last executing test programs: 52.760536952s ago: executing program 0 (id=2347): setns(0xc9, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x802, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_procfs(0x0, 0x0) r2 = socket(0x23, 0x5, 0x0) r3 = gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0xf, 0x6, 0x10000400}, 0x10) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x83544, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x0, 0x8, 0x0, 0x5, 0x6, 0x200, 0x40, 0x0, 0x0, 0x0, 0x2000000020000003}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xb99be1ceba46343e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f0000000440)='gfs2meta\x00', 0x2000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80322, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x9, 0x6}, 0x4, 0x0, 0x0, 0x1, 0x400, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000000706010100000000008000000a00000608000640010000000500010007000000080006407fffffff0900020073797a310000000005000100070000000800064080000000d3422cefa09549f77f56e52b3a9e4d11379b283fa87b57d599617bfdea07e0dd9a9f2dbb791a27c0d8cde2ecd8b432002d5abcecfe98c06556dc8cc4ddfb03d374a7274b2835e2052f4838dc9e029fa6f5c612545d80ab22641a8b7e9f4a4ba225f1cc4fd96a175fcef38da9ac55403e930d4c4e143665b0fe435350a0b13032fadeee8bad4ebb900dd3a3972d8be03a785ada747b2b91d9417fc67d994279812c857386", @ANYRESHEX=r2, @ANYBLOB="e331b42909c2b7dbc4ad9e0f762069f23e8a1baba50051351ed0e640efec90e49a49490207ed8372aae35c49b67c43437faacdae4e07114871066cf3e09441070d85bb8d3c757d45d792aeecc076ff56a460958a8819cf0754672c03134eb7e5baed91949ce5a6432178fc527673670f216b9ec30d5101fe3f694fdc1398132d8933a78a25016be0967f", @ANYRESOCT=r1, @ANYBLOB="07b2053a55752e60f3aba3c36c48b811fa477e6759773537e73c146f77368eefb42f5b84", @ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRESDEC=r4, @ANYRES64=r1, @ANYRESDEC], 0x48}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) gettid() socket(0x1e, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config\x00', 0x146) bind$bt_sco(r5, &(0x7f0000000400), 0x8) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1bf) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x18) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x840008, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x8100, 0x0) 52.087719934s ago: executing program 0 (id=2352): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x4d5, 0x3ff}, 0x0, 0x20000, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$netlink(0x10, 0x3, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x19}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x5, 0x1, 0x4, 0x0, 0xfffe, 0x8, 0x7}, {0x0, 0x0, 0x7f}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@broadcast, 0xc, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$msr(r2, &(0x7f0000000f40)=""/194, 0xc2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) setns(0xc9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r3, 0x2) 51.892988523s ago: executing program 0 (id=2353): unshare(0x28060080) unshare(0x28020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000104c0)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000a0000000000000001000000186000000800000000000000070000009500000000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x1d, &(0x7f0000010180)=""/29, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000010440), 0x0, 0x10, 0x2d854a3a}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xa2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) set_mempolicy(0x1, &(0x7f0000000040)=0x800000002003, 0x41) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 51.596863577s ago: executing program 0 (id=2361): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f0000000600010001000000080005", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x500, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) 51.487886712s ago: executing program 0 (id=2363): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2d, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x55b7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x6, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/available_schedulers\x00', 0x0, 0x0) read(r1, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4800000000000004, 0x4, 0xffffffdffffffffb, 0x2, 0xfffffffffffffffa, 0x2004}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000002c0)={'broute\x00', 0x0, 0x0, 0x0, [0xffffffffffffffff, 0x0, 0x80, 0x1, 0x4, 0x100000001], 0x1, &(0x7f0000000280)=[{}, {}], 0x0, [{}]}, 0x88) ptrace$setregs(0xd, r2, 0x8, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2879c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e7183dceb44cc4c7b3664e29fb000000") ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x2, @perf_config_ext={0x800, 0x7ff}, 0x0, 0x0, 0x0, 0x5, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x960, 0x6d2, 0x0, 0x5, 0xfff, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) ftruncate(0xffffffffffffffff, 0x8800000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000640)={&(0x7f00000005c0)=""/128, 0x80}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x7008b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x1}, 0x1, 0x35, 0x3, 0x9, 0xb, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c010000100001040000000000000000040000000020000000000000000000010000000000000000000000000000000112341234000000000a000000000000006571427ed2409a73b66dfa97746f8d22829832fc980d0729bc84bf7ccf0bb463777ac4eef1f6c78b40b4c8ef4131c708a674712902e621ce8b2a88363281732c17ae8d4c01d956dfe6e05b4c307275a55f5d6cf515f819dfc0a6d7bc61c85f6fcb580f5c7864c73566f35a26555663040f92ed1718bed498fce1c093186b755b1a0b43150da889056a2ec5ebb58209787e98204c3135a4ee04fdfc74bebc0a26be9dc2a1b5561dbf43a8aef338", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d23300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000050000000000000000000000000000000000000000000000000000461ab8652a39cedb0000000a00000000000000040000004c001400686d6163287368613129000000"], 0x13c}}, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000240), 0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000003c0)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x1, @ib={0x1b, 0xb, 0x3ff, {"f6fa32cce7497ace742ba30f6731e562"}, 0xcb, 0x3ff, 0x8001}}}, 0xa0) ioctl$XFS_IOC_FSGROWFSLOG(r5, 0x4008586f, &(0x7f0000000000)={0x2, 0x9}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x40, 0x40, 0xc0000000, 0xc, {{0x6, 0x4, 0x1, 0x3, 0x18, 0x66, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010100, @remote, {[@timestamp={0x44, 0x4, 0x8}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000002e000000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xffffff7f}, 0x94) 50.616741614s ago: executing program 0 (id=2379): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008"], 0x5c}}, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r1, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8108, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x102, 0x60, 0x19}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') shutdown(0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x90) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x4000010, 0xffffffffffffffff, 0x2e44c000) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000002c0)={r6, 0x2}, 0x8) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003540)={{0x14}, [@NFT_MSG_DELSETELEM={0x2b80, 0xe, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2b48, 0x3, 0x0, 0x1, [{0x26f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x1454, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7c, 0x1, "25b02ab44b23ef7b60be7514f102a59b176d191b46a3412b02a9ff25baad7bf2e082e5457f5e188cce4f5c0af1ae187db60a40307ab34e8944ee4e10b3000d84e2c513db4ef84ce0bdd4ce36cfca673812df2841ef68c94844e74c071f9c533f91ad66898566b6d615907cbd4eac9cd542b6fb07ac92771b"}, @NFTA_DATA_VALUE={0xc6, 0x1, "5ef07575a1e72a8ae0d1522a6da3a596af05073c34d2a35c96e61a7f882d65a62153ea5fd096528adf94f1f8847200b2afb4c52bcb4e9c16fb044084ca9095cdbc506dafa615c1b6c842b6ae7e4c243d017d67d181463cad13239a8cd6c90ae9068ceda6fbafb244079b559e499013beebb5a21396952d824926f3a57e5c876dca76c3caeda0ce55a3a41870501141babaea7fc7dbcbb8c78c0d8715c89973846f929b8cf00dbb6c9b3550d55e241b02216db3965785bfdd87d223674311ff0ddc43"}, @NFTA_DATA_VALUE={0xa9, 0x1, "38412b8f98ad2fa5090939d97492da72cdfc8e04a9cb7d02a761766e398af5439e0540641f569bb4fd528c533f8a8c5a860c3d0d26d4713aaed51ee29db245e1278ad66e97f2b82ee6880bb9bd971722288195596133f322573daeee5c4b93606c4da3f8a11f880d111e8473679b8d313ac6a22dfe8c445f45699014c5898a4c5f689dcb764edb41ad45a1e5eaad12e48f1291e7ddf85ee8f170757bedf56ce0aa8d7e2e5c"}, @NFTA_DATA_VALUE={0x21, 0x1, "3bba5ea6793dc89b1d3dec656ef44d0a78da2c56a29279da1147c0c0be"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "229dbfcf908a7f2e376fa1ae408ada0317a6ddd47199bfe9a4e6545c9a17188289b764df5e121865936a6c78257e4af3c5b2c84d1f940b8f6302e556639031fe5b5a6a1cd72f4cb45ca9b034ef00c0bcdc4ca2cceafdec02440850571feb4d38e03588208b1c721c02682fd6da6e4d103a3123ba43cd1538f3b6e23cfe8b838e0deef8ada94e905203c6c50d065bc189f6b1c21dedd10de9850d2fc11f8f3e9e1523b978d6c6764351a7d2fda5a2dd8d7c0f945559b5ab4d6b66c9b18a1ee4e1a0363d29686dd63bbb7f8ed590"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xcd, 0x1, "c588beed349f6849f9820501318b4a200d5c2dd4a3751fc2bebfe64439dac6d0bf76342fa8815f5ee527ce326b406fa18162f19de591e13f9da8c034c8c2560efdb12302d9d3e7211cfda21a985d6e1426bf9db54b10b94007b0b26af57881a53a05828d5159a440367a13e4af05b278dd1a82f1e145d0c20ad8e7cdcbf5340ace30235bbc1dc72c5d37fbc109050175411c8cdd28740c9c394042df6a6392568098de96da9f04576e097def8ab40bf80a4c1e9561381215be2e288ebf67287db55dc06eecc3e9a9a4"}]}, @NFTA_SET_ELEM_KEY_END={0xd4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x9a, 0x1, "f197fd2813bfdcc9f089ac1de9cf4542b202cba78e70ae8b91eca434df23ef10f713f67985df6d4936c51668652d7d4d786598e5a188b91e3bda222db931278c4083df48e4bebdbe1f84a3fbb6c2844f985ed75c5a50273f4bdecfa859a57ad055b3aa4c3ef9a51e81344d70e79736d5211a19af282f492f1cdb6b6cf4c893fbc9a0931819244aaf47fb47b64587008103a7ab521b69"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x11b4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x93, 0x1, "25f5deb15c51d0af099577843556e53dffccd929dc2ea49c2022a0d90af16346a034493b1799f5eedc8a0f63b065249f96b6e38bb63d6eaea3f163e1f72744a3ad9e1acf8e9041e14cb8aa45237a2b60c07d1e02087aa906134415bec45f6b26b24d4ada2b32cd935bf13594047a81759d0997e327aeac4c9c2ad32dcaadcf3e79c01113979905173e93fbc7a322ba"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe0, 0x1, "a1188778ea7b440964163f84348c35104414773b7e6ec5ff167e261cf1eac2e241b991644e45700b9e3e89fc8c6aae9074d87268e3ab4679cbbda73e279e10b72a5cb96b2107a3e30b481bf193e42d6b61f047816b1b2ad3bc76c68a2a0186bbc2cde62401d72f91e0a15b5e14a40a6e57f5be213724da82415921ab380e599798bd790d429cbb20349d8a323653ae66df417f22b49a8d68302b48f0971ab4563da8591b380f22aa57417684bb18108d30b157a6dc2759dff8476d930a5b9342e3bda7761d66de0d0a71b3f206b918da898d478449a4c1820d3eb4c6"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1000000000000103}]}, {0x2f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xd4, 0x6, 0x1, 0x0, "9096a7a2fc4f391dc21884bc9d9a2b7fdc4e128ea9c6af29c5d1db7c97ad9f7a7116b8998476d186ceadc449e1fb4501e804643878d1c8c886221422f3b455a2e2f8a5ab974fbdd047d17d7fc64f3856bcc5a8b47cc09636d834d887dbcf35fb9872ce4c8c4373bb9c455ede5a3d75d9aa7393aa8c6e088b8da04cd44b2560638b87fcbe32ea851af3ee7d75e02e4bd37e01db005451b8f7073c08cf0a2d9e1408461c94b0d688bc4f73def797f4ac458e7978d69fa8d2f6f0d856508b8bfe80d1e4ef13e00def3f8c032855e6bd0000"}, @NFTA_SET_ELEM_EXPRESSIONS={0x208, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x52}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd9}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2f}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x94}]}}}, {0x58, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0xd4, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xc4, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPRESSIONS={0x88, 0xa, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x60}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xc9}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_DYNSET_EXPR={0x38, 0x7, 0x0, 0x1, {{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}}}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x6d}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xff}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000001}]}, {0xf4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0xe4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x50, 0x1, "c82e5488d4c984dd33a8ba805361137f4575b3d2bf5e0c9f4701cd5aa9bdbf9d798dc825cc31be02634682d73d011f2182eea1b55022537919c805583303fa5c782527c138c98428604e4978"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x2ba8}}, 0x0) mq_unlink(0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x1d3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800500024000000000000000000c0001400000000000000000090003007379000000000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x4000010) write(r7, &(0x7f0000000000)='120', 0x3) 46.002771651s ago: executing program 4 (id=2441): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000d00)={@dev={0xac, 0x14, 0x14, 0x11}, @local, @loopback}, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback, 0xfffffffc}, 0x1c) close(r1) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200e00000020800074000000005"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 45.884428426s ago: executing program 4 (id=2445): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x1224, 0xfdfffffe, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="800000f4758084cf96f65acdd1f5c108590024f18eb0ed2f54b598ce6615ee2161023ccfc065e6efd2be2490f00a1a41f1998b177623f0f3ba325147ba46058bc22f90d1c9c2f9bdcbdcb96fd58600e46a162da331e5997370d5fb70562d6cbb9089473b7f9d407f45d2679b1763c1b04a85e0a676b02611d10a17f45fbbe6895ba65b929624df43c3daae32f58c7849bd1c660da766", @ANYRES16=r3, @ANYBLOB="040026bd7000fedbdf250400000014000200fc02000000000000000000000000000105000100000000002900070073797374656d5f753a6f626a6563745f723a7465787472656c5f73686c69625f743a733000000000140007002f7573722f7362696e2f637570736400050001000100000008000500ac141425"], 0x80}}, 0x40800) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000000)=ANY=[@ANYBLOB='tran=\x00\x00\x00\x00\x00t\x00\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$eJzs3M9vFFUcAPDvzO6WgmIr4g8QpIpG4o+Wlh9y8KLRhIMmJnrAeKptIZVCDa2JEKLVAx4NiXfjf2E86cWoF0286t2QEMMF1Mua2Zltl2W33dIfS9vPJ5n2zczrvvedmTf75r3tBrBlDWQ/koj7I+KPiOjLV2/PMJD/unXj8tg/Ny6PJVGtvv13Ust388blsXrW+t/dl69Uq8X6thblXnkvYnRqauJCsT40e+7DoZmLl16cPDd6ZuLMxPmREyeOHtnfc3zk2KrEmcV1c+8n0/v2nHz36ptjp66+/3NSjjzuaIpjtQzkR7elZ1a7sC7b2ZCuHdh5B35dSLe6EuimUkRkp6tSa/99UYrt8/v64vXPm/P3rncFgTVTrVari9yV56rAJpbE0nl6izsFsJkUjwC159/6so7dj667/kr+AJTFfatY8j3lSPPEgUrT8+1qGoiIU3P/fp0tsUbjEAAAjb7P+j8vtOr/pfFInujJfjxQzKH0R8SDEbErIh6KiN0R8XBELe+jEfHYMstvniG5s/+TXrvr4DqQ9f9eLua2bu//pfUs/aVibWct/kpyenJq4nBxTA5FZdvpyWRieJEyfnjt9y/b7Wvs/2VLVn69L1jU49r2plH38dHZ0RUF3eD6ZxF7yxG3KtEUfxL1aZwkIvZExN67LGPyuXLbfUvHv4j2L9ux6jcRz+bnfy6a4q9L2s5PDr90fOTYUG9MTRweql8Vd/rltytvNW0q1RMrin8VZOd/R8vrfz7+/qQ3YubipbO1+dqZ5Zdx5c8v2j7TdHL9lxcGqE/uLK7/nuSd2oaeYsfHo7OzF4YjepI37tw+svBq9fV6/iz+Qwdbt/9dsXAkHo+IfRGxPyKeyB4Ki7o/GRFPRcTBReL/6dWnP1h+/OszV5rFP77U+Y/G87/8ROnsj98tHX92j2t3/o/WUoeKLZ3c/zqt4EqOHQAAAGwUae0z8Ek6mJSLdJoODuaf4d8dO9Kp6ZnZ509Pf3R+PP+sfH9U0vpIV1/DeOhwMTbc3/Da/Q37jxTjxl+VttfWB8emp8a7GDeQt/Na+5+/F+TtP/NXqdu1A9ZcPo+WdrsaQBeswjw6sEFp/7A1JYu2/8q61gVYf97/Yetq1f4/bZt78Ns1rQywrrz/w9bVQfufy3+17xUAG5P3f9i6tH/Yktr+b3zadld2u1jBtwGsTeK/4vsM75X6bP5EpPdENTZcIoll/lW54y+zWEai2pe3/2zLttbNHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYFP4PwAA//+dU9wM") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0xa, [{0xc, 0x5}, {0x3b, 0x1}]}]}}, &(0x7f0000000f40)=""/4089, 0x36, 0xff9, 0x8, 0x40000000}, 0x28) 45.80774488s ago: executing program 4 (id=2446): syz_open_dev$sg(&(0x7f0000000400), 0x838, 0x20000) r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002040, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x130, 0x0) listen(0xffffffffffffffff, 0xfff) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001580)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="84050000", @ANYBLOB="100027bd7000ffdbdf258900000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x584}, 0x1, 0x0, 0x0, 0x4885}, 0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0x12, 0x4) 45.677595006s ago: executing program 4 (id=2448): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) epoll_create(0x5) 45.540166753s ago: executing program 4 (id=2451): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2d, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x55b7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x6, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/available_schedulers\x00', 0x0, 0x0) read(r1, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4800000000000004, 0x4, 0xffffffdffffffffb, 0x2, 0xfffffffffffffffa, 0x2004}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000002c0)={'broute\x00', 0x0, 0x0, 0x0, [0xffffffffffffffff, 0x0, 0x80, 0x1, 0x4, 0x100000001], 0x1, &(0x7f0000000280)=[{}, {}], 0x0, [{}]}, 0x88) ptrace$setregs(0xd, r2, 0x8, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2879c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e7183dceb44cc4c7b3664e29fb000000") ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x2, @perf_config_ext={0x800, 0x7ff}, 0x0, 0x0, 0x0, 0x5, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x960, 0x6d2, 0x0, 0x5, 0xfff, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) ftruncate(0xffffffffffffffff, 0x8800000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000640)={&(0x7f00000005c0)=""/128, 0x80}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x7008b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x1}, 0x1, 0x35, 0x3, 0x9, 0xb, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c010000100001040000000000000000040000000020000000000000000000010000000000000000000000000000000112341234000000000a000000000000006571427ed2409a73b66dfa97746f8d22829832fc980d0729bc84bf7ccf0bb463777ac4eef1f6c78b40b4c8ef4131c708a674712902e621ce8b2a88363281732c17ae8d4c01d956dfe6e05b4c307275a55f5d6cf515f819dfc0a6d7bc61c85f6fcb580f5c7864c73566f35a26555663040f92ed1718bed498fce1c093186b755b1a0b43150da889056a2ec5ebb58209787e98204c3135a4ee04fdfc74bebc0a26be9dc2a1b5561dbf43a8aef338", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d23300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000050000000000000000000000000000000000000000000000000000461ab8652a39cedb0000000a00000000000000040000004c001400686d6163287368613129000000"], 0x13c}}, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000240), 0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000003c0)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x1, @ib={0x1b, 0xb, 0x3ff, {"f6fa32cce7497ace742ba30f6731e562"}, 0xcb, 0x3ff, 0x8001}}}, 0xa0) ioctl$XFS_IOC_FSGROWFSLOG(r5, 0x4008586f, &(0x7f0000000000)={0x2, 0x9}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x40, 0x40, 0xc0000000, 0xc, {{0x6, 0x4, 0x1, 0x3, 0x18, 0x66, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010100, @remote, {[@timestamp={0x44, 0x4, 0x8}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000002e000000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xffffff7f}, 0x94) 44.709307092s ago: executing program 4 (id=2457): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x6, 0xfffffdfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xdea, 0x7}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) getsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000240), &(0x7f0000000280)=0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x2004c890) close(r2) 35.552026644s ago: executing program 32 (id=2379): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008"], 0x5c}}, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r1, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8108, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x102, 0x60, 0x19}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') shutdown(0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x90) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x4000010, 0xffffffffffffffff, 0x2e44c000) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000002c0)={r6, 0x2}, 0x8) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003540)={{0x14}, [@NFT_MSG_DELSETELEM={0x2b80, 0xe, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2b48, 0x3, 0x0, 0x1, [{0x26f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x1454, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7c, 0x1, "25b02ab44b23ef7b60be7514f102a59b176d191b46a3412b02a9ff25baad7bf2e082e5457f5e188cce4f5c0af1ae187db60a40307ab34e8944ee4e10b3000d84e2c513db4ef84ce0bdd4ce36cfca673812df2841ef68c94844e74c071f9c533f91ad66898566b6d615907cbd4eac9cd542b6fb07ac92771b"}, @NFTA_DATA_VALUE={0xc6, 0x1, "5ef07575a1e72a8ae0d1522a6da3a596af05073c34d2a35c96e61a7f882d65a62153ea5fd096528adf94f1f8847200b2afb4c52bcb4e9c16fb044084ca9095cdbc506dafa615c1b6c842b6ae7e4c243d017d67d181463cad13239a8cd6c90ae9068ceda6fbafb244079b559e499013beebb5a21396952d824926f3a57e5c876dca76c3caeda0ce55a3a41870501141babaea7fc7dbcbb8c78c0d8715c89973846f929b8cf00dbb6c9b3550d55e241b02216db3965785bfdd87d223674311ff0ddc43"}, @NFTA_DATA_VALUE={0xa9, 0x1, "38412b8f98ad2fa5090939d97492da72cdfc8e04a9cb7d02a761766e398af5439e0540641f569bb4fd528c533f8a8c5a860c3d0d26d4713aaed51ee29db245e1278ad66e97f2b82ee6880bb9bd971722288195596133f322573daeee5c4b93606c4da3f8a11f880d111e8473679b8d313ac6a22dfe8c445f45699014c5898a4c5f689dcb764edb41ad45a1e5eaad12e48f1291e7ddf85ee8f170757bedf56ce0aa8d7e2e5c"}, @NFTA_DATA_VALUE={0x21, 0x1, "3bba5ea6793dc89b1d3dec656ef44d0a78da2c56a29279da1147c0c0be"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "229dbfcf908a7f2e376fa1ae408ada0317a6ddd47199bfe9a4e6545c9a17188289b764df5e121865936a6c78257e4af3c5b2c84d1f940b8f6302e556639031fe5b5a6a1cd72f4cb45ca9b034ef00c0bcdc4ca2cceafdec02440850571feb4d38e03588208b1c721c02682fd6da6e4d103a3123ba43cd1538f3b6e23cfe8b838e0deef8ada94e905203c6c50d065bc189f6b1c21dedd10de9850d2fc11f8f3e9e1523b978d6c6764351a7d2fda5a2dd8d7c0f945559b5ab4d6b66c9b18a1ee4e1a0363d29686dd63bbb7f8ed590"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xcd, 0x1, "c588beed349f6849f9820501318b4a200d5c2dd4a3751fc2bebfe64439dac6d0bf76342fa8815f5ee527ce326b406fa18162f19de591e13f9da8c034c8c2560efdb12302d9d3e7211cfda21a985d6e1426bf9db54b10b94007b0b26af57881a53a05828d5159a440367a13e4af05b278dd1a82f1e145d0c20ad8e7cdcbf5340ace30235bbc1dc72c5d37fbc109050175411c8cdd28740c9c394042df6a6392568098de96da9f04576e097def8ab40bf80a4c1e9561381215be2e288ebf67287db55dc06eecc3e9a9a4"}]}, @NFTA_SET_ELEM_KEY_END={0xd4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x9a, 0x1, "f197fd2813bfdcc9f089ac1de9cf4542b202cba78e70ae8b91eca434df23ef10f713f67985df6d4936c51668652d7d4d786598e5a188b91e3bda222db931278c4083df48e4bebdbe1f84a3fbb6c2844f985ed75c5a50273f4bdecfa859a57ad055b3aa4c3ef9a51e81344d70e79736d5211a19af282f492f1cdb6b6cf4c893fbc9a0931819244aaf47fb47b64587008103a7ab521b69"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x11b4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x93, 0x1, "25f5deb15c51d0af099577843556e53dffccd929dc2ea49c2022a0d90af16346a034493b1799f5eedc8a0f63b065249f96b6e38bb63d6eaea3f163e1f72744a3ad9e1acf8e9041e14cb8aa45237a2b60c07d1e02087aa906134415bec45f6b26b24d4ada2b32cd935bf13594047a81759d0997e327aeac4c9c2ad32dcaadcf3e79c01113979905173e93fbc7a322ba"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe0, 0x1, "a1188778ea7b440964163f84348c35104414773b7e6ec5ff167e261cf1eac2e241b991644e45700b9e3e89fc8c6aae9074d87268e3ab4679cbbda73e279e10b72a5cb96b2107a3e30b481bf193e42d6b61f047816b1b2ad3bc76c68a2a0186bbc2cde62401d72f91e0a15b5e14a40a6e57f5be213724da82415921ab380e599798bd790d429cbb20349d8a323653ae66df417f22b49a8d68302b48f0971ab4563da8591b380f22aa57417684bb18108d30b157a6dc2759dff8476d930a5b9342e3bda7761d66de0d0a71b3f206b918da898d478449a4c1820d3eb4c6"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1000000000000103}]}, {0x2f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xd4, 0x6, 0x1, 0x0, "9096a7a2fc4f391dc21884bc9d9a2b7fdc4e128ea9c6af29c5d1db7c97ad9f7a7116b8998476d186ceadc449e1fb4501e804643878d1c8c886221422f3b455a2e2f8a5ab974fbdd047d17d7fc64f3856bcc5a8b47cc09636d834d887dbcf35fb9872ce4c8c4373bb9c455ede5a3d75d9aa7393aa8c6e088b8da04cd44b2560638b87fcbe32ea851af3ee7d75e02e4bd37e01db005451b8f7073c08cf0a2d9e1408461c94b0d688bc4f73def797f4ac458e7978d69fa8d2f6f0d856508b8bfe80d1e4ef13e00def3f8c032855e6bd0000"}, @NFTA_SET_ELEM_EXPRESSIONS={0x208, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x52}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd9}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2f}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x94}]}}}, {0x58, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0xd4, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xc4, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPRESSIONS={0x88, 0xa, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x60}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xc9}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_DYNSET_EXPR={0x38, 0x7, 0x0, 0x1, {{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}}}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x6d}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xff}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000001}]}, {0xf4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0xe4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x50, 0x1, "c82e5488d4c984dd33a8ba805361137f4575b3d2bf5e0c9f4701cd5aa9bdbf9d798dc825cc31be02634682d73d011f2182eea1b55022537919c805583303fa5c782527c138c98428604e4978"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x2ba8}}, 0x0) mq_unlink(0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x1d3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800500024000000000000000000c0001400000000000000000090003007379000000000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x4000010) write(r7, &(0x7f0000000000)='120', 0x3) 29.572670416s ago: executing program 33 (id=2457): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x6, 0xfffffdfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xdea, 0x7}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) getsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000240), &(0x7f0000000280)=0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x2004c890) close(r2) 2.33448081s ago: executing program 1 (id=2925): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7ff, 0x1}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x7a0, r2, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x226}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @beacon=[@NL80211_ATTR_PROBE_RESP={0x41a, 0x91, "a364a87fce8393fb1581b1b8a66739f8028cd8a8b6342208564706f9b17a64e1b2024e8a6de3e9c07b687136dc020741af53110b51f1f27ffcdca9aa65b0bd0cf6460cfce73f7fecf66e486bfebe65055013828533dc8062d992cfa065db3a1d664f150290350f5d832301cab6eb5592287c5bbe0fbdaa98ddeb398fa1cd5d7e71423d390a040bbed8700fc808d382d6bd9198a9e5ab8c3067c373acd2e5ff12264494ad5d7ed5f46d2224531b67a9ccacff23106120978e4de076a0e555673fd8db949a6924475259ddf810a66d8201131516247f228d7db8b965d49f41ffab00a1ee66dd45c97b7bb4d8daac2a61e9414e81aa92327b4ac046934cf614f59d799b7baa7ed5fb600dd7aa1c51fecb476fdb3bdc9041ef88395979f554e1e734dcead1adcace3eda2784e5be429f254b2c9b185c806c1a645c8b64e7713535337f60ac799293651fef8d58adabba73132734d406602ea93ae175c092eae707e30ee5397ae418731c4e804d50a72ae885c449956a814f58762ae4b30e33b7b10bf492764d91acc38bc1a875b7e6a0527d00b35ef0af668db60bf33110d22a7f01f10bc3289affaea92c772dbe4c2b449182bfad6df3c26350ef62ee647daf4ffeb3b0863096612ef37baa1891aec8f5c150b71a6a3ae840f470ed423b76af9b959254da95141ea5db05341083c4724848b4140a9933da2abfda85789bba17b291dbd9435f2633db07e75b3d21f39ea76ea06de9587a2caa0032f73189ac136240e2ebc24bc78542b49025481aaa83bd5a788509e5e382b8d4e90d7db94e1b680c2ba81ac7c453e5507d7747caa26c0a46ebd4e42a023accd587f65565c80f0f1778cfb3a38af329bfbc932d66fa23e0096fe78defae0620c964547afeca0c0b9a8713d4024d6a10d4df9c1b90103af8615f069ec73e842bbf676b52da67a4ad49c40caf45302e528424545f30ce3830d0147390f6041b61883cfc18939a8749aae198c23da30220e674f12da44fd241787a0e6f96ee40f90bdeb43aba5f0c4767048df1246f46a6186580b54b0ef98658262bfdc041a14e0d9f78e0e369c3846f8d49c2671808cf97e2ffd8930364e35f90fee9a47fbec228e75efb22765bde80493408537dc17e03dd2b07d7f72f157655f810426e5402fa6ef5f9e75ca92ebefb66ece62badfe3388c1e82ae4b004aa5aac52acf93f9da69711c43ede980a84e1667f63fffe9ad9ad3213a66394567ff3b3ac44e5797c621836888248e158bcf4419558beece1484e4913bd9df05838369f6f546f68ce6d5f43838cc6456e77c20c7f315ba4a31b4dc019fe95dbb8d47e99131073d96934f9e5e64917d61b3eb54dee750f7838b008894cc0bd820c0df47702438dfc784bcb27ff605b01de360bf15c0142b1cbbab4546b215ab28a471a627ea18afcfcb20c979087758efa7864ea5398bfef4a7a85cd372d0ead55072f3bb7b52a7c"}, @NL80211_ATTR_IE_PROBE_RESP={0x11, 0x7f, [@challenge={0x10, 0x1, 0xc}, @supported_rates={0x1, 0x3, [{0x48, 0x1}, {0x5, 0x1}, {0x3}]}, @channel_switch={0x25, 0x3, {0x1, 0xa1, 0x4}}]}, @NL80211_ATTR_IE={0xa1, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @device_a, @device_b}}, @rann={0x7e, 0x15, {{0x0, 0x2}, 0x8, 0x7, @device_b, 0x4, 0x9, 0x484}}, @random_vendor={0xdd, 0x6d, "b5ff73c9272e0c8760503305063bd042fd2778db76c1ca55cb0362d806fc84e0516634a754b94ce5a60e25f9d08c594ca636826b27792b12a225e10da4f330a4323c9d049d9826c8274ce06df8e08b25433d9c7b30429c05838816cdc91c9421c87950ae9dd057e7e6b80f9b54"}, @challenge={0x10, 0x1, 0x23}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1aa, 0x80, [@fast_bss_trans={0x37, 0x7a, {0x9, 0x1, "8120066bc75fc0a55e0fecf5e058b321", "9e60d1b55757379ff1795ab74a63ccb02874b32884cadca57fad1dc1feba90f2", "b632d30bbc29880e88e221cf801062e2000000e200f9ffffffffffffff00", [{0x1, 0x26, "d79194600624f6d2dd6d428c37a2fd2ee3fdf8a913ba0750dff91e3cbc0eaedcf8d8b6b3efcf"}]}}, @perr={0x84, 0x128, {0x89, 0x12, [{{0x0, 0x1}, @broadcast, 0x70, @value=@broadcast, 0xf}, {{}, @broadcast, 0x4, @void, 0x24}, {{0x0, 0x1}, @broadcast, 0x74f, @value=@broadcast, 0x21}, {{0x0, 0x1}, @device_a, 0x80000001, @value=@device_b, 0xe}, {{0x0, 0x1}, @broadcast, 0x8, @value, 0x17}, {{0x0, 0x1}, @broadcast, 0xa00, @value, 0x31}, {{0x0, 0x1}, @broadcast, 0xfffffff9, @value=@device_b, 0x16}, {{}, @device_b, 0x0, @void, 0x3}, {{}, @device_b, 0x2, @void, 0xe}, {{}, @device_a, 0x10000000, @void, 0x32}, {{0x0, 0x1}, @device_b, 0x80000001, @value=@device_b, 0x8}, {{}, @broadcast, 0x2b, @void, 0x21}, {{}, @device_a, 0x8, @void, 0x1b}, {{}, @device_a, 0xc2c4, @void, 0x6}, {{}, @broadcast, 0x40000, @void, 0x2}, {{0x0, 0x1}, @device_b, 0x1, @value=@device_b, 0x1c}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x15}, {{0x0, 0x1}, @device_b, 0x0, @value=@broadcast, 0x24}]}}]}, @NL80211_ATTR_BEACON_TAIL={0x36, 0xf, [@chsw_timing={0x68, 0x4, {0x9, 0x2}}, @mic={0x8c, 0x18, {0x6b0, "c33e72c9f0d7", @long="e26317cb803e463bb8559c601a211269"}}, @mic={0x8c, 0x10, {0xaa1, "52ce23d71667", @short="e6201387d60498da"}}]}, @NL80211_ATTR_IE={0x9a, 0x2a, [@fast_bss_trans={0x37, 0x94, {0x3, 0x2, "14adbf25241745f77f869b065e40c1df", "f41cfc90cfb82de89bf08da69b4e7a5fee8662817245b77f14d13798a145fd89", "108535343d02e2f74eff1192ee105a7d456086962aae46f67ad3dfe8225e16e9", [{0x1, 0x1c, "d4cf4c31a04ad04a8f6707a3c755627e5cc281664f442eaa4f793697"}, {0x1, 0x22, "9ba138cae38133e9adfa1e3a747b7b148d4057bb81a78e5accabbcccd4d28c74ce0b"}]}}]}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x7a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x44040001, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x5, 0x3ff, 0x6, 0xa513, 0xd, "4ebd9cb3368129330fc3f07f308bc7dcf800"}) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.252418074s ago: executing program 5 (id=2928): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) r1 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r1, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x4) sendfile(r1, r1, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) (fail_nth: 5) 1.880021232s ago: executing program 5 (id=2932): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r2 = socket$inet6(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r4, 0x504c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0}]) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_newneigh={0x34, 0x1c, 0x721, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r10, 0x40, 0x0, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0xb8, 0x2c, 0x4, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc, 0x7}, {0xd, 0x4}, {0xfff3, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0xf7, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0xa5e4}, @TCA_CHAIN={0x8, 0xb, 0x800}, @TCA_CHAIN={0x8, 0xb, 0xfff}, @filter_kind_options=@f_route={{0xa}, {0x58, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff2, 0xfff2}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x28}, @TCA_ROUTE4_IIF={0x8, 0x4, r10}, @TCA_ROUTE4_POLICE={0x24, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xd8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff2, 0xe}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8e}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x2}, 0x8004) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)={0x18, 0x2d, 0x1, 0x2, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) 1.789970206s ago: executing program 1 (id=2936): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0x400}, 0x100202, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x5, 0x1) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x890b, 0x0) sendmsg$netlink(r0, 0x0, 0x240000c4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000001000)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000d80)={0x0, 0x8}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000280)) r4 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) ftruncate(r4, 0x8000) 1.739736488s ago: executing program 5 (id=2938): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x20020080) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000100001060000000000000000000000000000000001"], 0x60}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000140001032db57000fedbdf250c0000000c0004"], 0x20}}, 0x20008080) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f00000000c0)=0x8, 0x4) recvmmsg(r4, &(0x7f0000001c40)=[{{&(0x7f0000000380)=@phonet, 0xfffffffffffffdbf, &(0x7f0000000040), 0x0, &(0x7f0000001cc0)=""/4097}, 0x7}, {{&(0x7f0000001a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000005c0)=""/203}], 0x0, &(0x7f00000001c0)=""/40}, 0x2}], 0x641, 0x40000103, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendto$packet(r0, &(0x7f0000000000)="43051b1cc6efeb06feb54c88c82f8e4b0114c9749e5efb2c9bb546467c679c63146aeb277c06377ff9ffffffc7d100ec5f36baf842072b9ccd82", 0x3a, 0x0, &(0x7f00000000c0)={0x11, 0xc, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 1.605756345s ago: executing program 5 (id=2940): syz_open_dev$sg(&(0x7f0000000400), 0x838, 0x20000) r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002040, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x20) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x130, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x404}, 0xe) listen(r3, 0xfff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x0, 0x80, 0x6, 0x3, 0x7, 0x0, 0x0, 0x7807, 0x4022, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000280), 0x6}, 0x10, 0x10000, 0x4, 0x9, 0x3, 0x38000000, 0xfb4e, 0x0, 0x37, 0x0, 0xfb}) readlink(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001580)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="84050000", @ANYBLOB="100027bd7000ffdbdf258900000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x584}, 0x1, 0x0, 0x0, 0x4885}, 0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 1.585911866s ago: executing program 2 (id=2941): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000003480)=ANY=[@ANYBLOB="3000000000000000000000000700000094040000441c1737"], 0x30}}, {{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="585966e1be21bb127cd2f347c0df51a78de8a07c225e4bceb2672e21db7c0c534c1b0353a3374c8596835a92308effb10344f13db7155356648e1096bff0c3c84e831b37c67597a75b3905dc1d785ef3fc054867f29af2675de892303973e7c13c3280e8af6418f5284b3bac08a4214fc674fb58ea0797d3893725bb789b7ca32795dd196c942a04af1d8318b02e124bc52735b8e8c30efb4c8c675ae2d0c2a8e48185cadbf9d9f5dfa501f29a75df77aae24d8bef24fd620e0a4d046da9be2363b1be7f38ebe061f458fbc2dada4465a13d480d43fcfd2a6c6ba4f71700c409", 0xe0}, {&(0x7f0000000240)="6684d214e1473eca52c3c42cefc716973c28bfe9aa4de52c24049fefba6c1807da1e063246024170c139e7d6695ad38561134f240a73", 0x36}, {&(0x7f0000000280)="e3ee54f720ba207e4a0d237fb2e938f4fd52523f36e254ae2035f9dadb78502f5ebaecadfe2a3606ca0d4bdc4b7765aa81868af605db243801", 0x39}, {&(0x7f00000002c0)="323919ef7c2950c31fe3fa5edac5a252808ffa303a5b450d2c3305aef8825d3452431277bc8bef417985cd3f1bb6956d2d5dbf0d9948bc37e744783b4857fd54d69e0e88e2eb67b46eb4d0b1785b73c64451d3e26c27e15641385dd55efdd1fb3e142a839712bcc74a3f71d43a74d3d61ae3333db6a4a7d9d4d3b3258e63a9bc88d258520e77e15941926b0661c79b2bf3d652ad74e0f6618fd7d392f4c3a4e0f62efbb9ea2ef593", 0xa8}], 0x4, &(0x7f00000003c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x66}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x78}}], 0x2, 0x200088d0) 1.546496917s ago: executing program 2 (id=2942): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0xffff) write$fault_inject(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x1000}) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0xa4, 0x24, 0x400, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0x9, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x74, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffff80, 0x4}, [@TCA_NETEM_DELAY_DIST={0x56, 0x2, "242dbb584163e5245580c19215b55665f0a45d8341aca141bb7b18d95019e65494f85da0346d678852dfc6fa5a5644a55ddde4ac02e9ccc2a66adf587d1d2eb1b2bced5dd021e50eaefe20b53d542913fe83"}]}}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40488c0}, 0x20000010) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x1f) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r13, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=0x0], 0x48}, 0x1, 0x0, 0x0, 0x200000c4}, 0x440d0) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @private1, 0xbc1, 0x0, 0x10, 0x100, 0x9bb, 0x80, r10}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r12, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.174988945s ago: executing program 1 (id=2946): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7ff, 0x1}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x7a0, r2, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x226}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @beacon=[@NL80211_ATTR_PROBE_RESP={0x41a, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x11, 0x7f, [@challenge={0x10, 0x1, 0xc}, @supported_rates={0x1, 0x3, [{0x48, 0x1}, {0x5, 0x1}, {0x3}]}, @channel_switch={0x25, 0x3, {0x1, 0xa1, 0x4}}]}, @NL80211_ATTR_IE={0xa1, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @device_a, @device_b}}, @rann={0x7e, 0x15, {{0x0, 0x2}, 0x8, 0x7, @device_b, 0x4, 0x9, 0x484}}, @random_vendor={0xdd, 0x6d, "b5ff73c9272e0c8760503305063bd042fd2778db76c1ca55cb0362d806fc84e0516634a754b94ce5a60e25f9d08c594ca636826b27792b12a225e10da4f330a4323c9d049d9826c8274ce06df8e08b25433d9c7b30429c05838816cdc91c9421c87950ae9dd057e7e6b80f9b54"}, @challenge={0x10, 0x1, 0x23}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1aa, 0x80, [@fast_bss_trans={0x37, 0x7a, {0x9, 0x1, "8120066bc75fc0a55e0fecf5e058b321", "9e60d1b55757379ff1795ab74a63ccb02874b32884cadca57fad1dc1feba90f2", "b632d30bbc29880e88e221cf801062e2000000e200f9ffffffffffffff00", [{0x1, 0x26, "d79194600624f6d2dd6d428c37a2fd2ee3fdf8a913ba0750dff91e3cbc0eaedcf8d8b6b3efcf"}]}}, @perr={0x84, 0x128, {0x89, 0x12, [{{0x0, 0x1}, @broadcast, 0x70, @value=@broadcast, 0xf}, {{}, @broadcast, 0x4, @void, 0x24}, {{0x0, 0x1}, @broadcast, 0x74f, @value=@broadcast, 0x21}, {{0x0, 0x1}, @device_a, 0x80000001, @value=@device_b, 0xe}, {{0x0, 0x1}, @broadcast, 0x8, @value, 0x17}, {{0x0, 0x1}, @broadcast, 0xa00, @value, 0x31}, {{0x0, 0x1}, @broadcast, 0xfffffff9, @value=@device_b, 0x16}, {{}, @device_b, 0x0, @void, 0x3}, {{}, @device_b, 0x2, @void, 0xe}, {{}, @device_a, 0x10000000, @void, 0x32}, {{0x0, 0x1}, @device_b, 0x80000001, @value=@device_b, 0x8}, {{}, @broadcast, 0x2b, @void, 0x21}, {{}, @device_a, 0x8, @void, 0x1b}, {{}, @device_a, 0xc2c4, @void, 0x6}, {{}, @broadcast, 0x40000, @void, 0x2}, {{0x0, 0x1}, @device_b, 0x1, @value=@device_b, 0x1c}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x15}, {{0x0, 0x1}, @device_b, 0x0, @value=@broadcast, 0x24}]}}]}, @NL80211_ATTR_BEACON_TAIL={0x36, 0xf, [@chsw_timing={0x68, 0x4, {0x9, 0x2}}, @mic={0x8c, 0x18, {0x6b0, "c33e72c9f0d7", @long="e26317cb803e463bb8559c601a211269"}}, @mic={0x8c, 0x10, {0xaa1, "52ce23d71667", @short="e6201387d60498da"}}]}, @NL80211_ATTR_IE={0x9a, 0x2a, [@fast_bss_trans={0x37, 0x94, {0x3, 0x2, "14adbf25241745f77f869b065e40c1df", "f41cfc90cfb82de89bf08da69b4e7a5fee8662817245b77f14d13798a145fd89", "108535343d02e2f74eff1192ee105a7d456086962aae46f67ad3dfe8225e16e9", [{0x1, 0x1c, "d4cf4c31a04ad04a8f6707a3c755627e5cc281664f442eaa4f793697"}, {0x1, 0x22, "9ba138cae38133e9adfa1e3a747b7b148d4057bb81a78e5accabbcccd4d28c74ce0b"}]}}]}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x7a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x44040001, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x5, 0x3ff, 0x6, 0xa513, 0xd, "4ebd9cb3368129330fc3f07f308bc7dcf800"}) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.056612021s ago: executing program 6 (id=2948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001000000", @ANYRES32, @ANYBLOB="000000d90000000000000000000000000000000019886841204bccaaff39d1427d1d73a8056c4f7cbccd1fc34e97d66cd32c61156c24e43146adb5bd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r0, 0x1, 0x800, 0x3}) read$msr(r1, &(0x7f0000000300)=""/37, 0x25) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000", 0x3}], 0x1, 0x0, 0x0, 0x7400}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0x1}}, @TCA_SKBEDIT_PARMS={0x57, 0x2, {0x101, 0x6, 0xffffffffffffffff, 0xc47, 0x6}}]}, {0x4, 0x6, "0cb100000000fd2dc6391ccd1690641968893bdc1e3a989fcae841f1fccc8e8c6818563d7230eae1240e4009a46f34407c0690982c19a7694c8a744acba59c0d8a295b6a0b"}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x140c03, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000200)={0x0, 0x51, 0x2007, 0x2008, 0x0, 0x9}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010004000000fddbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990080000000fdfff7ff21000e001c04fc00b4008415070140ffffffffffff0a0000000802110000002f000000007c5ac4bb7a13be5f13097fbe86056ba2e27c754017ea9ba674333f117681ed0d69f614005c3ffa0e9719fa666cc4973871ccda5f986f5c312e693c3b0d1848ed0e518ffeb5c6bcf8be35257171e7fc"], 0x4c}}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r13, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x5, 0x8, 0x8001, 0x4, 0x1000, 0x3, 0x2, 0xff, 0x3, 0x6, 0xb, 0x1, 0x60000000, 0xd, 0xffff, 0x7fffffff, 0xffff, 0x8, 0x9, 0x1, 0x1, 0x8, 0x4, 0x3, 0x10001, 0xfffffffb, 0x5, 0x0, 0x2, 0x2, 0x2, 0xfff, 0x8, 0x8, 0x974f, 0x7, 0xa0e, 0x5, 0xd, 0x8, 0xe, 0x9, 0xfff, 0x200, 0x2, 0xf, 0x100, 0x4, 0x5, 0x9, 0x9, 0x0, 0xa1, 0x9, 0xfffff54a, 0x2, 0x0, 0x1ff, 0x2, 0x9, 0xab, 0x0, 0xff, 0x7, 0xffffff72, 0x3, 0x6, 0x5, 0x80, 0xe800, 0x6, 0xb, 0x2, 0x1, 0x5, 0x0, 0x7, 0x8, 0x35, 0x8, 0x98, 0x6, 0x7, 0x2, 0x8, 0x9, 0x0, 0x4, 0x1, 0x9, 0x7, 0xec9, 0x2, 0x2, 0x8, 0x3, 0x4fbe, 0xa, 0xdf8, 0x80000001, 0x1, 0x517e39ce, 0x3, 0x6, 0x5, 0x6, 0xfffffffa, 0x2, 0xffffff81, 0x3962, 0x1, 0x6, 0xe93, 0x200, 0x6, 0x9d, 0x9, 0x984, 0x400, 0x10, 0x800, 0x81, 0x7ff, 0x80000000, 0x2, 0xa, 0xfffffff1, 0x3, 0xa, 0x6, 0x1000, 0xffffffff, 0x8, 0x3, 0x121, 0xef, 0x81b, 0x9, 0x1, 0x1, 0x7, 0xd, 0xffffffff, 0x10001, 0x0, 0x2, 0x400, 0x8, 0x3, 0x8, 0x10000, 0x2, 0x33, 0xc, 0x3, 0x4, 0x8001, 0x97a7, 0x40, 0x401, 0x1, 0x2, 0x0, 0x6, 0x7, 0x0, 0x8e8, 0x1, 0x6, 0x9, 0x1, 0x0, 0x0, 0x2, 0xb58, 0x10, 0x200, 0x401, 0x4, 0x5, 0x6, 0x101, 0x7fff, 0x1, 0x10000, 0x9, 0xffffffff, 0x10001, 0x3, 0xfffff93f, 0x3, 0x8, 0xf, 0xc0c, 0x8, 0x8, 0x5, 0x5, 0x7fffffff, 0x33, 0x0, 0x6, 0x1, 0x400, 0xffffffff, 0x0, 0x0, 0x10000, 0x1, 0x5, 0x163, 0x1, 0x6, 0x3, 0x0, 0x2, 0xb, 0x1, 0xc, 0x8, 0x2, 0x2f, 0x75, 0x3, 0x0, 0x1, 0x74, 0x468d, 0x3, 0x6, 0x2, 0x2, 0x8, 0x5, 0x6, 0x3, 0x4, 0x8, 0x4, 0x1, 0xdc7, 0xba5, 0x2, 0x46c, 0x6, 0x4, 0x1000, 0x401, 0x0, 0x80000000, 0xfffffffe, 0x0, 0x809, 0x401, 0x5, 0x1bf]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x50) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r14, 0x3e}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)="ed", 0x5dc}], 0x1}, 0x40000) ioctl$PPPIOCSMRRU(r3, 0x4010744d, &(0x7f0000000080)=0xc) 984.576234ms ago: executing program 3 (id=2951): syz_open_dev$sg(&(0x7f0000000400), 0x838, 0x20000) r0 = socket(0x2, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002040, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x130, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x404}, 0xe) listen(r2, 0xfff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r1) readlink(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001580)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="84050000", @ANYBLOB="100027bd7000ffdbdf258900000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x584}, 0x1, 0x0, 0x0, 0x4885}, 0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x1) fchdir(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000080)=0x12, 0x4) 884.760439ms ago: executing program 3 (id=2952): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000003480)=ANY=[@ANYBLOB="3000000000000000000000000700000094040000441c1737"], 0x30}}, {{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="585966e1be21bb127cd2f347c0df51a78de8a07c225e4bceb2672e21db7c0c534c1b0353a3374c8596835a92308effb10344f13db7155356648e1096bff0c3c84e831b37c67597a75b3905dc1d785ef3fc054867f29af2675de892303973e7c13c3280e8af6418f5284b3bac08a4214fc674fb58ea0797d3893725bb789b7ca32795dd196c942a04af1d8318b02e124bc52735b8e8c30efb4c8c675ae2d0c2a8e48185cadbf9d9f5dfa501f29a75df77aae24d8bef24fd620e0a4d046da9be2363b1be7f38ebe061f458fbc2dada4465a13d480d43fcfd2a6c6ba4f71700c409", 0xe0}, {&(0x7f0000000240)="6684d214e1473eca52c3c42cefc716973c28bfe9aa4de52c24049fefba6c1807da1e063246024170c139e7d6695ad38561134f240a73", 0x36}, {&(0x7f0000000280)="e3ee54f720ba207e4a0d237fb2e938f4fd52523f36e254ae2035f9dadb78502f5ebaecadfe2a3606ca0d4bdc4b7765aa81868af605db243801", 0x39}, {&(0x7f00000002c0)="323919ef7c2950c31fe3fa5edac5a252808ffa303a5b450d2c3305aef8825d3452431277bc8bef417985cd3f1bb6956d2d5dbf0d9948bc37e744783b4857fd54d69e0e88e2eb67b46eb4d0b1785b73c64451d3e26c27e15641385dd55efdd1fb3e142a839712bcc74a3f71d43a74d3d61ae3333db6a4a7d9d4d3b3258e63a9bc88d258520e77e15941926b0661c79b2bf3d652ad74e0f6618fd7d392f4c3a4e0f62efbb9ea2ef593", 0xa8}], 0x4, &(0x7f00000003c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x66}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x78}}], 0x2, 0x200088d0) 800.177322ms ago: executing program 6 (id=2953): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat$dir(0xffffff9c, &(0x7f0000000100)='./rpc_pipefs\x00', 0x0, 0x170) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@dev, @multicast1}, &(0x7f0000000200)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x10ffe, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="28000000130001000000000000000000180000000c000900000000000000000008001c00c9000000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@inlinecrypt}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket(0x11, 0x3, 0x8000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) socket$inet6(0xa, 0x80002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80fe) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, 0x0, 0x807e) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x5, 0x9b, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r6, 0x9, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000200)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r4, @ANYBLOB="0000c82da16cd3bc8fbbd99ce17ab3a0816f9eb8000000008a8b63763bcb4e577ef801ebe0b1723eb38ba73f033a00a3f34b9e523d04bf3b517ed3724334268747811e9447204f9ee5831be9126d427d59a4a178c79d0baf462b8e1abb0970226e168631380b9809f04dc5a02e32487b08f7a9d05a02dc220dd361461875f114320c271e4d6701000000c6b14549b1f173747b861bc0757ee375c90246d2ce4f93df65c1c376a28c19ed77ada367d9df22e6d221820a919ce2d1979666"]) 781.639004ms ago: executing program 3 (id=2954): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="fb0f83716b66905a2b"], 0x9, 0x1) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @empty=0x1000000}, 0x10, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000100)="6306bc3795f8", 0x6}], 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000000000000340000"], 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000040000000800000001"], 0x50) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) listen(r5, 0x0) fcntl$getownex(r4, 0x10, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r7, 0x0, 0x9) semget$private(0x0, 0x6, 0x340) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = fsmount(r3, 0x0, 0x0) syz_clone3(0x0, 0x0) recvmsg$can_bcm(r8, &(0x7f00000008c0)={&(0x7f0000000280)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000800)=""/88, 0x58}], 0x1}, 0x40012000) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe000000000000000800040001000000", 0x24) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000007c0)={0x39, 0x11, &(0x7f00000003c0)}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 676.222248ms ago: executing program 5 (id=2955): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @empty, 0xf66e}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5597c7114de75d6a, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0xc0686611, &(0x7f0000000080)=0x68) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = request_key(&(0x7f0000000740)='dns_resolver\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='\x00', 0xffffffffffffffff) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x3, 0x5002) request_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, r2) r3 = socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xa) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xa, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000bc0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000"], 0x2e8}}], 0x2, 0x44004) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="6400000010000100"/20, @ANYRES32], 0x64}}, 0x0) setresuid(0xee00, 0xee01, 0xee01) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0xfffffff9, 0x5, 0x0, 0x1}, 0x10) 620.675041ms ago: executing program 1 (id=2956): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0x400}, 0x100202, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x5, 0x1) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r2, 0x890b, 0x0) sendmsg$netlink(r1, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=[@rights={{0x18, 0x1, 0x1, [r0, r2]}}], 0x18}, 0x240000c4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000001000)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000d80)={0x0, 0x8}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000280)) r5 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) ftruncate(r5, 0x8000) 582.513593ms ago: executing program 2 (id=2957): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x6, 0x3, 0x7, 0x6, 0x0, 0x8, 0x28000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x5, 0x2}, 0x8, 0xfffffffffffffff7, 0x5, 0x9, 0x9, 0x1000, 0x400, 0x0, 0x2, 0x0, 0xfffffffffffffff8}, 0x0, 0xa, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x7, r2, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r1], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x6c3557f3312d4ede, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x804}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/time_for_children\x00') r3 = syz_pidfd_open(0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x7fff}, 0x1a662, 0x2, 0xfffffffe, 0x6, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0xff07) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="78000000140000002abd7e00df053f3819c84a69138ff7a7d9ac1c86069dcc6281a42cdcbbf54db1a4ac1019e427a805b48c717efc172883b9998c03400a69eadb6c683c84657e0531f24b38589915f4ddf94b75d79ec68d5376d831d9b1fda1b9c025384cb4fc43027bd27753599b02b37f3b6020af4d6d92b89048c302c098e8dca370e51b6960927cecb523736bc764b062c899cc042a7f15ac77031eec7f77b3293970cbd96541c4ea1fc886a70c309c7edf5412bd89ef", @ANYRES32=r4, @ANYBLOB="08000a000000000008000200ac1414bb080009007f7fffff080002000a0100fe08000400ac1414aa140006000700000001040000b7000000f9ffffff140003006c6f000000000000000000000000000008000a000300000008000200ac1414aa"], 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001ec989e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 581.146122ms ago: executing program 3 (id=2958): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200e00000020800074000000005"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, 0x0, 0x40040) 544.697664ms ago: executing program 6 (id=2959): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071109a00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x40}, 0x10, r0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x68, 0x10, 0x401, 0xfffffffc, 0x81, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x4000050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000030000000000", @ANYRESOCT=0x0, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000000240)) sendto$inet(r3, &(0x7f0000000500)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6b814f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57dd7e5bf88f4cf3cb9aede83a5fb5278162883af0", 0xfffffe96, 0x81, 0x0, 0x0) shutdown(r3, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl(r4, 0xc138fd0e, &(0x7f0000000000)="0400000000000000000000003801") syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') 521.497276ms ago: executing program 2 (id=2960): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x210000, &(0x7f0000000580)={[{@user_xattr}, {@noquota}, {@mb_optimize_scan}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x1f}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x6}}], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x66, 0x60, 0x36, 0x39, 0x36, 0x37, 0x38], 0x2d, [0x32, 0x31, 0x61, 0x65], 0x2d, [0x66, 0x34, 0x30, 0x30], 0x2d, [0x35, 0x64, 0x39, 0x64], 0x2d, [0x32, 0x4, 0x37, 0x63, 0x65, 0x38, 0x31, 0x37]}}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '..[,.!!'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$!{'}}]}, 0x3, 0x5a5, &(0x7f0000002280)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x10802, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) fcntl$notify(r2, 0x402, 0x80000038) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xfffffc0000000001, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000140)={0x0, 0xea60}, 0x10) setxattr$incfs_metadata(&(0x7f0000000280)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) epoll_create1(0x0) r4 = creat(0x0, 0xdafbe5d6891b6c4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0xb, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000140)={0xc, 0x1}) pwrite64(0xffffffffffffffff, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) 471.073988ms ago: executing program 3 (id=2961): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x4d5, 0x3ff}, 0x0, 0x20000, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$netlink(0x10, 0x3, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$msr(r2, &(0x7f0000000f40)=""/194, 0xc2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) setns(0xc9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r3, 0x2) 295.566107ms ago: executing program 2 (id=2962): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x1, 0x0, 0x10, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0xe, 0xffffffffffffffff, 0x1) setitimer(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x24048051}, 0x4000005) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000010, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x85, 0x7a5, &(0x7f00000007c0)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x1}, 0x10ecc9, 0x2, 0x80000000, 0x5, 0x1, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2100001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) unshare(0x100000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000003c0)='erofs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000002c0), 0x1) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x17, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r5) tkill(r5, 0x12) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00010100000000ffe1a1181d69b3dda726daffffff0c005406c692546d30e40000"], 0x1c}], 0x1}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write(r4, &(0x7f00000000c0)='2', 0xa800) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 286.802757ms ago: executing program 3 (id=2963): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80c0) listen(0xffffffffffffffff, 0x2) add_key(0x0, 0x0, &(0x7f0000000280)="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", 0x1ca, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x448, 0x0, 0x0, 0x148, 0x2d0, 0x148, 0x4d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x1b8, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x0, 'syz1\x00', 0x10}}, @common=@inet=@multiport={{0x50}, {0x1, 0x6, [0x4e24, 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x4e24, 0x4e21, 0x4e21, 0xe20, 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0x4e24], [0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x897a2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7fffffffffffffff, 0x8b2b}, 0x0, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x200, 0xa401) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000006c0)=@urb_type_iso={0x0, {0x0, 0x1}, 0x7fffffff, 0x1, &(0x7f00000004c0)="ee39c0ead936cc83cd96da31f7e43f2bb4d2df75690d0d058aff3db64e2aa2428fc1ebf0535de9ee18c2cb2bddde1c79d4e47645572131d0bf9b8d629eb8c83956d182f6a034b7cd317b90498607b75682151ac431178df48100520af1301dd6bf7f6f38af6919338e8b156d4072db6c5d72ed12b15f50980c7abe710ce2388ef118a5ba4bcd30d3202e6ecb654e3ccbfb011bc6943b121824a86691c552ad57efa7edb524aab09b6f52db0df5f1362a7661fdc33690509909eed03cb213647080775828c4dd649a574b9c62be08c393877499b7", 0xd4, 0xa5, 0x1ff, 0x13, 0x7, 0x9, &(0x7f00000005c0)="57b54441772a8bdeff24e8073860d6575ca6972f14bad3391faf99a50869fe9d551e5fb959de77e5b5361954c242ff257c87c94f43e7719608fb7f19c938077666226118d18354cbca77f620587535043e0a7cf55d3ca49422c6f233522b19b5de59a392c5cfa1bd08ca", [{0x4, 0x8, 0x4}, {0x5, 0xffffffff, 0x6}, {0x7, 0x5, 0x2}, {0x4, 0x37ac6976, 0x7}, {0x5, 0x18000, 0x4}, {0x9, 0x4, 0x1}, {0x5, 0x9, 0x96}, {0x4, 0x7ff, 0x1}, {0x6, 0xb5, 0x6}, {0x80000001, 0x400, 0x80000000}, {0x2, 0x8001, 0x3}, {0x9, 0x401, 0x4}, {0x0, 0xc96}, {0x145, 0x9, 0x6}, {0x3, 0x6, 0xffff}, {0xd, 0xfffffffd, 0xefc}, {0x10001, 0xef, 0x9}, {0xfffffffd, 0x0, 0x2}, {0xfffffffb, 0xe, 0x2}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20129, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x58}, 0x4000010) write(r4, 0x0, 0x0) setns(0xc9, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_ENTRIES(r8, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000d10000007c61ae6295bb75a070ccd367fb4905a59cf450f2f7340b48a863089d923d315a2a4b0ceb11679ef5ab05db133d38de6ab48f0c61f45304e78c4e450d09d8dc2ebc22f5a23625fa5e62856e02f22ae483a27f1936f48ed26caeccc3407fa7a421738c4842d4d88d6debf9916b3c569ad379b917691163a187fbdbe0faa383b21baf55d0d4c71d235296a17c307c53e2db7ba4937ead3c3f0827058f71faeb4e3d25477ecaa8dfd22129bce83b206c0583d0b2b03bc68e17fea56a9b32fe22f14e3a69ffd997101cbaf9f76c38cb5cf2b03d"], &(0x7f00000002c0)=0xf5) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r9, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000aa1f282e00000000000000000000000004000000d1a2d6e7"], &(0x7f0000000180)=0x2c) 231.852939ms ago: executing program 6 (id=2964): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000003480)=ANY=[@ANYBLOB="3000000000000000000000000700000094040000441c1737"], 0x30}}, {{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="585966e1be21bb127cd2f347c0df51a78de8a07c225e4bceb2672e21db7c0c534c1b0353a3374c8596835a92308effb10344f13db7155356648e1096bff0c3c84e831b37c67597a75b3905dc1d785ef3fc054867f29af2675de892303973e7c13c3280e8af6418f5284b3bac08a4214fc674fb58ea0797d3893725bb789b7ca32795dd196c942a04af1d8318b02e124bc52735b8e8c30efb4c8c675ae2d0c2a8e48185cadbf9d9f5dfa501f29a75df77aae24d8bef24fd620e0a4d046da9be2363b1be7f38ebe061f458fbc2dada4465a13d480d43fcfd2a6c6ba4f71700c409", 0xe0}, {&(0x7f0000000240)="6684d214e1473eca52c3c42cefc716973c28bfe9aa4de52c24049fefba6c1807da1e063246024170c139e7d6695ad38561134f240a73", 0x36}, {&(0x7f0000000280)="e3ee54f720ba207e4a0d237fb2e938f4fd52523f36e254ae2035f9dadb78502f5ebaecadfe2a3606ca0d4bdc4b7765aa81868af605db243801", 0x39}, {&(0x7f00000002c0)="323919ef7c2950c31fe3fa5edac5a252808ffa303a5b450d2c3305aef8825d3452431277bc8bef417985cd3f1bb6956d2d5dbf0d9948bc37e744783b4857fd54d69e0e88e2eb67b46eb4d0b1785b73c64451d3e26c27e15641385dd55efdd1fb3e142a839712bcc74a3f71d43a74d3d61ae3333db6a4a7d9d4d3b3258e63a9bc88d258520e77e15941926b0661c79b2bf3d652ad74e0f6618fd7d392f4c3a4e0f62efbb9ea2ef593", 0xa8}], 0x4, &(0x7f00000003c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x66}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x78}}], 0x2, 0x200088d0) 165.405382ms ago: executing program 6 (id=2965): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/21, 0x15}, 0x202) syz_read_part_table(0x105c, &(0x7f0000000000)="$eJzsz7FtwlAUBdBrR05ifVmusko2oaanZAJPAFPQsAkVQ7AAGxhZtvAGQHFO9fXfvU964a3aZLf9+k5SJRlS+vm/+lkzdTnuy3+TKvcpdUgy9sk4D5uknh6ny5JOuT6rt6RZF3VDftP+Lc0u9eb8ihsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NM9AgAA//9/gQxb") 164.018212ms ago: executing program 1 (id=2966): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200e000000208000740000000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 84.124186ms ago: executing program 2 (id=2967): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x2}, @generic={0x4, 0x2}]}}}}}}}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ppoll(&(0x7f0000000180)=[{r0, 0x212}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@empty, @in6=@private2}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x200001) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f00000003c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) close(r2) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400351985", @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf251100000008"], 0x24}, 0x1, 0x0, 0x0, 0x40041}, 0x40) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x17, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000005001b0000000000050000001811000050e8918d3b3dcc55401f6ec2abb4784a66f9d0f7b039546098de3d7c4552fedbff2909d2569e622adf41b14515c477125fa116f393376fdc9bbab0456e888475d25c7884d484c7399c922e14adbe0dfdaa856309033d77d35694333446ae3120b397c02b159f317b8bc6c950619bf6f134ecae782dbd28", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000090000008500000006000000bf91000000000000b7020000030000008500000085000000b7000000000000009500000000000000"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x185301, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) syz_io_uring_setup(0x4575, &(0x7f0000000540)={0x0, 0xbead, 0x800, 0x1, 0x82}, &(0x7f0000000180), &(0x7f0000000380), 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000440)=r6, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000001f40)=""/4080, 0x0, 0xff0, 0x8}, 0x28) 54.364648ms ago: executing program 6 (id=2968): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11e8e8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000001600)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc415811a2970bbb79c9fe1c95293dbe00000036b03632dab46a43226a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESDEC=r0, @ANYBLOB="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", @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b54089087c846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab660ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x56d, &(0x7f00000000c0)="$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") madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) 11.11683ms ago: executing program 5 (id=2969): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat$dir(0xffffff9c, &(0x7f0000000100)='./rpc_pipefs\x00', 0x0, 0x170) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@dev, @multicast1}, &(0x7f0000000200)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x10ffe, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="28000000130001000000000000000000180000000c000900000000000000000008001c00c9000000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@inlinecrypt}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket(0x11, 0x3, 0x8000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) socket$inet6(0xa, 0x80002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80fe) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, 0x0, 0x807e) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x5, 0x9b, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r6, 0x9, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000200)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r4, @ANYBLOB="0000c82da16cd3bc8fbbd99ce17ab3a0816f9eb8000000008a8b63763bcb4e577ef801ebe0b1723eb38ba73f033a00a3f34b9e523d04bf3b517ed3724334268747811e9447204f9ee5831be9126d427d59a4a178c79d0baf462b8e1abb0970226e168631380b9809f04dc5a02e32487b08f7a9d05a02dc220dd361461875f114320c271e4d6701000000c6b14549b1f173747b861bc0757ee375c90246d2ce4f93df65c1c376a28c19ed77ada367d9df22e6d221820a919ce2d1979666"]) 0s ago: executing program 1 (id=2970): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x104) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000200)="80", 0x1) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): -fs (loop3): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 207.775756][T11657] ./dev/sda1: Can't lookup blockdev [ 207.842609][T11644] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2399'. [ 207.842790][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2399'. [ 207.910153][T11663] netlink: 'syz.4.2406': attribute type 9 has an invalid length. [ 207.910173][T11663] netlink: 'syz.4.2406': attribute type 6 has an invalid length. [ 207.910234][T11663] netlink: 'syz.4.2406': attribute type 7 has an invalid length. [ 207.910271][T11663] netlink: 'syz.4.2406': attribute type 8 has an invalid length. [ 207.975689][T11666] netlink: 'syz.2.2407': attribute type 8 has an invalid length. [ 208.020500][T11670] loop4: detected capacity change from 0 to 512 [ 208.031527][T11670] EXT4-fs: Ignoring removed bh option [ 208.035049][T11670] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.2408: corrupted in-inode xattr: e_value size too large [ 208.035080][T11670] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 208.035215][T11670] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.2408: couldn't read orphan inode 15 (err -117) [ 208.035244][T11670] loop4: lost filesystem error report for type 5 error -117 [ 208.337805][T11679] loop4: detected capacity change from 0 to 512 [ 208.346746][T11679] EXT4-fs: inline encryption not supported [ 208.347536][T11679] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 208.355264][T11679] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.2411: bad orphan inode 15 [ 208.355295][T11679] loop4: lost filesystem error report for type 5 error -117 [ 208.355419][T11679] ext4_test_bit(bit=14, block=5) = 0 [ 208.361869][T11679] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 208.361985][T11679] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.2411: bit already cleared for inode 13 [ 208.651572][T11694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2418'. [ 208.680918][T11694] erspan0: left allmulticast mode [ 208.680941][T11694] erspan0: left promiscuous mode [ 208.681138][T11694] bridge4: port 1(erspan0) entered disabled state [ 208.702072][T11694] bridge5: port 1(erspan0) entered blocking state [ 208.702107][T11694] bridge5: port 1(erspan0) entered disabled state [ 208.702162][T11694] erspan0: entered allmulticast mode [ 208.705475][T11694] erspan0: entered promiscuous mode [ 208.705765][T11694] bridge5: port 1(erspan0) entered blocking state [ 208.705796][T11694] bridge5: port 1(erspan0) entered forwarding state [ 208.800939][T11690] loop1: detected capacity change from 0 to 764 [ 209.148904][T11721] netlink: 'syz.3.2426': attribute type 9 has an invalid length. [ 209.486918][T11732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2431'. [ 209.511565][T11732] erspan0: left allmulticast mode [ 209.511646][T11732] erspan0: left promiscuous mode [ 209.511769][T11732] bridge5: port 1(erspan0) entered disabled state [ 209.530503][T11732] bridge6: port 1(erspan0) entered blocking state [ 209.530537][T11732] bridge6: port 1(erspan0) entered disabled state [ 209.530642][T11732] erspan0: entered allmulticast mode [ 209.531174][T11732] erspan0: entered promiscuous mode [ 209.531564][T11732] bridge6: port 1(erspan0) entered blocking state [ 209.531686][T11732] bridge6: port 1(erspan0) entered forwarding state [ 209.940780][T11761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2444'. [ 209.979543][T11761] erspan0: left allmulticast mode [ 209.979565][T11761] erspan0: left promiscuous mode [ 209.979710][T11761] bridge6: port 1(erspan0) entered disabled state [ 210.030213][T11761] bridge7: port 1(erspan0) entered blocking state [ 210.030253][T11761] bridge7: port 1(erspan0) entered disabled state [ 210.030370][T11761] erspan0: entered allmulticast mode [ 210.031103][T11761] erspan0: entered promiscuous mode [ 210.031491][T11761] bridge7: port 1(erspan0) entered blocking state [ 210.031523][T11761] bridge7: port 1(erspan0) entered forwarding state [ 210.044995][T11764] loop4: detected capacity change from 0 to 512 [ 210.045657][T11764] EXT4-fs: Ignoring removed bh option [ 210.055571][T11764] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.2445: corrupted in-inode xattr: e_value size too large [ 210.055605][T11764] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 210.055748][T11764] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.2445: couldn't read orphan inode 15 (err -117) [ 210.055775][T11764] loop4: lost filesystem error report for type 5 error -117 [ 210.415270][T11781] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2451'. [ 210.452176][T11770] loop3: detected capacity change from 0 to 1024 [ 210.493272][T11770] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 210.692370][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2453'. [ 210.692404][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2453'. [ 210.939857][T11793] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 211.336936][T11807] loop1: detected capacity change from 0 to 512 [ 211.345330][T11807] EXT4-fs: inline encryption not supported [ 211.346846][T11807] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 211.362901][T11807] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.2460: bad orphan inode 15 [ 211.362930][T11807] loop1: lost filesystem error report for type 5 error -117 [ 211.363169][T11807] ext4_test_bit(bit=14, block=5) = 0 [ 211.365316][T11807] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 211.366373][T11807] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.2460: bit already cleared for inode 13 [ 211.718954][T11828] loop3: detected capacity change from 0 to 1024 [ 211.736337][T11828] EXT4-fs (loop3): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 211.754030][T11820] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2464'. [ 211.777952][T11828] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.2468: bg 0: block 153: padding at end of block bitmap is not set [ 211.840940][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.936153][T11836] loop3: detected capacity change from 0 to 512 [ 211.942130][T11836] EXT4-fs: Ignoring removed bh option [ 211.954529][T11836] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.2469: corrupted in-inode xattr: e_value size too large [ 211.954567][T11836] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 211.954805][T11836] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.2469: couldn't read orphan inode 15 (err -117) [ 211.954829][T11836] loop3: lost filesystem error report for type 5 error -117 [ 212.164843][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 212.164862][ T29] audit: type=1400 audit(1789405649.378:11009): avc: denied { write } for pid=11838 comm="syz.3.2470" name="g1" dev="configfs" ino=4813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 212.793541][T11859] ./dev/sda1: Can't lookup blockdev [ 212.793878][T11857] vcan0 speed is unknown, defaulting to 1000 [ 213.089382][T11868] validate_nla: 11 callbacks suppressed [ 213.089467][T11868] netlink: 'syz.2.2483': attribute type 9 has an invalid length. [ 213.089480][T11868] netlink: 'syz.2.2483': attribute type 6 has an invalid length. [ 213.089491][T11868] netlink: 'syz.2.2483': attribute type 7 has an invalid length. [ 213.089503][T11868] netlink: 'syz.2.2483': attribute type 8 has an invalid length. [ 213.212971][ T29] audit: type=1400 audit(1789405650.428:11010): avc: denied { write } for pid=11865 comm="syz.3.2482" name="g1" dev="configfs" ino=4813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 213.707660][T11888] ./dev/sda1: Can't lookup blockdev [ 213.805516][T11890] loop3: detected capacity change from 0 to 164 [ 213.872281][T11890] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 214.032671][T11905] netlink: 'syz.3.2496': attribute type 9 has an invalid length. [ 214.032766][T11905] netlink: 'syz.3.2496': attribute type 6 has an invalid length. [ 214.032777][T11905] netlink: 'syz.3.2496': attribute type 7 has an invalid length. [ 214.032787][T11905] netlink: 'syz.3.2496': attribute type 8 has an invalid length. [ 214.301117][ T29] audit: type=1400 audit(1789405651.518:11011): avc: denied { write } for pid=11909 comm="syz.3.2498" name="g1" dev="configfs" ino=4813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 214.333395][T11920] ./dev/sda1: Can't lookup blockdev [ 214.491569][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2505'. [ 214.491676][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2505'. [ 214.595262][T11926] loop3: detected capacity change from 0 to 512 [ 214.607182][T11926] EXT4-fs: Ignoring removed bh option [ 214.622028][T11926] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.2504: corrupted in-inode xattr: e_value size too large [ 214.622058][T11926] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 214.624923][T11926] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.2504: couldn't read orphan inode 15 (err -117) [ 214.624953][T11926] loop3: lost filesystem error report for type 5 error -117 [ 214.848589][T11940] netlink: 'syz.3.2509': attribute type 9 has an invalid length. [ 214.848609][T11940] netlink: 'syz.3.2509': attribute type 6 has an invalid length. [ 215.048846][T11941] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2508'. [ 215.365481][T11954] ./dev/sda1: Can't lookup blockdev [ 215.546172][ T29] audit: type=1400 audit(1789405652.758:11012): avc: denied { write } for pid=11955 comm="syz.3.2515" name="g1" dev="configfs" ino=4813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 215.828219][T11963] FAULT_INJECTION: forcing a failure. [ 215.828219][T11963] name failslab, interval 1, probability 0, space 0, times 0 [ 215.828250][T11963] CPU: 1 UID: 0 PID: 11963 Comm: syz.3.2517 Not tainted syzkaller #0 PREEMPT(lazy) [ 215.828326][T11963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 215.828339][T11963] Call Trace: [ 215.828347][T11963] [ 215.828356][T11963] __dump_stack+0x1d/0x30 [ 215.828385][T11963] dump_stack_lvl+0x95/0xd0 [ 215.828493][T11963] dump_stack+0x15/0x1b [ 215.828516][T11963] should_fail_ex+0x262/0x280 [ 215.828541][T11963] ? fib_create_info+0xb84/0x18e0 [ 215.828613][T11963] should_failslab+0x8c/0xb0 [ 215.828652][T11963] __kmalloc_noprof+0xd0/0x4d0 [ 215.828680][T11963] ? fib_create_info+0xb84/0x18e0 [ 215.828780][T11963] fib_create_info+0xb84/0x18e0 [ 215.828848][T11963] fib_table_insert+0x61/0xee0 [ 215.828934][T11963] ? ip_rt_ioctl+0x809/0xa80 [ 215.828957][T11963] ? __kmalloc_cache_noprof+0x331/0x400 [ 215.829021][T11963] ? ip_rt_ioctl+0x809/0xa80 [ 215.829046][T11963] ip_rt_ioctl+0x3f1/0xa80 [ 215.829073][T11963] inet_ioctl+0x33f/0x3a0 [ 215.829103][T11963] sock_do_ioctl+0x73/0x230 [ 215.829218][T11963] sock_ioctl+0x439/0x610 [ 215.829274][T11963] ? mutex_lock+0x57/0x90 [ 215.829300][T11963] ? __pfx_sock_ioctl+0x10/0x10 [ 215.829327][T11963] __se_sys_ioctl+0xce/0x140 [ 215.829375][T11963] __x64_sys_ioctl+0x43/0x50 [ 215.829407][T11963] x64_sys_call+0x239d/0x2550 [ 215.829437][T11963] do_syscall_64+0x112/0x360 [ 215.829514][T11963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.829535][T11963] RIP: 0033:0x7f29b3bae159 [ 215.829554][T11963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.829575][T11963] RSP: 002b:00007f29b2607028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.829677][T11963] RAX: ffffffffffffffda RBX: 00007f29b3e35fa0 RCX: 00007f29b3bae159 [ 215.829691][T11963] RDX: 0000200000000140 RSI: 000000000000890b RDI: 0000000000000004 [ 215.829707][T11963] RBP: 00007f29b2607090 R08: 0000000000000000 R09: 0000000000000000 [ 215.829776][T11963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.829791][T11963] R13: 00007f29b3e36038 R14: 00007f29b3e35fa0 R15: 00007fffa4ac49a8 [ 215.829809][T11963] [ 215.911385][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2519'. [ 215.911411][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2519'. [ 216.396081][T11974] loop3: detected capacity change from 0 to 764 [ 216.878197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.472790][T11992] loop3: detected capacity change from 0 to 512 [ 217.473281][T11992] EXT4-fs: inline encryption not supported [ 217.473760][T11992] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 217.498826][T11992] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.2528: bad orphan inode 15 [ 217.498853][T11992] loop3: lost filesystem error report for type 5 error -117 [ 217.499356][T11992] ext4_test_bit(bit=14, block=5) = 0 [ 217.499756][T11992] EXT4-fs mount: 58 callbacks suppressed [ 217.499770][T11992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.503764][T11992] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 217.503842][T11992] EXT4-fs error (device loop3): ext4_free_inode:356: comm syz.3.2528: bit already cleared for inode 13 [ 217.503950][ T29] audit: type=1400 audit(1789405654.718:11013): avc: denied { write } for pid=11990 comm="syz.3.2528" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.611331][T11996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.611516][T11996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.684424][ T4784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.706798][ T29] audit: type=1400 audit(1789405654.918:11014): avc: denied { write } for pid=11999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.749769][ T29] audit: type=1400 audit(1789405654.968:11015): avc: denied { write } for pid=12010 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.917551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.951627][ T29] audit: type=1400 audit(1789405655.168:11016): avc: denied { write } for pid=12013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.029619][ T29] audit: type=1400 audit(1789405655.248:11017): avc: denied { write } for pid=12024 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.518799][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2532'. [ 218.518828][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2532'. [ 218.681479][ T29] audit: type=1400 audit(1789405655.898:11018): avc: denied { write } for pid=12028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.768565][T12044] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 218.946749][ T29] audit: type=1400 audit(1789405656.158:11019): avc: denied { write } for pid=12045 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.973070][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.133944][ T29] audit: type=1400 audit(1789405656.348:11020): avc: denied { write } for pid=12047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.178936][ T29] audit: type=1400 audit(1789405656.398:11021): avc: denied { write } for pid=12060 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.425436][ T29] audit: type=1400 audit(1789405656.598:11022): avc: denied { write } for pid=12063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.756015][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2537'. [ 219.756043][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2537'. [ 219.969674][T12090] loop3: detected capacity change from 0 to 512 [ 219.972257][T12090] EXT4-fs: Ignoring removed bh option [ 219.980214][T12092] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 220.006967][T12090] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.2539: corrupted in-inode xattr: e_value size too large [ 220.007078][T12090] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.007387][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 220.007404][ C1] EXT4-fs (loop3): initial error at time 1789405657: ext4_iget_extra_inode:5210: inode 15 [ 220.007448][ C1] EXT4-fs (loop3): last error at time 1789405657: ext4_iget_extra_inode:5210: inode 15 [ 220.058566][T12090] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.2539: couldn't read orphan inode 15 (err -117) [ 220.058600][T12090] loop3: lost filesystem error report for type 5 error -117 [ 220.059286][T12090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.128710][ T4784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.265526][T12095] loop3: detected capacity change from 0 to 512 [ 220.268036][T12095] EXT4-fs: inline encryption not supported [ 220.276523][T12095] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 220.281318][T12095] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.2540: bad orphan inode 15 [ 220.281345][T12095] loop3: lost filesystem error report for type 5 error -117 [ 220.281608][T12095] ext4_test_bit(bit=14, block=5) = 0 [ 220.281957][T12095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.286040][T12095] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 220.286213][T12095] EXT4-fs error (device loop3): ext4_free_inode:356: comm syz.3.2540: bit already cleared for inode 13 [ 220.450439][ T4784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.485069][T11486] bridge0: port 3(syz_tun) entered disabled state [ 220.496346][T11486] syz_tun (unregistering): left allmulticast mode [ 220.496400][T11486] syz_tun (unregistering): left promiscuous mode [ 220.496424][T11486] bridge0: port 3(syz_tun) entered disabled state [ 220.589782][T12103] validate_nla: 3 callbacks suppressed [ 220.589817][T12103] netlink: 'syz.2.2543': attribute type 8 has an invalid length. [ 220.670678][T12115] loop3: detected capacity change from 0 to 512 [ 220.683609][T12115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.778861][T12100] vcan0 speed is unknown, defaulting to 1000 [ 220.796354][ T4784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.901456][T12124] logitech-hidpp-device 0005:046D:B012.0002: received hid++ report of bad size (4096) [ 221.023785][T12100] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.023817][T12100] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.023985][T12100] bridge_slave_0: entered allmulticast mode [ 221.024460][T12100] bridge_slave_0: entered promiscuous mode [ 221.051987][T12100] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.052021][T12100] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.052195][T12100] bridge_slave_1: entered allmulticast mode [ 221.052632][T12100] bridge_slave_1: entered promiscuous mode [ 221.091805][T12100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.092946][T12100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.116232][T12100] team0: Port device team_slave_0 added [ 221.117144][T12100] team0: Port device team_slave_1 added [ 221.127965][T12100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.127981][T12100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.128069][T12100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.128652][T12100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.128679][T12100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.128721][T12100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.147022][T12100] hsr_slave_0: entered promiscuous mode [ 221.147721][T12100] hsr_slave_1: entered promiscuous mode [ 221.148010][T12100] debugfs: 'hsr0' already exists in 'hsr' [ 221.148023][T12100] Cannot create hsr debugfs directory [ 221.262607][T12100] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 221.264823][T12100] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 221.265451][T12100] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 221.267747][T12100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 221.268359][T12100] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 221.278201][T12100] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 221.280032][T12100] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 221.284591][T12100] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 221.319542][T12100] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.319609][T12100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.319694][T12100] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.319723][T12100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.367773][T12100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.374798][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.375928][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.378240][T12141] netlink: 'syz.2.2549': attribute type 9 has an invalid length. [ 221.378255][T12141] netlink: 'syz.2.2549': attribute type 6 has an invalid length. [ 221.378265][T12141] netlink: 'syz.2.2549': attribute type 7 has an invalid length. [ 221.378274][T12141] netlink: 'syz.2.2549': attribute type 8 has an invalid length. [ 221.432188][T12100] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.444902][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.444985][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.464667][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.464705][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.693757][T12100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.746913][ T11] logitech-hidpp-device 0005:046D:B012.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 221.783849][T12168] udevd[12168]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 221.835392][T12172] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 221.968206][T12100] veth0_vlan: entered promiscuous mode [ 221.975988][T12100] veth1_vlan: entered promiscuous mode [ 222.012129][T12100] veth0_macvtap: entered promiscuous mode [ 222.025081][T12100] veth1_macvtap: entered promiscuous mode [ 222.046739][T12100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.056168][T12100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.066171][ T3446] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.066243][ T3446] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.066282][ T3446] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.066316][ T3446] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.154433][T12194] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 222.155120][ T3385] kernel read not supported for file /trace_pipe (pid: 3385 comm: kworker/0:6) [ 222.250156][T12191] loop3: detected capacity change from 0 to 164 [ 222.293049][T12191] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 222.334700][T12196] loop5: detected capacity change from 0 to 164 [ 222.414658][T12196] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 222.662994][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 222.663010][ T29] audit: type=1400 audit(1789405659.878:11035): avc: denied { listen } for pid=12206 comm="syz.2.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 222.812564][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2572'. [ 222.812593][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2572'. [ 222.918011][T12224] loop1: detected capacity change from 0 to 764 [ 222.946012][T12225] loop3: detected capacity change from 0 to 764 [ 223.057898][T12227] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 223.773283][T12236] FAULT_INJECTION: forcing a failure. [ 223.773283][T12236] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 223.773315][T12236] CPU: 0 UID: 0 PID: 12236 Comm: syz.1.2576 Not tainted syzkaller #0 PREEMPT(lazy) [ 223.773338][T12236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 223.773349][T12236] Call Trace: [ 223.773356][T12236] [ 223.773363][T12236] __dump_stack+0x1d/0x30 [ 223.773387][T12236] dump_stack_lvl+0x95/0xd0 [ 223.773411][T12236] dump_stack+0x15/0x1b [ 223.773442][T12236] should_fail_ex+0x262/0x280 [ 223.773464][T12236] should_fail_alloc_page+0xf2/0x100 [ 223.773492][T12236] __alloc_frozen_pages_noprof+0x157/0x400 [ 223.773528][T12236] alloc_pages_mpol+0xaf/0x1d0 [ 223.773552][T12236] alloc_pages_noprof+0x94/0x140 [ 223.773576][T12236] pte_alloc_one+0x1c/0xc0 [ 223.773599][T12236] __pte_alloc+0x32/0x2a0 [ 223.773630][T12236] do_remap_pfn_range+0x772/0xb80 [ 223.773669][T12236] ? __mod_memcg_lruvec_state+0x170/0x2a0 [ 223.773707][T12236] ? __rcu_read_unlock+0x4e/0x70 [ 223.773738][T12236] ? should_fail_ex+0xdb/0x280 [ 223.773759][T12236] ? mas_alloc_nodes+0x1a2/0x210 [ 223.773788][T12236] remap_pfn_range+0x133/0x160 [ 223.773822][T12236] pci_mmap_resource_range+0x1d5/0x200 [ 223.773874][T12236] pci_mmap_resource_uc+0x12f/0x160 [ 223.773905][T12236] ? __pfx_pci_mmap_resource_uc+0x10/0x10 [ 223.773931][T12236] sysfs_kf_bin_mmap+0x86/0xa0 [ 223.773958][T12236] kernfs_fop_mmap+0xef/0x290 [ 223.773979][T12236] mmap_region+0x1adb/0x21a0 [ 223.774020][T12236] do_mmap+0xa20/0xc70 [ 223.774050][T12236] vm_mmap_pgoff+0x183/0x2d0 [ 223.774076][T12236] ksys_mmap_pgoff+0x250/0x310 [ 223.774110][T12236] x64_sys_call+0x23b3/0x2550 [ 223.774138][T12236] do_syscall_64+0x112/0x360 [ 223.774174][T12236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.774199][T12236] RIP: 0033:0x7f50b014e159 [ 223.774216][T12236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.774234][T12236] RSP: 002b:00007f50aeba7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 223.774252][T12236] RAX: ffffffffffffffda RBX: 00007f50b03d5fa0 RCX: 00007f50b014e159 [ 223.774265][T12236] RDX: 0000000000000000 RSI: 00000000000000ff RDI: 0000000000000000 [ 223.774276][T12236] RBP: 00007f50aeba7090 R08: 0000000000000003 R09: 0000000000000000 [ 223.774287][T12236] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 223.774298][T12236] R13: 00007f50b03d6038 R14: 00007f50b03d5fa0 R15: 00007fffc6bd7778 [ 223.774317][T12236] [ 224.237058][T12261] netlink: 'syz.5.2587': attribute type 6 has an invalid length. [ 224.371048][T12257] loop3: detected capacity change from 0 to 764 [ 224.626370][T12265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2588'. [ 224.626638][T12265] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2588'. [ 224.984169][T12247] loop1: detected capacity change from 0 to 4096 [ 225.152435][T12247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.284300][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.693951][T12288] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2596'. [ 225.749447][T12294] loop5: detected capacity change from 0 to 512 [ 225.768759][T12294] EXT4-fs: inline encryption not supported [ 225.769098][T12294] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 225.793003][T12294] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.2598: bad orphan inode 15 [ 225.793027][T12294] loop5: lost filesystem error report for type 5 error -117 [ 225.793736][T12294] ext4_test_bit(bit=14, block=5) = 0 [ 225.794051][T12294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.797202][T12294] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 225.797295][T12294] EXT4-fs error (device loop5): ext4_free_inode:356: comm syz.5.2598: bit already cleared for inode 13 [ 225.797945][ T29] audit: type=1400 audit(1789405663.008:11036): avc: denied { write } for pid=12293 comm="syz.5.2598" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.958484][T12100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.113301][ T29] audit: type=1326 audit(1789405663.328:11037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12303 comm="syz.3.2602" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b3bae159 code=0x7ffc0000 [ 226.113332][ T29] audit: type=1326 audit(1789405663.328:11038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12303 comm="syz.3.2602" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b3bae159 code=0x7ffc0000 [ 226.113489][ T29] audit: type=1326 audit(1789405663.328:11039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12303 comm="syz.3.2602" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b3bae159 code=0x7ffc0000 [ 226.114119][ T29] audit: type=1326 audit(1789405663.328:11040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12303 comm="syz.3.2602" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b3bae159 code=0x7ffc0000 [ 226.114158][ T29] audit: type=1326 audit(1789405663.328:11041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12303 comm="syz.3.2602" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29b3bae159 code=0x7ffc0000 [ 226.114238][ T29] audit: type=1326 audit(1789405663.328:11042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12303 comm="syz.3.2602" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b3bae159 code=0x7ffc0000 [ 226.114350][ T29] audit: type=1326 audit(1789405663.328:11043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12303 comm="syz.3.2602" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b3bae159 code=0x7ffc0000 [ 226.114444][ T29] audit: type=1326 audit(1789405663.328:11044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12303 comm="syz.3.2602" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b3bae159 code=0x7ffc0000 [ 226.479984][T12308] loop3: detected capacity change from 0 to 512 [ 226.494683][T12308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.993402][T11779] bridge0: port 3(syz_tun) entered disabled state [ 227.050140][T11779] syz_tun (unregistering): left allmulticast mode [ 227.050164][T11779] syz_tun (unregistering): left promiscuous mode [ 227.050287][T11779] bridge0: port 3(syz_tun) entered disabled state [ 227.074308][ T4784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.130193][T12314] vcan0 speed is unknown, defaulting to 1000 [ 227.159924][T12331] loop5: detected capacity change from 0 to 164 [ 227.194846][T12331] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 227.398748][T12314] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.398780][T12314] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.398936][T12314] bridge_slave_0: entered allmulticast mode [ 227.399476][T12314] bridge_slave_0: entered promiscuous mode [ 227.430108][T12314] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.430208][T12314] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.430344][T12314] bridge_slave_1: entered allmulticast mode [ 227.430904][T12314] bridge_slave_1: entered promiscuous mode [ 227.477999][T12314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.479061][T12314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.495295][T12314] team0: Port device team_slave_0 added [ 227.497871][T12314] team0: Port device team_slave_1 added [ 227.499379][ T12] IPVS: starting estimator thread 0... [ 227.521096][T12314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.521112][T12314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.521220][T12314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.521689][T12314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.521701][T12314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.521728][T12314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.558367][T12314] hsr_slave_0: entered promiscuous mode [ 227.558748][T12314] hsr_slave_1: entered promiscuous mode [ 227.559044][T12314] debugfs: 'hsr0' already exists in 'hsr' [ 227.559057][T12314] Cannot create hsr debugfs directory [ 227.612273][T12348] IPVS: using max 2304 ests per chain, 115200 per kthread [ 227.798196][T12314] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 227.800545][T12314] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 227.801321][T12314] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 227.803291][T12314] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 227.804354][T12314] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 227.806547][T12314] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 227.807129][T12314] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 227.859471][T12314] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 227.876517][T12314] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.876553][T12314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.876678][T12314] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.876712][T12314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.934149][T12314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.946990][T12314] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.956565][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.965589][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.983694][ T3420] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.983733][ T3420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.985230][ T3420] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.985258][ T3420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.186065][T12371] loop3: detected capacity change from 0 to 128 [ 228.287613][T12314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.326339][T12385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2618'. [ 228.350835][T12385] vlan3: entered allmulticast mode [ 228.350859][T12385] bridge7: entered allmulticast mode [ 228.353571][T12385] erspan0: left allmulticast mode [ 228.353591][T12385] erspan0: left promiscuous mode [ 228.353731][T12385] bridge6: port 1(erspan0) entered disabled state [ 228.382688][T12388] ./dev/sda1: Can't lookup blockdev [ 228.558079][T12314] veth0_vlan: entered promiscuous mode [ 228.565468][T12314] veth1_vlan: entered promiscuous mode [ 228.574224][T12400] loop3: detected capacity change from 0 to 164 [ 228.606788][T12314] veth0_macvtap: entered promiscuous mode [ 228.611349][T12314] veth1_macvtap: entered promiscuous mode [ 228.624225][T12314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.633861][T12314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.658793][T12400] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 228.698861][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.699076][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.699305][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.699441][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.824623][T12415] loop3: detected capacity change from 0 to 164 [ 228.860314][T12415] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 228.891276][T12427] loop6: detected capacity change from 0 to 1024 [ 228.894139][T12427] EXT4-fs (loop6): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 228.918846][T12427] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.922715][ T29] kauditd_printk_skb: 411 callbacks suppressed [ 228.922731][ T29] audit: type=1400 audit(1789405666.138:11456): avc: denied { write } for pid=12426 comm="syz.6.2628" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.925124][T12427] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.2628: bg 0: block 153: padding at end of block bitmap is not set [ 229.005479][T12314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.115180][T12439] loop3: detected capacity change from 0 to 164 [ 229.803391][ T5756] bridge0: port 3(syz_tun) entered disabled state [ 229.808406][ T5756] syz_tun (unregistering): left allmulticast mode [ 229.808429][ T5756] syz_tun (unregistering): left promiscuous mode [ 229.808511][ T5756] bridge0: port 3(syz_tun) entered disabled state [ 229.905263][T12481] netlink: 'syz.6.2645': attribute type 10 has an invalid length. [ 229.918250][T12481] veth0_macvtap: left promiscuous mode [ 229.940731][T12469] vcan0 speed is unknown, defaulting to 1000 [ 229.983081][ T29] audit: type=1400 audit(1789405667.198:11457): avc: denied { firmware_load } for pid=12480 comm="syz.6.2645" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 230.046670][ T29] audit: type=1400 audit(1789405667.258:11458): avc: denied { create } for pid=12480 comm="syz.6.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 230.085020][ T29] audit: type=1400 audit(1789405667.298:11459): avc: denied { ioctl } for pid=12480 comm="syz.6.2645" path="socket:[40277]" dev="sockfs" ino=40277 ioctlcmd=0x8931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 230.129838][T12497] FAULT_INJECTION: forcing a failure. [ 230.129838][T12497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.129871][T12497] CPU: 0 UID: 0 PID: 12497 Comm: syz.1.2649 Not tainted syzkaller #0 PREEMPT(lazy) [ 230.129938][T12497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 230.129950][T12497] Call Trace: [ 230.129957][T12497] [ 230.129965][T12497] __dump_stack+0x1d/0x30 [ 230.129994][T12497] dump_stack_lvl+0x95/0xd0 [ 230.130015][T12497] dump_stack+0x15/0x1b [ 230.130034][T12497] should_fail_ex+0x262/0x280 [ 230.130106][T12497] should_fail+0xb/0x20 [ 230.130131][T12497] should_fail_usercopy+0x1a/0x20 [ 230.130157][T12497] _copy_from_user+0x1c/0xb0 [ 230.130253][T12497] ___sys_sendmsg+0xc1/0x1e0 [ 230.130339][T12497] __x64_sys_sendmsg+0xd4/0x160 [ 230.130362][T12497] x64_sys_call+0x22ab/0x2550 [ 230.130389][T12497] do_syscall_64+0x112/0x360 [ 230.130500][T12497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.130523][T12497] RIP: 0033:0x7f50b014e159 [ 230.130541][T12497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.130613][T12497] RSP: 002b:00007f50aeba7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.130643][T12497] RAX: ffffffffffffffda RBX: 00007f50b03d5fa0 RCX: 00007f50b014e159 [ 230.130659][T12497] RDX: 0000000000004054 RSI: 0000200000000080 RDI: 0000000000000003 [ 230.130673][T12497] RBP: 00007f50aeba7090 R08: 0000000000000000 R09: 0000000000000000 [ 230.130687][T12497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.130699][T12497] R13: 00007f50b03d6038 R14: 00007f50b03d5fa0 R15: 00007fffc6bd7778 [ 230.130729][T12497] [ 230.132257][ T29] audit: type=1400 audit(1789405667.348:11460): avc: denied { bind } for pid=12480 comm="syz.6.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 230.141758][T12493] batman_adv: batadv0: Adding interface: macvtap1 [ 230.141775][T12493] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.141883][T12493] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 230.190738][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2651'. [ 230.306820][T12469] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.306853][T12469] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.306980][T12469] bridge_slave_0: entered allmulticast mode [ 230.308605][T12469] bridge_slave_0: entered promiscuous mode [ 230.309655][T12469] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.309683][T12469] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.309770][T12469] bridge_slave_1: entered allmulticast mode [ 230.310333][T12469] bridge_slave_1: entered promiscuous mode [ 230.335989][T12469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.337153][T12469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.366187][T12469] team0: Port device team_slave_0 added [ 230.369361][T12469] team0: Port device team_slave_1 added [ 230.416241][T12469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.416255][T12469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.416284][T12469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.422604][T12508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.422830][T12508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.426340][T12508] netlink: 'syz.1.2652': attribute type 10 has an invalid length. [ 230.432555][T12469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.432569][T12469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.432598][T12469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.482447][T12469] hsr_slave_0: entered promiscuous mode [ 230.482814][T12469] hsr_slave_1: entered promiscuous mode [ 230.483043][T12469] debugfs: 'hsr0' already exists in 'hsr' [ 230.483053][T12469] Cannot create hsr debugfs directory [ 230.672463][ T29] audit: type=1400 audit(1789405667.888:11461): avc: denied { write } for pid=12513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.731031][ T29] audit: type=1400 audit(1789405667.948:11462): avc: denied { write } for pid=12531 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.789675][ T29] audit: type=1400 audit(1789405668.008:11463): avc: denied { write } for pid=12518 comm="syz.5.2655" name="g1" dev="configfs" ino=4813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 230.911256][ T29] audit: type=1400 audit(1789405668.128:11464): avc: denied { write } for pid=12536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.957418][ T29] audit: type=1400 audit(1789405668.168:11465): avc: denied { write } for pid=12547 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.009831][T12514] loop3: detected capacity change from 0 to 512 [ 231.038547][T12514] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 231.045215][T12514] EXT4-fs (loop3): 1 truncate cleaned up [ 231.055094][T12514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.112053][T12469] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.157137][T12469] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.217125][T12469] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.266256][T12469] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.330782][T12557] loop6: detected capacity change from 0 to 164 [ 231.361108][T12469] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 231.376419][T12469] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 231.384946][T12469] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 231.395449][T12469] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.404663][T12469] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 231.415286][T12469] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 231.424614][T12469] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 231.434908][T12469] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 231.446824][T12561] loop5: detected capacity change from 0 to 164 [ 231.604398][T12469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.619836][T12469] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.626845][ T3419] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.626876][ T3419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.635032][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.635159][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.646644][T12591] loop6: detected capacity change from 0 to 512 [ 231.665954][T12591] EXT4-fs: inline encryption not supported [ 231.677033][T12591] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 231.699456][T12591] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.2660: bad orphan inode 15 [ 231.699489][T12591] loop6: lost filesystem error report for type 5 error -117 [ 231.700462][T12591] ext4_test_bit(bit=14, block=5) = 0 [ 231.700775][T12591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.715141][T12591] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 231.715274][T12591] EXT4-fs error (device loop6): ext4_free_inode:356: comm syz.6.2660: bit already cleared for inode 13 [ 231.889393][T12469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.970760][T12314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.020472][T12595] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.020647][T12595] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.077147][T12595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.084705][T12595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.147928][ T31] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.148168][ T31] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.148201][ T31] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.148232][ T31] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.208618][T12469] veth0_vlan: entered promiscuous mode [ 232.210693][T12469] veth1_vlan: entered promiscuous mode [ 232.220671][T12469] veth0_macvtap: entered promiscuous mode [ 232.222754][T12469] veth1_macvtap: entered promiscuous mode [ 232.228940][T12469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.233459][T12469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.268800][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.269207][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.269241][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.269280][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.375206][T12655] loop5: detected capacity change from 0 to 512 [ 232.384929][T12655] EXT4-fs: Ignoring removed bh option [ 232.400536][T12655] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.2668: corrupted in-inode xattr: e_value size too large [ 232.400572][T12655] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 232.400835][T12655] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.2668: couldn't read orphan inode 15 (err -117) [ 232.400859][T12655] loop5: lost filesystem error report for type 5 error -117 [ 232.403180][T12655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.423802][T12663] ./dev/sda1: Can't lookup blockdev [ 232.477584][ T9475] Bluetooth: hci0: command 0x1003 tx timeout [ 232.478421][ T3526] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 232.494459][ T4784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.523331][T12100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.719202][T12674] EXT4-fs (loop3): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 232.736924][T12674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.742988][T12674] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.2673: bg 0: block 153: padding at end of block bitmap is not set [ 232.780021][ T4784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.856682][T12685] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 232.856901][T12685] EXT4-fs (loop5): orphan cleanup on readonly fs [ 232.857019][T12685] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 232.857129][T12685] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 232.858644][T12685] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.2676: bg 0: block 15: invalid block bitmap [ 232.858838][T12685] loop5: lost filesystem error report for type 5 error -117 [ 232.859005][T12685] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 232.859023][T12685] loop5: lost filesystem error report for type 5 error -117 [ 232.859322][T12685] EXT4-fs warning (device loop5): ext4_evict_inode:196: inode #16: comm syz.5.2676: data will be lost [ 232.859402][T12685] EXT4-fs (loop5): 1 truncate cleaned up [ 232.859897][T12685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 233.067013][T12689] bridge0: port 3(macsec1) entered blocking state [ 233.067047][T12689] bridge0: port 3(macsec1) entered disabled state [ 233.067143][T12689] macsec1: entered allmulticast mode [ 233.067158][T12689] bridge0: entered allmulticast mode [ 233.067182][T12689] bridge0: entered promiscuous mode [ 233.081137][T12689] macsec1: left allmulticast mode [ 233.081156][T12689] bridge0: left allmulticast mode [ 233.097155][ T3363] bridge0: left promiscuous mode [ 233.188653][T12703] EXT4-fs: Ignoring removed bh option [ 233.202062][T12703] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.2684: corrupted in-inode xattr: e_value size too large [ 233.202163][T12703] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 233.202300][T12703] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.2684: couldn't read orphan inode 15 (err -117) [ 233.202404][T12703] loop3: lost filesystem error report for type 5 error -117 [ 233.202949][T12703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.252135][T12711] set_capacity_and_notify: 3 callbacks suppressed [ 233.252153][T12711] loop1: detected capacity change from 0 to 1024 [ 233.265713][T12711] EXT4-fs (loop1): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 233.280803][T12711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.286290][T12711] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.2687: bg 0: block 153: padding at end of block bitmap is not set [ 233.322509][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.323181][ T4784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.376917][T12719] xt_hashlimit: size too large, truncated to 1048576 [ 233.631715][T12100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.015018][T12731] loop6: detected capacity change from 0 to 1024 [ 234.016716][T12731] EXT4-fs (loop6): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 234.017193][T12728] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2692'. [ 234.052020][T12729] netlink: 'syz.5.2691': attribute type 9 has an invalid length. [ 234.068050][T12731] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.072837][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 234.072855][ T29] audit: type=1400 audit(1789405671.288:11616): avc: denied { watch } for pid=12730 comm="syz.6.2694" path="/14/file2" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.246073][ T29] audit: type=1400 audit(1789405671.458:11617): avc: denied { write } for pid=12738 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.288802][ T29] audit: type=1400 audit(1789405671.508:11618): avc: denied { write } for pid=12753 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.296143][T12314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.364405][T12757] loop2: detected capacity change from 0 to 512 [ 234.365038][T12757] EXT4-fs: Ignoring removed bh option [ 234.390213][T12757] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.2699: corrupted in-inode xattr: e_value size too large [ 234.390248][T12757] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 234.392132][T12757] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.2699: couldn't read orphan inode 15 (err -117) [ 234.392164][T12757] loop2: lost filesystem error report for type 5 error -117 [ 234.392731][T12757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.405026][T12758] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2696'. [ 234.455679][T12768] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 234.474195][ T29] audit: type=1400 audit(1789405671.678:11619): avc: denied { write } for pid=12759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.494209][ T29] audit: type=1400 audit(1789405671.688:11620): avc: denied { write } for pid=12773 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.540689][T12779] loop5: detected capacity change from 0 to 1024 [ 234.544456][T12779] EXT4-fs (loop5): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 234.588616][T12779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.636223][T12469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.689130][T12794] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2706'. [ 234.715447][ T29] audit: type=1400 audit(1789405671.868:11621): avc: denied { write } for pid=12778 comm="syz.5.2701" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.715559][ T29] audit: type=1400 audit(1789405671.898:11622): avc: denied { write } for pid=12778 comm="syz.5.2701" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.785224][T12799] loop1: detected capacity change from 0 to 1024 [ 234.794858][T12799] EXT4-fs (loop1): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 234.809761][ T29] audit: type=1400 audit(1789405672.018:11623): avc: denied { write } for pid=12777 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.816188][T12799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.860851][T12809] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 234.891261][T12799] FAULT_INJECTION: forcing a failure. [ 234.891261][T12799] name failslab, interval 1, probability 0, space 0, times 0 [ 234.891626][T12799] CPU: 0 UID: 0 PID: 12799 Comm: syz.1.2707 Not tainted syzkaller #0 PREEMPT(lazy) [ 234.891731][T12799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 234.891743][T12799] Call Trace: [ 234.891749][T12799] [ 234.891757][T12799] __dump_stack+0x1d/0x30 [ 234.891780][T12799] dump_stack_lvl+0x95/0xd0 [ 234.891804][T12799] dump_stack+0x15/0x1b [ 234.891883][T12799] should_fail_ex+0x262/0x280 [ 234.891911][T12799] should_failslab+0x8c/0xb0 [ 234.891939][T12799] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 234.892046][T12799] ? irqentry_exit+0x58f/0x610 [ 234.892070][T12799] ? __d_alloc+0x34/0x320 [ 234.892130][T12799] ? __d_alloc+0x34/0x320 [ 234.892157][T12799] __d_alloc+0x34/0x320 [ 234.892227][T12799] d_alloc_parallel+0x4f/0xce0 [ 234.892301][T12799] ? __legitimize_mnt+0x4e/0x100 [ 234.892401][T12799] ? lockref_get_not_dead+0x120/0x1c0 [ 234.892429][T12799] ? __rcu_read_unlock+0x4e/0x70 [ 234.892537][T12799] ? try_to_unlazy+0x39b/0x580 [ 234.892568][T12799] __lookup_slow+0x51/0x200 [ 234.892597][T12799] lookup_slow+0x3c/0x60 [ 234.892675][T12799] path_lookupat+0x2b2/0x4c0 [ 234.892696][T12799] filename_lookup+0x18f/0x390 [ 234.892824][T12799] filename_setxattr+0x56/0x410 [ 234.892847][T12799] ? do_getname+0x102/0x1c0 [ 234.892918][T12799] path_setxattrat+0x2c1/0x320 [ 234.892957][T12799] __x64_sys_setxattr+0x6e/0x90 [ 234.893004][T12799] x64_sys_call+0xf6c/0x2550 [ 234.893029][T12799] do_syscall_64+0x112/0x360 [ 234.893063][T12799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.893090][T12799] RIP: 0033:0x7f50b014e159 [ 234.893137][T12799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.893156][T12799] RSP: 002b:00007f50aeba7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 234.893175][T12799] RAX: ffffffffffffffda RBX: 00007f50b03d5fa0 RCX: 00007f50b014e159 [ 234.893189][T12799] RDX: 0000000000000000 RSI: 0000200000000fc0 RDI: 0000200000000280 [ 234.893205][T12799] RBP: 00007f50aeba7090 R08: 0000000000000000 R09: 0000000000000000 [ 234.893219][T12799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.893268][T12799] R13: 00007f50b03d6038 R14: 00007f50b03d5fa0 R15: 00007fffc6bd7778 [ 234.893345][T12799] [ 234.985666][ T29] audit: type=1400 audit(1789405672.198:11624): avc: denied { ioctl } for pid=12787 comm="syz.3.2703" path="socket:[42113]" dev="sockfs" ino=42113 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 235.100244][ T29] audit: type=1400 audit(1789405672.318:11625): avc: denied { write } for pid=12812 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.109853][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.124553][T12779] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.2701: bg 0: block 153: padding at end of block bitmap is not set [ 235.265675][T12779] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 235.361300][T12100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.367851][T12830] loop2: detected capacity change from 0 to 512 [ 235.373077][T12830] EXT4-fs: inline encryption not supported [ 235.373916][T12830] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 235.380544][T12830] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.2711: bad orphan inode 15 [ 235.380572][T12830] loop2: lost filesystem error report for type 5 error -117 [ 235.380734][T12830] ext4_test_bit(bit=14, block=5) = 0 [ 235.381194][T12830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.398135][T12830] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 235.398457][T12830] EXT4-fs error (device loop2): ext4_free_inode:356: comm syz.2.2711: bit already cleared for inode 13 [ 235.658330][T12829] loop3: detected capacity change from 0 to 764 [ 235.713143][T12469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.797606][T12849] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2717'. [ 235.832260][T12851] loop1: detected capacity change from 0 to 512 [ 235.842382][T12851] EXT4-fs: Ignoring removed bh option [ 235.861900][T12851] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.2716: corrupted in-inode xattr: e_value size too large [ 235.861987][T12851] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 235.862176][T12851] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.2716: couldn't read orphan inode 15 (err -117) [ 235.862205][T12851] loop1: lost filesystem error report for type 5 error -117 [ 235.862831][T12851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.991214][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.026573][T12855] loop5: detected capacity change from 0 to 164 [ 236.045172][T12869] xt_hashlimit: size too large, truncated to 1048576 [ 236.146846][T12871] loop2: detected capacity change from 0 to 512 [ 236.157136][T12871] EXT4-fs: inline encryption not supported [ 236.160077][T12871] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 236.165787][T12871] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.2725: bad orphan inode 15 [ 236.165885][T12871] loop2: lost filesystem error report for type 5 error -117 [ 236.166606][T12871] ext4_test_bit(bit=14, block=5) = 0 [ 236.167168][T12871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.173220][T12871] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 236.173409][T12871] EXT4-fs error (device loop2): ext4_free_inode:356: comm syz.2.2725: bit already cleared for inode 13 [ 236.254815][T12874] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 236.254981][T12874] EXT4-fs (loop6): Remounting filesystem read-only [ 236.255272][T12874] EXT4-fs (loop6): 1 truncate cleaned up [ 236.255784][T12874] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.255895][T12874] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.272173][ T3420] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 236.272226][ T3420] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 236.272246][ T3420] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 236.405444][T12469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.434990][T12314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.472210][T12888] EXT4-fs (loop6): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 236.494952][T12888] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.633916][T12896] EXT4-fs: inline encryption not supported [ 236.636291][T12896] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 236.645275][T12896] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.2731: bad orphan inode 15 [ 236.645303][T12896] loop5: lost filesystem error report for type 5 error -117 [ 236.645484][T12896] ext4_test_bit(bit=14, block=5) = 0 [ 236.645874][T12896] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.649101][T12896] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 236.649179][T12896] EXT4-fs error (device loop5): ext4_free_inode:356: comm syz.5.2731: bit already cleared for inode 13 [ 236.798936][T12900] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 236.881784][T12314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.967035][T12904] EXT4-fs (loop6): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 236.988692][T12904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.991436][T12904] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.2733: bg 0: block 153: padding at end of block bitmap is not set [ 239.450603][T12314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.486806][T12100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.617525][T12921] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2739'. [ 239.667068][T12924] FAULT_INJECTION: forcing a failure. [ 239.667068][T12924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.667177][T12924] CPU: 0 UID: 0 PID: 12924 Comm: syz.6.2741 Not tainted syzkaller #0 PREEMPT(lazy) [ 239.667205][T12924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 239.667221][T12924] Call Trace: [ 239.667230][T12924] [ 239.667239][T12924] __dump_stack+0x1d/0x30 [ 239.667267][T12924] dump_stack_lvl+0x95/0xd0 [ 239.667305][T12924] dump_stack+0x15/0x1b [ 239.667328][T12924] should_fail_ex+0x262/0x280 [ 239.667397][T12924] should_fail+0xb/0x20 [ 239.667458][T12924] should_fail_usercopy+0x1a/0x20 [ 239.667486][T12924] _copy_to_user+0x20/0xa0 [ 239.667512][T12924] simple_read_from_buffer+0xb5/0x130 [ 239.667546][T12924] proc_fail_nth_read+0x10e/0x150 [ 239.667638][T12924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.667661][T12924] vfs_read+0x18e/0x7c0 [ 239.667696][T12924] ? __rcu_read_unlock+0x4e/0x70 [ 239.667732][T12924] ? __fget_files+0x184/0x1c0 [ 239.667759][T12924] ? mutex_lock+0x57/0x90 [ 239.667784][T12924] ksys_read+0xdc/0x1a0 [ 239.667831][T12924] __x64_sys_read+0x40/0x50 [ 239.667862][T12924] x64_sys_call+0x2135/0x2550 [ 239.667906][T12924] do_syscall_64+0x112/0x360 [ 239.667939][T12924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.668043][T12924] RIP: 0033:0x7f14d615e98e [ 239.668061][T12924] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 239.668078][T12924] RSP: 002b:00007f14d4bf6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.668097][T12924] RAX: ffffffffffffffda RBX: 00007f14d4bf76c0 RCX: 00007f14d615e98e [ 239.668115][T12924] RDX: 000000000000000f RSI: 00007f14d4bf70a0 RDI: 0000000000000004 [ 239.668130][T12924] RBP: 00007f14d4bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 239.668173][T12924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.668188][T12924] R13: 00007f14d6426038 R14: 00007f14d6425fa0 R15: 00007fff111b1428 [ 239.668210][T12924] [ 239.735633][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 239.735653][ T29] audit: type=1326 audit(1789405676.948:11635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.3.2743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29b3bae159 code=0x0 [ 239.758434][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2742'. [ 239.758466][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2742'. [ 239.759685][T12916] set_capacity_and_notify: 5 callbacks suppressed [ 239.759784][T12916] loop5: detected capacity change from 0 to 764 [ 240.126917][T12947] loop1: detected capacity change from 0 to 128 [ 240.146185][T12947] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.146387][T12947] ext4 filesystem being mounted at /548/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 240.284329][T12950] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 240.892297][T12947] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.056144][T12964] netlink: 'syz.2.2755': attribute type 9 has an invalid length. [ 241.056164][T12964] netlink: 'syz.2.2755': attribute type 6 has an invalid length. [ 241.056178][T12964] netlink: 'syz.2.2755': attribute type 7 has an invalid length. [ 241.056191][T12964] netlink: 'syz.2.2755': attribute type 8 has an invalid length. [ 241.233565][T12958] loop3: detected capacity change from 0 to 1024 [ 241.334768][T12958] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 241.406618][T12958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.485837][T12977] syzkaller0: entered promiscuous mode [ 241.485858][T12977] syzkaller0: entered allmulticast mode [ 241.640797][ T4784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.864933][T12986] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2761'. [ 241.866322][T12982] loop3: detected capacity change from 0 to 1024 [ 241.905235][T12982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.919654][ T29] audit: type=1400 audit(1789405679.128:11636): avc: denied { write } for pid=12981 comm="syz.3.2760" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.919749][ T29] audit: type=1400 audit(1789405679.128:11637): avc: denied { map } for pid=12981 comm="syz.3.2760" path="/468/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 242.035821][T12982] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 242.035910][T12982] File: /468/file1/file1 PID: 12982 Comm: syz.3.2760 [ 242.055766][T12995] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2763'. [ 242.074322][T12999] loop1: detected capacity change from 0 to 512 [ 242.086873][ T4784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.202665][ T29] audit: type=1400 audit(1789405679.418:11638): avc: denied { write } for pid=13002 comm="syz.3.2765" name="mnt" dev="proc" ino=42439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lnk_file permissive=1 [ 242.717121][T13024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.731490][T13024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.735895][T13024] netlink: 'syz.5.2772': attribute type 9 has an invalid length. [ 242.937392][ T29] audit: type=1400 audit(1789405680.148:11639): avc: denied { write } for pid=13026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.016873][T13030] vcan0 speed is unknown, defaulting to 1000 [ 243.160226][ T29] audit: type=1400 audit(1789405680.378:11640): avc: denied { write } for pid=13041 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.367189][ T29] audit: type=1400 audit(1789405680.578:11641): avc: denied { write } for pid=13044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.413238][ T29] audit: type=1400 audit(1789405680.628:11642): avc: denied { write } for pid=13059 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.520819][T13050] loop2: detected capacity change from 0 to 512 [ 243.550473][ T29] audit: type=1400 audit(1789405680.768:11643): avc: denied { write } for pid=13061 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.615301][ T29] audit: type=1400 audit(1789405680.828:11644): avc: denied { write } for pid=13074 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.642962][T13050] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 243.643145][T13050] System zones: 1-12 [ 243.647316][T13050] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.2773: missing EA_INODE flag [ 243.649802][T13050] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 243.657376][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 243.657403][ C1] EXT4-fs (loop2): initial error at time 1789405680: ext4_xattr_inode_iget:437: inode 12 [ 243.657439][ C1] EXT4-fs (loop2): last error at time 1789405680: ext4_xattr_inode_iget:437: inode 12 [ 243.663729][T13050] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.2773: error while reading EA inode 12 err=-117 [ 243.663849][T13050] loop2: lost filesystem error report for type 5 error -117 [ 243.664958][T13050] EXT4-fs (loop2): 1 orphan inode deleted [ 243.682127][T13050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.741340][T13056] loop1: detected capacity change from 0 to 764 [ 243.966340][T13087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2773'. [ 244.073203][T12469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.618929][T13122] FAULT_INJECTION: forcing a failure. [ 244.618929][T13122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.619053][T13122] CPU: 1 UID: 0 PID: 13122 Comm: syz.5.2783 Not tainted syzkaller #0 PREEMPT(lazy) [ 244.619077][T13122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 244.619088][T13122] Call Trace: [ 244.619094][T13122] [ 244.619102][T13122] __dump_stack+0x1d/0x30 [ 244.619131][T13122] dump_stack_lvl+0x95/0xd0 [ 244.619219][T13122] dump_stack+0x15/0x1b [ 244.619244][T13122] should_fail_ex+0x262/0x280 [ 244.619275][T13122] should_fail+0xb/0x20 [ 244.619300][T13122] should_fail_usercopy+0x1a/0x20 [ 244.619402][T13122] _copy_from_user+0x1c/0xb0 [ 244.619431][T13122] __se_sys_capset+0x1f3/0x480 [ 244.619456][T13122] ? switch_fpu_return+0xe7/0x1b0 [ 244.619531][T13122] __x64_sys_capset+0x31/0x40 [ 244.619549][T13122] x64_sys_call+0x1515/0x2550 [ 244.619577][T13122] do_syscall_64+0x112/0x360 [ 244.619622][T13122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.619692][T13122] RIP: 0033:0x7f70f940e159 [ 244.619710][T13122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.619729][T13122] RSP: 002b:00007f70f7e67028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 244.619755][T13122] RAX: ffffffffffffffda RBX: 00007f70f9695fa0 RCX: 00007f70f940e159 [ 244.619771][T13122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 244.619811][T13122] RBP: 00007f70f94a503b R08: 0000000000000000 R09: 0000000000000000 [ 244.619827][T13122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.619840][T13122] R13: 00007f70f9696038 R14: 00007f70f9695fa0 R15: 00007ffd103247e8 [ 244.619863][T13122] [ 244.869894][T13162] loop5: detected capacity change from 0 to 512 [ 244.890738][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 244.890756][ T29] audit: type=1326 audit(1789405682.108:11655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.3.2787" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b3bae159 code=0x7ffc0000 [ 244.890787][ T29] audit: type=1326 audit(1789405682.108:11656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.3.2787" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b3bae159 code=0x7ffc0000 [ 244.890823][ T29] audit: type=1326 audit(1789405682.108:11657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.3.2787" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b3bae159 code=0x7ffc0000 [ 244.890893][ T29] audit: type=1326 audit(1789405682.108:11658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.3.2787" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b3bae159 code=0x7ffc0000 [ 244.890920][ T29] audit: type=1326 audit(1789405682.108:11659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.3.2787" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29b3b6e98e code=0x7ffc0000 [ 244.893001][T13166] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2787'. [ 244.893559][ T29] audit: type=1326 audit(1789405682.108:11660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.3.2787" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29b3bae159 code=0x7ffc0000 [ 244.893648][ T29] audit: type=1326 audit(1789405682.108:11661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.3.2787" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b3bae159 code=0x7ffc0000 [ 244.893673][ T29] audit: type=1326 audit(1789405682.108:11662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.3.2787" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b3bae159 code=0x7ffc0000 [ 244.893706][ T29] audit: type=1326 audit(1789405682.108:11663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.3.2787" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b3bae159 code=0x7ffc0000 [ 244.893805][ T29] audit: type=1326 audit(1789405682.108:11664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.3.2787" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f29b3bae159 code=0x7ffc0000 [ 244.956810][T13166] bond0 (unregistering): Released all slaves [ 244.974609][T13162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.974675][T13162] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.145651][T13162] loop6: detected capacity change from 0 to 7 [ 245.338249][T12100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.366770][T13194] FAULT_INJECTION: forcing a failure. [ 245.366770][T13194] name failslab, interval 1, probability 0, space 0, times 0 [ 245.366855][T13194] CPU: 1 UID: 0 PID: 13194 Comm: syz.2.2791 Not tainted syzkaller #0 PREEMPT(lazy) [ 245.366880][T13194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 245.366910][T13194] Call Trace: [ 245.366916][T13194] [ 245.366922][T13194] __dump_stack+0x1d/0x30 [ 245.366947][T13194] dump_stack_lvl+0x95/0xd0 [ 245.366972][T13194] dump_stack+0x15/0x1b [ 245.366994][T13194] should_fail_ex+0x262/0x280 [ 245.367020][T13194] ? do_getname+0x2e/0x1c0 [ 245.367059][T13194] should_failslab+0x8c/0xb0 [ 245.367139][T13194] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 245.367232][T13194] ? do_getname+0x2e/0x1c0 [ 245.367254][T13194] do_getname+0x2e/0x1c0 [ 245.367276][T13194] getname_flags+0x1d/0x30 [ 245.367298][T13194] do_sys_openat2+0x6c/0x130 [ 245.367382][T13194] __x64_sys_openat+0xf2/0x120 [ 245.367417][T13194] x64_sys_call+0x1f72/0x2550 [ 245.367447][T13194] do_syscall_64+0x112/0x360 [ 245.367544][T13194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.367570][T13194] RIP: 0033:0x7f7491aae98e [ 245.367587][T13194] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 245.367609][T13194] RSP: 002b:00007f7490546f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 245.367631][T13194] RAX: ffffffffffffffda RBX: 00007f74905476c0 RCX: 00007f7491aae98e [ 245.367693][T13194] RDX: 0000000000000002 RSI: 00007f7491b84942 RDI: ffffffffffffff9c [ 245.367706][T13194] RBP: 00007f7491b8503b R08: 0000000000000000 R09: 0000000000000000 [ 245.367720][T13194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.367786][T13194] R13: 00007f7491d76038 R14: 00007f7491d75fa0 R15: 00007ffe559df838 [ 245.367808][T13194] [ 245.472981][T13203] loop2: detected capacity change from 0 to 1024 [ 245.489511][T13203] EXT4-fs (loop2): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 245.513845][T13203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.546078][T13203] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.2793: bg 0: block 153: padding at end of block bitmap is not set [ 245.625800][T12469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.701694][T13217] FAULT_INJECTION: forcing a failure. [ 245.701694][T13217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.701726][T13217] CPU: 1 UID: 0 PID: 13217 Comm: syz.6.2797 Not tainted syzkaller #0 PREEMPT(lazy) [ 245.701790][T13217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 245.701804][T13217] Call Trace: [ 245.701812][T13217] [ 245.701821][T13217] __dump_stack+0x1d/0x30 [ 245.701849][T13217] dump_stack_lvl+0x95/0xd0 [ 245.701875][T13217] dump_stack+0x15/0x1b [ 245.701973][T13217] should_fail_ex+0x262/0x280 [ 245.701998][T13217] should_fail+0xb/0x20 [ 245.702021][T13217] should_fail_usercopy+0x1a/0x20 [ 245.702083][T13217] _copy_to_user+0x20/0xa0 [ 245.702113][T13217] simple_read_from_buffer+0xb5/0x130 [ 245.702152][T13217] proc_fail_nth_read+0x10e/0x150 [ 245.702175][T13217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.702201][T13217] vfs_read+0x18e/0x7c0 [ 245.702226][T13217] ? __rcu_read_unlock+0x4e/0x70 [ 245.702273][T13217] ? __fget_files+0x184/0x1c0 [ 245.702369][T13217] ? mutex_lock+0x57/0x90 [ 245.702477][T13217] ksys_read+0xdc/0x1a0 [ 245.702505][T13217] __x64_sys_read+0x40/0x50 [ 245.702550][T13217] x64_sys_call+0x2135/0x2550 [ 245.702587][T13217] do_syscall_64+0x112/0x360 [ 245.702667][T13217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.702700][T13217] RIP: 0033:0x7f14d615e98e [ 245.702717][T13217] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 245.702783][T13217] RSP: 002b:00007f14d4bf6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 245.702806][T13217] RAX: ffffffffffffffda RBX: 00007f14d4bf76c0 RCX: 00007f14d615e98e [ 245.702823][T13217] RDX: 000000000000000f RSI: 00007f14d4bf70a0 RDI: 0000000000000004 [ 245.702837][T13217] RBP: 00007f14d4bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 245.702853][T13217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.702870][T13217] R13: 00007f14d6426038 R14: 00007f14d6425fa0 R15: 00007fff111b1428 [ 245.702894][T13217] [ 245.730606][T13219] netlink: 'syz.2.2796': attribute type 9 has an invalid length. [ 245.730625][T13219] netlink: 'syz.2.2796': attribute type 6 has an invalid length. [ 245.730638][T13219] netlink: 'syz.2.2796': attribute type 7 has an invalid length. [ 245.730651][T13219] netlink: 'syz.2.2796': attribute type 8 has an invalid length. [ 246.191171][T13265] loop6: detected capacity change from 0 to 1024 [ 246.192143][T13265] EXT4-fs (loop6): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 246.221717][T13265] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.2806: bg 0: block 153: padding at end of block bitmap is not set [ 246.279736][T13273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2807'. [ 246.320002][T13273] vlan4: entered allmulticast mode [ 246.320022][T13273] bridge8: entered allmulticast mode [ 246.375912][T13275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.376082][T13275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.395479][T13275] netlink: 'syz.3.2808': attribute type 9 has an invalid length. [ 246.479087][T13294] FAULT_INJECTION: forcing a failure. [ 246.479087][T13294] name failslab, interval 1, probability 0, space 0, times 0 [ 246.479116][T13294] CPU: 1 UID: 0 PID: 13294 Comm: syz.5.2813 Not tainted syzkaller #0 PREEMPT(lazy) [ 246.479223][T13294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 246.479238][T13294] Call Trace: [ 246.479245][T13294] [ 246.479255][T13294] __dump_stack+0x1d/0x30 [ 246.479283][T13294] dump_stack_lvl+0x95/0xd0 [ 246.479309][T13294] dump_stack+0x15/0x1b [ 246.479405][T13294] should_fail_ex+0x262/0x280 [ 246.479433][T13294] ? fib_create_info+0xb84/0x18e0 [ 246.479540][T13294] should_failslab+0x8c/0xb0 [ 246.479574][T13294] __kmalloc_noprof+0xd0/0x4d0 [ 246.479606][T13294] ? fib_create_info+0xb84/0x18e0 [ 246.479699][T13294] fib_create_info+0xb84/0x18e0 [ 246.479732][T13294] fib_table_insert+0x61/0xee0 [ 246.479823][T13294] ? ip_rt_ioctl+0x809/0xa80 [ 246.479841][T13294] ? __kmalloc_cache_noprof+0x331/0x400 [ 246.479920][T13294] ? ip_rt_ioctl+0x809/0xa80 [ 246.479945][T13294] ip_rt_ioctl+0x3f1/0xa80 [ 246.479981][T13294] inet_ioctl+0x33f/0x3a0 [ 246.480015][T13294] sock_do_ioctl+0x73/0x230 [ 246.480041][T13294] sock_ioctl+0x439/0x610 [ 246.480129][T13294] ? mutex_lock+0x57/0x90 [ 246.480159][T13294] ? __pfx_sock_ioctl+0x10/0x10 [ 246.480181][T13294] __se_sys_ioctl+0xce/0x140 [ 246.480210][T13294] __x64_sys_ioctl+0x43/0x50 [ 246.480249][T13294] x64_sys_call+0x239d/0x2550 [ 246.480357][T13294] do_syscall_64+0x112/0x360 [ 246.480395][T13294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.480452][T13294] RIP: 0033:0x7f70f940e159 [ 246.480466][T13294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.480487][T13294] RSP: 002b:00007f70f7e67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.480509][T13294] RAX: ffffffffffffffda RBX: 00007f70f9695fa0 RCX: 00007f70f940e159 [ 246.480526][T13294] RDX: 0000200000000140 RSI: 000000000000890b RDI: 0000000000000004 [ 246.480580][T13294] RBP: 00007f70f7e67090 R08: 0000000000000000 R09: 0000000000000000 [ 246.480594][T13294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.480607][T13294] R13: 00007f70f9696038 R14: 00007f70f9695fa0 R15: 00007ffd103247e8 [ 246.480628][T13294] [ 246.548093][T13285] loop6: detected capacity change from 0 to 4096 [ 246.571031][T13285] EXT4-fs (loop6): Invalid log block size: 4294967295 [ 246.834852][T13315] loop1: detected capacity change from 0 to 4096 [ 247.169868][T13356] loop5: detected capacity change from 0 to 512 [ 247.170459][T13356] EXT4-fs: Ignoring removed bh option [ 247.194166][T13356] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.2822: corrupted in-inode xattr: e_value size too large [ 247.194197][T13356] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 247.194432][T13356] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.2822: couldn't read orphan inode 15 (err -117) [ 247.194461][T13356] loop5: lost filesystem error report for type 5 error -117 [ 247.250915][T13359] No source specified [ 247.286121][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2825'. [ 247.286148][T13363] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2825'. [ 247.352312][T13368] netlink: 'syz.1.2826': attribute type 1 has an invalid length. [ 247.379756][T13377] loop3: detected capacity change from 0 to 1024 [ 247.380168][T13377] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.380192][T13377] EXT4-fs: Ignoring removed i_version option [ 247.380285][T13377] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.408644][T13377] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.492083][T13385] loop1: detected capacity change from 0 to 512 [ 247.492436][T13385] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 247.553467][T13389] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 247.558632][T13383] loop2: detected capacity change from 0 to 164 [ 247.680446][T13394] EXT4-fs (loop2): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 247.701114][T13394] EXT4-fs mount: 8 callbacks suppressed [ 247.701132][T13394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.785235][T13404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=13404 comm=syz.6.2837 [ 247.825160][T13400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2836'. [ 247.842223][T13394] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.2834: bg 0: block 153: padding at end of block bitmap is not set [ 247.864221][T12469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.446743][T13444] ip_tables: iptables: counters copy to user failed while replacing table [ 248.552325][T13452] EXT4-fs: inline encryption not supported [ 248.555637][T13452] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 248.568856][T13452] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.2856: bad orphan inode 15 [ 248.568928][T13452] loop2: lost filesystem error report for type 5 error -117 [ 248.569065][T13452] ext4_test_bit(bit=14, block=5) = 0 [ 248.569355][T13452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.570414][T13452] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 248.570561][T13452] EXT4-fs error (device loop2): ext4_free_inode:356: comm syz.2.2856: bit already cleared for inode 13 [ 248.672369][T13458] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.672441][T13458] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.673439][T13458] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz.6.2859: iget: bad i_size value: 2533274857506816 [ 248.837861][T13464] netlink: 'syz.1.2860': attribute type 1 has an invalid length. [ 249.127055][T12469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.688973][T13464] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 249.695744][T13466] erspan2: entered allmulticast mode [ 249.891453][T13485] SELinux: syz.1.2865 (13485) wrote to checkreqprot. This is no longer supported. [ 249.947071][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 249.947088][ T29] audit: type=1400 audit(1789405687.158:11797): avc: denied { cpu } for pid=13488 comm="syz.5.2869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 249.974733][T13477] bridge0: port 1(macvlan2) entered blocking state [ 249.975163][T13477] bridge0: port 1(macvlan2) entered disabled state [ 249.975945][T13477] macvlan2: entered allmulticast mode [ 249.975982][T13477] bridge0: entered allmulticast mode [ 249.976181][T13477] bridge0: entered promiscuous mode [ 250.019949][T13477] macvlan2: left allmulticast mode [ 250.020000][T13477] bridge0: left allmulticast mode [ 250.145641][ T3385] bridge0: left promiscuous mode [ 250.382283][ T29] audit: type=1400 audit(1789405687.398:11798): avc: denied { write } for pid=13491 comm="syz.2.2870" name="g1" dev="configfs" ino=4813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 250.428715][T13489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.429411][T13489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.436247][T12314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.494137][ T29] audit: type=1326 audit(1789405687.708:11799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13508 comm="syz.6.2875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d619e159 code=0x7ffc0000 [ 250.494230][ T29] audit: type=1326 audit(1789405687.708:11800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13508 comm="syz.6.2875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d619e159 code=0x7ffc0000 [ 250.557695][ T29] audit: type=1326 audit(1789405687.708:11801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13508 comm="syz.6.2875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d619e159 code=0x7ffc0000 [ 250.557727][ T29] audit: type=1326 audit(1789405687.708:11802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13508 comm="syz.6.2875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d619e159 code=0x7ffc0000 [ 250.557756][ T29] audit: type=1326 audit(1789405687.708:11803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13508 comm="syz.6.2875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f14d619e159 code=0x7ffc0000 [ 250.557856][ T29] audit: type=1326 audit(1789405687.708:11804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13508 comm="syz.6.2875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d619e159 code=0x7ffc0000 [ 250.557886][ T29] audit: type=1326 audit(1789405687.708:11805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13508 comm="syz.6.2875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d619e159 code=0x7ffc0000 [ 250.557916][ T29] audit: type=1326 audit(1789405687.718:11806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13508 comm="syz.6.2875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d619e159 code=0x7ffc0000 [ 250.872550][T13489] set_capacity_and_notify: 4 callbacks suppressed [ 250.872585][T13489] loop5: detected capacity change from 0 to 2048 [ 250.893836][T13518] loop3: detected capacity change from 0 to 1024 [ 250.904877][T13518] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 250.908038][T13520] loop1: detected capacity change from 0 to 1024 [ 250.918491][T13520] EXT4-fs (loop1): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 250.919322][T13518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.954328][T13520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.966603][T13489] loop5: p3 < > p4 < > [ 250.966723][T13489] loop5: partition table partially beyond EOD, truncated [ 250.968344][T13489] loop5: p3 start 4284289 is beyond EOD, truncated [ 251.011144][ T4784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.012113][T13527] loop6: detected capacity change from 0 to 1024 [ 251.013071][T13527] EXT4-fs (loop6): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 251.046572][ T2981] loop5: p3 < > p4 < > [ 251.046585][ T2981] loop5: partition table partially beyond EOD, truncated [ 251.046694][ T2981] loop5: p3 start 4284289 is beyond EOD, truncated [ 251.058418][T13527] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.078395][T13527] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.2881: bg 0: block 153: padding at end of block bitmap is not set [ 251.136085][T12314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.179774][T13520] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.2880: bg 0: block 153: padding at end of block bitmap is not set [ 251.231687][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.282759][T13542] syzkaller1: entered promiscuous mode [ 251.282855][T13542] syzkaller1: entered allmulticast mode [ 251.291981][T13541] loop6: detected capacity change from 0 to 512 [ 251.342019][T13541] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.342142][T13541] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.372424][T13533] loop2: detected capacity change from 0 to 512 [ 251.422943][T12314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.509102][T13533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.517166][T13533] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.796588][T13561] loop6: detected capacity change from 0 to 512 [ 251.806422][T13561] EXT4-fs: Ignoring removed bh option [ 251.817616][T13561] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.2891: corrupted in-inode xattr: e_value size too large [ 251.817692][T13561] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 251.817874][T13561] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.2891: couldn't read orphan inode 15 (err -117) [ 251.817900][T13561] loop6: lost filesystem error report for type 5 error -117 [ 251.832530][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 251.832554][ C1] EXT4-fs (loop6): initial error at time 1789405689: ext4_iget_extra_inode:5210: inode 15 [ 251.832589][ C1] EXT4-fs (loop6): last error at time 1789405689: ext4_orphan_get:1408 [ 251.890013][T13561] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.923903][T13565] loop5: detected capacity change from 0 to 1024 [ 251.932810][T13565] EXT4-fs (loop5): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 251.953089][T12314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.953653][T13565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.995860][T13565] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.2893: bg 0: block 153: padding at end of block bitmap is not set [ 252.034509][T12100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.120342][T12469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.268180][T13576] loop2: detected capacity change from 0 to 1024 [ 252.297546][T13576] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 252.339996][T13576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.482545][T13592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2902'. [ 252.486062][T12469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.502859][T13592] vlan5: entered allmulticast mode [ 252.502879][T13592] bridge9: entered allmulticast mode [ 252.595891][T13597] loop5: detected capacity change from 0 to 512 [ 252.596452][T13597] EXT4-fs: Ignoring removed bh option [ 252.601688][T13597] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.2904: corrupted in-inode xattr: e_value size too large [ 252.601757][T13597] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 252.601933][T13597] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.2904: couldn't read orphan inode 15 (err -117) [ 252.601959][T13597] loop5: lost filesystem error report for type 5 error -117 [ 252.603478][T13597] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.715880][T12100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.781171][T13610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.782313][T13610] FAULT_INJECTION: forcing a failure. [ 252.782313][T13610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.782342][T13610] CPU: 1 UID: 0 PID: 13610 Comm: syz.1.2910 Not tainted syzkaller #0 PREEMPT(lazy) [ 252.782369][T13610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 252.782392][T13610] Call Trace: [ 252.782399][T13610] [ 252.782406][T13610] __dump_stack+0x1d/0x30 [ 252.782434][T13610] dump_stack_lvl+0x95/0xd0 [ 252.782521][T13610] dump_stack+0x15/0x1b [ 252.782607][T13610] should_fail_ex+0x262/0x280 [ 252.782635][T13610] should_fail+0xb/0x20 [ 252.782657][T13610] should_fail_usercopy+0x1a/0x20 [ 252.782728][T13610] strncpy_from_user+0x27/0x250 [ 252.782762][T13610] do_getname+0x59/0x1c0 [ 252.782782][T13610] user_path_at+0x28/0x100 [ 252.782883][T13610] __se_sys_mount+0x25b/0x2e0 [ 252.782906][T13610] ? kmem_cache_free+0x106/0x3b0 [ 252.782942][T13610] __x64_sys_mount+0x67/0x80 [ 252.782965][T13610] x64_sys_call+0xc3b/0x2550 [ 252.783034][T13610] do_syscall_64+0x112/0x360 [ 252.783125][T13610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.783147][T13610] RIP: 0033:0x7f50b014f3ca [ 252.783162][T13610] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.783236][T13610] RSP: 002b:00007f50aeba6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 252.783259][T13610] RAX: ffffffffffffffda RBX: 00007f50aeba6ee0 RCX: 00007f50b014f3ca [ 252.783275][T13610] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 252.783289][T13610] RBP: 0000200000000180 R08: 00007f50aeba6ee0 R09: 00000000000820f8 [ 252.783354][T13610] R10: 00000000000820f8 R11: 0000000000000246 R12: 0000200000000100 [ 252.783368][T13610] R13: 00007f50aeba6ea0 R14: 0000000000000000 R15: 00002000000001c0 [ 252.783396][T13610] [ 252.789450][T13615] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 252.815242][T13612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.815361][T13612] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.871949][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.980395][T13603] FAULT_INJECTION: forcing a failure. [ 252.980395][T13603] name failslab, interval 1, probability 0, space 0, times 0 [ 252.980451][T13603] CPU: 0 UID: 0 PID: 13603 Comm: syz.3.2906 Not tainted syzkaller #0 PREEMPT(lazy) [ 252.980546][T13603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 252.980560][T13603] Call Trace: [ 252.980567][T13603] [ 252.980576][T13603] __dump_stack+0x1d/0x30 [ 252.980602][T13603] dump_stack_lvl+0x95/0xd0 [ 252.980699][T13603] dump_stack+0x15/0x1b [ 252.980720][T13603] should_fail_ex+0x262/0x280 [ 252.980776][T13603] ? bus_add_driver+0x11f/0x450 [ 252.980833][T13603] should_failslab+0x8c/0xb0 [ 252.980865][T13603] __kmalloc_cache_noprof+0x7a/0x400 [ 252.980899][T13603] ? bus_add_driver+0x11f/0x450 [ 252.980934][T13603] bus_add_driver+0x11f/0x450 [ 252.981046][T13603] driver_register+0x162/0x220 [ 252.981078][T13603] usb_gadget_register_driver_owner+0x92/0x1a0 [ 252.981114][T13603] raw_ioctl+0xc5b/0x1df0 [ 252.981168][T13603] ? irqentry_exit+0x58f/0x610 [ 252.981198][T13603] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 252.981240][T13603] ? __pfx_raw_ioctl+0x10/0x10 [ 252.981268][T13603] ? __pfx_raw_ioctl+0x10/0x10 [ 252.981296][T13603] ? __se_sys_ioctl+0xbc/0x140 [ 252.981396][T13603] ? __pfx_raw_ioctl+0x10/0x10 [ 252.981424][T13603] __se_sys_ioctl+0xce/0x140 [ 252.981517][T13603] __x64_sys_ioctl+0x43/0x50 [ 252.981549][T13603] x64_sys_call+0x239d/0x2550 [ 252.981576][T13603] do_syscall_64+0x112/0x360 [ 252.981691][T13603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.981715][T13603] RIP: 0033:0x7f29b3baddeb [ 252.981732][T13603] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 252.981805][T13603] RSP: 002b:00007f29b2604f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.981825][T13603] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f29b3baddeb [ 252.981840][T13603] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 252.981914][T13603] RBP: 00007f29b2605fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 252.981928][T13603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.981942][T13603] R13: 0000200000000240 R14: 0000000000000003 R15: 0000000000000000 [ 252.982016][T13603] [ 252.989360][T13603] UDC core: USB Raw Gadget: driver registration failed: -12 [ 252.989391][T13603] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 252.997726][T12469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.233292][T13630] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2916'. [ 253.313143][T13627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.399677][T13625] bond1: entered allmulticast mode [ 253.403881][T13625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.429727][T13621] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 253.456637][T13631] vlan2: entered allmulticast mode [ 253.456657][T13631] bridge1: entered allmulticast mode [ 253.457234][T13621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.499004][T12469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.557626][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.648240][T13656] xt_hashlimit: size too large, truncated to 1048576 [ 253.710557][T13665] FAULT_INJECTION: forcing a failure. [ 253.710557][T13665] name failslab, interval 1, probability 0, space 0, times 0 [ 253.710584][T13665] CPU: 0 UID: 0 PID: 13665 Comm: syz.5.2928 Not tainted syzkaller #0 PREEMPT(lazy) [ 253.710674][T13665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 253.710688][T13665] Call Trace: [ 253.710694][T13665] [ 253.710702][T13665] __dump_stack+0x1d/0x30 [ 253.710798][T13665] dump_stack_lvl+0x95/0xd0 [ 253.710895][T13665] dump_stack+0x15/0x1b [ 253.710915][T13665] should_fail_ex+0x262/0x280 [ 253.710964][T13665] should_failslab+0x8c/0xb0 [ 253.710997][T13665] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 253.711032][T13665] ? filemap_get_entry+0x2a4/0x2e0 [ 253.711115][T13665] ? __d_alloc+0x34/0x320 [ 253.711139][T13665] ? __d_alloc+0x34/0x320 [ 253.711230][T13665] __d_alloc+0x34/0x320 [ 253.711253][T13665] d_alloc_parallel+0x4f/0xce0 [ 253.711280][T13665] ? folio_mark_accessed+0x236/0x3a0 [ 253.711304][T13665] ? __rcu_read_unlock+0x4e/0x70 [ 253.711443][T13665] ? __d_lookup+0x30c/0x340 [ 253.711478][T13665] lookup_open+0x214/0x10d0 [ 253.711511][T13665] ? inode_permission+0x1da/0x3b0 [ 253.711540][T13665] path_openat+0x415/0x10d0 [ 253.711569][T13665] ? kstrtouint+0x76/0xc0 [ 253.711743][T13665] do_file_open+0x16c/0x290 [ 253.711771][T13665] ? __pfx_shmem_put_link+0x10/0x10 [ 253.711796][T13665] do_sys_openat2+0xa0/0x130 [ 253.711874][T13665] __x64_sys_openat+0xf2/0x120 [ 253.711896][T13665] x64_sys_call+0x1f72/0x2550 [ 253.711922][T13665] do_syscall_64+0x112/0x360 [ 253.711991][T13665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.712013][T13665] RIP: 0033:0x7f70f940e159 [ 253.712104][T13665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.712126][T13665] RSP: 002b:00007f70f7e46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 253.712149][T13665] RAX: ffffffffffffffda RBX: 00007f70f9696090 RCX: 00007f70f940e159 [ 253.712163][T13665] RDX: 0000000000880cc2 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 253.712176][T13665] RBP: 00007f70f7e46090 R08: 0000000000000000 R09: 0000000000000000 [ 253.712264][T13665] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 253.712279][T13665] R13: 00007f70f9696128 R14: 00007f70f9696090 R15: 00007ffd103247e8 [ 253.712300][T13665] [ 253.782029][T13667] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2929'. [ 253.810550][T13667] vlan2: entered allmulticast mode [ 253.810570][T13667] bridge1: entered allmulticast mode [ 254.111629][T13679] loop2: p2 p3 p7 [ 254.177277][T13686] EXT4-fs: inline encryption not supported [ 254.185065][T13686] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 254.188793][T13686] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.2937: bad orphan inode 15 [ 254.188822][T13686] loop6: lost filesystem error report for type 5 error -117 [ 254.189199][T13686] ext4_test_bit(bit=14, block=5) = 0 [ 254.189569][T13686] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.193311][T13686] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 254.193417][T13686] EXT4-fs error (device loop6): ext4_free_inode:356: comm syz.6.2937: bit already cleared for inode 13 [ 254.276544][ T5248] udevd[5248]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 254.277146][ T5246] udevd[5246]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 254.304830][T13174] udevd[13174]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 254.368869][T12314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.423382][T13685] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 254.426729][T13700] syzkaller0: entered promiscuous mode [ 254.426751][T13700] syzkaller0: entered allmulticast mode [ 254.452409][T13700] tipc: Started in network mode [ 254.452452][T13700] tipc: Node identity 2e7cd62cef69, cluster identity 4711 [ 254.452566][T13700] tipc: Enabled bearer , priority 0 [ 254.456525][T13699] FAULT_INJECTION: forcing a failure. [ 254.456525][T13699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.456555][T13699] CPU: 0 UID: 0 PID: 13699 Comm: syz.6.2943 Not tainted syzkaller #0 PREEMPT(lazy) [ 254.456617][T13699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 254.456631][T13699] Call Trace: [ 254.456638][T13699] [ 254.456644][T13699] __dump_stack+0x1d/0x30 [ 254.456705][T13699] dump_stack_lvl+0x95/0xd0 [ 254.456731][T13699] dump_stack+0x15/0x1b [ 254.456750][T13699] should_fail_ex+0x262/0x280 [ 254.456824][T13699] should_fail+0xb/0x20 [ 254.456843][T13699] should_fail_usercopy+0x1a/0x20 [ 254.456867][T13699] _copy_from_user+0x1c/0xb0 [ 254.456942][T13699] kstrtouint_from_user+0x69/0xf0 [ 254.456963][T13699] ? 0xffffffff81000000 [ 254.456979][T13699] ? avc_policy_seqno+0x15/0x30 [ 254.457009][T13699] proc_fail_nth_write+0x50/0x160 [ 254.457110][T13699] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 254.457134][T13699] vfs_write+0x254/0x9a0 [ 254.457164][T13699] ? __fget_files+0x184/0x1c0 [ 254.457197][T13699] ? mutex_lock+0x57/0x90 [ 254.457226][T13699] ksys_write+0xdc/0x1a0 [ 254.457257][T13699] __x64_sys_write+0x40/0x50 [ 254.457308][T13699] x64_sys_call+0x154e/0x2550 [ 254.457363][T13699] do_syscall_64+0x112/0x360 [ 254.457399][T13699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.457425][T13699] RIP: 0033:0x7f14d615e98e [ 254.457442][T13699] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 254.457466][T13699] RSP: 002b:00007f14d4bf6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 254.457489][T13699] RAX: ffffffffffffffda RBX: 00007f14d4bf76c0 RCX: 00007f14d615e98e [ 254.457505][T13699] RDX: 0000000000000001 RSI: 00007f14d4bf70a0 RDI: 0000000000000006 [ 254.457619][T13699] RBP: 00007f14d4bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 254.457634][T13699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.457648][T13699] R13: 00007f14d6426038 R14: 00007f14d6425fa0 R15: 00007fff111b1428 [ 254.457747][T13699] [ 254.464467][T13700] tipc: Resetting bearer [ 254.520816][T13685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.714341][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.760698][T13712] xt_hashlimit: size too large, truncated to 1048576 [ 254.846737][T13717] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2948'. [ 254.846825][T13717] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2948'. [ 254.846847][T13717] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2948'. [ 254.848433][T13719] FAULT_INJECTION: forcing a failure. [ 254.848433][T13719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.848521][T13719] CPU: 0 UID: 0 PID: 13719 Comm: syz.3.2949 Not tainted syzkaller #0 PREEMPT(lazy) [ 254.848547][T13719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 254.848560][T13719] Call Trace: [ 254.848567][T13719] [ 254.848574][T13719] __dump_stack+0x1d/0x30 [ 254.848601][T13719] dump_stack_lvl+0x95/0xd0 [ 254.848701][T13719] dump_stack+0x15/0x1b [ 254.848723][T13719] should_fail_ex+0x262/0x280 [ 254.848750][T13719] should_fail+0xb/0x20 [ 254.848788][T13719] should_fail_usercopy+0x1a/0x20 [ 254.848815][T13719] _copy_to_user+0x20/0xa0 [ 254.848914][T13719] simple_read_from_buffer+0xb5/0x130 [ 254.848953][T13719] proc_fail_nth_read+0x10e/0x150 [ 254.849027][T13719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.849050][T13719] vfs_read+0x18e/0x7c0 [ 254.849078][T13719] ? selinux_socket_listen+0x1ab/0x1e0 [ 254.849143][T13719] ? _raw_spin_lock_bh+0x57/0xb0 [ 254.849190][T13719] ksys_read+0xdc/0x1a0 [ 254.849220][T13719] __x64_sys_read+0x40/0x50 [ 254.849250][T13719] x64_sys_call+0x2135/0x2550 [ 254.849285][T13719] do_syscall_64+0x112/0x360 [ 254.849364][T13719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.849388][T13719] RIP: 0033:0x7f29b3b6e98e [ 254.849424][T13719] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 254.849452][T13719] RSP: 002b:00007f29b2606fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.849473][T13719] RAX: ffffffffffffffda RBX: 00007f29b26076c0 RCX: 00007f29b3b6e98e [ 254.849489][T13719] RDX: 000000000000000f RSI: 00007f29b26070a0 RDI: 0000000000000003 [ 254.849582][T13719] RBP: 00007f29b2607090 R08: 0000000000000000 R09: 0000000000000000 [ 254.849596][T13719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.849611][T13719] R13: 00007f29b3e36038 R14: 00007f29b3e35fa0 R15: 00007fffa4ac49a8 [ 254.849695][T13719] [ 254.873516][T13717] syzkaller0: entered promiscuous mode [ 254.873538][T13717] syzkaller0: entered allmulticast mode [ 255.117146][T13726] EXT4-fs: inline encryption not supported [ 255.128869][T13726] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 255.132689][T13726] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.2953: bad orphan inode 15 [ 255.132716][T13726] loop6: lost filesystem error report for type 5 error -117 [ 255.132833][T13726] ext4_test_bit(bit=14, block=5) = 0 [ 255.133264][T13726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.134553][T13726] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 255.134631][T13726] EXT4-fs error (device loop6): ext4_free_inode:356: comm syz.6.2953: bit already cleared for inode 13 [ 255.135051][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 255.135064][ T29] audit: type=1400 audit(1789405692.348:11888): avc: denied { write } for pid=13725 comm="syz.6.2953" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.212308][T13696] tipc: Resetting bearer [ 255.213581][T13696] tipc: Disabling bearer [ 255.322517][T13744] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2955'. [ 255.355286][T12314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.390741][T13747] EXT4-fs (loop2): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 255.397188][T13740] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 255.424446][T13747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.445217][ T29] audit: type=1400 audit(1789405692.658:11889): avc: denied { write } for pid=13746 comm="syz.2.2960" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.494932][T13740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.626971][T12469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.664596][T13764] syz.2.2962 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 255.679202][ T29] audit: type=1400 audit(1789405692.888:11890): avc: denied { mounton } for pid=13763 comm="syz.2.2962" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.745353][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.786550][T13767] batman_adv: batadv0: Adding interface: syzkaller0 [ 255.786699][T13767] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.786770][T13767] batman_adv: batadv0: Interface activated: syzkaller0 [ 255.805051][T13771] loop6: p1 < > p3 < p5 > p4 [ 255.806510][T13771] loop6: p4 size 33557760 extends beyond EOD, truncated [ 255.807105][T13771] loop6: p5 size 33557760 extends beyond EOD, truncated [ 255.894219][T13781] set_capacity_and_notify: 14 callbacks suppressed [ 255.894237][T13781] loop5: detected capacity change from 0 to 512 [ 255.894575][T13781] EXT4-fs: inline encryption not supported [ 255.894711][T13777] ================================================================== [ 255.894743][T13777] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 255.894778][T13777] [ 255.894784][T13777] write to 0xffffffff895d02e2 of 9 bytes by task 13781 on cpu 1: [ 255.894805][T13777] vsnprintf+0x2c0/0x8c0 [ 255.894829][T13777] vscnprintf+0x41/0x90 [ 255.894854][T13777] printk_sprint+0x30/0x2b0 [ 255.894883][T13777] vprintk_store+0x57f/0x910 [ 255.894910][T13777] vprintk_emit+0x1a4/0x610 [ 255.894936][T13777] vprintk_default+0x26/0x30 [ 255.894963][T13777] vprintk+0x1d/0x30 [ 255.894982][T13777] _printk+0x79/0xa0 [ 255.895001][T13777] __ext4_msg+0x143/0x1c0 [ 255.895030][T13777] ext4_parse_param+0x254/0xfb0 [ 255.895061][T13777] vfs_parse_fs_param+0x142/0x2a0 [ 255.895084][T13777] vfs_parse_monolithic_sep+0x1e6/0x270 [ 255.895105][T13777] generic_parse_monolithic+0x24/0x30 [ 255.895126][T13777] parse_monolithic_mount_data+0x46/0x60 [ 255.895150][T13777] do_new_mount+0x24e/0x8d0 [ 255.895201][T13777] path_mount+0x4ad/0xb90 [ 255.895235][T13777] __se_sys_mount+0x28c/0x2e0 [ 255.895254][T13777] __x64_sys_mount+0x67/0x80 [ 255.895273][T13777] x64_sys_call+0xc3b/0x2550 [ 255.895301][T13777] do_syscall_64+0x112/0x360 [ 255.895334][T13777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.895355][T13777] [ 255.895360][T13777] read to 0xffffffff895d02e8 of 8 bytes by task 13777 on cpu 0: [ 255.895380][T13777] data_push_tail+0x104/0x440 [ 255.895409][T13777] data_alloc+0x111/0x380 [ 255.895431][T13777] prb_reserve+0x8e3/0xaf0 [ 255.895453][T13777] vprintk_store+0x54e/0x910 [ 255.895477][T13777] vprintk_emit+0x1a4/0x610 [ 255.895506][T13777] vprintk_default+0x26/0x30 [ 255.895540][T13777] vprintk+0x1d/0x30 [ 255.895562][T13777] _printk+0x79/0xa0 [ 255.895580][T13777] isofs_fill_super+0x1325/0x1340 [ 255.895609][T13777] get_tree_bdev_flags+0x291/0x300 [ 255.895642][T13777] get_tree_bdev+0x1f/0x30 [ 255.895674][T13777] isofs_get_tree+0x1c/0x30 [ 255.895704][T13777] vfs_get_tree+0x57/0x1d0 [ 255.895731][T13777] do_new_mount+0x288/0x8d0 [ 255.895765][T13777] path_mount+0x4ad/0xb90 [ 255.895796][T13777] __se_sys_mount+0x28c/0x2e0 [ 255.895816][T13777] __x64_sys_mount+0x67/0x80 [ 255.895833][T13777] x64_sys_call+0xc3b/0x2550 [ 255.895857][T13777] do_syscall_64+0x112/0x360 [ 255.895887][T13777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.895908][T13777] [ 255.895912][T13777] value changed: 0x3ffffffffffff372 -> 0x20656e696c6e6920 [ 255.895924][T13777] [ 255.895928][T13777] Reported by Kernel Concurrency Sanitizer on: [ 255.895939][T13777] CPU: 0 UID: 0 PID: 13777 Comm: syz.6.2968 Not tainted syzkaller #0 PREEMPT(lazy) [ 255.895966][T13777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 255.895978][T13777] ================================================================== [ 255.896096][T13781] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 255.901200][T13781] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.2969: bad orphan inode 15 [ 255.901232][T13781] loop5: lost filesystem error report for type 5 error -117 [ 255.901329][T13781] ext4_test_bit(bit=14, block=5) = 0 [ 255.901770][T13781] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.903286][T13781] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 255.903441][T13781] EXT4-fs error (device loop5): ext4_free_inode:356: comm syz.5.2969: bit already cleared for inode 13 [ 255.903938][ T29] audit: type=1400 audit(1789405693.118:11891): avc: denied { write } for pid=13779 comm="syz.5.2969" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.916526][T13777] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 255.919929][T13780] random: crng reseeded on system resumption [ 256.063537][T13174] udevd[13174]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 256.069097][T13172] udevd[13172]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 256.069486][T13171] udevd[13171]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 256.094578][ T5246] udevd[5246]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 256.124571][T12100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.446360][T13760] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 256.456299][T13760] batman_adv: batadv0: Removing interface: syzkaller0