000000000000 [ 575.334139][T16410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.334155][T16410] R13: 00007f3abc656038 R14: 00007f3abc655fa0 R15: 00007fffa69070c8 [ 575.334181][T16410] [ 575.648006][T16408] loop1: detected capacity change from 0 to 512 [ 575.652432][T16403] loop5: detected capacity change from 0 to 512 [ 575.687915][ T28] audit: type=1400 audit(1779685619.387:17295): avc: denied { ioctl } for pid=16415 comm="syz.9.3185" path="socket:[47700]" dev="sockfs" ino=47700 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 575.724071][ T28] audit: type=1400 audit(1779685619.417:17296): avc: denied { getopt } for pid=16415 comm="syz.9.3185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 575.745359][T16419] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 575.761751][T16421] loop4: detected capacity change from 0 to 512 [ 575.789938][T16421] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 575.808409][T16425] 8021q: VLANs not supported on sit0 [ 575.830645][T16421] EXT4-fs (loop4): 1 truncate cleaned up [ 575.846967][T16421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.881405][T16421] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.010067][T16403] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.3180: corrupted inode contents [ 576.064637][T16403] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 576.075071][T16403] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #16: comm syz.5.3180: mark_inode_dirty error [ 576.077418][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 576.077449][ C1] EXT4-fs (loop5): initial error at time 1779685619: ext4_do_update_inode:5690: inode 16 [ 576.079007][ C1] EXT4-fs (loop5): last error at time 1779685619: ext4_do_update_inode:5690: inode 16 [ 576.203779][T16432] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3188'. [ 576.237405][T16403] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 576.238610][T16403] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.3180: corrupted inode contents [ 576.262695][T16403] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 576.265310][T16403] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.3180: mark_inode_dirty error [ 576.289040][T16403] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 576.290940][T16403] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.3180: corrupted inode contents [ 576.334445][T16403] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 576.339176][T16403] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 576.359606][T16408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3183'. [ 576.383362][T16403] loop5: lost filesystem error report for type 5 error -117 [ 576.388760][T16408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8296 sclass=netlink_route_socket pid=16408 comm=syz.1.3183 [ 576.412201][T16403] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.3180: corrupted inode contents [ 576.437389][T16403] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 576.440526][T16403] EXT4-fs error (device loop5): ext4_truncate:4690: inode #16: comm syz.5.3180: mark_inode_dirty error [ 576.462688][T16403] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 576.463905][T16403] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 576.485438][T16403] loop5: lost filesystem error report for type 5 error -117 [ 576.492148][T16403] EXT4-fs (loop5): 1 truncate cleaned up [ 576.508011][ T30] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 576.513955][T16403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.522254][ T30] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 576.542905][ T30] loop5: lost filesystem error report for type 5 error -117 [ 576.544453][T16403] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.627306][T16442] loop4: detected capacity change from 0 to 256 [ 576.636858][T16442] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 576.666822][T16442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3192'. [ 576.709726][T16447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3194'. [ 576.762188][T16453] loop1: detected capacity change from 0 to 128 [ 576.788118][T16453] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 576.834894][T16453] ext4 filesystem being mounted at /167/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 576.846701][T13057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.870276][ T28] audit: type=1400 audit(1779685620.567:17297): avc: denied { write } for pid=16451 comm="syz.1.3196" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 577.001091][T16449] loop0: detected capacity change from 0 to 1024 [ 577.011493][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3196'. [ 577.021596][ T28] audit: type=1400 audit(1779685620.727:17298): avc: denied { setopt } for pid=16451 comm="syz.1.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 577.068742][T16449] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 577.108828][T12664] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 577.128920][T16449] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3197: Invalid block bitmap block 0 in block_group 0 [ 577.128936][ T28] audit: type=1326 audit(1779685620.827:17299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16459 comm="syz.9.3199" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ed0fce59 code=0x7ffc0000 [ 577.170141][T16458] netlink: 'syz.5.3198': attribute type 21 has an invalid length. [ 577.188684][ T28] audit: type=1326 audit(1779685620.827:17300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16459 comm="syz.9.3199" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ed0fce59 code=0x7ffc0000 [ 577.206894][T16449] loop0: lost filesystem error report for type 5 error -117 [ 577.220186][T16449] Quota error (device loop0): write_blk: dquota write failed [ 577.228061][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 577.228123][ C0] EXT4-fs (loop0): initial error at time 1779685620: ext4_read_block_bitmap_nowait:483 [ 577.228243][ C0] EXT4-fs (loop0): last error at time 1779685620: ext4_read_block_bitmap_nowait:483 [ 577.265210][T16464] loop1: detected capacity change from 0 to 128 [ 577.308929][ T28] audit: type=1326 audit(1779685620.847:17301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16459 comm="syz.9.3199" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ed0fce59 code=0x7ffc0000 [ 577.336819][T16464] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 577.341962][T16449] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 577.361319][T16464] ext4 filesystem being mounted at /168/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 577.401860][T16449] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.3197: Failed to acquire dquot type 0 [ 577.412665][ T28] audit: type=1326 audit(1779685620.847:17302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16459 comm="syz.9.3199" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ed0fce59 code=0x7ffc0000 [ 577.427635][T16449] loop0: lost filesystem error report for type 5 error -117 [ 577.441004][T16449] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.3197: Freeing blocks not in datazone - block = 0, count = 4096 [ 577.473912][T16449] loop0: lost filesystem error report for type 5 error -117 [ 577.475538][T16449] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.3197: Invalid inode bitmap blk 0 in block_group 0 [ 577.497614][T16468] loop5: detected capacity change from 0 to 512 [ 577.504348][ T120] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7 [ 577.513740][T16468] EXT4-fs: Ignoring removed bh option [ 577.519417][ T120] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 0 [ 577.532565][T16468] EXT4-fs: inline encryption not supported [ 577.546040][T16468] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 577.557177][ T120] loop0: lost filesystem error report for type 5 error -117 [ 577.557771][T16449] loop0: lost filesystem error report for type 5 error -117 [ 577.565748][ T28] audit: type=1326 audit(1779685620.847:17303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16459 comm="syz.9.3199" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff5ed0fce59 code=0x7ffc0000 [ 577.605442][T16449] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 577.615246][T16449] loop0: lost filesystem error report for type 5 error -117 [ 577.615560][ T28] audit: type=1326 audit(1779685620.917:17304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16459 comm="syz.9.3199" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ed0fce59 code=0x7ffc0000 [ 577.648817][T16449] EXT4-fs (loop0): 1 orphan inode deleted [ 577.658409][T12664] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 577.663369][T16449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.683829][T16468] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 577.685973][ T28] audit: type=1326 audit(1779685620.917:17305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16459 comm="syz.9.3199" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff5ed0fcbc2 code=0x7ffc0000 [ 577.718265][T16468] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3201: bg 0: block 248: padding at end of block bitmap is not set [ 577.724198][ T28] audit: type=1326 audit(1779685620.917:17306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16459 comm="syz.9.3199" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff5ed0fcc57 code=0x7ffc0000 [ 577.763475][ T28] audit: type=1326 audit(1779685620.917:17307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16459 comm="syz.9.3199" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff5ed0b9b51 code=0x7ffc0000 [ 577.792826][ T28] audit: type=1326 audit(1779685620.917:17308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16459 comm="syz.9.3199" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff5ed0fdc49 code=0x7ffc0000 [ 577.827710][T16468] loop5: lost filesystem error report for type 5 error -117 [ 577.831528][T16468] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.3201: Failed to acquire dquot type 1 [ 577.839101][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 577.839125][ C0] EXT4-fs (loop5): last error at time 1779685621: ext4_validate_block_bitmap:441 [ 577.942515][T16449] syz.0.3197 (16449) used greatest stack depth: 8512 bytes left [ 577.952871][T13500] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.967231][ T120] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 0 [ 577.980791][T16468] EXT4-fs (loop5): 1 truncate cleaned up [ 577.989999][T16481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3207'. [ 577.996795][T16468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 578.053322][T16483] loop0: detected capacity change from 0 to 512 [ 578.096879][T16479] loop1: detected capacity change from 0 to 8192 [ 578.161856][T16479] loop1: p1 < > p3 < > p4 [ 578.173568][T16479] loop1: partition table partially beyond EOD, truncated [ 578.191381][T16479] loop1: p1 start 4294967040 is beyond EOD, truncated [ 578.203739][T16487] netlink: 'syz.9.3209': attribute type 21 has an invalid length. [ 578.223028][T16479] loop1: p4 size 851974 extends beyond EOD, truncated [ 578.248632][T13057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 578.301663][T16485] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 578.340051][T16485] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 578.350109][T16485] EXT4-fs (loop4): 1 truncate cleaned up [ 578.357259][T16485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.390053][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3212'. [ 578.428444][ T5552] udevd[5552]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 578.433106][ T4905] udevd[4905]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 578.514877][T16503] EXT4-fs: Ignoring removed orlov option [ 578.557003][T16485] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 578.574241][T16503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.607787][T16503] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 578.815334][T15772] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.874445][T16510] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 578.892067][T16510] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 578.917127][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3216'. [ 578.931489][T16510] EXT4-fs (loop5): 1 truncate cleaned up [ 578.949726][T16510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.088190][T16510] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 579.147929][T16510] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 4: comm syz.5.3215: lblock 0 mapped to illegal pblock 4 (length 1) [ 579.204046][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3206'. [ 579.213914][T16483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8296 sclass=netlink_route_socket pid=16483 comm=syz.0.3206 [ 579.297901][T13057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.386833][T12664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.408849][T16519] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 579.436366][T16519] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 579.469788][T16519] EXT4-fs (loop5): 1 truncate cleaned up [ 579.503771][T16519] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.640349][T16519] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 579.692372][T16519] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 4: comm syz.5.3217: lblock 0 mapped to illegal pblock 4 (length 1) [ 580.712176][T16551] __nla_validate_parse: 1 callbacks suppressed [ 580.712195][T16551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3229'. [ 581.225671][T13057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.263389][T16554] xt_hashlimit: size too large, truncated to 1048576 [ 581.338006][T16563] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3233'. [ 581.393283][T16565] set_capacity_and_notify: 6 callbacks suppressed [ 581.393399][T16565] loop1: detected capacity change from 0 to 256 [ 581.436055][T16557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3225'. [ 581.464497][T16539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8296 sclass=netlink_route_socket pid=16539 comm=syz.4.3225 [ 581.494740][T16565] FAT-fs (loop1): Directory bread(block 64) failed [ 581.508047][T16565] FAT-fs (loop1): Directory bread(block 65) failed [ 581.515766][T16565] FAT-fs (loop1): Directory bread(block 66) failed [ 581.522763][T16565] FAT-fs (loop1): Directory bread(block 67) failed [ 581.529886][T16565] FAT-fs (loop1): Directory bread(block 68) failed [ 581.536769][T16565] FAT-fs (loop1): Directory bread(block 69) failed [ 581.544085][T16565] FAT-fs (loop1): Directory bread(block 70) failed [ 581.550904][T16565] FAT-fs (loop1): Directory bread(block 71) failed [ 581.557830][T16565] FAT-fs (loop1): Directory bread(block 72) failed [ 581.564560][T16565] FAT-fs (loop1): Directory bread(block 73) failed [ 581.747760][T16585] loop1: detected capacity change from 0 to 512 [ 581.761344][T16585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.847535][T16597] loop4: detected capacity change from 0 to 128 [ 581.854456][T16597] EXT4-fs: Mount option(s) incompatible with ext3 [ 581.880134][T16597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3245'. [ 581.890746][T16597] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3245'. [ 582.271061][T16613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3252'. [ 582.314555][T16618] loop0: detected capacity change from 0 to 512 [ 582.317268][ T28] kauditd_printk_skb: 794 callbacks suppressed [ 582.317310][ T28] audit: type=1326 audit(1779685882.011:18100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.9.3247" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5ed0bd68e code=0x7ffc0000 [ 582.324529][T16618] EXT4-fs: Ignoring removed i_version option [ 582.328579][ T28] audit: type=1326 audit(1779685882.031:18101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.9.3247" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5ed0bd68e code=0x7ffc0000 [ 582.384684][T16618] EXT4-fs: Ignoring removed bh option [ 582.390304][ T28] audit: type=1326 audit(1779685882.091:18102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.9.3247" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5ed0bd68e code=0x7ffc0000 [ 582.394051][T16618] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3253: inode #13: comm syz.0.3253: iget: illegal inode # [ 582.415930][ T28] audit: type=1326 audit(1779685882.091:18103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.9.3247" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5ed0bd68e code=0x7ffc0000 [ 582.415971][ T28] audit: type=1326 audit(1779685882.091:18104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.9.3247" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5ed0bd68e code=0x7ffc0000 [ 582.463377][T16618] fserror_report: 2 callbacks suppressed [ 582.463418][T16618] loop0: lost filesystem error report for type 5 error -117 [ 582.480565][ T28] audit: type=1326 audit(1779685882.091:18105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.9.3247" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5ed0bd68e code=0x7ffc0000 [ 582.490908][T16618] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.3253: couldn't read orphan inode 13 (err -117) [ 582.492953][ T28] audit: type=1326 audit(1779685882.091:18106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.9.3247" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5ed0bd68e code=0x7ffc0000 [ 582.518740][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 582.530732][ T28] audit: type=1326 audit(1779685882.131:18107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.9.3247" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5ed0bd68e code=0x7ffc0000 [ 582.556130][ C0] EXT4-fs (loop0): initial error at time 1779685882: ext4_orphan_get:1397 [ 582.556164][ C0] EXT4-fs (loop0): last error at time 1779685882: ext4_orphan_get:1397 [ 582.564482][ T28] audit: type=1326 audit(1779685882.131:18108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.9.3247" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5ed0bd68e code=0x7ffc0000 [ 582.588157][ C0] [ 582.633667][ T28] audit: type=1326 audit(1779685882.131:18109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.9.3247" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5ed0bd68e code=0x7ffc0000 [ 582.634436][T12664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.660520][T16618] loop0: lost filesystem error report for type 5 error -117 [ 582.669083][T16618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.729791][T16618] EXT4-fs (loop0): shut down requested (0) [ 582.778939][T16627] loop4: detected capacity change from 0 to 1024 [ 582.785821][T16627] EXT4-fs: Ignoring removed nobh option [ 582.791612][T16627] EXT4-fs: Ignoring removed bh option [ 582.800182][T13500] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.812264][T16627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.849118][T16627] netlink: 'syz.4.3257': attribute type 10 has an invalid length. [ 582.872022][T16627] team0: Device wg2 is of different type [ 582.885014][T16635] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3259'. [ 582.944332][T15772] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.978652][T16648] loop1: detected capacity change from 0 to 512 [ 582.996009][T16648] EXT4-fs: Ignoring removed bh option [ 583.016977][T16648] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 583.034709][T16648] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 583.050393][T16648] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 583.068611][T16648] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 583.081626][T16648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.203101][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3264'. [ 583.203695][T16663] loop0: detected capacity change from 0 to 8192 [ 583.248266][T12664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.269741][T16663] loop0: p1 < > p3 p4 [ 583.287082][T16663] loop0: p3 start 201326592 is beyond EOD, truncated [ 583.303702][T16663] loop0: p4 size 33554432 extends beyond EOD, truncated [ 583.368304][T16673] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.382727][T16677] loop4: detected capacity change from 0 to 128 [ 583.410879][T16677] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 583.425761][T16677] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 583.448874][T16673] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.478604][T16673] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.526631][T15772] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 583.537307][ T5104] Bluetooth: hci0: command 0x1003 tx timeout [ 583.543426][T12490] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 583.556031][ T2981] ================================================================== [ 583.564175][ T2981] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 583.568793][T16673] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.572566][ T2981] [ 583.572578][ T2981] write to 0xffff88811c0dc390 of 8 bytes by task 5552 on cpu 1: [ 583.572601][ T2981] inode_set_ctime_current+0x5f2/0x8c0 [ 583.598292][ T2981] simple_unlink+0x2d/0x80 [ 583.602760][ T2981] shmem_unlink+0x12d/0x140 [ 583.607313][ T2981] vfs_unlink+0x1c7/0x490 [ 583.611702][ T2981] filename_unlinkat+0x1e2/0x410 [ 583.616696][ T2981] __se_sys_unlink+0x2b/0xe0 [ 583.621339][ T2981] __x64_sys_unlink+0x1f/0x30 [ 583.626071][ T2981] x64_sys_call+0x2eb6/0x3020 [ 583.630878][ T2981] do_syscall_64+0x12c/0x3b0 [ 583.635522][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.641442][ T2981] [ 583.643798][ T2981] read to 0xffff88811c0dc390 of 8 bytes by task 2981 on cpu 0: [ 583.651367][ T2981] atime_needs_update+0x2ef/0x3e0 [ 583.656440][ T2981] touch_atime+0x4a/0x330 [ 583.660810][ T2981] do_readlinkat+0x137/0x2f0 [ 583.665434][ T2981] __x64_sys_readlink+0x47/0x60 [ 583.670305][ T2981] x64_sys_call+0x2b51/0x3020 [ 583.675010][ T2981] do_syscall_64+0x12c/0x3b0 [ 583.679628][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.685543][ T2981] [ 583.687882][ T2981] value changed: 0x000000006a13d8b8 -> 0x000000006a13d9fb [ 583.695002][ T2981] [ 583.697334][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 583.703525][ T2981] CPU: 0 UID: 0 PID: 2981 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 583.713958][ T2981] Tainted: [W]=WARN [ 583.717774][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 583.727854][ T2981] ================================================================== [ 583.799467][T10109] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.807979][T10109] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.820671][T10109] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.832897][T10109] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0